Bitcoin Forum

www.franklinta.com/2014/08/31/predicting-the-next-math-random-in-java/

Can this be used to predict the next client seed of Dice Sites?
I didn't even understand 1% of the article because I am not a programmer!

It's not really useful, unless the casino is extraordinarily stupid. Most casinos will use a cryptographically secure source of random, as opposed to a pattern that looks random.

Are there any existing sites using math.random in any way?
I am not a programmer either, but from Google search, I see quite some pages (eg. http://stackoverflow.com/questions/5651789/is-math-random-cryptographically-secure) stating it is not a good random number generator for cryptographic uses.

This won't work.
If this does work, someone would already have used it and exploit dice sites and all the funds would have already been withdrawn.

No, the current sites don't really use math.random for the seed generation. Some sites have had their seeds compromised, like hufflepuff recently was able to find his seed on his prime dice account, so not sure, how they do it.
If it was a thread, then this definitely would have been posted before by someone, or several sites must have shutdown because of a player taking out the entire bankroll.

I don't think this will work on well known sites as they have taken extra security measures to secure their seeds/private keys. In reading this article seems very interesting but practical will give totally different result as zero working.Some very basic cheap site can be worked on with this type of method.

Name some :P

BTW, is this vulnerable? http://162.213.195.88/demo/index.php

Why are you asking about this? Do you want to scam some quick coins?

Of course Not! The first line was meant to be a joke! The second question I am asking because I think to buy that script!

If you want to know wether that sites has vulnureability or not you can post in a service section and ask some people to try to breakthrough it and find the vulnureability. Put some bounty for it rather than asking it freely, since people will be more willing to do the job.

I know but this one isn't hard to find if you have some knowledge on java!
Just want to check if the probably fair system of that site is vulnerable to the one I gave the link in OP!
This is a simple job if you know java and this task doesn't need any bounty I think!

If you have some knowledge either then you can find the vulnureability but you dont which means you dont have the knowledge. Sad thing is people will not be willing to do some job for free anymore, atleast a 5$ bounty will encourage people to try to check on it

I checked and nothing wrong with the provably fair system, dont know about the back end system

Ok but I haven't even bought that script so its still not mine! Another thing is There is already enough hints so this task has been very easy already! Plus, I don't gamble anymore and I only earn Bitcoins through my signature so I cant provide them $5 for this easy task! It would cost me 25 posts :)
I can provide larger bounties like 0.1BTC if the task isn't easy like this If I buy the script.

Even if its easy why someone will do it for you for free?


And BTW that website is not in java. They don't generate random numbers with java.

I am not forcing you to help me! If you want you can :)





I don't know which website you are talking about( the one in the OP or in the link I gave on replies?) :)

I wouldn't be so worried about the RNG generation having an exploit that users could abuse - instead I'd be worried that any script you purchased may potentially have a backdoor in it so that the developer can come back and clean you out. It has happened before and is far more likely given the fact that it isn't a major company you're buying from but instead a potentially unscrupulous individual. Not to mention, it's even worse since you seem to be unable to read the code yourself (which is necessary to check it for a backdoor). All in all - if you want to make a dice site and do it properly you either need a custom job or to do it yourself with your own programming knowledge.

No its not going to be a commercial business until I start understanding or I hire someone to help!

well so its possible to use on newbie casinos i guess

What newbie casinos exist though?