We both know that you know about the problem before you used it. So why did not you alert us about that before using that and to do not making such problems?
Because you wouldn't have listened. I've dealt with people like you before. I remind you that it was you who persuaded us to add Provably Fair system.
Me and many others. Provable fairness is a staple of Bitcoin gambling. If you don't have it, you're not really in the game. So you then have hoped that we made this mistake and you will acquire from that.
There you go again with your crazy conspiracy theories. My site has a very clear description of how provable fairness works. All you had to do was copy it but you couldn't even do that right. Then when I was honest and didn't steal from you, you took the opportunity to rip me off by not paying me the promised bounty. Now you have the cheek to accuse me of trying to trick you? |
|
|
|
If anyone reads this that has the knowledge of how all of this actually works, please correct me if I'm wrong:
The coins in the initial distribution were sent to public addresses, accessible to the private keys. So what this means is that it doesn't matter if you claim them now or a year from now, they will still be accessible (basically, we have the coins already, we just haven't imported our address yet -- so it's like cold storage), correct?
Exactly. Except it's not like cold storage if your BTC (or whatever) wallet is online - because anyone stealing your BTC keys also gets your CLAM. Notice that the distribution method has a funny side effect for the (very few) people who used the same private key on all three coins: they get three sets of 4.6 CLAM at their address. For example: All four of these addresses have the same private key. I don't know what it is, but it's the same: BTC: http://blockchain.info/address/1s9VR8ofhyTrTfRKTReckvUwQWmsBVjU4 DOGE: http://dogechain.info/address/D61F2g5Sy7skPTr243RDAX65pYF5GFrYm6 LTC: http://block-explorer.com/address/LL66kdSdkNDX7GMaVbQwtmzF9ct3zUy3Hf CLAM: http://khashier.com/address/x9AnPHyGwRTVtqmHfw4K3wDGAWp1FwDoTvAll three of BTC, DOGE, and LTC were funded on 12th May 2014 (the snapshot date) and so the CLAM address got 3 sets of 4.6 CLAMs. Edit: I was wondering why anyone would use the same private key for three different coins. My best guess is that it's a "brain wallet" and the private key is the sha256 hash of a passphrase or something. |
|
|
|
Yeah, only issue I see with this atm is that in my wallet I have 100 addresses I set up (I hate generating more) and have no idea what priv goes to what pub (Multibit)...
I saw this in the chat box, but haven't investigated: 19:34:24 (966157) <AKCLAMDigger> if anyone cares, I wrote a multibit/multidoge -> CLAMS importer: https://gist.github.com/JoeMattie/87e228f122beb71714eb |
|
|
|
His help was that that he constantly reveal our mistakes when we paid him and asked not to advertise about it.
Two lies in one sentence. You didn't pay me (you credited my account, but won't let me withdraw), and you didn't mention not advertising it. If you dispute this I challenge you to show evidence. You keep mentioning about how you only stole back half the bounty, but I have received no bounty at all. |
|
|
|
Awesome. Thanks for this! I saw a few pages back someone mentioned /dig as well but they made it seem like it was only for actual sweeping (and required the private key).
Once "/dig ADDRESS" reports that it found a funded address, you have the option of running "/dig ADDRESS PRIVKEY" to transfer the coins to your deposit address automatically, but please make sure you're done with the key before doing that. I won't abuse it, but you can't know that. |
|
|
|
Do you claim that you did not pursue any selfish goals and you just wanted to help?
I wanted to alert you to the problem before anyone ripped you off. I've done it for many sites before yours, and will continue to do it after yours. If I wanted to make you look bad, I had plenty of ammunition. I didn't. I just wanted you to honour the deal we made. |
|
|
|
This clam alt sounds interesting. The only secure way to find out how much clam I have, is to import my keys into the clam client? Is there an offline address converter I can use?
And... this is my issue as well. People keep saying to just remove the coins from your wallet, then import it and start anew. This is a LOT of work just to see if you even have anything there. To see if you have anything at any BTC, LTC, or DOGE address, type: /dig ADDRESS in the JD chat tab. It will check the address, tell you whether it was part of the initial distribution, and if so whether it is still funded now. |
|
|
|
He found a bug, took advantage of it and only then told about it.
I took advantage of it and DIDN'T EVEN ATTEMPT WITHDRAW MY WINNINGS. The fact that you had no idea until yesterday that I ran a site of my own speaks volumes. People like you are the reason that less ethical hackers don't wait to be paid a bounty but just help themselves to it. |
|
|
|
Did not know anything, but always appeared five minutes later as Arrogant learned something new
With magical thinking like that you need to be doing something other than running a gambling site. If you keep reading so much into simple coincidences it will drive you crazy. It's stressful enough running a site when you're sane. |
|
|
|
To clarify, can I send the coins to another address in my wallet? Would that be safe? Since I won't be digging up the private key for that address. Right?
There are two cases: * If you plan to import the wallet.dat into the CLAM client, you should move your coins to a new WALLET first. The wallet.dat you import includes the next 100 addresses that wallet will generate, so when you think you're making a new address, you really aren't. * If you plan to import just individual private keys into JD's /dig command, then there's no need to make a new wallet, just more the coins to a different ADDRESS. |
|
|
|
The truth about Dooglus and his pawn Arrogant. I did not tell you about their actions initially, but that others do not fall for their divorce, I'll tell you about it. I'll start from beginning. It all began with first Arrogant's PM to me where he said about his site http://bitcoingambling.reviews and he will add a review about my website if I'll pay him some BTC. (That like the honest reviewers works in Bitcoin world) Advertise advertise, so i have paid to him. He gave us big rating (I think he do to everyone like this) I've asked to gave us some more rates for some more bitcoins, he agreed and gave us the biggest score. 5 minutes later I see my ratings fall down. Only on our site appears overview as once there Dooglus appear with his opinion and destroys our rates. Here I will explain a little bit how they work: Arrogant offers high scores for some BTC, then comes Dooglus and rates falls down, No one warns you about how the system of rates works. (In my thread Dooglus left a message which asks how such an rates for my site, and if it is not send me some BTC, where he knows everything? I repeat you that 5 minutes there was big rates, and then Dooglus come, this is their first fraud for money. Do you think that's a coincidence? Ok, lets go next). We begin to argue with Douglas about his rate about site (me know we are not cheating and we are not going to do it, Dooglus it understands, but still tells us that we are dishonest because at the moment we have no Provably Fair). We are very interested in Provably Fair system so we have started do design our own. Dooglus constantly pours us in mud, until we do it (apparently to hasten us to quickly grab a piece of pie). You see my English so I've asked Arrogant to help us with texts on site (for lot of BTC of course). With lot of texts there comes text about Provably Fair system, and being such an experienced person in gambling he could not not to notice our mistake, being Dooglus friend he could not not to notice our mistake because of lots of gambling site made it. I'm sure he knew about our mistake even before we opened it and working on me was to prevent this. But apparently Dooglus asked not to do so because of his next move. So, we are adding mistaken Provably Fair system and there immediately comes a deposit from Dooglus. (he saw a mistake, he decided not to warn us about it immediately, but it still could be warned by Arrogant, he decided to use the bug to make 10 BTC from 0.1). After that happens he PM me with screens and ask for BTC for that bug. I realize now that I had to do how most of "honesty" people do to say thank you man, or worse accuse him of cheating and to ban. But but I decide to act according to conscience and gave him as much as he asked. At that time we only had a little over 10 BTC and that 1 BTC was a big blow for us. And so, for what he received the money? For cheating? Not of course. For bug finding? No, for bug, that could be found by everyone he deserved the maximum 0.2 BTC. He received his money for silence and only for this we gave him the money. And what he do immediately after receiving the money? Сertainly tells all about our mistakes. So even at this moment we have the right to cancel our gift but we did not do that. If his purpose would not be selfish, and he sincerely wanted to help, he would not tell anyone about this, and even better warned about our mistake before we did it. But we see how he decided to do. Going next. He withdrew some BTC although saying that will only play on them (honesty of that man just rolls) but not in this case, look at what's next. About a day ago I have learned about Dooglus has his own gambling site and that he is also our competitor. Then I begin to guess why all this happened and begin to take their measures. Seeing only what remains my site from Dooglus is a chat, I hastened to add chat to my site and then what am I doing. I wrote a PM to Arrogant where asked him about my ratings on his site. For now my site is Provably Fair has chat, and Dooglus rate is unfair for that moment. Realizing that Arrogant is Dooglus pawn and that Dooglus will not change his ratings (although to be honest it has long had to do so after understood there is no cheating on my site), and only one thing Dooglus could do what else would even he do to stop us is to withdraw his last money from the balance on my site. So I have changed withdraw rules as chat was added (before PMing Arrogant). It takes about 5 minutes after PM to Arrogant and Dooglus withdrew his money. And what do you think this is also a coincidence? They are both are trying to spoil by all the ways. And after all this we still have to pay a competitor. I do not know where does this world, but it hurts me to watch that on your forum such people are in great authority. I realized that only yesterday when I started this conversation. Who needs proof and private messages please PM me, I can not do as these dishonest people and advertise the privates. I am sorry for my english.., Are you for real? You're making very little sense. Do you have any evidence at all that Arrogant is my pawn? I had no idea that Arrogant ran that site. I hadn't even heard of the site until you mentioned it in this thread. I didn't have an account on it either - when I signed up to post about your unrealistically high trust rating they emailed me my password in plain text (a fact which I commented on it this thread too). I posted my review because the existing review seemed fake. I didn't realise at the time that it was really a paid advertisement. I dislike the idea of fake review sites, where you have to pay to get a good review, and didn't know Arrogant was involved in such a scheme. I reported the bug rather than exploiting it because I'm not a thief. You never asked me to keep it quiet, but of course I didn't post about it until you had shut the site down to fix it. I haven't updated my review because you haven't asked me to. Instead you've acted like an angry child. I never said you were cheating. I said you didn't deserve a high trust rating. Do you understand the difference? You are new here so why should we trust you? Especially no that you have shown your true colours. It has been over 24 hours since I requested a withdrawal from your site. I guess you are going to keep my Bitcoin, so I have left you feedback letting others know not to trust you. Sorry it had to come to this. |
|
|
|
What about the staked coins? Will they be added to the invested amount?
Yes. I expect I'll have that happening automatically by the end of today. There's a backlog - the site's bankroll already staked 748.0859 CLAMs. So I think what I will do is have the site award 2 CLAMs to the bankroll for every 1 CLAM it stakes until it has caught up with the backlog - once I have the code developed and tested. I just put the update live - the site is adding the staked CLAMs to the bankroll at a rate of 2 per minute. There are 850.1036 staked so far, so it will take over 7 hours to catch up. And then staking rewards will be added to the bankroll as they are earned. I guess even if you don't want to invest long term, now is a very +EV time to do so... Edit: you'll need to reload the page if you already have it open if you want to see the bankroll updating as the stakes are awarded. Once you do, there will be a checkbox at the end of the 'account' tab to turn off the chat alert. |
|
|
|
What about the staked coins? Will they be added to the invested amount?
Yes. I expect I'll have that happening automatically by the end of today. There's a backlog - the site's bankroll already staked 748.0859 CLAMs. So I think what I will do is have the site award 2 CLAMs to the bankroll for every 1 CLAM it stakes until it has caught up with the backlog - once I have the code developed and tested. |
|
|
|
Let's discuss this issue personally I think there is very easy to arrange without a fight.
OK, go ahead. I think I have made my position clear. I didn't lie, we had a deal, you went back on it. What's your position? Message from dooglus only after I told I seen through their cheating. He knows what I mean and he's frightened for. Please give me time till tomorrow and all you will see I'm talking about. There will be lot of words and I have no time for that with my english. I have lot of problems with our chat and I'm fixing it. I replied to your PM as soon as I saw it. I saw it when you pointed it out with this message: Ive PMed him to talk about that problem private he did not answered me
I don't check my PM inbox constantly! And I'm not frightened. I've not cheated you or anyone else, so what do I have to fear? You'll make up some crap story and nobody will believe you. |
|
|
|
Maybe he is not a rich website developer yet - 10BTC is a lot of money. Anyone would be afraid to lose that. Perhaps that is why he reacted that way.
If you discovered an exploit and showed it to him, and you had no intention of withdrawing because you KNEW it was via an exploit, then fair game. I hope you didn't find a way to hack the site, but then again maybe you did and it was for good intention.
I found a way of cheating. I used it to win 10 BTC. I didn't withdraw the 10 BTC. I PM'ed the owner and told him how I did it. He shut down the site, fixed the problem, took the 10 BTC back, agreed to pay me 1 BTC for my help, and reopened the site. There are good hackers in the world who will try to protect people who are doing good - especially anyone in the bitcoin community. So why did they learn to hack?
If you don't know how to break security, you can't make a secure site. Yin and yang as you say. Everyone remain calm and lets reach a resolution without anyone getting hurt ok? If I had legitimately won 10 bitcoins, I'd hate to see them go because the site suspected me of luck. So lets get honest versions of our stories please?
Good suggestion. There's no need for all this name-calling and threats. I just want what's owed to me. Edit: I just checked my private messages. I replied to the first one agreeing to talk privately, but apparently it's too late for that, and he has decided he is indeed going to go ahead and ruin his reputation over this bug bounty...  I said I'd wait 24 hours before posting the negative feedback, and I will. I keep my word. It will be interesting to see this "proof" he's threatening me with. I call his bluff. |
|
|
|
Ive PMed him to talk about that problem private he did not answered me, so that it is not the first time he advertise our problems out and instead of helping us get from him only problems, so and after arrogant tried to break into our chat (I know they are together, who needs proof pm me)
So I decide that he does not deserve any gifts from us, the topic is closed.
I just saw your PM and have now replied to it. And I'm not together with Arrogant. We're just good friends. Dooglus and Arrogant are cheaters, give us some time to fix problems and after that I'll post revealing post here and will prove to everyone that they are tricksters, including some PMs to our account in which they cheated us on BTC.
I don't know what you're talking about. I found an exploit in your provable fairness implementation, used it to win 10 BTC, then reported it to you without withdrawing anything. You fixed it, and took the 10 BTC out of my balance. Is that "cheating"? Edit: I guess you're referring to this?  I'm nothing to do with whatever is going on in the chat. When I tried it the chat wasn't updating at all and was causing a page reload if you hit return so I stopped trying to use it. |
|
|
|
So, it seems, there is no online wallet for CALM ?
You can deposit to Just-Dice.com and use that as an online wallet I suppose. I need to give investors an option so they can choose between online (staking) and offline (secure) storage of their coins. |
|
|
|
@doog: please try again one more time, should be working now  Yes, it did work this time. Thanks! I'm pretty busy with other stuff now, so have been withdrawing (or trying to withdraw, at least!) from sites where I held a balance. I'm happy overall with my experience at SafeDice. The variable house edge is a nice feature, and the 0.5% minimum house edge is very competitive. The owners are usually very responsive to bug reports and suggestions (this withdrawal problem took quite a while to resolve, but that's the only issue that didn't get resolved almost immediately). I wish you good luck going forward. |
|
|
|
If I go through all this, will any coins sent to the old addresses after the fact be compromisable? When you give JD your private key using the /dig command, it will use the private key to create and sign a raw transaction that moves your 4.6 CLAMs to your JD deposit address, and then will throw the private key away. I don't log it anywhere. I can't prove that. I could be lying, and building up a big collection of BTC private keys, planning to rob them all later on. So for your safety I recommend that you only send private keys to JD (or any other site) once you are sure they are "retired" from use. They're your private keys. Once you share them with anyone you can no longer be sure that they are private. |
|
|
|
|
Show Posts
