I'm working on getting more info from LBP and trying to figure out what's going on.  LBP is not a phishing site it's another maven site like seals, 5501, and like 15 others. As soon as admin sends reply I will let you know. According to Maven the password is encrypted then hashed.

PRESS RELEASE JUST POSTED ON TWITTER     http://t.co/G9v7LyE1Yp

MAJOR Bitcoin Poker SITE HACKED (NOT Livebitcoinpoker.com we said MAJOR!!)

We are new but have to acknowledge we already have the greatest players in the world! So let us start out by thanking those few members who really stepped it up and have discovered a huge security flaw on one of our competitor’s servers. This is major and super important to us because we use the same program on the back-end of our site. HankWhite69 helped discover the fix for the server without even knowing it and  that’s what got us to digging a little deeper and patching this issue. (at least for our site)

Our main competitor who uses the same back end software was  notified 1st by our shared users of this exploit. The competitor did not respond to them. Once word got out (5/25/2013)  about other sites having this open exploit  it was inevitable that abusive players/hackers would try to use this exploit. Our competitor was hacked on 5/27/2013 and the competitor has chosen NOT! to acknowledge the attack and has not changed the security protocol. This anonymous hacker had tried selling us our competitors users hashed passwords and account information. The user did this by entering a game and demanding to talk to an ADMIN in game. The hacker explained that the hashed password were encrypted by the same exact key we use. (he was right at the time)

We confirmed the hack by one of our player accounts on the competitors site and 3 other users accounts (not associated with LBP) have been comprised with solid proof. (Users who have noticed missing Chips and Deposit wallet swaps) We are not 100% sure who had access but they are working from behind this IP  “114.229.211.29″  as we caught them in a sting setup last night. The IP address shows a Chinese backing however upon closer examination and trapping this user into leaving footprints on our DUMMY server we have found out that he is a FOR FIRE HACKER that exploited an open PORT on our competitors website (he tried on ours but it was a dummy server) We believe it could be related to a few irregular open ports that older windows servers need to open in order to function.

We then decided to contact our competitor and let them know they have been hacked and how to solve the problem we did this  as a courtesy to the community and got this response back.

“We are aware of this issue,  LBP should not be concerned with our security. “

We could not let this go that easily as we share some of the same users  so we responded with a little more action.

FROM LBP
“Your security is important to us because we use the same software and a vulnerability on your site could mean the same for ours. The main reason we care is if users from your site logs in to our site with the same credentials and your software gets compromised someone could theoretically use *Competitors site* login credentials  on our site if the user uses the same information on both sites. Our passwords are hashed with the same key as yours so even though they are encrypted if that key gets broke everyone is at risk. This flaw is major and is now 100% secure on our end as we have changed our key. This does not solve your security issue.” We gave them the names of 3 compromised accounts given to us as proof of intrusion.

FROM THEM
“Once again our security is not LBP’s concern, if we wanted your help we would ask you. NONE OF OUR PLAYERS PLAY AT LBP and if they do we don’t care it’s worth the risk. Do not message us again there is zero camaraderie between us”

(1 day later they were hacked)

We did not respond to that and realize that our poker community is not what we thought it was. We are friendly in the community and we were expecting the same.  We are not as big and have tolerated a lot for being new but this will end soon as our generosity is running thin with abusive networks.

We have since then changed our encryption key. Since all passwords are hashed at registration and before being processed we have asked old users to change their passwords for the new encryption most of them already have and if you haven’t please do.

A reminder to OUR users.

1. Pick a passwords not used on any other site

2. We separate our poker severs, wallets and main site from each other to prevent any disruption.

3. Wallets are not hosted online.

4. Registration credentials are hashed when sent and we no longer use the same key as other sites.

5. We have fast support so if there is an issue let us know AS Soon As It Happens

I added this to bitcoinscammers.com sometimes the owners will seek out info and respond or at least try to correct the wrongs.  Please update us if anything changes.

YUP! but it looks like this guy is trying to save anything his company has left. I will let him try as we remain unbiased and let the users decide but it has gone a little to far with BFL.

A user on Bitcoinscammers posted a comment against BFL and BFL REPLIED. http://bitcoinscammers.com/butterflylabs-com/


BFL_StevenM
May 28, 2013 @ 23:04:21 [Edit]

“Put order in Via PAypal then got a message saying they wanted western union and cash payment.”

Butterfly Labs has no relationship with Western Union and does not accept cash payments of any kind.

“The just didn’t like Paypals return policy.”

Actually, we love PayPal’s buyer protections. Every one of them.

“2nd the owner is an EXCON.”

Although the vice president of product development is known to have been convicted of mail fraud several years ago, he is neither the owner nor the CEO. Further, it is our opinion that the conviction was contrived to punish behaviour that was not covered by any law at the time. Details: http://codinginmysleep.com/interview-with-sonny-vleisides/



BITCOINSCAMMERS.com BRING JUSTICE TO THE WEB!

We changed their rating to AAA

Awesome, Good to know

k let me know and I will do it. Trying to clean up the community one POS at a time.

Do you care if I submit these guys to bitcoinscammmers.com Quoting you?

You realize I run bitcoinscammers.com ?  (non poker related just sites and users to beware of)

You guys crack me up. I have zero affiliation with LBP nor do I care where you game at. I play at SWC and LBP (not Satoshia)  LBP min withdraw is .5 btc  (doesn't bother me) They have a 10 btc freeroll on Saturdays (Two weeks ago it was WTA this week I think it was top 5) instead of daily freerolls. This is the reason I play at both as I have a bigger opportunity to win more. I don't care about how they are new. I like seals lol, they owner of LBP is a member here FYI feel free to talk with him as I get zero benefit arguing about seals alternative that I enjoy.


I play at LBP with litecoins and SWC with bitcoins. DOES it really matter where I want to play at?

4 hours bro

Really just a portable trash can. A shuttle case with a few led's  SCAM!  

You care if I submit him to my bitcoinscammers.com website?

I dig it!

Can't take  a joke? I knew this was a scam before you did  lol. (ohh wait not a fan of jokes I forgot)

Yes, as of now it is a scam.

Notfair nice to meet you. How lon gdo you have left?

Yo G hang out for 4 hours and make atleast 5 posts and they will let you in . You have plenty of reading to do. GL

Nice setup fyi. How's everyone hanging in here?