According to Google Chrome, the Scratch site is infected! This site that is infecting it is "redkid.net". Doesn't sound good. It isn't constant, but 1 out of 4 times, Chrome catches something. I am not sure what this is, but it even happens on the home page, so it can't be like the iconizor rainbow sheep. Help please!
I will post updates here.
Cheddargirl: According to site advisors, redkid.net is listed as being harmful to the computer. Looking up some past forum history via Google cache, there seems to be evidence of it on the website as images (this being similar to the rainbow sheep incident).
Why it is showing up for you and not showing up for other was hard to determine, but I eventually figured it out: the image in question from redkid.net is found in a rotating signature (a signature that changes images) of one of our website users, so the warning message will come up for some of you guys and not for others depending on what image is being shown. I'll contact the Scratch Team about this, and see what they say.
Update by me: I just found something in the address bar! With the "Google Safety Advisory" open, I found this tidbit:
http://www.redkid.net/generator/star/newsign.php%3Fline1%3DSamurai768%26Celebrity%3DCelebrity
That is what is setting off an alarm in a forum topic!
That explains it partialy, but that alone won't set off an alarm ON THE HOME PAGE
Last edited by fire219 (2010-09-09 16:50:08)
Offline
i'm on chrome and nothing happened
this still sounds like a problem though
Offline
@jwosty Yes. I got pretty much the same message except it said "The website at scratch.mit.edu appears to contain elements from redkid.net..." (And apparently you are using a mac.
)
@militarydudes It is intermittent. And yes, it is a problem. I think Scratch has been hacked.
Offline
Doesn't give it to me, but:
!!!!
Offline
Maybe you went to a phishing site???
Offline
Well, there's no way the Scratch site is infected (it is owned by MIT) and the error you're getting doesn't look like it's coming from Scratch, but from that "RedKid.net" address.
Offline
ScratchReallyROCKS wrote:
Well, there's no way the Scratch site is infected (it is owned by MIT) and the error you're getting doesn't look like it's coming from Scratch, but from that "RedKid.net" address.
Yes, there is no way that it was purposely infected by MIT/Scratch Team, but it could have been hacked. Of course, this could be similar to the "rainbow sheep" situation from a few months back.
Offline
ScratchReallyROCKS wrote:
Well, there's no way the Scratch site is infected (it is owned by MIT) and the error you're getting doesn't look like it's coming from Scratch, but from that "RedKid.net" address.
Yea, I tried to go to redkid.net.
Google it.
Offline
fire219 wrote:
ScratchReallyROCKS wrote:
Well, there's no way the Scratch site is infected (it is owned by MIT) and the error you're getting doesn't look like it's coming from Scratch, but from that "RedKid.net" address.
Yes, there is no way that it was purposely infected by MIT/Scratch Team, but it could have been hacked. Of course, this could be similar to the "rainbow sheep" situation from a few months back.
What rainbow sheep thing?
Never heard of it...
Google it.
Offline
Jwosty wrote:
fire219 wrote:
ScratchReallyROCKS wrote:
Well, there's no way the Scratch site is infected (it is owned by MIT) and the error you're getting doesn't look like it's coming from Scratch, but from that "RedKid.net" address.
Yes, there is no way that it was purposely infected by MIT/Scratch Team, but it could have been hacked. Of course, this could be similar to the "rainbow sheep" situation from a few months back.
What rainbow sheep thing?
Never heard of it...
![]()
The GIF of a sheep with multicolored wool prancing. Many people put it in their sigs. It was harmless itself, but it was hosted by a malicious site, iconator.com.
Offline
Jwosty wrote:
fire219 wrote:
ScratchReallyROCKS wrote:
Well, there's no way the Scratch site is infected (it is owned by MIT) and the error you're getting doesn't look like it's coming from Scratch, but from that "RedKid.net" address.
Yes, there is no way that it was purposely infected by MIT/Scratch Team, but it could have been hacked. Of course, this could be similar to the "rainbow sheep" situation from a few months back.
What rainbow sheep thing?
Never heard of it...
![]()
Somebody had an image of a rainbow sheep from a supposedly harmful website that was causing all sorts of alerts to pop up.
Is it on all pages that Chrome detects these, or just some? Can you tell us which ones they are - if there's any significant relation between them?
Offline
I don't see this. I'm using Google Chrome too.
Offline
According to site advisors, redkid.net is listed as being harmful to the computer. Looking up some past forum history via Google cache, there seems to be evidence of it on the website as images (this being similar to the rainbow sheep incident).
Why it is showing up for you and not showing up for other was hard to determine, but I eventually figured it out: the image in question from redkid.net is found in a rotating signature (a signature that changes images) of one of our website users, so the warning message will come up for some of you guys and not for others depending on what image is being shown. I'll contact the Scratch Team about this, and see what they say.

Offline
I haven't got any errors with the rainbow sheep and redkid problems on Scratch so far...
Offline
fire219, do you know on what pages do the warning appear?
Offline
This is one of the pages that I found to "contain elements from redkid.net".
Last edited by mathematics (2010-09-09 13:03:17)
Offline
mathematics wrote:
This is one of the pages that I found to "contain elements from redkid.net".
Hmm... that is weird
.
Offline
Um... I was moving my mouse around and then I told it to go to that website and... well, I'm not sure if it's infected or not. I'm getting AVG to scan my computer. It has found nothing yet. This is probably like the Rainbow Sheep problem.
Offline
Chrome lies. Nothing wrong with redkid.



Offline
It is on random pages, I think. It isn't a image in a sig, because this even happens on the home page!
I am confused.
Scratch Team/MIT, can you run an AV on the server(s)? I think you have been hacked. Even if it means the site has do be down for a few hours, do it. It is better than the 400,000+ active users getting infected with whatever mess redkid may have injected into scratch.mit.edu.
Worried sick about all of our's safety,
Fire219
EDIT: I just found something in the address bar! With the "Google Safety Advisory" open, I found this tidbit:
http://www.redkid.net/generator/star/newsign.php%3Fline1%3DSamurai768%26Celebrity%3DCelebrity
That is what is setting off an alarm in a forum topic!
That explains it partialy, but that alone won't set off an alarm ON THE HOME PAGE. I will add this to the main post.
Last edited by fire219 (2010-09-09 16:44:28)
Offline