I could not find any info on by whom or how the changes were made, but I did find a security flaw in the admin page. This flaw did allow a user to change info without being logged in by doing a direct post to the page. It did NOT allow the creation or deletion of rows or have the bot send funds. There was no compromise of the bot self, the bitcoin daemon it uses, or the VPS it runs on. The list is hosted by a completely different host.

The changes were found within 3 hours of them happening and no rains were sent after the changes were made, so relatively little damage was done (except to my reputation).

I still do not know whether these changes were made by an admin, or whether the flaw was used.

I am in the process of updating the admin page and will have a few trusted peers look at and test it before I reactivate it.

In the mean time, please check that your address and info on the list is correct. If it is not, please post the changes to be made in this thread, or PM them to me here.

I just noticed that a bunch of addresses on the list of users has been changed without the users consent.

If you go to http://seuntjie.com/jdusers/ and search for the address 1HZLa2EQ8ST2r8D8E3v8odMVykZRALWgAy, you will see a list of people all having the same address, mine was changed as well.

I know for a fact that this address belongs to arrogant, so obviously he is suspect number one for this at the moment, but I will be looking at whether this might some kind of setup (I highly doubt arrogant is stupid enough to duplicate his own list addy)

Until I have made sure that the list is secure, the admin portal to the list will be closed and there will be no rains.

There were no successful rains since the compromise.

I will post updates to this thread.

This was quite an interesting read.

Doog you could always donate some (50% ?) of your winnings to the rainjar at JD.

This is a bad idea.... The amount of data you get (in bytes) for requesting bet info is much more than placing a bet or doing just about anything else on the site, so crawling for all bets will increase traffic to the server immensely. Besides, it's extremely hard to pull data for 50 bets every second.

There is a site that has charts, https://bitcoinproject.net/justdice.php . This should show almost everything you need except the actual bet data.

There is an api link where you can get data like amount of rolls, invested amount, profit, etc, but i cannot remember what the link is. I'm sure Doog will give it to you if you ask.

If you still want to and don't mind .NET, have a look at https://github.com/seuntie900/jdcapi

Not official, but works well enough, just ask SeuntjieBot

What did you do since there isn't an api? did you get a work around or dropped whatever project you were working on?

Because ignoring everything I said except the 1 single thing that could be sexualized really really backs your point of view. BTW not everything is always sexual.


That's pretty funny!

Quick question: How does the looks of JD point towards a scam? I would be much more worried about a site with flashy gimmicks being a scam than something like JD.

also, it is clear you have never taken a course or have been trained in user interface designing. Just dice looks good, it's balanced, it's easy to navigate and use. The site shows (almost) all the info you want and all the info you need in logical places that's easy to get to. You never have more than 4 (maybe 5) steps to do a certain action. The interface isn't clustered, it doesn't cause frustration and is actually rather calming. The UI design for JD is rather remarkable.

When designing an interface, there are more important things to take into consideration than not looking like it was designed by a 14 yo girl (which it doesn't, you've obviously not spent time with girls that age)

I will not argue your logic, I will leave that up to Dooglus. All that I still want to say is: innocent until proven guilty, NOT the other way around.

I am sorry that people resorted to name calling and insulting *frowns towards klye*. It is rude, unprofessional and usually shows lack of proof or reasoning.


You came in calling dooglus a scammer, saying he IS running a scam, he IS placing fake bets, I would not call this "provocative to the minimum". You only later said he could be running a scam, etc. Once again, name calling does not help either party.


I was planning on covering the other topics, but dooglus did a good job on that, so I won't be reposting what he said.

Some people (like me a year ago when I started the bot) doesn't understand the math behind gambling and the 1% edge. Others don't care about the edge as light suggested. Some think they have a strategy that defeats the edge, and others are just too lazy to bet themselves. It's quite thrilling to see the bot run sometimes, can be just as exhilarating as betting yourself. Also, it was/is a fun project, I learned some stuff from it.

About the simulations: the bot has problems overwriting a file for some reason, so if you updated it and tried to overwrite an older export file, it will not show the update (it does show a message that says: "failed exporting to <path>"). I know that the amount of bets shown in the export file is always 1, but the starting balance is correct, and the finishing balance at the end of the file is the same as the one in the summery (just scroll all the way down and look at the balance and profit after the last bet)

That really depends on the circumstances at that time.


I HOPE to have v3 done by the end of july, but i got a lot of stuff to do and the bot isn't very high on my priority list, so no, i have no ETA

It is very possible to do what you need, but I am in the middle of exams right now. I do not have the time to update the bot. Since it is open source, you could ask some other developer to do it for you, or come bribe my attention away from work after the exams. I will however, consider this feature for v3 (whenever I get the time for that....)




All in the name of fun right?

go to advanced settings and change the amount to a valid number. if this does not work, please export your settings and pm me the content, then i will have a look

wow! 20k BTC tip!?!? Thanks!

It can, if you add it or get someone else to add it for you.

Not without messing in the code. writing info onto a disk is one of the least cpu intensive actions a computer can do. and it's plain text. it'l take tens of thousands of bets before the file will become significantly large (10mb+). if you are worried about disk space, just delete the file every few days.

You will have to recompile it with a new icon. I don't plan on doing it.

You can send here: DANx5cttzbtCMZdZUwxmurjuoZGWDL6zz7 (old DD addr)
Thanks you very much

No need for VM's, you can run multiple instances of the program on the same computer, you will just need to manually log into each account using the site for each new instance.

What is important, is NOT having more than ONE bot at a time on the same account. That will mess up your bets.

Edit: if you are using different settings for each bot, i suggesting exporting all of the different settings, then importing the settings before you start for each instance. The bot will open with the same settings as the last one you closed