Yes there is, Casino that dont show hashes beforehand could be manipulating the result. That is why it is important to show hashes beforehand but most people are not aware of this
Another thing will be skipping nonce. Basically with each bet of the hash the nonce increase, if a casino is skipping nonce than the site could alter the result of the game
i.e player betting at 49.5 % chance at 1 % edge dice sites
nonce 3 - rolls 67.23 ---- Player bet low -> lose
nonce 2 - rolls 47.61 ---- Player bet low -> win >>> the house skip this nonce and goes to nonce 3
nonce 1 - rolls 90.34 ---- Player bet low -> lose
nonce 0 - rolls 97.11 ---- Player bet low -> lose
The house could be skipping nonce and goes straight to nonce 3 making them could alter the result of the rolls
Im a bit confused, whats the nonce exactly? This?
In security engineering, a nonce is an arbitrary number used only once in a cryptographic communication.
Like asigning a random number to each roll?
Not a random number, but the nonce should go up by 1 after each bet, until the player decides to change his server seed and client seed.
The bet result will be generated with something like sha(server seed:client seed:nonce). This way, the player can keep using the same seeds for making as many bets as he wants. The house could skip nonce to cheat the players, but it will be noticeable if the player verify his bets, just like in the dicebitcoin incident.
I see now. Then its not possible for them to cheat doing that because you would notice it fast enough right? But you have to verify each roll, you cant verify all your rolls at once right? Thats why you need to use the nonce for each roll verified?
Yes exactly. There are verifies that given some input will calculate all your rolls.
You can find the verifiers here for some sites.