Got this PM Hello,
Your site is extremely vulnerable to ddos attacks.
You are OVH's protected server, but still vulnerable.
I want to offer you info how to properly setup your protection, so that you can't be ddosed.
My price is 2 Bitcoin.
Right now I will start small demonstrative attack which shouldn't crash your site, but slow it down only. As soon as you see it, let me know so I can stop.
For more info on how I did it and what you have to do to prevent it, pay me 2 BTC to 1LBod6Gocz2PQRb4yJNuZ9dw52aprmGTdP
Thank you.
Ofc I will never pay. I need few more minutes to fix it. |
|
|
|
and DDoS  162.144.41.80 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 70.40.216.235 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.1" 504 176 "-" "-" 185.24.69.4 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 95.128.72.41 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 119.59.122.82 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 37.187.143.58 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 198.57.162.137 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 185.56.73.100 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.1" 504 176 "-" "-" 79.175.164.230 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 203.151.233.59 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 66.209.94.140 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 50.63.138.51 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 162.144.41.80 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 216.52.167.10 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 202.29.55.4 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 95.128.72.43 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 77.120.80.6 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 94.23.205.152 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 216.251.35.195 - - [19/Oct/2014:03:58:48 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 85.128.142.13 - - [19/Oct/2014:03:58:49 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 87.204.126.3 - - [19/Oct/2014:03:58:49 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 202.68.81.106 - - [19/Oct/2014:03:58:49 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 212.96.160.138 - - [19/Oct/2014:03:58:49 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 185.26.122.224 - - [19/Oct/2014:03:58:49 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 202.0.37.17 - - [19/Oct/2014:03:58:49 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 216.251.35.192 - - [19/Oct/2014:03:58:49 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 91.93.107.78 - - [19/Oct/2014:03:58:49 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 62.219.58.210 - - [19/Oct/2014:03:58:49 +0200] "GET / HTTP/1.1" 504 176 "-" "PHP/5.3.27" 89.161.144.209 - - [19/Oct/2014:03:58:49 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 77.78.198.36 - - [19/Oct/2014:03:58:49 +0200] "GET / HTTP/1.0" 504 176 "-" "-" 77.78.198.36 - - [19/Oct/2014:03:58:49 +0200] "GET / HTTP/1.0" 504 176 "-" "-" |
|
|
|
|
somehow resolve dosnt work...
root@dogedice:~# ssh github.com
ssh: Could not resolve hostname github.com: No address associated with hostname
|
|
|
|
|
LiteDice.me is up, working on others.
|
|
|
|
|
Sorry for this, it's keep crashing. I localised it to our anti TOR check: final error: resolv.rb:835:in `send': Operation not permitted - send(2) (Errno::EPERM) on checking TOR's IP Address. Need some more time to fix. Will keep updated.
|
|
|
|
|
Redis cluster crashed, restoring them, need few minutes, do not worry.
|
|
|
|
|
Thanks for the review Dooglus, I will address all questions tomorrow. You are right, bet number is our nonce and unique to each user.
|
|
|
|
Yes, i noticed that too! BTW have you placed played on bitdice to check out the site?  I don't think I've played there. I was just about to say I would go and check it out, but the last two times I went to check out a dice site I ended up liking it, playing a bunch, investing, putting a link to them in my signature, then divesting, withdrawing, and shortly afterwards watching as they scammed thousands of coins from other investors, and ended up being accused of leading innocent investors to their doom. So do you mind if I sit this one out? You will be sit out for very long time |
|
|
|
And now we have BIGGEST max profit among all dice sites!
Do you have proof for that? Max profit on PD is 40BTC, we have 40.12BTC, you can show me any other casinos with bigger profits? |
|
|
|
In this transaction 188oB1TR6gNXxzyxJCyck9BHkU4dBMVmVg sends btc directly to bitdice.me coldwallet. both last 2 transactions 1 day before the D.N heist... In regards to the Dice.Ninja theft. I've read DN topics, AKC lost ~400BTC on BitDice and I moved funds to coldwallet. To confirm, In this transaction you received a 30 btc deposit from AK right? Well, I've checked this transaction and this deposit doesn't belong to AKC. |
|
|
|
Your attitude is reminding me of DiceBitco.in. From my previous my experience I have seen big words are generally followed by crash. Or in your case, if it is already planned like dice.ninja.
Normally people ask, why you did that rather than that, or how would you proceed with this. And I would love to explain everything, but when someone starts with "I will leave you a negative feedback and why would I do something for you for free or above the contract", without any commitment to solve the situation or just ask, I do not like that attitude, and my conversation will be strict business. I think I emphasized (twice!) that I expected that there was some rational explantion and that I look forward to hearing it. So, in a very concrete way, I did not start with "I will leave you negative feedback...". In fact, I started with the expectation that all would be explained. I'm still confused though: 1) you expect people to advertize for free in a kind of "holding period" until you say go? 2) When was your official "start" date? 3) How do you acount for the free advertizing you're demanding during the time between when people sign up and add the advert and whenever your start date appears? Looking back through this thread, there does seem to be an effort to extract free advertizing, for example: 2) I've not accepted any HERO, as those who posted have not changed signatures. I will do it as soon as they change signature to mine, and write here again!
So basically, folks who said they were interested, but who weren't going to advertize for free while waiting for the "start" were being chastized for this. Hmmm. Finally, forum history shows that I aded your signature on on: October 07, 2014, 03:23:11 PM (in my TZ). Today is 15 Oct (in my TZ) so your suggestion to pay for "6 days" isn't really intuitive. I've been wearing your ad for 8 days and counting ... I think I should also emphasize that I'm still not clear when the official "start" is supposed to happen?! I've already replied, have you read last post on page 5? Campaign started from 09 October, as I confirmed here: Yeap
Payment will be made on the NEXT day after two weeks (9+14+1) = 24 October. I need time to check posts, count everything and to pay. I do not say it will be definitely 24, but that's official pay day. |
|
|
|
Can you please explain how this is a safe way to invest. What's stopping you from running with investment funds or creating a backdoor to cheat investors? Just like the other two "popular" dice sites did.
yup, there is no guaranteed safety, he can run away anytime he wants with the investors fund That's exactly why I made it. You invest only small fraction of your bitcoins and risk only with those fraction, however your expected profits made such as you invested all your bitcoins. |
|
|
|
|
And now we have BIGGEST max profit among all dice sites!
|
|
|
|
Your attitude is reminding me of DiceBitco.in. From my previous my experience I have seen big words are generally followed by crash. Or in your case, if it is already planned like dice.ninja.
Normally people ask, why you did that rather than that, or how would you proceed with this. And I would love to explain everything, but when someone starts with "I will leave you a negative feedback and why would I do something for you for free or above the contract", without any commitment to solve the situation or just ask, I do not like that attitude, and my conversation will be strict business. |
|
|
|
Super confusing! He said he was paying every 2 weeks, so why would you assume that he won't check until a month has passed?
Furthermore, to the folks who say that things don't start when you sign up, I don't understand why OP thinks he would get free advertizing from the day we actually put his signature until the day he finally decides to "start".
FWIW, OP hasn't chimed in here yet so I'm just waiting for clarification. However, I know that I've been wearing his signature for at least a week, if he's not going to be counting that time persiod, I'm going to be resigning and leaving negative feedback. He can't expect to ask people to wear his ad for free while he waits for things to "fill up".
I'm sure there's some reasonable explanation, looking forward to hearing it from bitdice.me.
I explicitly said that it will start as soon as I feel the space if you do not like my rules, you a free to go, I will pay you for 6 days and let other members in the queue take ur place. |
|
|
|
Campaign started from 09 October, as I confirmed here: Yeap
Payment will be made on the NEXT day after two weeks (9+14+1) = 24 October. I need time to check posts, count everything and to pay. I do not say it will be definitely 24, but that's official pay day. |
|
|
|
I think that's about me? I'm not specifically targeting you, but you do have a few posts that show you aren't a fluent speaker/writer. Of course I'm not. Never pretended to be But I try to fix my mistakes and most official posts being proofread. |
|
|
|
I think that's about me? |
|
|
|
Current events have shown that something should change in the market. Things cannot go on like it has been. Casino owners hold large amount of funds, investor risk is high, not due to site's variance but also due to potential trust issues with the site owner. Hence, a week ago, we have implemented Kelly for investors. This is the reason we have a maximum profit of 37 BTC (PD has 40 BTC). In short, you can deposit 100 BTC but will gain or lose as if you've deposited 1000 BTC with x10 Kelly. I did think about allowing all users to change kelly and decided against it as there is too much risk involved - they could lose everything with a few max bets on the site. I have limited Kelly to 10. All users will have it at 1x Kelly by default. When you confirm that you have at least 100 BTC (by signing a message with the address) and send me an email with your username, I will update your account to the selected level. If you have any questions and / or suggestions on how I could improve the system further, I would be happy to hear them. I am also thinking of moving away from cold wallet to multisig addresses. I am still reviewing this option. I try to do all I can to improve security levels with all my sites. Best Regards, Alex |
|
|
|
nice bump in BTC. comgrats Alex
I have bitdice.me invest bump as daily headline at CBI
Thanks. Slowly climbing to the moon |
|
|
|
|
Show Posts
