Author

Topic: bustabit.com -- The Social Gambling Game - page 124. (Read 293938 times)

member
Activity: 100
Merit: 10
Vires in numeris.
December 02, 2014, 02:58:43 PM
Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?

Yes. He had used the exploit to get somewhere in the order of over 30 BTC in profit. He did withdraw his original deposit, plus 5 BTC as a bounty for finding the exploit. Had he wanted, he would have been allowed to withdraw up to 25 BTC which was the contents of the hot wallet. But being a decent guy he didn't even make an attempt to do so, something that I am very grateful for.

I wouldn't call stealing 5 btc a decent action, or one who does it a decent person, just because he could have taken more. Stealing is stealing. The guy stole from you, and if you had investors yet, it would have been stealing from them. I understand you're grateful he didn't clean you out, but I'm still puzzled by your gushing praise for someone who is a thief.

I was in the chat at the time, here's a chatlog. As you can see at 10:47 UTC foo was up >15 BTC and Ryan came online more than 2h later. He could've just withdrawn with a few clicks, but he didn't. He also send a support message to Ryan that explains how the exploit works, which allowed him to patch it fast.

I still don't get it. I would've assumed anybody in his position would clean the hot wallet.
legendary
Activity: 2044
Merit: 1115
★777Coin.com★ Fun BTC Casino!
December 02, 2014, 02:20:23 PM
Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?

Yes. He had used the exploit to get somewhere in the order of over 30 BTC in profit. He did withdraw his original deposit, plus 5 BTC as a bounty for finding the exploit. Had he wanted, he would have been allowed to withdraw up to 25 BTC which was the contents of the hot wallet. But being a decent guy he didn't even make an attempt to do so, something that I am very grateful for.

I wouldn't call stealing 5 btc a decent action, or one who does it a decent person, just because he could have taken more. Stealing is stealing. The guy stole from you, and if you had investors yet, it would have been stealing from them. I understand you're grateful he didn't clean you out, but I'm still puzzled by your gushing praise for someone who is a thief.
newbie
Activity: 28
Merit: 0
December 02, 2014, 02:11:33 PM
Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?

Yes. He had used the exploit to get somewhere in the order of over 30 BTC in profit. He did withdraw his original deposit, plus 5 BTC as a bounty for finding the exploit. Had he wanted, he would have been allowed to withdraw up to 25 BTC which was the contents of the hot wallet. But being a decent guy he didn't even make an attempt to do so, something that I am very grateful for.




i call bullshit  Smiley
newbie
Activity: 28
Merit: 0
December 02, 2014, 01:43:35 PM
I'm really impressed by the person who abused this bug. Not only due to the complexity of the exploit, but the fact he only took 5 of the 25 BTC in the hot wallet. He likely could have slowly abused the bug leading the eventual shutdown of MP, but instead was a class act. I'm really thankful for that and working on better security measures so I won't need to rely on the kindness of strangers as much.

Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?


there is something not right about this... out of the kindness of his heart he didn't take it all? yeah right!!! Smiley i don't buy it
legendary
Activity: 2044
Merit: 1115
★777Coin.com★ Fun BTC Casino!
December 02, 2014, 01:26:07 PM
I'm really impressed by the person who abused this bug. Not only due to the complexity of the exploit, but the fact he only took 5 of the 25 BTC in the hot wallet. He likely could have slowly abused the bug leading the eventual shutdown of MP, but instead was a class act. I'm really thankful for that and working on better security measures so I won't need to rely on the kindness of strangers as much.

Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?
legendary
Activity: 2422
Merit: 1451
Leading Crypto Sports Betting & Casino Platform
December 02, 2014, 12:39:38 PM
Sure, but is the problem solved? Someone redrawing such amounts of money is ofcourse not something you'd want as a business Tongue

It was actually fixed some hours after someone noticed foo was probably using an exploit.

Here's Ryan's response from few pages back.

Sorry guys, I was asleep! Thanks for letting me know. Foo did find an exploit, and was kind enough to reveal it. I have quickly pushed up a fix, and purged Foo's games from the database to preserve meaningful stats.

Foo used quite a clever exploit in some what should be dead code: http://privatepaste.com/354dae40cd

I'd like to thank him for not abusing the bug further, or slowly bleeding me over time. I'm extremely thankful for that, that would have been a nightmare situation. Thanks Foo!

Sorry about all the drama people, please enjoy the game.
legendary
Activity: 1120
Merit: 1000
December 02, 2014, 12:37:44 PM
What was the attack on PD? Was it the guy who flat bet many bets and won.?

Apparently somebody was able to gain access to their server seed, so they could know what their rolls would be before they rolled.

As I remember, he won over 100 max bets in a row at 49.5%, and was able to withdraw 40 BTC before being caught.

There are screenshots on the PD thread - go back a couple of weeks I guess.

Edit:

something like 150 wins in a row  Shocked Shocked Shocked Shocked Shocked




Hacked? Or admins having some fun with a gag  Cheesy




Any hint how he managed to get access to the server seed?

And if it is already corrected or not(more important)
hero member
Activity: 812
Merit: 1000
I <3 VW Beetles
December 02, 2014, 12:14:53 PM
Uh, take a look at this guy's chart. It seems to me that he's cheating. Ryan might want to investigate this.

https://www.moneypot.com/user/foo

https://www.moneypot.com/user/foo

The page you are looking for doesn't exist...



^hmmmm

His stats were deleted by Ryan.
Sure, but is the problem solved? Someone redrawing such amounts of money is ofcourse not something you'd want as a business Tongue
legendary
Activity: 2422
Merit: 1451
Leading Crypto Sports Betting & Casino Platform
December 02, 2014, 12:08:19 PM
Uh, take a look at this guy's chart. It seems to me that he's cheating. Ryan might want to investigate this.

https://www.moneypot.com/user/foo

https://www.moneypot.com/user/foo

The page you are looking for doesn't exist...



^hmmmm

His stats were deleted by Ryan.
newbie
Activity: 28
Merit: 0
December 02, 2014, 11:55:14 AM
Uh, take a look at this guy's chart. It seems to me that he's cheating. Ryan might want to investigate this.

https://www.moneypot.com/user/foo

https://www.moneypot.com/user/foo

The page you are looking for doesn't exist...



^hmmmm


*edit* wow i see now
legendary
Activity: 2940
Merit: 1333
December 01, 2014, 05:47:49 PM
What was the attack on PD? Was it the guy who flat bet many bets and won.?

Apparently somebody was able to gain access to their server seed, so they could know what their rolls would be before they rolled.

As I remember, he won over 100 max bets in a row at 49.5%, and was able to withdraw 40 BTC before being caught.

There are screenshots on the PD thread - go back a couple of weeks I guess.

Edit:

something like 150 wins in a row  Shocked Shocked Shocked Shocked Shocked




Hacked? Or admins having some fun with a gag  Cheesy
full member
Activity: 140
Merit: 100
December 01, 2014, 03:56:49 PM
Wasn't the attacker on PD only able to withdraw 40 btc before his misbehavior was noticed and all his other withdrawals were blocked?

On the account where he was obvious about it, sure.

I wonder if he had other accounts that he used before that, where he won a bunch in a less obvious way?
The way that guy acted out , making straight flat bets at 50% and winning like 100 times, was probably his way to reveal the bug or show that he had hacked the system. I don't think, someone who could have found the flaw would make such bets. He probably hit PD before that Big time.
Why are we talking about PD on the MoneyPot thread?

Speculating there is a chance that is is the same dude.  Both pretty bright attacks n such.

What was the attack on PD? Was it the guy who flat bet many bets and won.?
sr. member
Activity: 462
Merit: 251
December 01, 2014, 12:43:47 AM
very interestiong Grin

really greate site!
member
Activity: 109
Merit: 10
November 30, 2014, 11:50:28 PM
Wasn't the attacker on PD only able to withdraw 40 btc before his misbehavior was noticed and all his other withdrawals were blocked?

On the account where he was obvious about it, sure.

I wonder if he had other accounts that he used before that, where he won a bunch in a less obvious way?
The way that guy acted out , making straight flat bets at 50% and winning like 100 times, was probably his way to reveal the bug or show that he had hacked the system. I don't think, someone who could have found the flaw would make such bets. He probably hit PD before that Big time.
Why are we talking about PD on the MoneyPot thread?

Speculating there is a chance that is is the same dude.  Both pretty bright attacks n such.
I see.
legendary
Activity: 4004
Merit: 1250
Owner at AltQuick.com
November 30, 2014, 11:08:12 PM
Wasn't the attacker on PD only able to withdraw 40 btc before his misbehavior was noticed and all his other withdrawals were blocked?

On the account where he was obvious about it, sure.

I wonder if he had other accounts that he used before that, where he won a bunch in a less obvious way?
The way that guy acted out , making straight flat bets at 50% and winning like 100 times, was probably his way to reveal the bug or show that he had hacked the system. I don't think, someone who could have found the flaw would make such bets. He probably hit PD before that Big time.
Why are we talking about PD on the MoneyPot thread?

Speculating there is a chance that is is the same dude.  Both pretty bright attacks n such.
member
Activity: 109
Merit: 10
November 30, 2014, 07:33:54 PM
Wasn't the attacker on PD only able to withdraw 40 btc before his misbehavior was noticed and all his other withdrawals were blocked?

On the account where he was obvious about it, sure.

I wonder if he had other accounts that he used before that, where he won a bunch in a less obvious way?
The way that guy acted out , making straight flat bets at 50% and winning like 100 times, was probably his way to reveal the bug or show that he had hacked the system. I don't think, someone who could have found the flaw would make such bets. He probably hit PD before that Big time.
Why are we talking about PD on the MoneyPot thread?
full member
Activity: 168
Merit: 100
www.secondstrade.com - 190% return Binary option
November 30, 2014, 05:52:24 PM
Wasn't the attacker on PD only able to withdraw 40 btc before his misbehavior was noticed and all his other withdrawals were blocked?

On the account where he was obvious about it, sure.

I wonder if he had other accounts that he used before that, where he won a bunch in a less obvious way?
The way that guy acted out , making straight flat bets at 50% and winning like 100 times, was probably his way to reveal the bug or show that he had hacked the system. I don't think, someone who could have found the flaw would make such bets. He probably hit PD before that Big time.
member
Activity: 100
Merit: 10
Vires in numeris.
November 30, 2014, 05:50:37 PM
Wasn't the attacker on PD only able to withdraw 40 btc before his misbehavior was noticed and all his other withdrawals were blocked?

On the account where he was obvious about it, sure.

I wonder if he had other accounts that he used before that, where he won a bunch in a less obvious way?

Which is sort of funny cause I believe PD had a big winner before the "hack".

Someone told me IRL "Did you hear about that big winner on PD?!"


Is that about hufflepuff? Was it a confirmed hack or just Stunna being butthurt searching for explanations? Do you have a link to the topic, so that I don't have to go through tons of spam in the PD thread?
legendary
Activity: 4004
Merit: 1250
Owner at AltQuick.com
November 30, 2014, 04:39:29 PM
Wasn't the attacker on PD only able to withdraw 40 btc before his misbehavior was noticed and all his other withdrawals were blocked?

On the account where he was obvious about it, sure.

I wonder if he had other accounts that he used before that, where he won a bunch in a less obvious way?

Which is sort of funny cause I believe PD had a big winner before the "hack".

Someone told me IRL "Did you hear about that big winner on PD?!"
legendary
Activity: 2940
Merit: 1333
November 30, 2014, 04:06:49 PM
Wasn't the attacker on PD only able to withdraw 40 btc before his misbehavior was noticed and all his other withdrawals were blocked?

On the account where he was obvious about it, sure.

I wonder if he had other accounts that he used before that, where he won a bunch in a less obvious way?
Jump to: