Pages:
Author

Topic: Casinobit - no house edge, 100% payout - page 2. (Read 8167 times)

legendary
Activity: 1512
Merit: 1000
December 10, 2012, 05:58:44 PM
#45
PR/Marketing fail itt
sr. member
Activity: 364
Merit: 250
December 10, 2012, 05:06:44 PM
#44
I actually hoped you would swallow your pride there and admit that I was right for a second, especially considering you decided to delete your own post. Which further accused us of trying to scam.

I like you all guys regardless and appreciate the feedback  Wink

I'll give it to you as requested!

The post I deleted was based on the assumption that you didn't understand how hashing works (you admit this in the context of password security) and was an attempt to explain it.  The reason I deleted it was that I came to understand that your point might have been that the secret list would permit the business to defraud its shareholders, not so much the business to defraud bettors.  I don't know that to be certain, but felt it was prudent to give you the benefit of the doubt.

I don't think I ever accused you of trying to scam - rather, my contention was that you didn't appear to have the requisite security knowledge to run a bitcoin casino and handle other people's money, and appeared to be taking an attitude not of trying to learn it, but boldly dismissing it with overconfidence.

When you are confronted with someone engaging you on a security-related topic,

Quote
I swear it's like people keep repeating what others said instead of thinking for themselves.

isn't an appropriate response.  The correct response is to either alleviate the concern, or address it on its own merits, without reference to people "not thinking for themselves".  In this case, the correct response would be "Including the transaction ID in the hash protects the bettors but doesn't solve the problem that leaves the shareholders vulnerable to insider fraud."

It's really not a matter of pride for me: I'll be proud of you if you bring a stable secure trusted casino to the Bitcoin world with a willingness to learn whatever you need to do to build the best business you can.

I am not into building businesses at the moment though. It was never my intention to claim that I have enough security knowledge to run a bitcoin casino, even if I was the owner, I didn't study for it and you need professional people who actually work in network security as a fulltime job. You have to be surrounded with great people for any business to succeed and a bitcoin casino isn't an exception.


The game on the main page doesn't require registration, you can send an amount and receive back at your address. The captcha is meant to be that way and the email is for opening support tickets on the site, if we value our customers anonimity it doesn't mean that we never contact our players. It isn't at all like anything, it gives you a sense of community and brings people together, a whole new experience.

And we do not have support for the color blind at the moment sorry  Wink
Dooglas is the man when it comes to testing gambling sites. It doesn't look good to write him off as color blind when he is just trying to give you advice. You would think knowing that someone who potentially would play your games is having trouble would make you want to change it so the max amount of customers can play.

I wasn't trying to be mean to Dooglas or make him feel uncomfortable, just addressing the issue with some humor. It did seem like he was "taking the piss" so to say.
vip
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
December 10, 2012, 04:26:26 PM
#43
Secret list! List! Not the transaction ID.

I swear it's like people keep repeating what others said instead of thinking for themselves.

This is troubling.  I'm not much of a gambler, and haven't ever played SatoshiDice, but someone bringing a casino to the Bitcoin community is really not doing their homework to not understand how SatoshiDice's hashing works and why knowing the secret list ahead of time isn't a problem if it's being hashed with the transaction ID.  The algorithm is too simple for someone willing to build a casino website to not understand, and the overconfident attitude is highly misplaced.  Sorry, but I must apply my stamp of disapproval to this one.

Just to make it clear, I have no interest in anything gambling-related whatsoever.

I actually hoped you would swallow your pride there and admit that I was right for a second, especially considering you decided to delete your own post. Which further accused us of trying to scam.

I like you all guys regardless and appreciate the feedback  Wink

I'll give it to you as requested!

The post I deleted was based on the assumption that you didn't understand how hashing works (you admit this in the context of password security) and was an attempt to explain it.  The reason I deleted it was that I came to understand that your point might have been that the secret list would permit the business to defraud its shareholders, not so much the business to defraud bettors.  I don't know that to be certain, but felt it was prudent to give you the benefit of the doubt.

I don't think I ever accused you of trying to scam - rather, my contention was that you didn't appear to have the requisite security knowledge to run a bitcoin casino and handle other people's money, and appeared to be taking an attitude not of trying to learn it, but boldly dismissing it with overconfidence.

When you are confronted with someone engaging you on a security-related topic,

Quote
I swear it's like people keep repeating what others said instead of thinking for themselves.

isn't an appropriate response.  The correct response is to either alleviate the concern, or address it on its own merits, without reference to people "not thinking for themselves".  In this case, the correct response would be "Including the transaction ID in the hash protects the bettors but doesn't solve the problem that leaves the shareholders vulnerable to insider fraud."

It's really not a matter of pride for me: I'll be proud of you if you bring a stable secure trusted casino to the Bitcoin world with a willingness to learn whatever you need to do to build the best business you can.

legendary
Activity: 2940
Merit: 1333
December 10, 2012, 03:45:00 PM
#42
And we do not have support for the color blind at the moment sorry  Wink
Dooglas is the man when it comes to testing gambling sites. It doesn't look good to write him off as color blind when he is just trying to give you advice. You would think knowing that someone who potentially would play your games is having trouble would make you want to change it so the max amount of customers can play.

It seems that there's a definite divide in the way that gambling site operators respond to my style of commenting.  Some are very appreciative of and responsive to my comments, and some take it entirely the wrong way.

I tend to give up pretty quickly on the sites where I get a negative reaction since it doesn't bode well for the future should I actually have an issue with a payout or whatever.  I personally won't ever be playing at casinobit given what I've seen of how they have interacted with potential customers on this thread.
donator
Activity: 3228
Merit: 1226
★Bitvest.io★ Play Plinko or Invest!
December 10, 2012, 03:18:54 PM
#41
Dooglas is the man when it comes to testing gambling sites. It doesn't look good to write him off as color blind when he is just trying to give you advice. You would think knowing that someone who potentially would play your games is having trouble would make you want to change it so the max amount of customers can play.

+1

I agree, the font on the green boxes, look very ugly. I can see it fine, I have very good vision.
But you should change it to something that is a lot more appealing to customers.
full member
Activity: 210
Merit: 101
December 10, 2012, 02:43:27 PM
#40
I'm also a little confused.  Why do I need to register and provide an email address if you're

Quote
the number 1 online anonymous casino site and online poker in the world.

?

The game that appeared when I finally got logged in seems to be a little like satoshidice.  I send coins to an address to bet, and you return winnings to the address I sent from.  Why even ask for registration if that's the game?

Finally, is this how the game is meant to look?



It looks like there might be some small text in those green boxes.  If you chose a colour that contrasted with the green I might be able to tell for sure.

The game on the main page doesn't require registration, you can send an amount and receive back at your address. The captcha is meant to be that way and the email is for opening support tickets on the site, if we value our customers anonimity it doesn't mean that we never contact our players. It isn't at all like anything, it gives you a sense of community and brings people together, a whole new experience.

And we do not have support for the color blind at the moment sorry  Wink
Dooglas is the man when it comes to testing gambling sites. It doesn't look good to write him off as color blind when he is just trying to give you advice. You would think knowing that someone who potentially would play your games is having trouble would make you want to change it so the max amount of customers can play.
legendary
Activity: 1582
Merit: 1002
December 10, 2012, 02:19:41 PM
#39
No house edge? Really!!? With 2 zeroes on the roulette!!?

sr. member
Activity: 364
Merit: 250
December 10, 2012, 09:52:15 AM
#38
just a note, if you're veryfying the password length, I can assume that you're storing the passwords in the database as plain text.

Man, it's a high security flaw, passwords in a database MUST be hashed and salted. I'malmost sure you don't know what I'm talking about, so take a time to learn more about it, and you should start reading here:

http://blog.moertel.com/articles/2006/12/15/never-store-passwords-in-a-database

and also see this site:

http://plaintextoffenders.com/about/

Are you kidding me?

Ok, I admit that I was kinda stupid in my last post, I just learned about hash passwords, but this doesn't mean that no one else knows about it. So, my questions is, if you're hashing the passwords why are you concerned about the password length?

and here I couldn't run it in firefox also, only in chrome.



In case someone would bruteforce the hash it wouldn't be too fast to find the password and the maximum password length is just there so people won't forget their 35 character passwords. Of course it is also salted so even if someone would get access to the database it would still be impossible for him to access the accounts, the bitcoins themselves are stored at a remote server which accesses the website anonymously.

Site keeps crashing. No other site does this, so it isn't my side.
Will this be fixed? Or it doesn't work in Firefox?

People are trying to hack it, there have been a lot of attempts so far, I personally encourage every attempt since it would be better to get hacked early on than later.

since they know the secret list ahead of time.
You are wrong again! It is impossible for the SatoshiDice to know a Transaction ID ahead of time.

Secret list! List! Not the transaction ID.

I swear it's like people keep repeating what others said instead of thinking for themselves.

This is troubling.  I'm not much of a gambler, and haven't ever played SatoshiDice, but someone bringing a casino to the Bitcoin community is really not doing their homework to not understand how SatoshiDice's hashing works and why knowing the secret list ahead of time isn't a problem if it's being hashed with the transaction ID.  The algorithm is too simple for someone willing to build a casino website to not understand, and the overconfident attitude is highly misplaced.  Sorry, but I must apply my stamp of disapproval to this one.

Just to make it clear, I have no interest in anything gambling-related whatsoever.

I actually hoped you would swallow your pride there and admit that I was right for a second, especially considering you decided to delete your own post. Which further accused us of trying to scam.

I like you all guys regardless and appreciate the feedback  Wink
sr. member
Activity: 293
Merit: 250
December 10, 2012, 09:05:39 AM
#37
just a note, if you're veryfying the password length, I can assume that you're storing the passwords in the database as plain text.

Man, it's a high security flaw, passwords in a database MUST be hashed and salted. I'malmost sure you don't know what I'm talking about, so take a time to learn more about it, and you should start reading here:

http://blog.moertel.com/articles/2006/12/15/never-store-passwords-in-a-database

and also see this site:

http://plaintextoffenders.com/about/

Are you kidding me?

Ok, I admit that I was kinda stupid in my last post, I just learned about hash passwords, but this doesn't mean that no one else knows about it. So, my questions is, if you're hashing the passwords why are you concerned about the password length?

and here I couldn't run it in firefox also, only in chrome.

donator
Activity: 3228
Merit: 1226
★Bitvest.io★ Play Plinko or Invest!
December 10, 2012, 08:50:13 AM
#36
Site keeps crashing. No other site does this, so it isn't my side.
Will this be fixed? Or it doesn't work in Firefox?
sr. member
Activity: 364
Merit: 250
December 10, 2012, 06:08:40 AM
#35
The amount of flame/fail/anger/promoting/smart-asses in this thread is too damn high!



Couldn't have said it better myself and yes there will be zero house edge blackjack and roulette, problem is we are losing money so far, hope that will change when poker/bitcoin exchange will be implemented.
legendary
Activity: 952
Merit: 1000
December 10, 2012, 04:35:57 AM
#34
The amount of flame/fail/anger/promoting/smart-asses in this thread is too damn high!
donator
Activity: 3228
Merit: 1226
★Bitvest.io★ Play Plinko or Invest!
December 10, 2012, 03:35:15 AM
#33
If this is truly 100% pay out, will there be zero sum roulette tables?
And zero house edge black jack games?



legendary
Activity: 2940
Merit: 1333
December 09, 2012, 04:59:15 PM
#32
This is troubling.  I'm not much of a gambler, and haven't ever played SatoshiDice, but someone bringing a casino to the Bitcoin community is really not doing their homework to not understand how SatoshiDice's hashing works and why knowing the secret list ahead of time isn't a problem if it's being hashed with the transaction ID.

It is possible for them to rob their investors by sending selective transactions to themselves since they know the secret list ahead of time.

This part is actually true.  It is possible for SatoshiDice to deliberately make bets against themselves that they know in advance will win.  This will reduce their profits, and result in lower payouts to their investors.

It's not possible for SatoshiDice to cheat against their players though (except by using the wrong day's secret, or just not paying out at all).
sr. member
Activity: 364
Merit: 250
December 09, 2012, 03:58:58 PM
#31
since they know the secret list ahead of time.
You are wrong again! It is impossible for the SatoshiDice to know a Transaction ID ahead of time.

Secret list! List! Not the transaction ID.

I swear it's like people keep repeating what others said instead of thinking for themselves.

This is troubling.  I'm not much of a gambler, and haven't ever played SatoshiDice, but someone bringing a casino to the Bitcoin community is really not doing their homework to not understand how SatoshiDice's hashing works and why knowing the secret list ahead of time isn't a problem if it's being hashed with the transaction ID.  The algorithm is too simple for someone willing to build a casino website to not understand, and the overconfident attitude is highly misplaced.  Sorry, but I must apply my stamp of disapproval to this one.

Just to make it clear, I have no interest in anything gambling-related whatsoever.

Just to make things clear, I am just an administrator, not the owner or the support team or the programmers. I think you tend to get them mixed. If knowing the list ahead of time wouldn't be a problem it would be public wouldn't it?
vip
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
December 09, 2012, 03:14:33 PM
#30
since they know the secret list ahead of time.
You are wrong again! It is impossible for the SatoshiDice to know a Transaction ID ahead of time.

Secret list! List! Not the transaction ID.

I swear it's like people keep repeating what others said instead of thinking for themselves.

This is troubling.  I'm not much of a gambler, and haven't ever played SatoshiDice, but someone bringing a casino to the Bitcoin community is really not doing their homework to not understand how SatoshiDice's hashing works and why knowing the secret list ahead of time isn't a problem if it's being hashed with the transaction ID.  The algorithm is too simple for someone willing to build a casino website to not understand, and the overconfident attitude is highly misplaced.  Sorry, but I must apply my stamp of disapproval to this one.

Just to make it clear, I have no interest in anything gambling-related whatsoever.
sr. member
Activity: 364
Merit: 250
December 09, 2012, 03:13:30 PM
#29
Lol at all the people bashing this so hard.  Take the stick out of your ass and move on.

Competitors trying to bash us I guess.

No house edge, 100% payout!

Nobody asked the real question, which I'm sure is the basis for all the skepticism. If your payout is 100%, how do you make money? How do you even pay the transaction fees?

Currently we do not make money, the transactions fees are paid on behalf of the users. (Thus no house fees because the transactions fees are paid to the house)

In the near future we will have a third party operating as an exchange, this is where the profits will come from.
sr. member
Activity: 457
Merit: 250
Look for the bear necessities!!
December 09, 2012, 03:09:18 PM
#28
Lol at all the people bashing this so hard.  Take the stick out of your ass and move on.
sr. member
Activity: 364
Merit: 250
December 09, 2012, 02:56:58 PM
#27
just a note, if you're veryfying the password length, I can assume that you're storing the passwords in the database as plain text.

Man, it's a high security flaw, passwords in a database MUST be hashed and salted. I'malmost sure you don't know what I'm talking about, so take a time to learn more about it, and you should start reading here:

http://blog.moertel.com/articles/2006/12/15/never-store-passwords-in-a-database

and also see this site:

http://plaintextoffenders.com/about/

Are you kidding me?
sr. member
Activity: 293
Merit: 250
December 09, 2012, 02:49:54 PM
#26
just a note, if you're veryfying the password length, I can assume that you're storing the passwords in the database as plain text.

Man, it's a high security flaw, passwords in a database MUST be hashed and salted. I'malmost sure you don't know what I'm talking about, so take a time to learn more about it, and you should start reading here:

http://blog.moertel.com/articles/2006/12/15/never-store-passwords-in-a-database

and also see this site:

http://plaintextoffenders.com/about/
Pages:
Jump to: