Skip to content

user by user id exploit fixed #320

Description

@TheCommCraft

You can no longer reply to people in comment threads that haven't commented in them. This means that you can no longer use the current method to lookup usernames by user id

Activity

  1. TheCommCraft commented on Jan 1, 2025

    @TheCommCraft
    CollaboratorAuthor

    For now, I would deprecate the functionality

  2. added a commit that references this issue on Jan 1, 2025
  3. Fluffyscratch commented on Jan 1, 2025

    @Fluffyscratch

    Oh no, this basically kills my newest project TwT

  4. SpyC0der77 commented on Jan 1, 2025

    @SpyC0der77

    What is your newest project?

  5. TheCommCraft commented on Jan 1, 2025

    @TheCommCraft
    CollaboratorAuthor

    maybe user id neighbors?

  6. Fluffyscratch commented on Jan 1, 2025

    @Fluffyscratch

    No, it's a user database kinda like scratchDB but only the part about users. It takes the current number of scratch users, then check each ids until that number, and add the user's datas to the DB. I already coded the whole thing but because of that it's not working :/ But you're right, I also thinked of a user id neighbors finder project while coding it, but I won't make it until this is fixed 😞

  7. TimMcCool commented on Jan 2, 2025

    @TimMcCool
    Owner

    Oh no, that's sad. It was a useful exploit

  8. TheCommCraft commented on Jan 2, 2025

    @TheCommCraft
    CollaboratorAuthor
  9. faretek1 commented on Jan 2, 2025

    @faretek1
    Collaborator

    one thing you can fetch with user id alone is the profile picture. that might be a little helpful if only there weren't a ton of people using the default one
    e.g. https://uploads.scratch.mit.edu/get_image/user/58743127_60x60.png
    the user id is 58743127

    or maybe even better: https://uploads.scratch.mit.edu/users/avatars/58743127.png

  10. Fluffyscratch commented on Jan 2, 2025

    @Fluffyscratch

    Oh no, that's sad. It was a useful exploit

    I asked Ceebee if a replacement as an official API feature was possible through YAB (Because yes, I'm part of the YAB, allowing me to chat to some ST members). She may or may not respond, but these kind of questions often get an answer. I hope this can help :)

  11. SpyC0der77 commented on Jan 2, 2025

    @SpyC0der77

    No, it's a user database kinda like scratchDB but only the part about users. It takes the current number of scratch users, then check each ids until that number, and add the user's datas to the DB. I already coded the whole thing but because of that it's not working :/ But you're right, I also thinked of a user id neighbors finder project while coding it, but I won't make it until this is fixed 😞

    sortof liike https://everyuuid.com/ ??

  12. TheCommCraft commented on Jan 2, 2025

    @TheCommCraft
    CollaboratorAuthor

    Oh no, that's sad. It was a useful exploit

    I asked Ceebee if a replacement as an official API feature was possible through YAB (Because yes, I'm part of the YAB, allowing me to chat to some ST members). She may or may not respond, but these kind of questions often get an answer. I hope this can help :)

    What is YAB

    Edit: I looked it up

  13. added
    scratch api issueIssues caused by the Scratch API itself, not by the scratchattach library
    on Jan 8, 2025
  14. TheCommCraft commented on Jan 11, 2025

    @TheCommCraft
    CollaboratorAuthor

    Oh no, that's sad. It was a useful exploit

    I asked Ceebee if a replacement as an official API feature was possible through YAB (Because yes, I'm part of the YAB, allowing me to chat to some ST members). She may or may not respond, but these kind of questions often get an answer. I hope this can help :)

    Did she respond?

  15. Fluffyscratch commented on Feb 27, 2025

    @Fluffyscratch

    Oh no, that's sad. It was a useful exploit

    I asked Ceebee if a replacement as an official API feature was possible through YAB (Because yes, I'm part of the YAB, allowing me to chat to some ST members). She may or may not respond, but these kind of questions often get an answer. I hope this can help :)

    Did she respond?

    No :/ But I'll try again later, some stuff have changed even if I can't talk about it in details outside of YAB

  16. Fluffyscratch commented on Mar 30, 2025

    @Fluffyscratch

    I finally asked again, will send another message if ceebee responds. Sorry for taking so long lol

  17. Repository owner locked and limited conversation to collaborators on Apr 13, 2025
  18. converted this issue into a discussion #379 on Apr 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    scratch api issueIssues caused by the Scratch API itself, not by the scratchattach library

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions