blackjack.fun - webtricks
I'll beat all of you this time lol.
Sweet Dreams! |
|
|
|
AFAIK, programs don't have to worry about which direction they write fields in DER-encoded files, because A would be the representation in little endian on everything running an x86 processor. B would be the typical way you send byte arrays across the network because the network order is big endian so in other words the hash that was created needs to be "flipped over" while going across the network and then flipped back when it reaches the other host. So all clients only ever see A.
That I know but I wasn't asking about DER-encoding. My query was for ECDSA signature. Here's the steps for calculating ECDSA signature (wikipedia):  As you can see, z is taken as the L n leftmost bits of 'e' where L n is the bit length of the group order n. So, 'e' i.e. hash of message to be signed has to be in the specific order. |
|
|
|
My question is: which of the above hash is signed for creating DER-encoded signature - A or B?
The first one, meaning the actual 32 bytes that you get from your SHA256 function as the result of hashing the input [twice]. The second one is more like a "string" that bitcoin uses to show hashes and has no usages. Okay thanks for the information. I read the other way around somewhere and got confused. I was wondering if bytes are reversed then why my application is working perfectly. P.S. There is a mistake in what you are hashing, it appears that you have replaced the only input's signature with the pubkey script that is being spent (which is the correct step for spending P2PKH outputs) but you haven't added the SIGHASHTYPE flag at the end.
Yeah! I know. I just randomly picked input and addresses from the recent block, pasted those in Coinbin online tool and created the transaction. That's why I wrote - 'just an example'. In my real application, I do account for additional 4-bytes SIGHASHTYPE code. |
|
|
|
The best depends on what you can see with it. The description of best for me after using it as a payment is being an asset, the modern digital asset which is starting to be recognized even by huge financial institutions just as PayPal.
Imagine the biggest e-payment service having over 325M users selling bitcoin merely as an asset! It won't let you withdraw bitcoin, send bitcoin, receive bitcoin and use bitcoin. Restricting the use of bitcoin merely as a fluctuating investment. This in my opinion is real-real bad for bitcoin. It's like Facebook not allowing Instagram users to upload images after acquiring it (which didn't happen thankfully). PayPal is setting different narrative for bitcoin, showing its users that bitcoin is nothing but a stock-alike, buy it, sell it and pay your dumb taxes. Imagine if even half of the 325M user base start using bitcoin in this way, without understanding the underlying technology and what they are buying - bitcoin will easily become bubble-riding internet shit-token gaining 400% one day and losing 70% the other day, no different than gambling. |
|
|
|
Consider the following unsigned raw transaction (just an example): 0100000001a2a3b7744d9021efaa94a08a54c385373fa9381203dabf317d9a83efecb76470000000001976a9143104a52d281de138aa47e944d1acc3288b9598c588acfdffffff0140420f00000000001976a914e84d6c709afa87d7f93315af93f0804cd08cd34b88ac00000000 The double SHA-256 hash of the above is ( A): ae6d2bc786fcafbcd39696276bb6539564eefdbc2f54099da4a273db5c467e8b Hash with reverse bytes ( B): 8b7e465cdb73a2a49d09542fbcfdee649553b66b279696d3bcaffc86c72b6dae My question is: which of the above hash is signed for creating DER-encoded signature - A or B? |
|
|
|
Formalized structure for Crypto Market? That is next to impossible thing to do. Pseudo-anonymity is the inherited characteristic of cryptocurrency just like cash which is anonymous as well. Government can make laws, give guidelines and ban certain type of crypto use cases similar to cash but cannot entirely formalize the crypto market and get the record of every transaction (government has to let that sink in). As in the case of cash, government has given several guidelines like restricting businesses to pay more than Rs. 10,000 to single party in a day, requiring PAN if person deposits more than Rs. 50,000 in a bank, etc etc.
I partly agree with this but you are using the precedent of what has happened till now to speculate on the future for BTC. Cash transactions allowing you anonymity has decreased quite a bit. Its all formal corruption now. The same is not the case for real-estate transactions but just wait till this new, so-called" tech-savvy" government starts linking properties to Aadhar and then to PAN cards. Cash is as anonymous as ever. People only become subject to scrutiny when they make mistake in spending the cash and leave behind trails. It's like spending your mixed bitcoin with unmixed UTXO and losing the privacy. Even today, cash manipulation happens in more than 90% cases of the property sales. The registry value of the property is shown below the actual deal price and rest of the payment is made in cash. No government measure can catch these tax evasion transactions if seller is clever enough to maintain the secrecy of cash received. That's why I said that if government targets bitcoin as some safe-haven for tax evaders and justifies banning it or charging excessively high tax due to the same reason, it better be ready to ban cash as well. As far as trails are concerned, cash is much more anonymous than bitcoin. |
|
|
|
|
Private Blockchain is not a blockchain, it's a rip-off version which is being sold by consultancy firms to the big corporate houses and conglomerate to make higher profits! All they do is create a database, give access to the divisions to add data, every division maintains its own copy of database, that's all!
There are no consensus rules, no open-source code, only single party access to data verification and addition to the blockchain, no large computing power to secure data addition, etc.. Consultancy firms are selling the normal database management system with little tweak with above features at higher price and enchashing the buzzword - "blockchain".
There is only one true blockchain utility and it's in cryptocurrencies.
|
|
|
|
Damn! Was well-poised in the tournament but how can one deny the straight flush draw on flop! It was 7-10s against AA. Got 9-Js on the flop. Had to call all-in raise from Improved. This was one of those kind of hands when you know odds are against you (48% vs 52%) and losing the hand will knock you out but can't help but play the hand. It's hard to control the emotions in such situations. Well, was duly punished for keeping emotions above the risk management and got knocked at 6th position. It's funny how I am running 3rd overall but only finished in ITM once. Losing Hand:  Good luck iv4n, Improved and Teethow. May the best one win. |
|
|
|
|
The only reason I prefer P2P Trading over buying/selling on the centralized exchange is the non-requirement of KYC. But Binance P2P doesn't allow users to trade without completing KYC and verifying phone number. These verification requirements make Binance P2P inferior to other alternatives like Bisq, LocalBitcoins and LocalCryptos.
If user doesn't care about privacy then it's better to sell on centralized exchange than on P2P platform because it becomes easier to convince the authorities that you are withdrawing legal income if money comes from a company's account compared to individual buyer's account in your bank.
|
|
|
|
I am a new trader of BTC with a turnover of 1 lakh daily , which would make the turnover around 4 crores yearly , which obviously comes under the purview of GST .
But my question is ,since we do not receive any INPUT on our BTC purchase , its literally impossible to pay any GST on the sale of BTC .
The point of paying tax on the income of this trading is clear , but what should I do regarding GST and taxes ??
Hey Rahul, Government hasn't announced the GST guidelines for the trading of cryptocurrencies yet. In the absence of any guideline, I consider 'trading of cryptocurrencies' equivalent to the 'trading of shares/securities'. As per GST law, shares and securities are not included in the definition of 'Goods'. So going by the definition of 'Goods', trading of cryptocurrencies for time being doesn't come under the purview of GST. Hence, you needn't pay and file GST returns for your buy/sell transactions even though your turnover is above Rs. 40 lakh. The only cases when you are required to pay GST is when you are carrying professional or normal business and making taxable supply in excess to Rs. 20 lakh and 40 lakh respectively and receiving payments in bitcoins. |
|
|
|
Bump!  |
|
|
|
Finally a worthy or I would say better alternative to my BTCTalk Cards ( ANN). I knew this one will soon come from BPIP. If you decide to give this a shape of collectible cards, what about using 'Most Recognized' score to determine the card value and suit? Depending upon how many users you would like to consider for creating physical cards, the total number could be divided by 52/53 and given value starting from 'Ace of Spades' to 'Two of Diamonds'. Here's the comparison between the two, by the way:   user's profile: TheBeardedBaby  user's profile: efialtismine is real-time in true essence  |
|
|
|
Inflation rate in my country is higher than the Risk Free Rate [1]. So, technically it doesn't make sense for me to put the money in fixed deposits or debt market. To make any kind of profit with fiat money, I have to invest in Equity or Capital markets which involves risk too. I have tested and invested in many assets, securities, commodities, real estates over the last 6-7 years. If I analyse the performance of my portfolio, crypto investment (specifically bitcoin) has given me much more inflation-adjusted return than any other class of asset. So, I am constantly increasing the share of bitcoin in my portfolio recently. Currently it's standing around 68-69% of my total net worth (special thanks to recent rise). • What percentage would you consider safe to invest in BTC? (This is regardless of how much you actually hold).
Even 100% is okay for me. Bitcoin is constantly meeting the expectation of investors and market, I don't see any reason why someone shouldn't invest in bitcoin. But an investor needs to understand the difference between three terms - investment, savings and leverage. Before making the investment, person should keep enough as savings to meet the emergencies and contingencies. Then considering the proven track record of bitcoin over last 10 years, I am completely fine with investing whole surplus in bitcoin. But taking loans for bitcoin investment is foolishness. Even though long term bitcoin trend is constantly positive, it is highly volatile in short term. Creating any kind of leverage by taking loan will result in high chance of losses due to fixed outward obligations in the form of interest. So, only invest surplus after making adequate savings and don't create leverage.
[1] Risk Free Rate of Return (RFR) refers to the return on the investment with zero risk. Although, RFR doesn't exist in real world but some safe assets are considered for calculating RFR. Such assets generally include fixed bank deposits, investment in government bonds and investment in debt markets. If Real RFR i.e. RFR less inflation rate is negative then it's foolishness to invest in such assets for long term. |
|
|
|
I'm ok with paying tax, hoping they would make calculating crypto tax bit easier though.
For Crypto Tax to be easy the crypto market should have a formalized and easy structure. Imagine the difficulty the government would face when someone has his BTC in private key wallets where no one can know about it while other person has it on his exchange. Moreover, Imagine a situation there are 2 person. Both deposited Rs. 100,000 on WazirX let's say in which you have to do KYC. Now person "A" decides to take the money to BITMEX which does not has KYC in India. Now he can buy sell unlimited quantities on Bitmex and Indian authorities would never know how much he gained. While person "B" trades on WazirX and even a single sell transaction made by him would be subject to Capital gains. Moreover the bigger problem is sending money abroad. There would be a big evasion of tax this way as Income which has to be taxed in India will go outside without levy of Tax. Formalized structure for Crypto Market? That is next to impossible thing to do. Pseudo-anonymity is the inherited characteristic of cryptocurrency just like cash which is anonymous as well. Government can make laws, give guidelines and ban certain type of crypto use cases similar to cash but cannot entirely formalize the crypto market and get the record of every transaction (government has to let that sink in). As in the case of cash, government has given several guidelines like restricting businesses to pay more than Rs. 10,000 to single party in a day, requiring PAN if person deposits more than Rs. 50,000 in a bank, etc etc. The same can be done for BTC too. So, if person moves BTC through mixers, hide transactions or doesn't pay tax, it's on him. I can spend cash in whichever way I like, I can sell my house for Rs. 50,00,000 in cash and get away with it without paying tax due to the anonymity cash provides me. But that doesn't mean it's legal. Same applies to BTC as well. So, it's the duty of person to pay appropriate taxes on BTC (like cash income), government can't do anything about it no matter how much it tries. And if government think banning cryptocurrencies is the solution, it better be ready to ban cash as well. |
|
|
|
~snip~
Thanks for the analysis. "decoding is shifted by 'n' places depending upon a number which is obtained by the formula unknown to the player" About the formula unknown to the player https://prnt.sc/w4x0mnThe shift will be equal to the last digit obtained from the formula. Actually the bet results on your website differ from the steps mentioned in the screenshot, that's why I raised the doubt. As per the screenshot and instructions on 'fair' page, first we need to add the numbers obtained from the formula, e.g. 87. Then we need to add these two numbers, i.e. 8+7 = 15. Now, last digit i.e. 5th address from the list will be used for result calculation. However, now consider these examples of real bets from the website: Game #296 (I played this one) - https://bullx.io/verify/coinflip/296Number obtained from the formula = 62 Total of two numbers = 08 Address from the list taken = 3rd Decoding shift = 3 characters Game #305 - https://bullx.io/verify/coinflip/305Number obtained from the formula = 84 Total of two numbers = 12 Address from the list taken = 5th Decoding shift = 7 characters So, as per the instruction on the 'fair' page, 8th and 2nd address should be taken in the case of game 296 and game 305 respectively. Whereas, shifting should have been 2 and 4 characters resp. However, you can see that different address and decoding are being used. For the address, last digit of the number obtained is taken i.e. 2+1 = 3 and 8+1 = 5. I verified it with all coinflip games and address selection is constant as per this. But I am still unable to figure out how decoding is being shifted? Why 3 characters are shifted in game #296 and 7 in #305? This is not as per the formula mentioned on 'fair' page.
Yes, we thought about coinflip long enough. Entering the game at the right moment is quite difficult based on the code execution time it can take up to 50 ms to send one request. But I think this is quite possible under ideal conditions. We will solve this problem by adding one more value that we cannot find out until the end of the game.
Entering the game at the right moment is difficult for the third-party but not for site itself. When calling endpoint to update database with the UNIX timestamp of second player, site can send the custom UNIX to overwrite the auto-timestamp. For example, site may calculate that at 1608203643 second player will win the bet. So, it can send endpoint exactly at 1608203643 with custom value of Second user Timestamp = 1608203643. So even if 1-2 seconds elapse to run the HTTP request, code will overwrite timestamp from let say 1608203644/1608203645 back to 1608203643. So, yes please, add another variable over which both player and site mustn't have any control until the game finish.
The site does not indicate anywhere that the commission is 10%. We have a 5% commission on jackpot and coinflip.
Currently the commission is:
5% (for jackpot); 5% (for a coinflip); 10% of the net house Profit is taken by the daily jackpot(0.5%)
Yeah! I said 10% of the winnings which is equal to 5% of the total bet size. So, if I as a player bet 0.0001 BTC, I will only win 0.00009 BTC (i.e. 90% of my bet size). I think this is very high for any player to play on the site for long period of time. Player is tend to lose 5% of his money with constant luck. In my views, PvP platform should have at max 3-5% commission on winnings (i.e. 1.5-2.5% on total bet size). |
|
|
|
Creating PvP gaming platform doesn't relieve casino from being a fair party in the bet. Even though it's a game between players, casino still must be fair party and must have no control over the result of the bets. However, I tested Bullx.io and found that site has full control over the bet because - (i) 10 bitcoin addresses are generated by the site before the game starts (ii) decoding is shifted by 'n' places depending upon a number which is obtained by the formula unknown to the player Bullx.io can use this as the backdoor and cheat players in the following two ways - - After a player creates the coinflip game, site now has access to the following information - 10 bitcoin addresses, amount of the game, UNIX timestamp of the player. Site can loop over the next 10 - 60 seconds and select the UNIX timestamp for the second player which when used in the formula selects 'a bitcoin address' among 10 addresses such that results favor the second player. Now Bullx.io can pose as the genuine site player and join the coinflip as the second player and win the bet.
- After a player creates the coinflip game, site now has access to the following information - 10 bitcoin addresses, amount of the game, UNIX timestamp of the player. Bullx.io can now join the coinflip at the random UNIX timestamp as the second player. When bitcoin address is selected based on the formula, Bullx.io can then shift the characters of the address for decoding such that the result favors the second player and win the bet. Since formula of shifting the characters is not known to the players, no one will know if characters are shifted as per the formula or not.
To be honest, I really like the way you thought of using bitcoin addresses in provably fair mechanism and converting Base58 to Base10 in equally distributed probability to calculate the final result. But the fundamental of your provably fair script is wrong! Casino mustn't have complete control over the result generation process else it can't be called Provably Fair. By the way, isn't 10% on winnings too high as the commission? |
|
|
|
So today I had a discussion with devs about our system what connects alternative accounts. On 12th December system connencted Hello I am Humb and webtricks accounts. Both users were on the site at the same time. One logged out, other logged in. It is very rare case that system can be wrong. Now I have to admit that this can be a case and dont have enough evidence that Hello I am Humb and webtrics are the same person even if it seemed so obvious at that moment. Didnt have any support from devs also at that moment who could provide me extra support and had to make a decision on my own as admin.
This is my public apology for webtricks for accusing him for having alternative account.
Okay admin, all sounds like a genuine mistake so I will take your words. Apology accepted. Hope it would be taken care in better way in future.
My advice is to seriously take care of similar cases and be very prepared, apologize can't help you to regain reputation, it's sad if you lose webtricks as a player because of your mistakes and you know what? webtricks will never recommend your website to his mates and they could be your potential customers before this accident. Just friendly advice, reputation matters the most in business and don't make mistakes similar of this!
Since everything seems to be cooling down. Also, I received the missing credit for Sit & Go, I have nothing more to complain about. So, I guess it would be better for me to let it go. Everyone is more than welcome from my side to try blackjack.fun, after all site has really cool design and enthralling blackjack experience (especially in multiplayer mode). However, I have noticed an issue in the provably fair today so I would like to hear admin's response before deciding to play on the platform again or recommending someone the site or not: Image first -  Issue - Before placing the bet, user must have access to the two provably fair components - 'client seed' and 'server seed hash'. Server seed hash should be generated and provided to the user for the next round as soon as current round ends. Once user has the server seed hash, he should change the 'client seed' and place the bet. But on blackjack.fun, we are not shown the server seed hash of the next round before placing the bet. It shows - 'Will be revealed after current game ends' in next game server seed hash column. Although, we can set custom client seed but there is no surety that the server seed was decided before user placed the bet. Without knowing the server seed hash before the bet, there is no way to verify that games are provably fair. |
|
|
|
I'm talking about simplifying the situation so anyone can custody bitcoin, like you download an app, and it has clear unmistakable instructions for a few easy steps that provides a key/address pair. Something like that. Where no technicals need to be known, just download a well known app, follow the instructions and click a few buttons. And they get their key/address pair in a foolproof and secure manner that they can store offline.
Who are you expecting to bring these changes? Bitcoin is a decentralized network. It's up to people like you and me to make applications on this network to make it more accessible to the general people. And it isn't like that people aren't working on it. There are already very handy mobile applications and web-wallets which come with self-custody. One such which I noticed recently on forum is Bitamp - a client-side, open-source application (not endorsing). These wallets have clear-cut instructions like you said. But we have to realize, convenience comes with cost. We can't expect same level of security and privacy by using these applications. There is no shortcut to security. If you are using hot wallet on mobile or inputting seed phrase in your browser, you are exposed to 'n' numbers of vulnerability. So, if user wants to hold big amount of bitcoins, he has to do all right steps. Buy hardware wallet, sign transactions offline, verify source code, verify signatures of the application and use 'accessible self-custody wallets' only for small amounts and regular use. |
|
|
|
01. Best Moderator ................. Cyrus, mprep
2. SpamBuster ..................... Don't know
3. ScamBuster ..................... Don't know
4. Golden Feather ................. gmaxwell
5. Event of the Year .............. bitcoin reaching $19K+ again
6. Fail of the Year ............... Don't know
7. Discovery of the Year .......... Don't know
8. Bitcoin Geek ................... pooya87, o_e_l_e_o
9. Bitcointalk Ninja .............. TryNinja (ninjastic.space is outstanding contribution to bitcointalk)
10. Craft Master ................... Hhampuz
11. Antihero ....................... Don't know
12. Absolute Hero of Good .......... theymos
13. Miss Bitcointalk ............... Don't know (how the fook would I know if someone is girl or boy on the forum)
|
|
|
|
|
Show Posts
