Scratch

Currently they are open variables. However, some Sratchers have suggested a way to lock them, which may be accepted.

Wes64 wrote:

You mean by "open variables" that anybody could go and edit the cloud data even if they weren't supposed to?

That sounds like it. And that would mean people can change high scores if they are posted.

Wes64 wrote:

maxdoss wrote:

Wes64 wrote:

You mean by "open variables" that anybody could go and edit the cloud data even if they weren't supposed to?

That sounds like it. And that would mean people can change high scores if they are posted.

Hmm... thats not exactly what I had in mind for cloud variables. I dont think I like that. I mean if everyone can edit it, whats the point? You might as well just have a poll in the comments because nobody can change those.

The only way you can change the value of a cloud variable is to remix the project with the variable, you can't change the variable within that same project unless its programmed that way.

scimonster wrote:

Only the creator of the project can change cloud variables in edit mode, and it doesn't save changes when you go back to play mode. If it is programmed to modify cloud data, it can be done.
Anyone can read them (there's even an API of sorts for reading outside of the project), but not everyone can modify.

Wow, I'd like to get my hands on that API, that would be sweet! 

scimonster wrote:

Only the creator of the project can change cloud variables in edit mode, and it doesn't save changes when you go back to play mode. If it is programmed to modify cloud data, it can be done.
Anyone can read them (there's even an API of sorts for reading outside of the project), but not everyone can modify.

oh thank goodness.

scimonster wrote:

777w wrote:

scimonster wrote:

Only the creator of the project can change cloud variables in edit mode, and it doesn't save changes when you go back to play mode. If it is programmed to modify cloud data, it can be done.
Anyone can read them (there's even an API of sorts for reading outside of the project), but not everyone can modify.

would this not be problematic when creating projects with usernames and passwords?

That's why passwords should be encrypted.

but if one can design scripts to encode and decode passwords surely another may use those for stealing passwords

scimonster wrote:

777w wrote:

scimonster wrote:

That's why passwords should be encrypted.

but if one can design scripts to encode and decode passwords surely another may use those for stealing passwords

Who said anything about decoding? Real encryptions aren't decodable.

if someone can make a script to encrypt a password couldnt someone use it to make the opposite or am i just not getting something here

MathWizz wrote:

777w wrote:

scimonster wrote:

Who said anything about decoding? Real encryptions aren't decodable.

if someone can make a script to encrypt a password couldnt someone use it to make the opposite or am i just not getting something here

It's not encryption. Encryption is meant to be reversible. Sci means hashing, which is not reversible. Md5 and sha1 are hashes.

my problem is that i had an idea that would involve storing information then reading information again and displaying it onscreen. without private cloud variables, encoding and decoding are useless as long as people can see the information

silvershine wrote:

777w wrote:

my problem is that i had an idea that would involve storing information then reading information again and displaying it onscreen. without private cloud variables, encoding and decoding are useless as long as people can see the information

I would encourage people to chose a different password than on their email/scratch accounts etc. for this reason; other people would be able to see them. Any sensitive information that would need to be protected most likely shouldn't be on Scratch anyway. Of course, you can still have different "accounts" for people to save their game data, but others would be able to see it.

its not about passwords actually, its another idea i had
im not gonna say it though since some people enjoy stealing others' ideas

Anyone can modify cloud data. Protection is done client-side, there is no protection server-side. I just aren't telling you how to do it, so somepony doesn't try to hack something. But if a mod (most likely sci, cause he's on the topic) wants to help me figure it if it would work in the real world, and make a patch for it anyways, please do. But either way, this is just another insecurity.