Licensed by whom? A government authority that inspects an RNG once a year? No thanks, I'll stick to provably fair sites where I can verify for myself if they are cheating.

First of all, I didn't directly accuse that FreeBitco is manipulating the Rolls because I wouldn't be taken seriously if I did so.
It's better to provide all the information necessary so you can check it by yourselves and even maybe convince FreeBitco to improve their system.


I will explain this in two stages:
First the current (and exploitable) implementation:

1) You Login into FreeBitco and click on the "THIS GAME IS PROVABLY FAIR!"
2) In this screen, the Server *promises* that it will calculate the next roll using your Client Seed + next Nonce + Server Seed. (Server sends you the Hash of that seed so you can check it later, that's perfectly implemented).
3) You save the server seed hash and you hit Roll.
4) The server does all the math. Using the Client Seed, the Nonce, and the secret Server Seed.
5) Then here is where the server MAY say: Oh wait.. I do not like this roll. Let's use the Client Seed, the Nonce, but let's break the promise of which Seed we were going to use.
6) You verify your bet using the bet History (which was saved by the Server). The math here rounds up perfectly and the game seems provably-fair.

There are two problems for you with this implementation regarding how can you verify that you were cheated:
1) You will need to do this for probably thousands of rolls until the server attempts to cheat on you.
2) Once you eventually find a discrepancy, you will be left proof-less and alone. The server promised you it was going to use Hash111 but ended up using Hash222, in the History it stored Hash222 for you to verify/share the bet result.


Now, here is the basic idea on how it should be implemented:

1) Server generates a new secret Seed. Sets the Nonce to 0. And returns you the SHA256 of that Seed.
2) When you roll, you provide your own Client seed to the server.
3) The server calculates the roll using it's secret seed + nonce + client seed.
4) Server increases the Nonce by one. And keeps the same server seed for the next roll.
5) If I want to verify my bets (and only if I ask for it). The server reveals it's secret seed to me and re-executes step 1 for future rolls.
6) The server should add an entry to the history saying that I manually requested the server to reveal the seed.

This way, the server should be able to calculate all rolls without changing the promised seed unless you ask for the seed. Also, you don't need to save each server seed hash and compare it with the one used in the rolls history.
(It can still cheat you into saying you asked for the Seed for verifying before you actually rolled and thus generating a losing seed)
But at least this way it will be way more visible for you to see if your are being cheated, because you will see that the server changed the seed without you asking to reveal the seed.

It's not perfect. But this way it will be extremely hard for them to conceal the cheating.
To compensate the problem of this proposed approach, an option is that the server provides and resets the server Seed and Nonce every week. This way the server cannot cheat the History by saying that you requested the seed for verifying when you didn't.
You will only be able to verify your bets every week, but it can be optional with a setup with a cooldown.


Sorry for the delayed response. I'll do my best to answer all the details.

this time I do not have oversteps, all my bots are working, blocking them is not touched)) continue to milk the cow

И зачем было писать в офф. ветке такое? Крутишь , так не пались хоть. Заработал несчастных 3-ри копейки -  радуйся . Возомнил из себя тру хакера, ты еще больше злишь админов своими смс.

I've just heard from wetsuit and I've asked him to have a look at this. My personal view and understanding is that sort of manipulation wouldn't work because there's a nonce on the client side. The argument that the server seed could be changed is negated by the fact you could easily implement a script that checked that before and after each roll. I'm sure there are enough sceptics out that have tried to catch sites out and have failed because they don't actually cheat. It really wouldn't be worth it, the site's reputation is worth far more than any individual bet.