Pages:
Author

Topic: ➫ ➬ ➫ ➬ LUCKYB.IT ★ +2M bets ★ +100,000 BTC wagered - page 36. (Read 414931 times)

legendary
Activity: 1078
Merit: 1000
Nice hit Congratulations to 1EL3. you are really lucky a couple of hours to get profit 33 BTC Cool

33 bitcoin profit?

God damn that is a very nice day gambling. I wish I could win that much. Well done 1EL3.

Seems like nowadays not only red one can be profitable, other colours is on their way to show us what it can do for us Grin. If I not mistaken there are someone who win a lot too from yellow
legendary
Activity: 3556
Merit: 9709
#1 VIP Crypto Casino
Nice hit Congratulations to 1EL3. you are really lucky a couple of hours to get profit 33 BTC Cool

33 bitcoin profit?

God damn that is a very nice day gambling. I wish I could win that much. Well done 1EL3.
legendary
Activity: 3220
Merit: 3009
A MITM attack against LuckyBit could - at worst - replace the game addresses with malicious ones.

This is a sufficient reason to put HTTPS. The attacker has a financial incentive to repllace those addresses.

There has never been a report of MITM attacks against LuckyBit.

Until it happens. But why wait until an incident happens if you already can fix the issue?

SSL implementation is not a simple process. Getting a signed certificate, implementing security across the site and filtering for non-essential services such as the LuckyBit Community Hub are not a quick-switch option. These things take time and money that aren't justified by a "potential" threat that hasn't been realized and can be easily avoided by customers. Most of our players don't even depend on the site to provide the addresses; the information is available elsewhere and the majority of wallets also provide address-book services that would make this attack ineffective.

tl;dr: not worth the effort for an attacker, not worth the effort for us

Man in the middle attack isn't a problem for luckybit because:

1.- MITM is a LAN attack. That mean the only users who will be affected are those who are on the local area network of the attacker. Users access point is users responsability, if you are on a not secure network better don't use bitcoin, because if you are under MITM attack, the hacker will not change the betting addys, he will get your blockchain.info wallet access information.

2.- MITM can be detected by users with tools like wireshark. But is responsability of the user to verify if the network is secure.

3.- MITM have a tool called sslstrip to bypass the SSL connection, so, change the site to SSL will fix nothing about the attack.

Make a man in the middle to change luckybit addys, is one of the worst things you can do with this attack. Because if the users don't see the bets rolling they will ask to support what happen?, then we will ask for the TX ID, and in that moment we will see the fake addy. How much the hacker get? 0.005? 0.01?... not really a big lost. So, that attack is just a waste of time if some one is thinking about use it that way.

I want to make emphasis on the point of; This has never happened to luckybit and isn't something to worry about.
legendary
Activity: 1008
Merit: 1001
Out of crypto entirely and don't miss it
A MITM attack against LuckyBit could - at worst - replace the game addresses with malicious ones.

This is a sufficient reason to put HTTPS. The attacker has a financial incentive to repllace those addresses.

There has never been a report of MITM attacks against LuckyBit.

Until it happens. But why wait until an incident happens if you already can fix the issue?

SSL implementation is not a simple process. Getting a signed certificate, implementing security across the site and filtering for non-essential services such as the LuckyBit Community Hub are not a quick-switch option. These things take time and money that aren't justified by a "potential" threat that hasn't been realized and can be easily avoided by customers. Most of our players don't even depend on the site to provide the addresses; the information is available elsewhere and the majority of wallets also provide address-book services that would make this attack ineffective.

tl;dr: not worth the effort for an attacker, not worth the effort for us
legendary
Activity: 1960
Merit: 1026
Nice hit Congratulations to 1EL3. you are really lucky a couple of hours to get profit 33 BTC Cool
BRE
legendary
Activity: 1218
Merit: 1014
Lucky.lat | Marketing Solutions & Implementations


Congratulations To 1EL3


Congratulations To HODOR


Congratulations To 1D4Y
sr. member
Activity: 252
Merit: 250
A MITM attack against LuckyBit could - at worst - replace the game addresses with malicious ones.

This is a sufficient reason to put HTTPS. The attacker has a financial incentive to repllace those addresses.

There has never been a report of MITM attacks against LuckyBit.

Until it happens. But why wait until an incident happens if you already can fix the issue?
newbie
Activity: 44
Merit: 0
Excuse me, but websites like this MUST work properly with HTTPS (and enabled by default). It's unacceptable the use of HTTP in this type of thing, due to the risk of MITM attacks.

Unfortunately, trying to use it with HTTPS (inserting 'https://' before the domain name) just redirects to the CloudFlare page with the 522 error.

LuckyBit doesn't use HTTPS because it doesn't need it. LuckyBit does not hold user funds for any significant time and all plays are conducted "on-chain", i.e. they occur in response to blockchain events, not website events. A MITM attack against LuckyBit could - at worst - replace the game addresses with malicious ones. If you are unsure about where you are sending your funds, simply double-check on the blockchain first; the game addresses are public information that is easily verified independently. One could play LuckyBit without even opening the website.

There has never been a report of MITM attacks against LuckyBit.

I've actually have played many times with out the site...  .... and now sarcastic side... how did luckyb.it make it so long with no issues if y all miss Something that ob vious... lol I ahave faith administration and stinglinstration are on top of things
legendary
Activity: 1008
Merit: 1001
Out of crypto entirely and don't miss it
Excuse me, but websites like this MUST work properly with HTTPS (and enabled by default). It's unacceptable the use of HTTP in this type of thing, due to the risk of MITM attacks.

Unfortunately, trying to use it with HTTPS (inserting 'https://' before the domain name) just redirects to the CloudFlare page with the 522 error.

LuckyBit doesn't use HTTPS because it doesn't need it. LuckyBit does not hold user funds for any significant time and all plays are conducted "on-chain", i.e. they occur in response to blockchain events, not website events. A MITM attack against LuckyBit could - at worst - replace the game addresses with malicious ones. If you are unsure about where you are sending your funds, simply double-check on the blockchain first; the game addresses are public information that is easily verified independently. One could play LuckyBit without even opening the website.

There has never been a report of MITM attacks against LuckyBit.
legendary
Activity: 1400
Merit: 1009
Woah 24x hit twice!! congrats HODOR. good luck hope you hit x999. Wink
legendary
Activity: 2198
Merit: 1032

Seems like he hit in one transaction look at the timing it means he hitted with same transaction..
Congratulations to HODOR
BRE
legendary
Activity: 1218
Merit: 1014
Lucky.lat | Marketing Solutions & Implementations
sr. member
Activity: 252
Merit: 250
Excuse me, but websites like this MUST work properly with HTTPS (and enabled by default). It's unacceptable the use of HTTP in this type of thing, due to the risk of MITM attacks.

Unfortunately, trying to use it with HTTPS (inserting 'https://' before the domain name) just redirects to the CloudFlare page with the 522 error.
legendary
Activity: 910
Merit: 1000
hmmm, wonder is that biggest lotto ever had sir?

AFAIK, the biggest ever chat lotto on luckybit is 1.5 BTC https://blockchain.info/tx/f63d6415327db9ce0407cf4bc4b6e6bfd307a339079360b79051a3dbf9ad0ec5. It happened during a "legendary happy hour" in March.
legendary
Activity: 1960
Merit: 1026
Nice flux Congratulations, been a while I have not seen you play and it seems a good start on the line promo Smiley
I hope you can get better at least X130 or x2016 Smiley
BRE
legendary
Activity: 1218
Merit: 1014
Lucky.lat | Marketing Solutions & Implementations
hero member
Activity: 672
Merit: 503


 Cool Cool Cool Cool Cool Cool Cool Cool Cool

hmmm, wonder is that biggest lotto ever had sir?

nope, AFAIK its just a turbo lotto. some users in the past got around .2BTC in the past and thats not a happy hour that time. IIRC it was a trex or godzilla lotto
legendary
Activity: 2366
Merit: 1130


 Cool Cool Cool Cool Cool Cool Cool Cool Cool

hmmm, wonder is that biggest lotto ever had sir?
legendary
Activity: 1624
Merit: 1007

That is a really nice promo you guys are doing again! Ill see if i can come up with something creative (i doubt it is good enough to win but ill try lol). Is there something special in the works for Christmas ? Or will the players provide the gifts for the admin this year Tongue ?
BRE
legendary
Activity: 1218
Merit: 1014
Lucky.lat | Marketing Solutions & Implementations
Pages:
Jump to: