We started our blog: on medium. So go ahead and add as to your bookmarks


This is the first post about new version development of BitDice Casino. We are going to tell you how hard it is to create such services, how much effort we put in it and how sophisticated our code is.

First of all, I have to mention that starting from V4 we will ask for an email during the registration and will block all one-time email providers. The latter is made against recent DDoS attacks on BitDice. Also we are going to pivot to casino, where dice will be just one of the many games you will be able to play.

Why do we ask for an email? First of all, it is another security level. The email will be used for large withdrawal confirmations, password resets, and will alert you about suspicious sign-ins. It will also inform you about the various events held by BitDice.

We promise that this information will be private and never be traded to anyone. It will not spam your mailbox.

Today I will tell you about one of the most important aspects of any service holding the users’ funds — authentication. We will discuss the way we process user sign-ins, log requests and block user accounts if we see any suspicious requests.

Besides obvious (user sign-in itself ), we do several other things:

• User account and password brute force protection;
• Holding session state and ability to close all the sessions or any of them;
• Monitoring user sign-ins and alert users in case of different browser\country;
• Block user accounts after X invalid sign-in attempts;
• 2FA protection;
• White-list IP address;

We are brute force save! Firstly, we block IP addresses during account and password brute force attempts. Second, we lock user account even if attacker uses different IP addresses.

Close any session anywhere! With new V4 you will be able to close any open sessions that left active from your previous sign-ins, such as the ones from the public places or friends homes. You can stop worrying about someone having access to your account.

Check where and when you signed-in! Now you can check authentication logs. Any successful or unsuccessful attempt is logged with IP address, browser information and country of the user.

Account lock! Concerned your password was leaked and someone used it to sign-in? Nothing to worry about. As chances that hacker will be using the same browser and as you normally do is very low. We will lock your account until you confirm with email that it was in fact you. Stay safe with us!

2FA Protection! Don’t like Google Authenticator — use Authy, or any other TOTP application to protect your account. We take care about 2FA brute force too! This is the last resort and it will stand out!

Whitelist your own IP address. Still think our protection is low? Use private VPN and prefer to lock the world out of your account? You can do it with us!

Thank you for the time spent reading our blog. I promise to get back with new posts about the most professional and secure bitcoin casino available to the best players like you!

Regards,
Alex

PS: There's no ETA on new version. However images I will post are from final designs, some code like this one is already written and tested, that's all I can tell for now.

I've delayed WD for 24H to re-check everything. Should be released soon.

Some people just can't read. I do not have any relation to the winner.

Guys, I don't play against investors, it's real user, with real balance who won >500BTC. Period. Stop the speculation and congratz the winner. Today is his day.

Yes, I never disclose any information about our players, if he would love to show it he will. Other way you just need to trust me about it

That user played for months, wagered each day like 1k btc and was loosing up to 200 BTC, then getting it back with profits and again and again. He's regular in chat. Everyone who's regular to BD know him.

That's just WOW!

Sorry to hear guys. That's really sad. I hope your loss was not really big. Anyways wish you all all the best.

Regards,
Alex.

I see DaDice team is back?

Hello guys,

If someone can't access site, please drop me a message here or on email as you might got under our anti-DDoS script.

PS: Yeah, I know, it hardly notice but we are under DDoS 

Regards,
Alex.

We are online! 

Guys, we are upgrading mysql and need to optimize database, thus we stopped the server for a while, ETA is about 20-30 minutes. Will keep you posted.

Guys, thank you all for the ideas. There were few very nice ones, but the winner is...


Email me, or just poke me in chat for tips

Thanks!
Alex

You can post as many as you like.

Guys I've updated my post by adding (OPTIONAL) point:

I would prefer progressive ranks, like from fish to whale or from sergant to admiral. I understand it's hard to make it related to gambling, but if someone will it's a win

Regards,
Alex.

How does it relate to gambling?


BitDice, however for the next version wich is far from even beta test. Still I do not understand how it can be used to create user ranks.


We are registered company, if some site would decide to steal our ideas - that's their problem. I think community will punish them for it. Also how does it save us from releasing them on site later?

Hello guys,

I'm gonna pay 0.1BTC for the best list of 15 user ranks for gambling site.

Rules:

1. Those ranks should be related to gambling ( which excludes military ranks! ).
2. Each rank should be one or two words max.
3. They shouldn't be offensive.
4. I would prefer progressive ranks, like from fish to whale or from sergant to admiral. I understand it's hard to make it related to gambling, but if someone will it's a win

Time-frame 24H, so it will end 6.30 PM 28 Oct.

Regards,
Alex.

PS: Added point 4, at 7PM 27 Oct.

We are optimizing database, it's very intense modification and to provide 100% consistency with new data we had no choice than to turn off the site while this update is being performed. At the moment its close to 60% it took much more than expected and will be finished within next 20-30 minutes.

Regards,
Alex.

Hello guys,

Just to clear this out.

User created wd request 2015-09-13 16:17:54, it was processed: 2015-09-13 19:31:13. (in about 3h) [http://khashier.com/tx/d6f9e3d9e4a75815fa5f681db780009ce144b5f3336deec6277dc83ecf6a35f6#o1]

As it's manual processing, transaction id wasn't updated with websockets for him and as he didn't refresh the site he didn't see it was processed.

He also emailed to outdated email address that he got from some user in chat. Thus I was not able to reply to it.

Regards,
Alex.

As I've already told you in chat, our official email is bitdice@protonmail.ch, some user told you wrong information. That email is off for 6 month already.

As you still say that you didn't get those coins, here's your transaction: http://khashier.com/tx/d6f9e3d9e4a75815fa5f681db780009ce144b5f3336deec6277dc83ecf6a35f6#o1 you can check the date there, which confirms that you got it after 3H.

Regards,
Alex.

Hello,

Maybe after V3, which isn't any time soon.

Regards,
Alex.