This is my pinned post.
Here is my about me, and a list of bugs (201-250)
(bugs 201-250 are posted in the comments of this post)
Directory of bugs and vulnerabilities
Bugs 201-250: (current)
Bugs 151-200:
Bugs 91-150:
Bugs 41-90:
Bug 40:
Bug 39:
Bug 38:
Bug 37:
Bug 36:
Bug 35:
Bug 34:
Bug 32-33:
Bug 31:
Bug 30:
Bug 29:
Bug 28 2:
Bug 28:
Bug 27:
Bug 26:
Bug 25:
Bug 24:
Bug 23:
Bug 22:
Bug 21:
Bug 20:
Bug 19:
Bug 18:
Bug 17:
Bug 16: idk where that is
Bug 15:
Bug 14:
Bug 13:
Bug 12:
Bug 11:
Bug 9-10:
Bug 8:
Bug 7: i also don’t know where that is…
Bug 6:
Bug 5:
Bugs 1-4:
this is my about me:
(darflen really needs a longer about me limit. they let you use 8192 characters for posts, which is far more than required, but you can not use very much for about mes)
hi im jamied132 and i am a cheese
i have 2 hats and 2 pumpkins
pronounced /dʒeɪmiːdiː wʌn θriː tuː/
URLs
(redirects to .is-truly-a.pro)
(redirects to .is-a.dev)
(deleted)
(deleted)
(random thing that i made once that i doubt anyone will understand)
(MediaWiki)
(doesn’t work)
[removed]
[removed]
[removed]
[removed]
[removed]
Emails:
jamied132.email@gmail.com
cheese@jamied132.is-a.dev
jamied132@elaruu.is-truly-a.pro
anything that isn’t taken@elaruu.is-truly-a.pro
Get your elaruu.is-truly-a.pro email today at
Here is my about me, and a list of bugs (201-250)
(bugs 201-250 are posted in the comments of this post)
Directory of bugs and vulnerabilities
Bugs 201-250: (current)
Bugs 151-200:
Bugs 91-150:
Bugs 41-90:
Bug 40:
Bug 39:
Bug 38:
Bug 37:
Bug 36:
Bug 35:
Bug 34:
Bug 32-33:
Bug 31:
Bug 30:
Bug 29:
Bug 28 2:
Bug 28:
Bug 27:
Bug 26:
Bug 25:
Bug 24:
Bug 23:
Bug 22:
Bug 21:
Bug 20:
Bug 19:
Bug 18:
Bug 17:
Bug 16: idk where that is
Bug 15:
Bug 14:
Bug 13:
Bug 12:
Bug 11:
Bug 9-10:
Bug 8:
Bug 7: i also don’t know where that is…
Bug 6:
Bug 5:
Bugs 1-4:
this is my about me:
(darflen really needs a longer about me limit. they let you use 8192 characters for posts, which is far more than required, but you can not use very much for about mes)
hi im jamied132 and i am a cheese
i have 2 hats and 2 pumpkins
pronounced /dʒeɪmiːdiː wʌn θriː tuː/
URLs
(redirects to .is-truly-a.pro)
(redirects to .is-a.dev)
(deleted)
(deleted)
(random thing that i made once that i doubt anyone will understand)
(MediaWiki)
(doesn’t work)
[removed]
[removed]
[removed]
[removed]
[removed]
Emails:
jamied132.email@gmail.com
cheese@jamied132.is-a.dev
jamied132@elaruu.is-truly-a.pro
anything that isn’t taken@elaruu.is-truly-a.pro
Get your elaruu.is-truly-a.pro email today at
Comments
-
qxva 9 months ago (edited)make a new post, it's at 250 -
A cheese 9 months agoI’ll make a new post when I find bug 251
-
-
250: verifying email address does not work unless you are loggeed into an account on the browser. it would make sensee if you had to be logged in to the account you were trying to verify, but that is not the case, you just have to be logged in to any account -
you could ask pi how he got the ghost scratch account @yo and then see if it works on here, some scratch exploits do work here but some don't. i asked him earlier but he refused to say but maybe he will since it's patched on scratch. -
since the exploit seems to be patched (as far as i know), i don't think there's any harm in explaining how i got the yo account.
simply, i used burpsuite to create a scratch account. when i got to the last step, the part where you enter your email, i intercepted the post request that sends the account data. i modified the username by adding "%0A" (which is the url encoded form of a newline character) to the end of it, then forwarded the request.
after that, the site got stuck loading forever, but when i went back to the scratch homepage, i was logged in. it seems scratch was very confused by me having a newline in my username, because the site kinda broke. my name didn't appear in the header, and i couldn't even view projects.
to comment on a project using that account, i had to do some weird workaround. i first logged into my main account and opened the project i wanted to comment on. then, in a separate tab, i logged out and logged back into the "yo" account. after that, i returned to the original tab, and commented through there.
eventually, scratch did try to fix it by removing the newline automatically. however, because of that, people could now register legitimate 2c usernames, and even usernames with inappropriate words. i managed to grab "pi" but they caught on and deleted it pretty quickly. -
darflen 2chars are possible to get by asking parc so the exploit would only be useful for 1chars, does it work?
-
249: anarchy community exploit:
3 users join community
user 1 makes user 2 a moderator
user 1 transfers ownership to user 3 at the same time user 2 kicks user 3
user 1 and user 2 leave -
-
why is statistics such as and and only accessible through the api and cant be accessed on the statistics page? (or profile page) -
247: the alt text for the 1000 views achievement is “ Eye icon with 2 plus symbol…” but it should be “2 plus symbols” -
246: the alt text for the ban icon is “ Circle with X Icon” but the alt text for all the other icons has “icon” with a lowercase i. -
245: might not still exist but “1 to 3 in 3” —> “1 to 3 of 3”
Also the stats up the top need to be plural (0 posts, not 0 post) -
-
-
243: german is before english in the language select setting when it should be after french (if it is supposed to be in alphabetical order) -
-
241: creating an unlisted post gives you 0sc, but deleting it gives you -5sc, so you can lose infinite sc -
240: it is impossible to turn off ping notifications in settings, for some reason whenever you toggle it it actually toggles post notifications -
-
-
-
-
-
236: the tab name is paradock | darflen instead of paradock's post | darflen which it used to be -
-
235: creating a post gives you 5sc but deleting it does not cause you to lose the sc is this a bug or not -
on it's doing requests so fast that darflen just ratelimits (or dies) making it fail to load the page content -
-
232: Text in the top box (coordinates) and bottom box (place) does not show in light mode -
-
bug 231: usually hovering over the "x days ago" tells you the exact date and time but it only does this for the first page of notifications, all the others dont -
bug 230: the load more button on the last page still shows and just loads infinitely -
fixed (and the one about no gap between the last notification)
the button is supposed to disappear after the last notification is shown
-
-
-
bug 228:
i set 2 accounts emails to the same address and verified them both at the same time, so both accounts now have the same email address. as far as i can tell all this does it make one account impossible to log into. (when i log into the address it always logs into one of the accounts but not the other.)
(this is a bug because it should not be possible)-
is it by changing the email in the settings page isn't it? and what accounts does have this issue -
i set 2 accounts (@bp_api2 and) both to the same address from the settings page, then opened gmail and clicked the verification link from both accounts at the same time so it verified both of them, now whenever i log into that address it logs into@bp_api2, but if i go to's settings i can see that the email is set to the same thing as@bp_api2, also if i try's previous email address to log in that also does not work
-
bug 227: this should be changed to less than or equal to 80 as that is the actual limit, or the actual limit should be fixed -
-
bug 226: https://// can be used in a link, which does not work, it goes to about:blank#blocked -
bug 225: javascript:urls can be used in links as long as they contain the word "https://xx" (https:// followed by 2 characters) -
Jameid132 stop using the cheese emoji instead use '🚊🚊🚊🚊🚊🚊🚊' in every post if you want to say an emoji -
-
-
-
huh, like the modal showing a form doesn't work at all? or the email isn't sending?
what happened? 🤔
-
-
bug 223: banned users can still go to the community settings page even though they cannot change any of the settings -
bug 222: the code that updates how long ago posts were posted does not account for leap years meaning is scheduled to change from "1 year ago" to "2 years ago" exactly 24 hours earlier than it should, and as time goes on every post will become 24 hours off for every leap year between when it was posted and the current date, meaning in 1460 years some posts will be a whole year off. -
it converts the difference of 2 unix timestamps (which technically account for leap years) into date ago strings -
i know unix timestamps account for leap years but your code that converts them into "something ago" does not seem to... idk maybe im wrong -
it doesn't need special code to account for leap year as the unix timestamp already does that
so probably there's no issue 🤔
-
-
Bug 220: you can still transfer ownership to yourself if you type your username in a different case to your actual username -
-
-
-
-
-
bug 215: i wrote a space in between each community but when i save the comment the spaces are not there -
it's because the communities are deleted, for example@paradockalt doesn't exist so it doesn't save the spaces. this can be fixed by putting 2 spaces @paradockalt
-
-
bug 214: username and community name does not show in notification for ownership transfer of an invite-only community -
-
-
-
-
-
-
-
-
Bug 208: how did i not find this bug earlier? the bug hunter badge doesn't show in the settings page: -
-
out of all the elaruu wikis, which is the main one that should be used? -
Idk, I deleted (for reasons I can not say) and I also made for fun but did not intend on ever using, so currently the only Elaruu wikis are the ones on the scratchpeople and sratchpeople fandoms -
Alright, so sratchpeople.fandom.com is discontinued and I've given G32_Games admin permissions on scratchpeople.fandom.com so that leaves 1 of your list.
But that's not an actual elaruu wiki, it's a wiki with a page for elaruu. Should I add whatever info to elaruu-wiki.jamied132.is-a.dev ? for more detail than the scratchpeople one -
if you want a wiki specifically for elaruu then you can add information to elaruu-wiki.jamied132.is-a.dev if you want
-
-
-
-
You have to click on a post for it to count as a view but you don't need to visit the post to like it; not a bug, just an odd design choice -
I thought liking, voting, reposting etc also made the view count go up
Edit: voting and reposting counts as a view but liking does not
-
-
Suggestion: clicking on the achievement on shows you which people it has been rewarded to -
-
-
ummmm that's not supposed to happen that the same exact post get notified twice
-
-
-
Bug 201: why is there a button for page 24 of my following page but when you click on it it shows this -
deleted users, i remember this bug from when i was trying to follow everyone and was following all users darfield was following and noticed this
-
