Pages:
Author

Topic: MyriadCoins.com - Make the bet you want - page 4. (Read 7992 times)

legendary
Activity: 1246
Merit: 1016
Strength in numbers
Yes, smart. That's the way.

I was looking at the feasibility of brute-forcing your hash last night.

You use a 10 character base64 'junk', so even if I can predict the exact time, and guess the right preselected 0-9999 number, I still have to run an expected (64^10)/2 = half a million million million hashes to see if I'm right.

The entire bitcoin network currently hashes at 12 Thash/s.  So if I could convince them all to help me win your 4 BTC wallet balance, it would take us about 13 hours to brute force one of your hashes (given that I already guessed the time and preselected number correctly).

So I think it's pretty safe to increase the time the user has to make his guess a little.  Smiley

The bets will get bigger!

The balance is actually about 20BTC right now, with bets that win 20% being the max, but like you say the 4BTC is all that matters for brute forcing. If you ever lose a bet you'll be able to bet at least a little bit more the next time, unless someone has reserved some of the balance in between.

But, yeah, I just changed it to an hour. Should be good enough.
legendary
Activity: 2940
Merit: 1333
Yes, smart. That's the way.

I was looking at the feasibility of brute-forcing your hash last night.

You use a 10 character base64 'junk', so even if I can predict the exact time, and guess the right preselected 0-9999 number, I still have to run an expected (64^10)/2 = half a million million million hashes to see if I'm right.

The entire bitcoin network currently hashes at 12 Thash/s.  So if I could convince them all to help me win your 4 BTC wallet balance, it would take us about 13 hours to brute force one of your hashes (given that I already guessed the time and preselected number correctly).

So I think it's pretty safe to increase the time the user has to make his guess a little.  Smiley
legendary
Activity: 1246
Merit: 1016
Strength in numbers
I don't intend other wagers to be showing, I'll look into hashing the id. Simple hashing won't be enough, maybe the hash of the payment address or something. And if you visit a non existent id's page it should just take you to a new game.

Ah, I meant the hash that you already show.  The hash of the secret.  Or maybe a prefix of it if you want to keep the URL reasonably short.

So instead of visiting ?id=34, I visit ?hash=2490b823498e


Yes, smart. That's the way.
legendary
Activity: 2940
Merit: 1333
I don't intend other wagers to be showing, I'll look into hashing the id. Simple hashing won't be enough, maybe the hash of the payment address or something. And if you visit a non existent id's page it should just take you to a new game.

Ah, I meant the hash that you already show.  The hash of the secret.  Or maybe a prefix of it if you want to keep the URL reasonably short.

So instead of visiting ?id=34, I visit ?hash=2490b823498e

I changed "After you pay, click here to see if you won" to "Click here to refresh the status of this game." because that link is still useful after the result shows, it will tell you you've been paid eventually. Seems good?

Yup.  Nice work.  Smiley
legendary
Activity: 1246
Merit: 1016
Strength in numbers
legendary
Activity: 1246
Merit: 1016
Strength in numbers
How about an option to not have to specify an address for winnings, but instead have me check a box to agree that you'll return winnings to one of the addresses I pay from?

Right now no bitcoin magic is happening so that would be for version 2.0.

But even them I'm hesitant, I'd need that WARNING showing prominently and still people will mess up. The "Send back to yourself market" is pretty well served too.
legendary
Activity: 1246
Merit: 1016
Strength in numbers
Yes dooglus, I love it, don't stop.

Changed 'confirmations' to 'confirmation'. I dropped the payment address from the after game messages. Logo links now.

I don't intend other wagers to be showing, I'll look into hashing the id. Simple hashing won't be enough, maybe the hash of the payment address or something. And if you visit a non existent id's page it should just take you to a new game.

I changed "After you pay, click here to see if you won" to "Click here to refresh the status of this game." because that link is still useful after the result shows, it will tell you you've been paid eventually. Seems good?
legendary
Activity: 2940
Merit: 1333
I hope you're OK with all the criticism.  I like the game and the site, and complain only in the hope of helping you make it better.

That said:

Quote
Payment will be sent to [address] after 1 confirmations.

Confirmation should be singular.

Quote
You have a 49.50% chance of winning. In order to win, your guess must be within 2475 of our chosen number. Numbers do wrap around.

I'd like to see my guess in that line each time its shown.  The page which I refresh while waiting for the result doesn't show my guess at all until the result is known.  I'd like to see a range "our selection will need to be over 8012 or under 4120 for you to win" or some such.

Is it intentional that I can look through other people's bets?  http://myriadcoins.com/game.php?id=29 isn't mine.  Someone bet 0.40 to win 0.43, and lost, despite having a 92% chance of winning.  When they win, I see their wallet address too (like in http://myriadcoins.com/game.php?id=27).  Instead of a sequence number, you could use ?id= - then I'd only be able to look at bets I made myself.

If I pick a bad id number, I see NaN: http://myriadcoins.com/game.php?id=27122343 gives:

Quote
You have a NaN% chance of winning. In order to win, your guess must be within NaN of our chosen number

Quote
Thank you for sending 0.01BTC to 1FxeR2E8pBD2RdqCscjxLWJyhjZrSjigaB!

Would anyone ever care to see the deposit address again?  It's a throwaway address.  Maybe it's useful for matching up which bets correspond with which wallet entries, I don't know.

I'd like to be able to click on the logo at the top of any page to return to the front page.  Currently it doesn't do anything.
legendary
Activity: 2940
Merit: 1333
How about an option to not have to specify an address for winnings, but instead have me check a box to agree that you'll return winnings to one of the addresses I pay from?
legendary
Activity: 2940
Merit: 1333
Using a copy of the input element from your form also remembers my input.  Perhaps something in one of the javascript libraries you're using is turning it off.

Now this is interesting:

I reloaded your page, and now the wallet address box has some history in it.  But only the things that I typed into the form I made locally using your input element's HTML code.

So I think the problem lies with your submit button not updating the input element's history, and not with the input element itself.

So I've managed to get your page to remember my wallet address by doing the following:

1. make a file with this in:

Code:




2. visit the file in a web browser

3. type my wallet address in the box and hit return

4. that's all - now my wallet address is available in your page's element's history
sr. member
Activity: 328
Merit: 250
Guessed 7777 and won Smiley
legendary
Activity: 1246
Merit: 1016
Strength in numbers
Quote
Thank you for sending 0.20BTC to [address]! You have won 0.40BTC! Payment will be sent to [address] after 2 confirmations.

How about not waiting for confirmations, but using the output of the transaction I paid you with as an input of your payment to me.  Then you can do fast payouts like a little-known dice game does.

That might happen eventually, but I'm not sure what/how modifications need to be made to send 0 confirm inputs and to select coins. For now I dropped it to 1 confirm though.
legendary
Activity: 2940
Merit: 1333
Quote
Thank you for sending 0.20BTC to [address]! You have won 0.40BTC! Payment will be sent to [address] after 2 confirmations.

How about not waiting for confirmations, but using the output of the transaction I paid you with as an input of your payment to me.  Then you can do fast payouts like a little-known dice game does.
legendary
Activity: 2940
Merit: 1333
Right, I know what you mean. I thought browsers did it on their own (it seems they even do it cross sites sometimes right?) but I guess it needs to be enabled. Me or notme will straighten it out. :-)

I think maybe it just has to not be disabled...  The following remembers my input:

Code:




Using a copy of the input element from your form also remembers my input.  Perhaps something in one of the javascript libraries you're using is turning it off.
legendary
Activity: 2940
Merit: 1333
Quote
Thank you for sending 0.20BTC to [address]! You have won 0.40BTC! Payment will be sent to [address] after 2 confirmations.
Guess: 1260, Number: 1287, Distance: 27, Max Distance: 2475
sha256('Bx6hf13x752012-06-12 01:35:26 1287') = d6582cc734b8dc577681723a1b902536c8ff9ce36661653bd7ff2bcb0a14cd92
After you pay, click here to see if you won!

Note that it is still saying "After you pay, click here to see if you won!" even after it has told me that I won.
legendary
Activity: 1246
Merit: 1016
Strength in numbers
Dimes coming to you and the 3400 guesser!

Received.  Thanks.  Exactly covers my two losing bets.  Smiley

Let me see about the remembering.

I'm using Chromium 18.0.1025.151 (Developer Build 130497 Linux) Ubuntu 12.04 if it's important.

Usually input fields automatically keep a history of what I've typed into them, but the wallet address one doesn't.  The 'Subject:' box at the top of this page I'm using to compose the message, for instance, if I blank it out and type 'R', I get a big list of previous subject lines I replied to.

Right, I know what you mean. I thought browsers did it on their own (it seems they even do it cross sites sometimes right?) but I guess it needs to be enabled. Me or notme will straighten it out. :-)
legendary
Activity: 2940
Merit: 1333
Dimes coming to you and the 3400 guesser!

Received.  Thanks.  Exactly covers my two losing bets.  Smiley

Let me see about the remembering.

I'm using Chromium 18.0.1025.151 (Developer Build 130497 Linux) Ubuntu 12.04 if it's important.

Usually input fields automatically keep a history of what I've typed into them, but the wallet address one doesn't.  The 'Subject:' box at the top of this page I'm using to compose the message, for instance, if I blank it out and type 'R', I get a big list of previous subject lines I replied to.
legendary
Activity: 1246
Merit: 1016
Strength in numbers
I went to bet 40 BTC to win 42 BTC (then changed my mind before submitting).

"You have a 85.87% chance of winning. In order to win, your guess must be within 4294 of our chosen number."

If I guess 4294, then everything from 0000 to 8588 is within 4294 of my guess.  That's 8589 winning guesses out of 10k, or 85.89%.

You report 85.87%, which makes me think that you're not counting 0 and 8588 as being winning numbers.  That's going to piss somebody off one day...

Either that or the displayed percentage is just a little out.

Hmm, let me investigate.
legendary
Activity: 2940
Merit: 1333
I went to bet 40 BTC to win 42 BTC (then changed my mind before submitting).

"You have a 85.87% chance of winning. In order to win, your guess must be within 4294 of our chosen number."

If I guess 4294, then everything from 0000 to 8588 is within 4294 of my guess.  That's 8589 winning guesses out of 10k, or 85.89%.

You report 85.87%, which makes me think that you're not counting 0 and 8588 as being winning numbers.  That's going to piss somebody off one day...

Either that or the displayed percentage is just a little out.
legendary
Activity: 1246
Merit: 1016
Strength in numbers
It just told me: "Hash or timestamp has been tampered with.
To keep things fair, games are only valid for 2 minutes, please generate a new hash."

I didn't tamper with anything.

I did hang around longer than 10 minutes though, looking at the odds it offered me.

I'm guessing the 2 minute limit is to prevent me brute-forcing the hash to find out what the number is.  How about making the 'junk' an extra character or two longer, and having the games valid for an hour instead.  2 minutes arguably isn't long enough for a new user to find their wallet address, copy it into the form, get familiar with how the site works, decide what numbers to type into the boxes, etc.

And instead of making me click a link to "generate a new hash", how about just generating a new one right there and then.

Also, I keep having to re-type my wallet address.  The input field isn't remembering the one I used last time, like input fields usually remember things.  I keep having to go back to my wallet and copy/paste it each time.

Oh, and where's that dime you promised me?  Wink

Dimes coming to you and the 3400 guesser!

Yeah, I will increase it, I think 15 min for now. I can't just make a new hash silently since that would defeat the promise, I think there has to be notification/action.

Let me see about the remembering.


Pages:
Jump to: