hi sir
i have question about fair logic
what's $clientSeed ?
Think of a random number generator that always generates the same random numbers when it is initialized with the same so called seed (which is a text string). This seed consists of three parts: - serverSeed: this is kept secret cause if you knew it, you could calculate the result - clientSeed: this is a value that you can chose at your will. it's like giving you the possibility to shuffle a card deck instead of relying on the site to shuffle correctly - incremental nonce: a number which increases with each of your rolls which is neccessary to have a different seed for each roll in a ordered way |
|
|
|
Click on the pencil icon to change your client seed.  |
|
|
|
- Might consider promos when we hit the profit zone again  - New features: - You can filter bets by minimum amount or username(s) in settings. - As legitimately critizised a hash of the next server seed is shown before you change your client seed. - Beside reporting a critical bug, Eric also figured out that running for the jackpot might get EV+ as soon as it is reaches a certain level. Jackpot probability is 1:10000 so when you make an average 5000 bets with 0.0001 each... you get the point. Thank you again and I feel a bit ashamed for being a bit harsh in our sha1 argument, sorry  - Jackpot in its current state is quite pointless as it does not get big and I want a really big jackpot. I'm thinking about reducing the probability for hitting it to 1:1,000,000 and still require a minimum bet amount of 0.0001 to claim it. What do you think? |
|
|
|
Ok, i must confess that is true for the first bet of a series and i will implement the seed-hash display in advance... but that still does not make a difference for the choice of the hashing algorithm for this purpose Anyways thank you |
|
|
|
This looks challenging, I'm no md5 expert and wouldn't know how to generate such a collision. However, to break the provably fair you only need to demonstrate: md5([32characters]-[10characters]-1) == md5([other32characters]-[10characters]-1) The server seed is the same for the whole series. If I manage to find a collision for one bet and manipulate that single bet it will be obvious after revealing that the one bet with a different server seed is manipulated. You actually need to demonstrate this for all bets of a series and you cant even demonstrate it for two and it is pretty hard to find even one collision. Anyways... showing a hash of the server seed before is a good idea. I will implement this. |
|
|
|
You're the most sort of dangerous: arrogant and clueless. If you don't lose peoples money due to malice, I'm sure you'll manage to do so with incompetence. I was going to demonstrate a practical md5 hash collision for you on your site, but your misconceptions (regarding the series) are so entrenched that your site isn't even close to provably fair, as you don't even give a guarantee of you changing the server seed. You only need to make 10^4 sha1's per bet in the series to revert it. Which means practically you can pick the outcome for the first 10 or so bets after someone changes their client seed.
Anyway, you might want to gloss over the wikipedia article on md5. And if you're still not convinced, download hashclash or something. And when you're done, check out how every other dice site proves they don't change the server-seed, and follow suite -- you obviously don't have the skills or understanding to deviate from the norm.
I have no idea what you are talking about. Server seed only changes if the user changes his client seed and it keeps the same until the user choses a new one. Now come on give me only one concrete example for this instead of unjustifiable discrediting me: md5([32characters]-[10characters]-1) == md5([other32characters]-[10characters]-1) && md5([32characters]-[10characters]-2) == md5([other32characters]-[10characters]-2) OR sha1([32characters]-[10characters]-1) == sha1([other32characters]-[10characters]-1) && sha1([32characters]-[10characters]-2) == sha1([other32characters]-[10characters]-2) |
|
|
|
Is the payout instant?
No. Requires all your deposits to have 4 confirmations. |
|
|
|
Sha1 has all sufficient attributes for this purpose as long as the secret seed is long enough and it is faster (not sure if that makes a significant difference overall but anyways). I was always wondering why others use sha256/512. Actually in my opinion even md5 would be fine for this use case but that is generally stigmatized as insecure.
Uggh no. MD5 collision finding techniques allow finding collisions with arbitrary prefixes and suffixes -- making it completely unsuitable. MD5 is no more stigmatized as being insecure as a sphere is stigmatized as being round. Sha1 is a lot better, but it's been sufficiently weakened to the point you should consider migrating to sha2 now. Given the choice between secure and weak, I'm not sure why you'd choose a weak hash. Ugh, yes. Crypto experts, please show me only one example collision following the common combined seed scheme in dice games. And even if you find one collision, the verification for all other bets in the same series (same client/server seed but incrementing nonce) will fail. I'd say it's absolutely impossible to find a collision for two bets in a series let alone the whole series. Sha1 and even md5 are absolutely sufficient for this purpose. |
|
|
|
|
New feature (as requested): Define your personal hot keys in your settings.
And I've lowered the bet delay to 0.2 seconds for now.
|
|
|
|
|
@ComboChris + @holderbert:
Golden gambling principle #1 is: don't play with more money than you are willing to lose and at this stage I'm not willing to risk more.
@Bobblehead Pete:
Site is ~1 day old... but I also operate another gambling site for over a year now.
|
|
|
|
Why do you choose to use sha1 instead of sha256 or sha512 which are used by almost all other sites? Are there any special advantage of sha1?
Just curious about that.
A verification hash must be: - Impossible to generate different results with the same hash so it is a proof nothing was manipulated by the site owner afterwards. - Hard to bruteforce so the secret seeds can not be determined by a user in a reasonable time Sha1 has all sufficient attributes for this purpose as long as the secret seed is long enough and it is faster (not sure if that makes a significant difference overall but anyways). I was always wondering why others use sha256/512. Actually in my opinion even md5 would be fine for this use case but that is generally stigmatized as insecure. |
|
|
|
|
@yenzae0215 withdraw issue is fixed. there was a flaw in the script so that auto withdraws were blocked.
|
|
|
|
|
Just happened to me. It say's "We're unable to perform the transaction. Please get in touch with us."
~250 USD gone. Really annoying and I'm looking forward for the day where bitcoin adaption has reached a level where nobody will need these f** shady payment providers any more as everyone accepts bitcoin directly.
|
|
|
|
bitaddress.org is open source and has been reviewed by several developers.
Absolutely this. - Go to https://www.bitaddress.org - Press [Ctrl] + [S ] - Choose the "HTML only" option - Save the file on a USB drive and copy it to your offline computer. |
|
|
|
This is a great service. I've just integrated it for deposits at satoshi-karoshi.com My suggestions: 1) API method to get a list of all supported currencies and include rate, limit and applied txFees in this result list (to offer all supported currencies in future + reduce number of API calls) 2) API method like txStatus but get the status by the withdrawal address - cause from my point of view I don't care to which address a user sends his altcoins but I'd like to lookup details for the address at which I receive a converted deposit. |
|
|
|
One simple way to show how ridiculous the idea of evolution is, is through scientifically recognizing how many atoms make up the smallest possible living cell. Then add in the part where these atoms must all be situated in the right place. Then throw in the part about how the atoms must be kick-started into motion, all at exactly the right time, in the right direction. Now, compare this with the mathematical laws of probability while including entropy, and you can see that life through some form of evolution is more difficult than winning all the lotteries in the world, past, present, and future, all at the same time. Probability calculation does not say that something is impossible because of its low probability. Even something with a unimaginable low probability can happen and when considering a infinite time frame and number of tries for something to happen the probability approximates to 100%. |
|
|
|
|
Skill games are hard to realize cause it ends up in who is skilled in cheating and writing the best bot. In p2p games the majority of fair players will lose interest fast and when betting against the house you have to either increase the difficulty + lower the player profits (which will annoy fair players) or work hard on anti-cheating measures and trying to prove people are indeed cheating.
|
|
|
|
|
Show Posts
