New buyers on the Original and Self-Destruct mode!

Ladies and Gentlemen,

After a long wait I present to you the open beta of the completely remodeled Casinobit.net! We are the first casino to introduce live feeds and will most likely be the last, I believe that a live feed offers a level of excitement other RNGs simply cannot deliver, best of all payouts are nearly instant and we offer secure and fair play.

Currently we offer live european roulette as a minigame without registration, simply send in a transaction and receive your payment!

We are also looking forward to hearing the communities suggestions so we may evolve our product further. As of the moment we are going to implement a "hack" which will only send out a transaction notifying of loss when you have included the numbers "777" in your transaction, in the beta this feature is enabled by default at the cost of the house edge in addition to paying generous fees as always .

Please keep in mind that the current version is Beta, thus we ask of you to not kick us please in case your transaction is not processed promptly or not processed at all , every unprocessed transaction renders an automatic email to an administrator and we aim to eliminate all the bugs as fast as possible, in case your transaction is unpaid you can contact the "unpaid" team from the bottom of the page at "Contact". Early adopters will benefit the most because of the table limits in addition to suffering potential issues.

I woke up this morning and got on sealswithclubs account to discover 3000 chips were missing. After looking at withdrawals there were none. After checking player to player transfers, I noticed my account had sent 3000 chips to KOSH123, WHICH I DID NOT AUTHORIZE. I am now out well over $500 and honestly being 18, I am getting out of bitcoins, selling all I have and telling my story to other people thinking about getting into bitcoins. My friend Kevin had his BTC-e account hacked and changed password and no help from support. He lost .90 BTC himself. LET THIS BE A WARNING FOR ALL THOSE LOOKING TO GET INTO BITCOINS!

Pretty cool concept. I'm definitely going to give this a go soon!

Okay we now give out 0.01BTC to every member that plays the casino regardless of win/loss. Just post your txid in this thread. Only valid once per member.

Got it.  Like Tom Smykowski.  He deals with the god damn customers, so the engineers don't have to.  He has people skills, he is good at dealing with people!  Can't you understand that?  What the hell is wrong with you people?

And when a site uses a secret 10 characters in length, your bruteforce suddenly takes 3,844 days.  Watch out if they increase it to 14 characters, then you're looking at 155 million years!

So what makes you think a site like SatoshiDice would use an easy-to-bruteforce 8 character or less secret?  In fact, they use a 64 character secret!  http://satoshidice.com/secretlist.php

Seriously, you are doing a TERRIBLE job with PR for this site.  You come in here like a buffalo in a china shop, aggressively attacking anyone who disagrees with you, with no regard for the fact that THEY MIGHT BE RIGHT!  I would strongly suggest that you step down out of whatever public role you hold with the "company" and have someone else with a much thicker skin and who knows their cryptography step up to do the job.

The fact that doing so will probably take anywhere between 175 and 24395872948732987 years to complete.

Hashing is a wonderful tool that solves all sorts of problems that when solved make a provably fair casino possible.  I invite you to learn as much as you can on the topic.

This makes cracking passwords using good graphical cards very easy. Currently you can check about 310^9 SHA256 hashes per second (src), keep in mind that attacker knows salt and algorithm which you use for hashing passwords. So in one day attacker can bruteforce 310^96060*24 = 2,6 * 10^14 passwords. Assuming that password is chosen completely random from a set A-Za-z0-9 (62 different characters) in one day attacker can bruteforce password with a length of log(2,6 * 10^14) / log(62) = 8.

I'm not sure how you think the rest of the casinos are BSing about provable fairness. THEY ARE NOT. SIMPLE EXAMPLE:

Lucky Number ranges from 1 to 100. If it's less than 50, you win 2x!

SITE has a secret. Say "foo". Now if they tell the secret, then people can calculate the lucky number. So they HASH it with something like SHA256 and tell you that.

YOU has a secret too. Say "bar". You give the secret to SITE. Now site will know your lucky number since they combine your secret, with their secret. However they cannot change their secret now since they already gave you the hash.

Now do you understand it?

You might say, but the site knows their secret! What if they played the game THEMSELVES? They'd knew what PLAYER secret to use to win! But the only point of that is you're SCAMMING THE GAME. However if 10% of the "game" is owned by outside investors, then you can scam them. So yeah, satoshidice can scam their shareholders but not you.

What do you mean by that?  Is it that you don't understand how provable fairness works, or have you found some way the sites can cheat despite their so-called provable fairness?  If so, could you please point out how?

I want to remind again that Casinobit admin is misleading about 100% payout! Having 2 zeroes on the roulette gives him 5.26% advantage.

Your game needs to be provably fair before any sane person plays it.

PR/Marketing fail itt

I'll give it to you as requested!

The post I deleted was based on the assumption that you didn't understand how hashing works (you admit this in the context of password security) and was an attempt to explain it.  The reason I deleted it was that I came to understand that your point might have been that the secret list would permit the business to defraud its shareholders, not so much the business to defraud bettors.  I don't know that to be certain, but felt it was prudent to give you the benefit of the doubt.

I don't think I ever accused you of trying to scam - rather, my contention was that you didn't appear to have the requisite security knowledge to run a bitcoin casino and handle other people's money, and appeared to be taking an attitude not of trying to learn it, but boldly dismissing it with overconfidence.

When you are confronted with someone engaging you on a security-related topic,


isn't an appropriate response.  The correct response is to either alleviate the concern, or address it on its own merits, without reference to people "not thinking for themselves".  In this case, the correct response would be "Including the transaction ID in the hash protects the bettors but doesn't solve the problem that leaves the shareholders vulnerable to insider fraud."

It's really not a matter of pride for me: I'll be proud of you if you bring a stable secure trusted casino to the Bitcoin world with a willingness to learn whatever you need to do to build the best business you can.

Dooglas is the man when it comes to testing gambling sites. It doesn't look good to write him off as color blind when he is just trying to give you advice. You would think knowing that someone who potentially would play your games is having trouble would make you want to change it so the max amount of customers can play.

Ok, I admit that I was kinda stupid in my last post, I just learned about hash passwords, but this doesn't mean that no one else knows about it. So, my questions is, if you're hashing the passwords why are you concerned about the password length?

and here I couldn't run it in firefox also, only in chrome.

Site keeps crashing. No other site does this, so it isn't my side.
Will this be fixed? Or it doesn't work in Firefox?

This is troubling.  I'm not much of a gambler, and haven't ever played SatoshiDice, but someone bringing a casino to the Bitcoin community is really not doing their homework to not understand how SatoshiDice's hashing works and why knowing the secret list ahead of time isn't a problem if it's being hashed with the transaction ID.  The algorithm is too simple for someone willing to build a casino website to not understand, and the overconfident attitude is highly misplaced.  Sorry, but I must apply my stamp of disapproval to this one.

Just to make it clear, I have no interest in anything gambling-related whatsoever.