Just ignore chat if you don't want that on a pokersite The new (flash?) client will have an "enable lobbychat" button to emphasize that they don't moderate chat.

Yeah, can't connect without VPN either, does work with VPN. Probably more than a "handful" though.

My pick is Germany.

My pick is The Netherlands.

You should mail to support@sealswithclubs.eu

My pick is The Netherlands.

Lol, I know it shows all that and I wouldn't personally fall for a scam like that. But still I don't really agree with the "oh well you are too stupid to get scammed, that's your own fault" attitude that the bitcoin community has many times.

I think a slightly bigger message above the PM content will make it much more clear that the PM is from a newbie and not really a trusted seller. If you never had a PM before there is even no way of knowing that there "should be an avatar, stars, positive trust, etc". I think a message like that could help against this type of scams so I see it as a good thing.

Btw a quick fix on the current forum could be: show a message above the PM if the activity is less 30: "This member is new to the forums, make sure it is not an imposer." or even only the first part of that. Newbies can still PM this way, but at least there is a fair warning. If an imposer tries to get 30 activity I think they will be caught quickly.

This scam has definitely not been the first of this kind (and not the last.) I know bitcointalk is not and cannot be responsible for scams, but if there can be a quick fix to prevent this type of scams, that would be great right ?

Nice. Bryan Micon, "chairman of bitcoin poker site SealsWithClubs", is definitely also promoting Bitcoin at WSOP. But obviously Micon is wearing Seals merchandise and not Bitcoin merchandise like that. That's pretty cool! Good luck to him.

No offense, but I don't think this should "staff exclusive". Many traders who have auctions get imposers. They will PM the "winner" to say they have won the auction and you can send the BTC to address: .. There has been many successful scams like that for a lot of BTC. If somehow the "reputation/title/posts/activity" etc would be more clear, it would be great already I guess. Basically it should be clear if you get a PM from a newbie.

0-5 in 29 minutes is pretty sick lol didn't expect that xD

My pick is Germany.

There is no such thing as "95% winrate". I am not saying it's not possible, it just doesn't exist.

For cash players you would say how much blinds per hour or 100 hands you win for your "winrate".

For tournament players you could say what your ITM % and ROI % is. According to the sharkscope of 'provsk' the ROI is only 0.4% and the ITM 51.2% (simply because that player plays only HU SNGs.)

Even if you are that player, and even if the WPN players are bad (actually not bitcoin casino, betcoin is connected to WPN and most players are from ACR/BCP) Still you will not have 95% ITM or 95% ROI. There has never been any professional poker player that gets that even if they won millions, and neither can you. If you are basing this on the ~40 tournaments you have played, then obviously that is way too low sample to beat the variance.



Either way the things you say make no sense at all and I do not believe at all that you have been staked before. No staking deal works like this.

As a profitable poker player myself I can call this topic very sketchy and potential scam.

- There is no such thing as "95% winrate". Only someone who does not play poker or is very new to it would say this.
- "don't count cashouts causing my profit to show as only 700$" is complete bullshit.
- There is -definitely- variance in poker, even for the best players, there is no such thing as "guaranteed winnings".
- Therefor "You will earn 45% of what you invest" makes no sense at all.


I have staked others tens of bitcoins in the last year and a normal staking deal does not work like this.

If you are not a scammer, I am sure you are a losing or barely breakeven player with an unsustainable "staking deal".

I changed some things in my "2FA modification for SMF 1.1.19" and it would be great if some people could test it here.



Download: https://mega.co.nz/#!io5QxZrK!vhcQ1zdjauEYgeS_xpuOhWtLEmE_t3jcemakz4fKlKk


Install & Test (within 3 minutes)
1. Download SMF 1.1.19 - http://download.simplemachines.org/?archive;version=75
2. Install SMF
3. Download "2FA Modification" - https://mega.co.nz/#!io5QxZrK!vhcQ1zdjauEYgeS_xpuOhWtLEmE_t3jcemakz4fKlKk
4. Go to "Admin" > "Packages" > "Download Packages" > "Upload a Package" and select the .zip file
5. Click "Apply Mod" to install, then "Install now"
6. Change your 2FA settings at "Profile" > "2FA Settings"


Test without installing SMF
You can also just look at the ~5 relevant files to see if there is anything wrong with it.


Some details:
- Supports 2FA using OATH TOTP (Google Auth)
- Requires the 2FA code for enabling 2FA (with the key/QR that is shown)
- After that requires 2FA code for logging in and disabling it
- You cannot use the same 2FA code twice in a row for security reasons
- "Forgot password" still possible without 2FA, but you do still need 2FA to login
- Uses the default SMF method against multiple login tries (I will still look if this is sufficient)
- Uses phpSec for the OATH TOTP class and random string generator (openssl_random_pseudo_bytes, mcrypt_create_iv or mt_rand as fallback if other 2 unavailable.) I use 3 files of phpSec and stripped them down to only use the basic functions. http://phpseclib.com/
- Uses the following JS script to generate the QR code (only uses qrcode.min.js - doesn't need jQuery) https://github.com/davidshimjs/qrcodejs


I hope some people can test it, would be great, thanks

OBVIOUS SCAM



So you start with $100, you get 10% profit everyday, so after only 3 months you have: 100*1.1^89 = $483002 - basically half a million dollars. Obviously impossible.


Saying you do this "to build rep" only makes it look worse.



OBVIOUS SCAM

Yeh I agree in theory that would be the "best" way to exploit if the attacker can have unnoticed access to the server.

Anyway, Dean is planning to make instant withdrawals this weekend (so obviously with hot wallet.) The original discussion however was that I still think it's ok to manually fill that hot wallet and use cold wallet for deposit addresses, especially with a relative smaller site because 1 deposit can be 50% of whole cold wallet. There can be many ways to exploit if you have access to the server, but still I think it's best to limit each method which would include trying to limit the hot wallet amount.

Also I do think most attackers will go for instant steal simply because they will (and should) be worried that their unauthorized access will be noticed. This however does depend on the method or vulnerability that's used (and the "experience" of the attacker.) (edit: in theory he could "instant steal" the hot wallet also with the server seed of course, only needs 1 deposit, would depend on the attacker I guess)



Of course in the end I hope the site will never be (successfully) attacked but should definitely think of all the possibilities.

Honestly I have been playing several tourneys today and been busy, I don't really remember. It must have been between $2 and $20 I guess since I don't play anything else. I think one of them was a $200 GTD, but that could have been another. I assumed you guys would have a history of the tourneys? :X :p

Yes, since they need 6 entrants they didn't run. I am not sure which time but around 5AM - 8AM EDT I think.

Today it were 2 WPN tourneys. I forgot which ones tbh.