Jump to content

Recommended Posts

  • 1 month later...
Posted

Are people using this happily then? Just got back to looking at this and have found that their helpful buttons allow access back to the hidden drives, including C:

 

Starting to think to just go for it.

Posted

Hi - How are people getting on with new version of Scratch?

Has they fully fixed the secuity issues with the new version?

Posted
Still maintain that this isn't a 'security issue' with Scratch - if your only security on your C: drive is security through obscurity (ie hiding the drive in My Computer) you have a systemwide problem, not a problem with Scratch itself... NTFS permissions should be protecting all relevant folders on C: anyway!
Posted
Still maintain that this isn't a 'security issue' with Scratch - if your only security on your C: drive is security through obscurity (ie hiding the drive in My Computer) you have a systemwide problem, not a problem with Scratch itself... NTFS permissions should be protecting all relevant folders on C: anyway!

Its more a usability problem than security I guess, but it could affect security. We do have NTFS permissions (thanks for the vote of confidence in our clue level) but that doesn't stop students trawling though C:, or other drives, which we just don't want. It also doesn't stop students saving things in stupid places, or finding writable areas. Currently the default (& unconfigurable) setting to save is to a projects folder within the scratch folder. The default (& again unconfigurable) setting for the 'Documents' button is the documents and setting folder for the user. If you know some way of securing these areas so that the system doesn't shut down through lack of access that would be nice.

Every other program we have on the system follows the standards and works. The last time I had this problem was with poxy 16-bit programs. You know that if a student has an option of a sensible place to save and a stupid place to save they will pick the latter & deny all knowledge of doing it & expect us to get it back.

 

Sorry if that sounds tetchy but getting fed up of wanting something pretty standard from a modern piece of software and being told our system is obviously crud, we are clueless & it is all our fault!

Posted

Sure NTFS file permissions should protect the C:\ drive. But there are many Educational programs that require full control to files on the C: Drive at a user group level. So NTFS file can not alone be completely relied on

 

If a program does not interact correctly with Microsoft’s standard security policy's which include policies such as hiding the C: Drive and folder redirection etc, and hundreds of other environmental setting designed to protect networks and reduce down time. Installing programs that ignore standard Microsoft security leaves a hole in the base network security required for many secondary schools where you have some very bright individuals that are always trying to break the system which in turn leads to much disruption.

Posted

I have been wondering this, and I've asked a couple of times before on this forum:

are default windows permissions secure? or is the operating system inherently insecure? On a default install is it necessary to go through the entire system drive and remove permissions?

Posted
Am I right in thinking that because all of the drives are visible then documents can be copied from the drives to users personal areas and then opened?
Posted
Am I right in thinking that because all of the drives are visible then documents can be copied from the drives to users personal areas and then opened?

 

 

As long as the permissions are set correctly they won't be able to copy and paste documents from the drives.

Posted (edited)
As long as the permissions are set correctly they won't be able to copy and paste documents from the drives.

Thank you. I think it might be worthwhile hiding the drives though regardless of whether files can be copied. I'll have to try an remember to do this.

Edited by Edu-IT
Posted

I have also posted to that thread noser to try and help out. Could anyone with a Linux or Mac network tell me what happens when Scratch is run as a user? Is it all locked down the same as using the standard OS tools?

ta

Posted
Could anyone with a Linux or Mac network tell me what happens when Scratch is run as a user? Is it all locked down the same as using the standard OS tools?

ta

 

The *nix operating system is designed for multi-user, it's secure design allows users access to the / filesystem.

Posted
The *nix operating system is designed for multi-user, it's secure design allows users access to the / filesystem.

Ta but I'm not after the theory I would to see what someone actually gets if they use Scratch on a networked environment on either Linux or OSX.

Posted

Scratch runs in Squeak and is therefore multiplatform. To run in linux install squeak, extract the windows binary and then run

 squeak /pathto/scratch.image

alternatively it runs in wine. Apparently they are working on a linux installer.

Posted
I think there was a problem with sound, I didn't fully test it. I installed it on a friends daughters ubuntu, and she was using it for a while - she didn't have any problems and apparently quite enjoyed using it.
  • 4 months later...
Posted

Reviving an older thread here, due to on going wrangling between myself and an ICT Teacher.

 

I've looked at the latest version of Scratch and tried the ini file edits to show only certain drives, however, this doesn't work and only shows the default location.

 

Because of the problems that have been mentioned previously in this thread, I'm reticent to installing it on the local machines.

 

An IT teacher here does outreach to primary school pupils who I wouldn't expect to take advantage of the chance to trawl through the C: drive. But if the software is installed, there is a high chance that some of our pupils will have a look at see what they can do.

 

Do the security and convenience issues that arise from this software's problems warrant not installing, or do you think that there is not much of a problem and I should install?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...