SatoshiDICE.com - The World's Most Popular Bitcoin Game - page 109.

erwin45hacked

legendary

Activity: 1064

Merit: 1000

Quote from: ErikvanBreen on December 11, 2015, 01:47:04 PM

Quote from: erwin45hacked on December 11, 2015, 12:42:57 PM

Quote from: ErikvanBreen on December 11, 2015, 12:31:11 PM

Bunch of thieves, I pm'd Erik Voorhees to see if he has the guts to tell the truth

Erik has no longer has any association with this site ever since he sold them. This site has been run by another party and rumours are that it has been sold to another party again so you wont get any answer even if you PM Erik for this case

He actually did reply, he told me the owners are honest and that he would contact them aswell about these matters.

So hopefully things get cleared up after all, as long as I hear nothing I will continue to warn the people on this forum on making deposits.

I do not have a good feeling about these matters, I do not believe all the persons having the same issues got compromised themselves somehow in the past few weeks.
Most of us propably have alot of valuable information/balances that they access on a daily or weekly basis and nothing is going wrong there from what I hear and personally see.

The fact that my Bitcoins disappeared the instant they got confirmed tells me it was an automated script of some sort, either done by the secrets being hacked/leaked from the company and withdraws initiated by API's or they simply took the balances themselves.

They need to do some series of test regarding this thing and it seems only some people that deposited huge to the site that was affected by this and not some dust amount of deposit. This could be all planned with using some bug / script to withdraw atleast X btc depositted to the site

tarantoga

member

Activity: 103

Merit: 10

Quote from: ErikvanBreen on December 11, 2015, 04:20:39 PM

Quote from: ?? on ??

Good idea!
However the API still allows withdrawals without a password. Just tried it.

https://session.satoshidice.com/userapi/useraddress/?secret=XXX
yields
{"nick":"Observer12345","depositaddress":"Set your password in the invest tab, then reload","queryTimeInSeconds":0.1395}

A subsequent call to https://session.satoshidice.com/userapi/withdraw
transfers without a password.

So an attacker who got the URL can still steal money.

Nice test, so nothing really is solved so far after all... hopefully we see this fixed as soon as possible aswell

It does work. Disregard it. I deleted my post because of a misunderstanding. It was wrong.

You can withdraw without having a password set but deposits now require a password. And then withdrawals do too.

The system works as intended.

MRKLYE

legendary

Activity: 1358

Merit: 1003

Designer - Developer

From reading this thread it certainly looks like satoshidice is going to hell. Reports of missing balances and people not being able to withdraw is a tell-tale sign that something bad is going to happen in the near future with this site likely. I know I used it for about all of 5 minutes before I realized that it was pretty terrible and got the hell out of there. Certainly feels like a scammers den or something.

Hopefully you guys get your issues sorted out above. It certainly looks like customer service or the owner doesn't give a shit that his site is in a state of disarray.

sdiceuser

newbie

Activity: 1

Merit: 0

I have been trying to message support for over a week. I have been emailing daily and have started trying to contact via Bitmessage. This is my last resort.I sent a PM.

I saved the URL to my page but recently formatted and lost it. Can you please provide me the URL. It has a password so if I'm not the rightful owner I still won't be able to access the Bitcoin on it.

I put around 1.45~ into investment and took it out. I sent 0.05 to one address and send 0.2 something to another address.

This is my account I just want my remaining ~1.2 BTC back please!

mightyghz

full member

Activity: 168

Merit: 100

Quote from: mightyghz on December 10, 2015, 09:38:00 AM

Account Issue 1LnXoghDAmw3XZDJeUDRHZ5Dx69bisq5fv wrong balance

fix this asap pls

jimwin

newbie

Activity: 33

Merit: 0

Quote from: SDice_CTO on December 11, 2015, 04:02:45 PM

The site will no longer display a deposit address unless the account has a password set. Password protection blocks any withdrawals even if the secret URL is compromised.

Hi,sir I hope to get some satoshidice official support,My situation is this，I went to satoshidice to play 1.2btc .I played six times, winning 0.8btc, each bet 0.02btc，At that time show1.9btc。I had to stop the，About 1 minute，I found the numbers on the screen，balance 0.8btc，
This kind of thing has never happened before，Then balance 0.025btc，I don't know what happened，Hackers can attack https?or other?
My mailbox [email protected],I hope satoshidice to contact，I provide information

Gamer09986，User ID140967，2015/12/8

ErikvanBreen

hero member

Activity: 693

Merit: 500

Quote from: ?? on ??

Quote from: SDice_CTO on December 11, 2015, 04:02:45 PM

The site will no longer display a deposit address unless the account has a password set. Password protection blocks any withdrawals even if the secret URL is compromised.

Good idea!
However the API still allows withdrawals without a password. Just tried it.

https://session.satoshidice.com/userapi/useraddress/?secret=XXX
yields
{"nick":"Observer12345","depositaddress":"Set your password in the invest tab, then reload","queryTimeInSeconds":0.1395}

A subsequent call to https://session.satoshidice.com/userapi/withdraw
transfers without a password.

So an attacker who got the URL can still steal money.

Nice test, so nothing really is solved so far after all... hopefully we see this fixed as soon as possible aswell

ErikvanBreen

hero member

Activity: 693

Merit: 500

Quote from: SDice_CTO on December 11, 2015, 04:02:45 PM

The site will no longer display a deposit address unless the account has a password set. Password protection blocks any withdrawals even if the secret URL is compromised.

That is a great step in the right direction, any update on how it was possible that alot of people's balance got compromised and stolen in the past few days?

Perhaps there are right intentions after all, hopefully we hear what actually happend with all these accounts soon...

SDice_CTO

full member

Activity: 129

Merit: 100

Satoshi Dice Support

The site will no longer display a deposit address unless the account has a password set. Password protection blocks any withdrawals even if the secret URL is compromised.

ErikvanBreen

hero member

Activity: 693

Merit: 500

Beware before depositing: Many people are having the issue of their balance being stolen the instant it is confirmed

Jwalker.

newbie

Activity: 18

Merit: 0

Hi, I'm having a problem withdrawing from my Satoshi Dice wallet...I keep trying to send .4BTC from my Satoshi wallet and the transaction is not going through!

liesliesandbitcoin1

newbie

Activity: 7

Merit: 0

Not being any sort of crypto genius whilst I was waiting for the 2btc to go into my account for far longer than norma I figured maybe it needed a 'shove' of sorts and deposited 0.01 btc which funnily enough has just shown up in my account. I've made numerous deposits so I don't think I've made a human error. Been a great site apart from whatever the hell has happened in the past hour. Withdrew 50btc from the site without a problem 36 or so hours ago.

liesliesandbitcoin1

newbie

Activity: 7

Merit: 0

Wish I'd seen this earlier. I play satoshi slot quite a bit under the username 'downbybtc' and I just deposited 2btc only for them to never show up also.

BLOCKCHAIN TRANS ID. 3990c0294b6b536a441bd7782dcaebc920ff574800bd7c71cb54afe38d5e58a0

MaxTax

sr. member

Activity: 322

Merit: 250

I've been playing every now and then on their site.

Now that I'm reading this I might hold off for now until everything is resolved.

Not fun seeing when someone else has issues.

ErikvanBreen

hero member

Activity: 693

Merit: 500

Quote from: erwin45hacked on December 11, 2015, 12:42:57 PM

Quote from: ErikvanBreen on December 11, 2015, 12:31:11 PM

Bunch of thieves, I pm'd Erik Voorhees to see if he has the guts to tell the truth

Erik has no longer has any association with this site ever since he sold them. This site has been run by another party and rumours are that it has been sold to another party again so you wont get any answer even if you PM Erik for this case

He actually did reply, he told me the owners are honest and that he would contact them aswell about these matters.

So hopefully things get cleared up after all, as long as I hear nothing I will continue to warn the people on this forum on making deposits.

I do not have a good feeling about these matters, I do not believe all the persons having the same issues got compromised themselves somehow in the past few weeks.
Most of us propably have alot of valuable information/balances that they access on a daily or weekly basis and nothing is going wrong there from what I hear and personally see.

The fact that my Bitcoins disappeared the instant they got confirmed tells me it was an automated script of some sort, either done by the secrets being hacked/leaked from the company and withdraws initiated by API's or they simply took the balances themselves.

tarantoga

member

Activity: 103

Merit: 10

I've been playing for over a year and never had any BTC stolen.
There were quite a few bugs over time, but ultimately none led to a loss.

However I do believe that the secret in the URL is an unnecessary risk. Some users will bookmark the URL and synchronize their browser with 3rd party services. That would affect the history too.

As the admin already hinted at, an account system would help, maybe even with 2-factor authentication.

Warning: A phisher purporting to work with SatoshiDice is currently sending scam PMs on this forum. I would not be surprised if this is competitors playing foul.

I for one will continue to play on SatoshiDice, keeping my balance at a minimum and transferring any larger gains out.
That practice is advisable for all Bitcoin services.

I'd also never use the web with Adobe Flash installed. There are almost always active exploits for Flash, granting attackers access to your browser simply by visiting the wrong websites.
https://www.cvedetails.com/vulnerability-list/vendor_id-53/product_id-6761/Adobe-Flash-Player.html
Never use Flash on a computer that stores valuable information such as Bitcoins.

erwin45hacked

legendary

Activity: 1064

Merit: 1000

Quote from: ErikvanBreen on December 11, 2015, 12:31:11 PM

Bunch of thieves, I pm'd Erik Voorhees to see if he has the guts to tell the truth

Erik has no longer has any association with this site ever since he sold them. This site has been run by another party and rumours are that it has been sold to another party again so you wont get any answer even if you PM Erik for this case

ErikvanBreen

hero member

Activity: 693

Merit: 500

Don't trust these scammers, please show the IP logs since it will only show it was initiated by someone else...

Bunch of thieves, I pm'd Erik Voorhees to see if he has the guts to tell the truth instead of you morons posting nothing but useless information and pointing at people.

I did not initiate the withdrawel and I am certain my computer or account was not compromised on my side, so what have you done with my Bitcoin deposit?

coinspiracy

member

Activity: 94

Merit: 10

Quote from: erwin45hacked on December 11, 2015, 11:42:36 AM

Quote from: SDice_CTO on December 11, 2015, 11:37:47 AM

Quote from: erwin45hacked on December 11, 2015, 11:13:30 AM

Quote from: SDice_CTO on December 11, 2015, 10:57:14 AM

We're NOT withdrawing people's balances.

With so many player that have the same problem it seems there are something going on with your system since you have claimed that it is not you guys that are interfering with balances. You should do cross references check with all those withdrawal address as well as IP that withdraw from the account

Yes, we checked logs and how the API was accessed. It was all user initiated withdrawals. There's no reason to believe that our system was compromised. More than a couple of users made the mistake of revealing their account secret URL in the past so we're moving away from this and are pushing an update that forces people to password protect their accounts.

What kind of this odds that there are couple of people that have the same problem over and over again? If it was few people then it is fine but it seems reading this few pages back, people can now conclude that there is something going on at your site

The kind of odds of a coincidence or a coinspiracy.

erwin45hacked

legendary

Activity: 1064

Merit: 1000

Quote from: SDice_CTO on December 11, 2015, 11:37:47 AM

Quote from: erwin45hacked on December 11, 2015, 11:13:30 AM

Quote from: SDice_CTO on December 11, 2015, 10:57:14 AM

We're NOT withdrawing people's balances.

With so many player that have the same problem it seems there are something going on with your system since you have claimed that it is not you guys that are interfering with balances. You should do cross references check with all those withdrawal address as well as IP that withdraw from the account

Yes, we checked logs and how the API was accessed. It was all user initiated withdrawals. There's no reason to believe that our system was compromised. More than a couple of users made the mistake of revealing their account secret URL in the past so we're moving away from this and are pushing an update that forces people to password protect their accounts.

What kind of this odds that there are couple of people that have the same problem over and over again? If it was few people then it is fine but it seems reading this few pages back, people can now conclude that there is something going on at your site

Topic: SatoshiDICE.com - The World's Most Popular Bitcoin Game - page 109. (Read 495680 times)