Topic: Just-Dice.com : now with added CLAMs : Play or Invest - page 211. (Read 454769 times)

This is where dooglus runs away witht he coins

I don't want to turn this thread too off topic, but I'll just say that all online services require trust, including Blockchain.info. Have you inspected every single line of code in the minified JS files - not the github, but what is served to you (could be individually, as Blockchain knows your wallet balance)? Every single time you signed in? It's very easy for blockchain.info (if they wanted) to take your coins - or someone else who worked on the code. I ported Blockchain.info to the Chrome Extension, and I know piuk did not diff the files I gave him. Very few people would have checked the source -- since it was the official extension on the chrome web store.


You're also trusting all the dependencies. Let's take cryptocat. I can't find the commit/issue right now, but their JS crypto library had a huge bug with entropy for key generation (or something similar - just going off my head). It was detected months later. Cryptocat's security was effectively null because of that bug -- and this is a project with paid bounties.

The actual vulnerability was tiny - it was an off by one error repeated in a loop. In a totally unrelated file, Blockchain.info could push their own address to a "send to" array/buffer, and for the UI have this off by one error. Looks correct, sign, and when Blockchain.info gives the TX back to you, they'll hide it. You're not going to find it when digging through thousands of lines of code.

You are also trusting Blockchain supply you with correct information. For example, you see a TX? On your wallet and Blockchain.info? As they are the first place everyone checks, how do you know if it never existed and was made up?

If you use the API, they have your private keys, period. Ultimately, block chain isn't secure. We don't pretend we can't take your coins because every online service - including Blockchain and Rush wallet can. If they do serve you a "send all coins to .info", sure they'll get caught but they can hide the tx for hours as they won't display it on the site while people work out why they can't spend their coins on #bitcoin-dev

I trust piuk and I don't think he will do any of that. But Blockchain.info's client sided features mean about nothing because they are able to raid at least a significant majority of coins, while there are very tangible benefits to our off chain network.

This is an alternative deposit (and soon withdrawal) method, not a replacement.  It's a solution for people who don't want to wait for their deposit to confirm.

by the way, very interesting what you did with this topic: https://bitcointalksearch.org/topic/--164772

As long as JD keeps accepting normal Bitcoin payments.
Otherwise ded to me.

couldn't find any topic related to this service, so, I'm questioning here:


I really liked the offchain idea and the mixing free service. But this mean that with an inputs.io wallet I won't be able to use services like satoshi dice right?

Blockchain.info wallets do all the bitcoin processing client side, this mean I'm in control of my private key. But looks like all the bitcoin processing is done server side with your wallet. So, what is worrying me is that I didn't find out how you will make money with this service.

about the mixing, do you keep logs of the mixing?

in the FAQ: "Passwords hashed with SHA256 before sent to the server - we never know your password". I don't get how this is secure as you don't need my password to access my account.

Inputs.io

Inputs.io is now out of beta - get an account and deposit to Just-Dice instantly!

Quick summary of the advantages:
* Off blockchain transactions. No need to wait for confirms. No fees or double spend risk.
* Automatic free mixing - why use a wallet that intentionally destroys your anonymity and sells it back to you for 0.5%?
* Connectivity - exchange rates, email notifications, easy to integrate API
* Advanced features - sign and verify messages, helper functions like push tx, generate vouchers
* Security - keypad PIN, two factor auth, client side password hashing, login auth, anti phishing bar, and a secure backend

https://inputs.io

Let's review some math. Given that luck is not a factor (eg. every 50% bet wins once and looses once).

Stats:

The wagered/invested is: 2.738948918075799 this is the amount of invested "cycles".

Each time all the invested money goes through 1 cycle, 1% of your investment is earned. This means that if you were in it since the beginning (so for 2.73 cycles) you would have earned the 2.73% commission.

Hopefully when this is all over, doog will release one big .csv with all the amount's invested, profit, and luck over time so we can estimate the APR on an investment.

Each run of 3 is about a 1 in a 1000 chance.

The site's back up.  I thought I had fixed the issue with the server freezing when I go to bed, but apparently not.

Meaning, it would be better to make a bot? (I would probably get bankrupt, though, 98BTC sounds like paradise, even for a sucker like myself.)

Down for me too.

 Is just-dice out only for me or can noone get in?

 I have won %10 chance games 3 times in a row 2 different times I think its very unlikely to happen , tough I am not sure how rare

Well, minus the times you lost.
I also won it once after about 140k bets (140.000 satoshis).

I won 0.0099 BTC

Doog, I think you might make quite a fortune off of me. Still trying to win the .0001% bet even though it's no hope.

By the way, how much has anybody won from it, if they tried it?

Dooglus is spending time chatting here atm ;P

Shameless advertisement

I need to stop throwing away my precious few bitcoins on this site! :p

Not that I've noticed.  I don't check IRC very often though.

Congratulations to passing 10 000 000 bets in around 12 days, very nice site you created dooglus.

SatoshiDICE as a comparison, was proud of having achieved 1 000 000 bets in there first 4 months....
"•   The site achieved 1,000,000 bets just four months after launch"