This is a read-only archive of the old Scratch 1.x Forums.
Try searching the current Scratch discussion forums.

#1 2010-09-08 19:00:07

fire219
Scratcher
Registered: 2008-02-07
Posts: 1000+

Scratch site is infected!!!!!

According to Google Chrome, the Scratch site is infected! This site that is infecting it is "redkid.net". Doesn't sound good. It isn't constant, but 1 out of 4 times, Chrome catches something. I am not sure what this is, but it even happens on the home page, so it can't be like the iconizor rainbow sheep. Help please!

I will post updates here.

Cheddargirl: According to site advisors, redkid.net is listed as being harmful to the computer. Looking up some past forum history via Google cache, there seems to be evidence of it on the website as images (this being similar to the rainbow sheep incident).

Why it is showing up for you and not showing up for other was hard to determine, but I eventually figured it out: the image in question from redkid.net is found in a rotating signature (a signature that changes images) of one of our website users, so the warning message will come up for some of you guys and not for others depending on what image is being shown. I'll contact the Scratch Team about this, and see what they say. 

Update by me: I just found something in the address bar! With the "Google Safety Advisory" open, I found this tidbit:

http://www.redkid.net/generator/star/newsign.php%3Fline1%3DSamurai768%26Celebrity%3DCelebrity

That is what is setting off an alarm in a forum topic!

That explains it partialy, but that alone won't set off an alarm ON THE HOME PAGE

Last edited by fire219 (2010-09-09 16:50:08)


http://bluetetrarpg.x10.mx/usercard/img.php?name=fire219

Offline

 

#2 2010-09-08 19:09:56

Jwosty
Scratcher
Registered: 2009-12-19
Posts: 500+

Re: Scratch site is infected!!!!!

Yea! This is what I got when trying to visit it (with Google Chrome  tongue ):

http://i53.tinypic.com/3013ms2.png

Click for full size.

Last edited by Jwosty (2010-09-08 19:11:13)


http://i39.tinypic.com/18ert5.png Google it.  smile

Offline

 

#3 2010-09-08 19:24:42

militarydudes
Scratcher
Registered: 2008-09-12
Posts: 1000+

Re: Scratch site is infected!!!!!

i'm on chrome and nothing happened  hmm  this still sounds like a problem though


__m. .m__ KILROY WAS HERE
        U

Offline

 

#4 2010-09-08 19:32:07

fire219
Scratcher
Registered: 2008-02-07
Posts: 1000+

Re: Scratch site is infected!!!!!

@jwosty Yes. I got pretty much the same message except it said "The website at scratch.mit.edu appears to contain elements from redkid.net..." (And apparently you are using a mac.  tongue )

@militarydudes It is intermittent. And yes, it is a problem. I think Scratch has been hacked.


http://bluetetrarpg.x10.mx/usercard/img.php?name=fire219

Offline

 

#5 2010-09-08 19:35:33

majormax
Scratcher
Registered: 2008-04-06
Posts: 1000+

Re: Scratch site is infected!!!!!

Doesn't give it to me, but:
yikes   yikes   yikes  !!!!

Offline

 

#6 2010-09-08 19:36:23

soupoftomato
Scratcher
Registered: 2009-07-18
Posts: 1000+

Re: Scratch site is infected!!!!!

Maybe you went to a phishing site???


I'm glad to think that the community will always be kind and helpful, the language will always be a fun and easy way to be introduced into programming, the motto will always be: Imagine, Program, Share - Nomolos

Offline

 

#7 2010-09-08 19:44:55

fire219
Scratcher
Registered: 2008-02-07
Posts: 1000+

Re: Scratch site is infected!!!!!

http://i55.tinypic.com/2cooadv.jpg
??????????????????????????????????????????????????????

Either that description is wrong, or Chrome is wrong. I think the first one.


http://bluetetrarpg.x10.mx/usercard/img.php?name=fire219

Offline

 

#8 2010-09-08 19:46:16

fire219
Scratcher
Registered: 2008-02-07
Posts: 1000+

Re: Scratch site is infected!!!!!

soupoftomato wrote:

Maybe you went to a phishing site???

Nope. I clicked the long working link in my bookmarks.

Last edited by fire219 (2010-09-08 19:47:05)


http://bluetetrarpg.x10.mx/usercard/img.php?name=fire219

Offline

 

#9 2010-09-08 19:59:49

ScratchReallyROCKS
Scratcher
Registered: 2009-04-22
Posts: 1000+

Re: Scratch site is infected!!!!!

Well, there's no way the Scratch site is infected (it is owned by MIT) and the error you're getting doesn't look like it's coming from Scratch, but from that "RedKid.net" address.


http://imageshack.us/a/img694/3806/sigmad.png

Offline

 

#10 2010-09-08 20:07:00

fire219
Scratcher
Registered: 2008-02-07
Posts: 1000+

Re: Scratch site is infected!!!!!

ScratchReallyROCKS wrote:

Well, there's no way the Scratch site is infected (it is owned by MIT) and the error you're getting doesn't look like it's coming from Scratch, but from that "RedKid.net" address.

Yes, there is no way that it was purposely infected by MIT/Scratch Team, but it could have been hacked. Of course, this could be similar to the "rainbow sheep" situation from a few months back.


http://bluetetrarpg.x10.mx/usercard/img.php?name=fire219

Offline

 

#11 2010-09-08 20:19:32

fire219
Scratcher
Registered: 2008-02-07
Posts: 1000+

Re: Scratch site is infected!!!!!

bump


http://bluetetrarpg.x10.mx/usercard/img.php?name=fire219

Offline

 

#12 2010-09-08 20:48:19

Jwosty
Scratcher
Registered: 2009-12-19
Posts: 500+

Re: Scratch site is infected!!!!!

ScratchReallyROCKS wrote:

Well, there's no way the Scratch site is infected (it is owned by MIT) and the error you're getting doesn't look like it's coming from Scratch, but from that "RedKid.net" address.

Yea, I tried to go to redkid.net.  big_smile


http://i39.tinypic.com/18ert5.png Google it.  smile

Offline

 

#13 2010-09-08 20:49:27

Jwosty
Scratcher
Registered: 2009-12-19
Posts: 500+

Re: Scratch site is infected!!!!!

fire219 wrote:

ScratchReallyROCKS wrote:

Well, there's no way the Scratch site is infected (it is owned by MIT) and the error you're getting doesn't look like it's coming from Scratch, but from that "RedKid.net" address.

Yes, there is no way that it was purposely infected by MIT/Scratch Team, but it could have been hacked. Of course, this could be similar to the "rainbow sheep" situation from a few months back.

What rainbow sheep thing?  hmm  Never heard of it...  yikes


http://i39.tinypic.com/18ert5.png Google it.  smile

Offline

 

#14 2010-09-08 20:59:54

fire219
Scratcher
Registered: 2008-02-07
Posts: 1000+

Re: Scratch site is infected!!!!!

Jwosty wrote:

fire219 wrote:

ScratchReallyROCKS wrote:

Well, there's no way the Scratch site is infected (it is owned by MIT) and the error you're getting doesn't look like it's coming from Scratch, but from that "RedKid.net" address.

Yes, there is no way that it was purposely infected by MIT/Scratch Team, but it could have been hacked. Of course, this could be similar to the "rainbow sheep" situation from a few months back.

What rainbow sheep thing?  hmm  Never heard of it...  yikes

The GIF of a sheep with multicolored wool prancing. Many people put it in their sigs. It was harmless itself, but it was hosted by a malicious site, iconator.com.


http://bluetetrarpg.x10.mx/usercard/img.php?name=fire219

Offline

 

#15 2010-09-08 21:01:19

coolstuff
Community Moderator
Registered: 2008-03-06
Posts: 1000+

Re: Scratch site is infected!!!!!

Jwosty wrote:

fire219 wrote:

ScratchReallyROCKS wrote:

Well, there's no way the Scratch site is infected (it is owned by MIT) and the error you're getting doesn't look like it's coming from Scratch, but from that "RedKid.net" address.

Yes, there is no way that it was purposely infected by MIT/Scratch Team, but it could have been hacked. Of course, this could be similar to the "rainbow sheep" situation from a few months back.

What rainbow sheep thing?  hmm  Never heard of it...  yikes

Somebody had an image of a rainbow sheep from a supposedly harmful website that was causing all sorts of alerts to pop up.

Is it on all pages that Chrome detects these, or just some? Can you tell us which ones they are - if there's any significant relation between them?

Offline

 

#16 2010-09-09 02:52:03

mathematics
Scratcher
Registered: 2009-03-01
Posts: 1000+

Re: Scratch site is infected!!!!!

I don't see this. I'm using Google Chrome too.

Offline

 

#17 2010-09-09 03:33:12

cheddargirl
Scratch Team
Registered: 2008-09-15
Posts: 1000+

Re: Scratch site is infected!!!!!

According to site advisors, redkid.net is listed as being harmful to the computer. Looking up some past forum history via Google cache, there seems to be evidence of it on the website as images (this being similar to the rainbow sheep incident).

Why it is showing up for you and not showing up for other was hard to determine, but I eventually figured it out: the image in question from redkid.net is found in a rotating signature (a signature that changes images) of one of our website users, so the warning message will come up for some of you guys and not for others depending on what image is being shown. I'll contact the Scratch Team about this, and see what they say.  smile


http://i.imgur.com/8QRYx.png
Everything is better when you add a little cheddar, because when you have cheese your life is at ease  smile

Offline

 

#18 2010-09-09 08:19:01

ThePCKid
Scratcher
Registered: 2009-09-16
Posts: 1000+

Re: Scratch site is infected!!!!!

I haven't got any errors with the rainbow sheep and redkid problems on Scratch so far...

Offline

 

#19 2010-09-09 08:57:50

mathematics
Scratcher
Registered: 2009-03-01
Posts: 1000+

Re: Scratch site is infected!!!!!

fire219, do you know on what pages do the warning appear?

Offline

 

#20 2010-09-09 12:53:05

mathematics
Scratcher
Registered: 2009-03-01
Posts: 1000+

Re: Scratch site is infected!!!!!

This is one of the pages that I found to "contain elements from redkid.net".

Last edited by mathematics (2010-09-09 13:03:17)

Offline

 

#21 2010-09-09 13:08:52

MathWizz
Scratcher
Registered: 2009-08-31
Posts: 1000+

Re: Scratch site is infected!!!!!

Yeap! That gave me a warning!

Last edited by MathWizz (2010-09-09 13:14:20)


http://block.site90.net/scratch.mit/text.php?size=30&text=%20A%20signature!&color=333333

Offline

 

#22 2010-09-09 16:14:25

Lucario621
Community Moderator
Registered: 2007-10-03
Posts: 1000+

Re: Scratch site is infected!!!!!

mathematics wrote:

This is one of the pages that I found to "contain elements from redkid.net".

Hmm... that is weird  hmm .


http://i.imgur.com/WBkM2QQ.png

Offline

 

#23 2010-09-09 16:21:46

soft319
Scratcher
Registered: 2008-02-19
Posts: 1000+

Re: Scratch site is infected!!!!!

Um... I was moving my mouse around and then I told it to go to that website and... well, I'm not sure if it's infected or not. I'm getting AVG to scan my computer. It has found nothing yet. This is probably like the Rainbow Sheep problem.


http://bluetetrarpg.web44.net/usercard/img.php?name=soft319

Offline

 

#24 2010-09-09 16:36:09

Ace-Of-Hearts
Scratcher
Registered: 2010-05-03
Posts: 1000+

Re: Scratch site is infected!!!!!

Chrome lies. Nothing wrong with redkid.


http://parenting.leehansen.com/downloads/webgraphics/Animations/hearts-afire.gifhttp://i.picasion.com/pic41/e0f85951c06e30e4c4ba158da45c06d4.gifhttp://parenting.leehansen.com/downloads/webgraphics/Animations/hearts-afire.gif

Offline

 

#25 2010-09-09 16:36:56

fire219
Scratcher
Registered: 2008-02-07
Posts: 1000+

Re: Scratch site is infected!!!!!

It is on random pages, I think. It isn't a image in a sig, because this even happens on the home page!

I am confused.  hmm 

Scratch Team/MIT, can you run an AV on the server(s)? I think you have been hacked. Even if it means the site has do be down for a few hours, do it. It is better than the 400,000+ active users getting infected with whatever mess redkid may have injected into scratch.mit.edu.

Worried sick about all of our's safety,
Fire219

EDIT: I just found something in the address bar! With the "Google Safety Advisory" open, I found this tidbit:

http://www.redkid.net/generator/star/newsign.php%3Fline1%3DSamurai768%26Celebrity%3DCelebrity

That is what is setting off an alarm in a forum topic!

That explains it partialy, but that alone won't set off an alarm ON THE HOME PAGE. I will add this to the main post.

Last edited by fire219 (2010-09-09 16:44:28)


http://bluetetrarpg.x10.mx/usercard/img.php?name=fire219

Offline

 

Board footer