You are right! It's my fault, it's definitely SHA256 of the hex representation of the server secret. SHA512 would be an overkill. My mistake.
I have tipped your YD account 0.01 BTC. Thanks for reading through the FAQ and having a critical look at YOLOdice!
I know you might see it as a conflict of interests, but I highly encourage you to keep an eye on YD. I would be more than happy if you invested in YD some day too :-)
Thanks for the tip. Now I can get to work on repairing my chart. I was doing so well, turning a 1,500 satoshi faucet drip into 222,222 satoshis at one point, but then lost it all trying to hit a 0.1% bet:
I revealed my server seed to verify the rolls. I eventually got it to verify, but it's weird how you use the server seed in its binary form for the HMAC, but in hex form for the SHA256 hashing.
In my javascript roll verifier I had to add code like this to convert the secret as given by the site (a hex string) to a binary format:
bytes = [];
for (i = 0; i < secret.length - 1; i += 2)
bytes.push(parseInt(secret.substr(i, 2), 16));
secret = String.fromCharCode.apply(String, bytes);
Please note that I do not vouch for yolodice.
IN my experience whenever it comes to trying to "win big from faucet" the best is to make a few 2x bets and once you win 2-3 times in a row, go on to betting at 100x-200x or so. Eventually it will take a while but its the fastest way to generate close to 100,000 Sats or so or at least the minimum amount to withdraw.
However this also depends on the time limit for the faucet and obviously you need to manually enter the CAPTCHA every single time.
THere was a guy a few years ago who made videos somewhere on Youtube how he made some decent ($1-$5) withdraws from a PD faucet.