Discuss Scratch

cambegonefr
Scratcher
1000+ posts

2 Letter Username account joined in April 2025

https://scratch.mit.edu/users/Mi/

How is this even possible? Not naming and shaming or anything like that but I thought the username requirement was the 3 characters?

On the subject though, stream “Mi” by Mariah Carey.
HollyEuca
Scratcher
1000+ posts

2 Letter Username account joined in April 2025

There were over 100, likely, 2 letter usernames sniped in April. Even I don't understand how they did two letters when you must have three.
KangaCoder
Scratcher
1000+ posts

2 Letter Username account joined in April 2025

I don't remember the specifics, but there was a glitch in the account creation system that allowed you to do this, which was fixed pretty quickly.
82BITMYSTERY
Scratcher
500+ posts

2 Letter Username account joined in April 2025

It was likely created by taking advantage of a bug or glitch in the account creation system. Normally, usernames have to be at least three characters long, but this loophole let it bypass that rule. When the Scratch Team finds out about issues like this, they usually fix them pretty quickly.

thedolphin_
Scratcher
500+ posts

2 Letter Username account joined in April 2025

Yup, it was probably a small bug. Just as some Scratch things are unused and inactive, an update like Set Thumbnail may have made it so 2-letter usernames were accessible for a short period of time.
Jeffalo
Scratcher
1000+ posts

2 Letter Username account joined in April 2025

this is all partly my fault. people discovered a bug that let them register usernames with certain invalid characters at the end. i helped write a fix that removed the invalid characters.

but it wasn't done right, so it would cut off the invalid characters after counting the length of the username. this means you could make a 3 character long username (with the 3rd being an invalid character), which turned into a 2 character username. but since the length check is earlier in the code, scratch would consider everything valid and make the account. the scratch team went through and cleaned up most of these accounts but it looks like a few slipped through.

Powered by DjangoBB