Pages:
Author

Topic: Activity & new membergroup limits - page 30. (Read 242442 times)

copper member
Activity: 2926
Merit: 2348
March 21, 2015, 03:19:45 PM
In theory, if you were to monitor when enough users are promoted to legendary status, it would be possible to reverse engineer what the secret seed is (you would however need to take into consideration that the required activity for each member may not be divisible by 14), although it would probably take more effort/work then it is really worth.

If you can find the secret seed by looking at when people are promoted, then you've (more-or-less) broken SHA-1's preimage resistance. This has never been done before, so if you do it, you should probably publish a paper about it. Smiley
This will probably show my newbieness in the world of encryption and cryptography.

If I have many examples when one out of two variables is known and the other is unknown and the output is always the same, then I would think that it would be possible to determine what the unknown variable is. I would think it would be similar to figuring out the private key that was created using a weak RNG.

I would think that someone would essentially use some level of computing power to "guess"/hash what the secret seed is based on the above known variables.

I was under the understanding this is why bitcoin related gambling sites generally have their server seed expire after (usually) 24 hours and have their 'rolls' result in a number that is 4 digits (usually two before and two after a decimal).

Although after reading a few wikipedia articles, a few stack exchange answers, and the beginning of a paper (it quickly became more advanced then what I could understand so further reading would have been futile), it sounds like my theory is incorrect.
administrator
Activity: 5222
Merit: 13032
March 21, 2015, 02:15:39 PM
In theory, if you were to monitor when enough users are promoted to legendary status, it would be possible to reverse engineer what the secret seed is (you would however need to take into consideration that the required activity for each member may not be divisible by 14), although it would probably take more effort/work then it is really worth.

If you can find the secret seed by looking at when people are promoted, then you've (more-or-less) broken SHA-1's preimage resistance. This has never been done before, so if you do it, you should probably publish a paper about it. Smiley
copper member
Activity: 2926
Merit: 2348
March 21, 2015, 02:07:48 PM
-snip-
Sorry, I found it. But still, you need to know how to read this code ...

-snip-
Code:
update smf_members set ID_POST_GROUP=21 where ID_POST_GROUP=8 and
activity>=775 and activity>=775+conv(substr(sha1(concat(ID_MEMBER,
secretSeed)), 1, 2), 16, 10);

The required activity level per user is suitably random for betting, but anyone who can read my code (there are a few such people) will be able to exactly predict when someone will become Legendary, so I don't really recommend it.

The problem is that we dont know what the "secretSeed" is, thus a proper prediction on the exact result in only available for those that have access to the full code.



We just need to pay off some mod. Question is if that secretSeed is account specific or global.

I think I saw that it was specific for each account (but I may be mistaken).
The exact amount of activity required to become legendary varies from user to user, however the secret seed is global.

In theory, if you were to monitor when enough users are promoted to legendary status, it would be possible to reverse engineer what the secret seed is (you would however need to take into consideration that the required activity for each member may not be divisible by 14), although it would probably take more effort/work then it is really worth.

Aha, yes, if the secret seed is global then, as you say, the secret seed is the only missing variable if you track exactly when users become legendary---you'd just have to solve that equation for secretseed.  However, you're also right that, uh, who cares?   Legendary doesn't get you any further forum rights, as far as I know it's just a cute title.
Well there are roughly 440 legendary members (as of when I checked yesterday) and roughly 1880 (as of just now) (both may be off by up to 40), so there is a bit of an additional prestige level to have a legendary account verses having a hero account.

You are right though, a legendary account does not have any additional forum permissions or features that are not available to hero accounts.

Can I ask you how do you know the secretSeed is univocal for all the forum users? Is it only your supposition or have you asked someone from the staff?
That is what a secret seed is, it needs to be the same for multiple people/bets Actually no it doesn't now that I think about it.

Although theymos has said that it is possible to reverse engineer when each user will become legendary if you can read his code, which would imply that the secret seed is the same for each person. Also I really don't think it would really be worth the trouble to be creating a new secret seed for each user as there is really nothing at stake and the fact that the client seed (aka the UID #) cannot be changed by the user.

The required activity level per user is suitably random for betting, but anyone who can read my code (there are a few such people) will be able to exactly predict when someone will become Legendary, so I don't really recommend it.
copper member
Activity: 1498
Merit: 1528
No I dont escrow anymore.
March 21, 2015, 02:05:22 PM
-snip-

Can I ask you how do you know the secretSeed is univocal for all the forum users? Is it only your supposition or have you asked someone from the staff?
-snip-

Theymos refers to it as a singular entity.

You're not going to find the secret seed technologically. Brute force is not practical, and SHA-1 is strongly believed to protect against other attacks you might think of. If the seed is ever published, it'll be because someone leaked it.
legendary
Activity: 1778
Merit: 1043
#Free market
March 21, 2015, 01:57:39 PM
-snip-
Sorry, I found it. But still, you need to know how to read this code ...

-snip-
Code:
update smf_members set ID_POST_GROUP=21 where ID_POST_GROUP=8 and
activity>=775 and activity>=775+conv(substr(sha1(concat(ID_MEMBER,
secretSeed)), 1, 2), 16, 10);

The required activity level per user is suitably random for betting, but anyone who can read my code (there are a few such people) will be able to exactly predict when someone will become Legendary, so I don't really recommend it.

The problem is that we dont know what the "secretSeed" is, thus a proper prediction on the exact result in only available for those that have access to the full code.



We just need to pay off some mod. Question is if that secretSeed is account specific or global.

I think I saw that it was specific for each account (but I may be mistaken).
The exact amount of activity required to become legendary varies from user to user, however the secret seed is global.

In theory, if you were to monitor when enough users are promoted to legendary status, it would be possible to reverse engineer what the secret seed is (you would however need to take into consideration that the required activity for each member may not be divisible by 14), although it would probably take more effort/work then it is really worth.

Can I ask you how do you know the secretSeed is univocal for all the forum users? Is it only your supposition or have you asked someone from the staff?


Aha, yes, if the secret seed is global then, as you say, the secret seed is the only missing variable if you track exactly when users become legendary---you'd just have to solve that equation for secretseed.  However, you're also right that, uh, who cares?   Legendary doesn't get you any further forum rights, as far as I know it's just a cute title.

Maybe he is only curious as a lot of other users here in the forum (it is normal).
legendary
Activity: 1456
Merit: 1081
I may write code in exchange for bitcoins.
March 21, 2015, 01:52:42 PM
-snip-
Sorry, I found it. But still, you need to know how to read this code ...

-snip-
Code:
update smf_members set ID_POST_GROUP=21 where ID_POST_GROUP=8 and
activity>=775 and activity>=775+conv(substr(sha1(concat(ID_MEMBER,
secretSeed)), 1, 2), 16, 10);

The required activity level per user is suitably random for betting, but anyone who can read my code (there are a few such people) will be able to exactly predict when someone will become Legendary, so I don't really recommend it.

The problem is that we dont know what the "secretSeed" is, thus a proper prediction on the exact result in only available for those that have access to the full code.



We just need to pay off some mod. Question is if that secretSeed is account specific or global.

I think I saw that it was specific for each account (but I may be mistaken).
The exact amount of activity required to become legendary varies from user to user, however the secret seed is global.

In theory, if you were to monitor when enough users are promoted to legendary status, it would be possible to reverse engineer what the secret seed is (you would however need to take into consideration that the required activity for each member may not be divisible by 14), although it would probably take more effort/work then it is really worth.

Aha, yes, if the secret seed is global then, as you say, the secret seed is the only missing variable if you track exactly when users become legendary---you'd just have to solve that equation for secretseed.  However, you're also right that, uh, who cares?   Legendary doesn't get you any further forum rights, as far as I know it's just a cute title.
sr. member
Activity: 448
Merit: 250
Changing avatars is currently not possible.
March 21, 2015, 01:50:20 PM
-snip-
Sorry, I found it. But still, you need to know how to read this code ...

-snip-
Code:
update smf_members set ID_POST_GROUP=21 where ID_POST_GROUP=8 and
activity>=775 and activity>=775+conv(substr(sha1(concat(ID_MEMBER,
secretSeed)), 1, 2), 16, 10);

The required activity level per user is suitably random for betting, but anyone who can read my code (there are a few such people) will be able to exactly predict when someone will become Legendary, so I don't really recommend it.

The problem is that we dont know what the "secretSeed" is, thus a proper prediction on the exact result in only available for those that have access to the full code.



We just need to pay off some mod. Question is if that secretSeed is account specific or global.

I think I saw that it was specific for each account (but I may be mistaken).
The exact amount of activity required to become legendary varies from user to user, however the secret seed is global.

In theory, if you were to monitor when enough users are promoted to legendary status, it would be possible to reverse engineer what the secret seed is (you would however need to take into consideration that the required activity for each member may not be divisible by 14), although it would probably take more effort/work then it is really worth.

IIRC there was this exact discussion already. Theymos said that the seed has too much entropy to be reverse engeneerd. One more point is that you can't see when someone gets promoted, activity jumps by 14 points.

Even if you found a secretseed that matches the past results of all accounts, it doesn't say anthing about future accounts because there are an incredible big number of seeds that would match.
copper member
Activity: 2926
Merit: 2348
March 21, 2015, 01:46:54 PM
-snip-
Sorry, I found it. But still, you need to know how to read this code ...

-snip-
Code:
update smf_members set ID_POST_GROUP=21 where ID_POST_GROUP=8 and
activity>=775 and activity>=775+conv(substr(sha1(concat(ID_MEMBER,
secretSeed)), 1, 2), 16, 10);

The required activity level per user is suitably random for betting, but anyone who can read my code (there are a few such people) will be able to exactly predict when someone will become Legendary, so I don't really recommend it.

The problem is that we dont know what the "secretSeed" is, thus a proper prediction on the exact result in only available for those that have access to the full code.



We just need to pay off some mod. Question is if that secretSeed is account specific or global.

I think I saw that it was specific for each account (but I may be mistaken).
The exact amount of activity required to become legendary varies from user to user, however the secret seed is global.

In theory, if you were to monitor when enough users are promoted to legendary status, it would be possible to reverse engineer what the secret seed is (you would however need to take into consideration that the required activity for each member may not be divisible by 14), although it would probably take more effort/work then it is really worth. This is incorrect lol
legendary
Activity: 1456
Merit: 1081
I may write code in exchange for bitcoins.
March 21, 2015, 01:44:12 PM
-snip-
Sorry, I found it. But still, you need to know how to read this code ...

-snip-
Code:
update smf_members set ID_POST_GROUP=21 where ID_POST_GROUP=8 and
activity>=775 and activity>=775+conv(substr(sha1(concat(ID_MEMBER,
secretSeed)), 1, 2), 16, 10);

The required activity level per user is suitably random for betting, but anyone who can read my code (there are a few such people) will be able to exactly predict when someone will become Legendary, so I don't really recommend it.

The problem is that we dont know what the "secretSeed" is, thus a proper prediction on the exact result in only available for those that have access to the full code.



We just need to pay off some mod. Question is if that secretSeed is account specific or global.

I think I saw that it was specific for each account (but I may be mistaken).
sr. member
Activity: 448
Merit: 250
Changing avatars is currently not possible.
March 21, 2015, 01:42:41 PM
-snip-
Sorry, I found it. But still, you need to know how to read this code ...

-snip-
Code:
update smf_members set ID_POST_GROUP=21 where ID_POST_GROUP=8 and
activity>=775 and activity>=775+conv(substr(sha1(concat(ID_MEMBER,
secretSeed)), 1, 2), 16, 10);

The required activity level per user is suitably random for betting, but anyone who can read my code (there are a few such people) will be able to exactly predict when someone will become Legendary, so I don't really recommend it.

The problem is that we dont know what the "secretSeed" is, thus a proper prediction on the exact result in only available for those that have access to the full code.



We just need to pay off some mod. Question is if that secretSeed is account specific or global.
copper member
Activity: 1498
Merit: 1528
No I dont escrow anymore.
March 21, 2015, 01:34:21 PM
-snip-
Sorry, I found it. But still, you need to know how to read this code ...

-snip-
Code:
update smf_members set ID_POST_GROUP=21 where ID_POST_GROUP=8 and
activity>=775 and activity>=775+conv(substr(sha1(concat(ID_MEMBER,
secretSeed)), 1, 2), 16, 10);

The required activity level per user is suitably random for betting, but anyone who can read my code (there are a few such people) will be able to exactly predict when someone will become Legendary, so I don't really recommend it.

The problem is that we dont know what the "secretSeed" is, thus a proper prediction on the exact result in only available for those that have access to the full code.

sr. member
Activity: 448
Merit: 250
Changing avatars is currently not possible.
March 21, 2015, 01:33:59 PM
How can I find out the acitivty needed for legendary for a certain account?

AFAIK, you can't. Just somewhere between 775 and 1030 activity.

AFAIK you can, theymos said that atleast. Maybe only staff can look it up though.

Sorry, I found it. But still, you need to know how to read this code ...

Can you make getting legendary provability fair? So we know if you don't like us that we get it anyway Smiley

Nah, that'd significantly complicate things. Currently this randomness is done with a single SQL query, which is very convenient.

Code:
update smf_members set ID_POST_GROUP=21 where ID_POST_GROUP=8 and
activity>=775 and activity>=775+conv(substr(sha1(concat(ID_MEMBER,
secretSeed)), 1, 2), 16, 10);

The required activity level per user is suitably random for betting, but anyone who can read my code (there are a few such people) will be able to exactly predict when someone will become Legendary, so I don't really recommend it.

Perfect. Now I just need a mod that can tell me the secretSeed!
legendary
Activity: 1456
Merit: 1081
I may write code in exchange for bitcoins.
March 21, 2015, 01:33:55 PM
How can I find out the acitivty needed for legendary for a certain account?

AFAIK, you can't. Just somewhere between 775 and 1030 activity.

AFAIK you can, theymos said that atleast. Maybe only staff can look it up though.

He actually explained that going to legendary is a random number between those values, he hashes a salt and someother stuff to calculate the value and everyone goes legendary at some unknown point in that range.  Staff won't look it up (don't think they even can) cos it's supposed to be secret.
staff
Activity: 2454
Merit: 1617
Crypto Swap Exchange
March 21, 2015, 01:31:52 PM
How can I find out the acitivty needed for legendary for a certain account?

AFAIK, you can't. Just somewhere between 775 and 1030 activity.

AFAIK you can, theymos said that atleast. Maybe only staff can look it up though.

Sorry, I found it. But still, you need to know how to read this code ...

Can you make getting legendary provability fair? So we know if you don't like us that we get it anyway Smiley

Nah, that'd significantly complicate things. Currently this randomness is done with a single SQL query, which is very convenient.

Code:
update smf_members set ID_POST_GROUP=21 where ID_POST_GROUP=8 and
activity>=775 and activity>=775+conv(substr(sha1(concat(ID_MEMBER,
secretSeed)), 1, 2), 16, 10);

The required activity level per user is suitably random for betting, but anyone who can read my code (there are a few such people) will be able to exactly predict when someone will become Legendary, so I don't really recommend it.
sr. member
Activity: 448
Merit: 250
Changing avatars is currently not possible.
March 21, 2015, 01:04:06 PM
How can I find out the acitivty needed for legendary for a certain account?

AFAIK, you can't. Just somewhere between 775 and 1030 activity.

AFAIK you can, theymos said that atleast. Maybe only staff can look it up though.
copper member
Activity: 1498
Merit: 1528
No I dont escrow anymore.
March 21, 2015, 04:36:56 AM
-snip-
Most probably on 1036. Roll Eyes

There are plenty old accounts that have "banked" activity. I would not be surprised if some of them could reach legendary just by posting.
hero member
Activity: 560
Merit: 509
I prefer Zakir over Muhammed when mentioning me!
March 21, 2015, 01:19:10 AM
How can I find out the acitivty needed for legendary for a certain account?

AFAIK, you can't. Just somewhere between 775 and 1030 activity.
That makes it sound like once you reach 1031 activity, if you've been overlooked for some reason, you are no longer eligible for Legendary status. Cheesy

lol but of course you won't be overlooked, it's not approved manually by Theymos Cheesy The worst case, you'll be Legendary on 1030 activity.

Most probably on 1036. Roll Eyes
staff
Activity: 2454
Merit: 1617
Crypto Swap Exchange
March 21, 2015, 01:10:25 AM
How can I find out the acitivty needed for legendary for a certain account?

AFAIK, you can't. Just somewhere between 775 and 1030 activity.
That makes it sound like once you reach 1031 activity, if you've been overlooked for some reason, you are no longer eligible for Legendary status. Cheesy

lol but of course you won't be overlooked, it's not approved manually by Theymos Cheesy The worst case, you'll be Legendary on 1030 activity.
sr. member
Activity: 476
Merit: 500
I like boobies
March 20, 2015, 11:25:28 PM
How can I find out the acitivty needed for legendary for a certain account?

AFAIK, you can't. Just somewhere between 775 and 1030 activity.
That makes it sound like once you reach 1031 activity, if you've been overlooked for some reason, you are no longer eligible for Legendary status. Cheesy
staff
Activity: 2454
Merit: 1617
Crypto Swap Exchange
March 20, 2015, 10:58:28 PM
How can I find out the acitivty needed for legendary for a certain account?

AFAIK, you can't. Just somewhere between 775 and 1030 activity.
Pages:
Jump to: