From now on, users will no longer be able to pick their own password. The site is going to generate you something nice and secure, which you can write down. No matter how much I tried, users kept reusing passwords and it was a never-ending war trying to prevent accounts being hacked (there's sites like leakedsource which have millions of peoples reused passwords). Old passwords are still valid, although I'd encourage everyone who didn't use a password manager to randomly generate one to change it. I apologize in advance about the inconvenience, and if you're prone to losing your password please make sure to set a recovery email.
|
|
|
I'm glad I'm not invested I see there's already another thread about this, and a few people have already contacted me confusing me as the owner of MoneyPot.com (I'm guessing the new owners of MoneyPot.com still haven't updated the config file so they are losing all support emails) so I'm going to lock this thread.
|
|
|
There was a bug in the latest version of the game server, which resulted in some people losing money where the auto-cashout was not honored. The change has been rolled back, and I've gone through the games, and found everyone directly affected. Here's the complete list: http://pastebin.com/raw/LTEn7kkkusername ; amount in satoshis (divide by 100 for bits, 1e8 for btc) The money has been credited to your account. If you think you're missing any, or were affected more adversely than that please contact me on bustabit.com/support and I'll be happy to help. Sorry about that. Going through the code now, to see how the bug occurred. -Ryan
|
|
|
Thanks for the kind words everyone. Awesome milestone we hit: #1 wagered bitcoin casino!Although it's temporary (our volumes are extremely high this week due to some lucky winners churning over their winnings, and PD is much bigger than us) it's still a really cool milestone! Thanks for playing!
|
|
|
Question: What if you use 2 or 3 consecutive blocks as the basis for the winning hash?
Advantage: No need to do 1 million bcrypt or pbkdf calculations quick to verify; unlikely for a single miner to mine 2 blocks in a row.
I am pretty bad at explaining things, but I'll try before Dooglus replies and makes me look like a babbling toddler. What is the attack if you just use a single bitcoin block hash? A miner can construct a function, f which tells it whether or not it should broadcast the block that it just mined. It might look something like this: function f(justMinedHash) { var winningTicket = justMinedHash % totalTickets; return isMyTicket(winningTicket); }
So now, lets say we use 2 hashes, instead of just one. Well, now a miner just needs to make a miner-code adjustment (this generalizes to any amount of previous hashes) function f(justMinedHash) { var winningTicket = cat(previousBlock, justMinedHash) % totalTickets; return isMyTicket(winningTicket); }
and it has absolutely zero impact on their ability to pull off the same attack. Ok, so now let's use the block-stretching scheme, that pevpot uses. Well a miner can construct the same function: function f(justMinedHash) { var winningTicket = stretch(justMinedHash) % totalTickets; return isMyTicket(winningTicket); }
but the difference is the function takes an hour to run! This means they can't broadcast the just mined block for an hour. And when you have the new unbroadcasted blockchain tip, time is money. Because loosing the block-race (which you probably will) will cost you a fair bit (and during the time the block is stretching, you'll have to mine on the probably-orphaned chain, adding to the cost of failure) Make sense?
|
|
|
(Also the winner of draw #11 has been paid out, I just never updated the webpage) Question: What if you use 2 or 3 consecutive blocks as the basis for the winning hash?
If you use block N and N+1 to generate the result, that has the exact security equivalence of just using block N+1. iirc I think I brought this up with you before about your site, which combines 64 bitcoin block hashes; it's functionally equivalent to using a single bitcoin block hash, except now you're just dragging around a lot of complexity for nothing. One of the key goals of provably fair, is to make it as simple as possible to verify.
|
|
|
I've no reason to think that's actually happening of course. I am just saying that to check it we would need to run thousands of hashes (one for every round that happened since the game became provably fair - so it will take longer and longer over time), whereas the method I posted about gets rid of that problem. That method never needs more than 64 hashes to get from the current game to the genesis game - but it is quite significantly more complex to understand, so it's a tradeoff.
Yeah agree. It's not really provably fair unless you can actually verify you're on the canonical chain or not. The paper is a great read, and does something I didn't realize possible -- but it solves a problem bustabit doesn't have. Namely, generating a hash chain of 10M (or 10x that) is pretty negligible. I was thinking it could be pretty useful for something like MP to generate a hash-chain-as-a-service. Or maybe fast-paced multiplier game, where you burn through millions of games super quick.
|
|
|
Kapi18wro has finally hit his goal! A net profit of 100 btc! A big congratulations!
|
|
|
You have to be the last big bettor ( not necessarily the last bettor) to catch the biggest chunk of the bonus ... if I got it right
Pretty much. Although you can generally ignore the noise (e.g. if someone bets 1 bit, and cashes out after you, it doesn't matter much). For a full technical description see: bustabit.com/faq#last but the high level is the bonus are a system to reward people for cashing out after each other (but before the bust). All the complications are to make it fair regardless of how much you bet. Also, bustabit is getting crazy volumes! >1900 BTC wagered two days in a row! And kapi18wro is a stones throw away from 100 BTC in profit!
|
|
|
In the past 3 hours, there are only 10 new blocks found (it is not something big but miners are unlucky). As a result, there is some backlog created. https://bitcoinfees.github.io/ shows mempool size going from 1.7 MB 3 hours ago to beyond 10 MB at the moment. Thanks yeah. Once bitcoin 0.12 is released, I plan on sending all withdrawals using opt-in RBF and then do something like bump the fees on transactions that haven't confirmed within an ~hour or something. I think one of the big appeals of bustabit is the instant withdrawals, but it's hard when it's not obvious what fees to pay
|
|
|
Sorry, was out all day and forgot about the lotto. I'm running the verification now. Do you vouch for this guy to continue to run the business ? Could you tell us who the new owner is? I would not like someone unknown to steal my deposits when im playing this game becaue this is not like dustdice where you have insurance that your money is safe with moneypot
To be honest, I don't know the guy. I had already released the code, and someone approached me for what basically amounts to the domain. I was originally going to keep the domain, just to avoid confusion. But it's hard to say no to free hundreds of dollars, so sold it is (I've already been paid). Is that someone dooglus? I saw in the previous page that he was interested in taking over. It would be a great news if so, as the biggest difficulty of running and promoting the site is that the owner has to be widely recognized as trustworthy.
No, it's not. But he (and everyone else) has access to the code, so who knows what will happen P.S. @ryan Do you currently have any projects you're working on? Your ideas are quite creative and unique, but it seems like you have a habit of selling them (except for the case of BaB) lol thanks =) But what can I say, I've got a short attention span. I think pevpot was my 5th bitcoin project, but my last bitcoin project for a while. I have some ideas for bitcoin projects I'd like to do, but feeling a bit burnout and disillusioned with the general bitcoin community at the moment Right now I'm taking a break with running bustabit and working on something totally unrelated to bitcoin or gambling
|
|
|
Just a heads up. Someone has purchased pevpot.com from me, so after the current draw (#11) -- I will be transitioning it to them, where the addresses will change. =)
|
|
|
Hey everyone, unfortunately I'm going to shut down pevpot, and make this draw the last one I'd like to thank everyone (especially Dooglus) for all their feedback, and to everyone who played. But the the site hasn't got the sort of traction I'd like to see in order to continue operating it. I was really hoping to see >100 bitcoin lottos, which would make the draw a lot more fun. It's more than likely my fault for not actively marketing it, and getting it intuitive enough for casual users. But with bustabit's increase in popularity and volume (right now, >200 people online!) I really have my hands full. Thanks for playing everyone! And good luck to the final winner of draw #11
|
|
|
Good luck with the auction! A lot of work and love has gone into this product. If anyone is interested, you can see the full stats before the moneypot ownership transition: https://mp.bustabit.com/full-stats.json(DustDice had 2801.6017 BTC wagered, and made a net 7.09650729 BTC in comissions)
|
|
|
Nopes there isn't AFAIK,Even if there will how can you verify it as provably fair,i mean the site can make sure that people get very low reward when scraching the card (most of the time) so it won't be completely fair and would be more like a lottery. Actually, there's nothing about it that would make it hard(er) to be provably fair. You could even make the tickets transferrable, without impacting provably fairness (the person who scratches the ticket would provide the client seed)
|
|
|
|