|
I know everyone already knows this, but please do not reuse passwords across sites. If you do, please change them now. Also make sure you use strong, unguessable (and unique!) passwords on every site your visit.
I've noticed the last couple of days, a rash of login attempts (and unfortunately logins) across bustabit and moneypot, by what appears to be set of harvested bitcoin gambling username/password lists. All users have in common that they reuse their small and weak passwords. I'm emailing all the involved users, trying to get an idea of where they reuse their passwords to narrow down the source, which could be:
* A site that's vulnerable to brute-force login attempts (so they're attacked there, and re-used)
* A site that's had its data leaked (containing plaintext or hashed passwords)
* A malicious admin, who is using their users username/passwords on other sites
Also, 2FA has already saved one user 1 BTC, so that's something worth using too. But a secure, unique password on all sites (especially your email) is paramount.
|
|
|
|
Holy shit! It's christmas time at bustabitBefore:  After*:  Merry Christmas everyone! *The new logo is only visible on the homepage (it would require too much work to make it mobile-friendly on the actual game), and only for a limited time!
|
|
|
|
Congratulations to the kapi Continuing his slow, unassailable climb to almost 48 bitcoins in net profit!
|
|
|
|
I have told you 100 times i am not posting on your site. How many more times do i have to say that.
Did you check the support chat, where I talked to a co-owner who had the same ip and session data as the person who's been spamming? And responsible for the following spam-accounts (disclaimer: there may be 1 or 2 false positives in this list, as the spammer started switching to using a VPN service): "getrecked"
"Give_it_chance"
"mesooooo"
"0Wnage11111"
"maybeimback"
"bestrafflesite"
"awesomeraffle"
"D3xonbot"
"dontbashus"
"whobe"
"tomtom"
"hearibe"
"winsomebtc"
"doubleyourbtcfas"
"yesspamsites"
"getlucktonight"
"bestlottosite2"
"bestlottosite1"
"spammychat"
"mahahahlol"
"whoisthis"
"ownage1111"
"justforfun"
"maybe_try_it"
"bustmybits"
"KatnissEverdeen"
"lolatryan"
"comeatmedog"
"heywhynotok"
"bestlottosite3"
"suckitryanskid"
"maybeitsfun"
"itstooofun"
"comeatmedexon"
"damnreckedbydexo"
"bestbtcsiteever"
"playarealgame"
"30secsanddouble"
"mybitsarebusted"
"keeptalkingshit"
"guesswhosbackkkk"
"whynottryit"
"yepyepyepyep"
"wowepicfaillol"
"hereweare"
"BTC-Raffle-com"
"googlebtcraffle"
"whynotwin"
"lolatdexon"
"Wassabee"
"doubleupbtc"
"beslottosite4"
"bettersite"
"0wnage111"
"botmarket"
"hahahahllololol"
"youbutthurt"
"myipreally"
One thing i know for sure is people do not spend everyday all day on a website for free. It's very clear dexon is paid to promote bustabit he even is doing a lotto as a ploy to get people to bust. Cash out at X6 and you get entered into this fake lotto. He shows 0 proof the lotto isn't rigged or even shows any proof anyone has ever won. Stop acting like he don't work for you. Call it staff/admin what ever you want fact is he is part of your site.
Basically you and your staff have attacked my site i have proof. You and your staff been trying to bash my site sense day one.
I think its time for you guys to stop its getting old.
I've already explained the relationship between Dexon and I. He's an unpaid chat moderator, who also plays on the site and wrote a bot. He created a lotto that tries to reward active chatters on the site. You used to enter by chatting, but that got abused to much -- so it was changed to betting (which you can use the faucet to achieve) and then you need to type "!claim" in time. The prize is a grand total of 100 bits (4 cents). It's not provably fair, it has never been and I don't think anyone really cares. It's just a bit of fun |
|
|
|
Ok so lets call him staff you can be the admin but clearly him and dexon work for you.
No he doesn't. He's an unpaid moderator, who runs a bot (Dexonbot) which anyone can do (e.g. Shiba is run by kungfuant). I was hoping you were going to stick to your words when you last said
"I won't be responding here further"
My words were: "I won't be responding here further, unless you drag me back into it." and immediately after you brought me into, by saying jlfvr is "Clearly an admin" which is something I felt the need to correct. I have asked you and your staff to stay off my thread but you guys at this point are just acting like trolls.
I do not have any staff. And I would like nothing more than to be never visit this thread again, but you can't expect to continue to spam and make false claims about bustabit and me to not respond. How about at truce? You don't spam on my site, and don't bring up false-claims about bustabit and I will never post on your thread, or visit your site again? |
|
|
|
I didn't say he has nothing to do with bustabit, but he's certainly not an admin (considering, that I'm the only one...). Actually, he freely admits he's a bustabit player: I am not here to "bash you", I'm here because someone—who turned out to be an owner of your site—kept and keeps spamming links to btc-raffle in bustabit's chat, so I decided to take a closer look. Was that not the intention? There's no such thing as bad publicity, right?  |
|
|
|
Is it just me or does that make 0 sense...
...just you You also are claiming the other accounts who are being used to bash us have nothing to do with bustabit now with one look at the other accounts its clear as day they are other admins of bustabit.
ffs. I don't know how to make this any clearer. There is no secret bustabit admin cabal. It's just me. I am the only bustabit admin. (And as far as I can tell, jlfvr has done nothing to bash you. He's just discussed provably fair on a technical level, something which you seem unable to do) Anyway, this is a huge waste of my time. I won't be responding here further, unless you drag me back into it. |
|
|
|
You are incorrect the tickets are not "sequentially in the order' You could be the first player or the last player and get ticket number 1-1000 there is 100% no way for someone to pick there numbers its all 100% random.
Picking a random number is fair, just that it's not provably fair. Why do you bustabit kids keep trying to bash the site are you really that threatened by us?
I'm not sure who jlfvr is, but he doesn't represent bustabit (only I do). However, he does seem to make valid and well articulated points (which if it was me, would have no problem writing under my own name). Anyway, I have approximately zero interest in your site, if I'm being honest I haven't even bothered to try understand your provably fair. If you stop bringing up bustabit, I'll have no reason to come here and defend its name. Oh yeah, and as of at least ~10 minutes ago, either you or one of your "5" co-owners is spamming your link. I can promise you, you're doing far more harm to your brand than good. And seriously, for the next time you want to spam a competitor you should just use tor or something for plausible deniability. It's pretty embarrassing when it can be definitively linked to you.. |
|
|
|
Edit: I just noticed that https://www.pevpot.com/draws/6 has off-by-one errors. The first tx bought 230,000 tickets, 0 through 229,999 - but the linked page says 0 through 230,000 (which is 230,001 tickets). Taking 1 from each number in the 'to' column would fix this. Just an old habbit of mine to express ranges as [inclusive, exclusive), but it's a bit confusing so i'll change it to [inclusive, inclusive] now Edit: fixed |
|
|
|
Link returns `not found` should be `/draws/` Thanks, updated! |
|
|
|
edit: mm so the "Verify" script says 1,553,035,541 tickets, but the Draw page says 1,553,025,541. This gives 2 different winners (by verify script 5 BTC bettor, by draw page 10 BTC bettor):
Thanks for this, the verify script was showing unconfirmed transactions as part of the draw. I forgot to filter them out. The fix is: --- verify.js
+++ verify.js
@@ -123,7 +123,7 @@
data.txs.forEach(function(transaction) {
var height = transaction.block_height;
- if (height > from) return;
+ if (!height || height > from) return;
if (height < to) {
done = true;
return;
and the winner is announced: https://www.pevpot.com/draws/6 ! |
|
|
|
Do we need to provide a tx id when we place a bet here? I'm confused in how you can know who to contact if someone does end up winning if you just have the address it was sent from?
No, if you do it properly it will all be automated. I'd recommend creating a forwarding address from: https://www.pevpot.com/how-to-play(Just if you do it wrong, and pay from shared-wallet ... or enter the wrong address (like draw #3), let me know and I can work with you to correct it). BTW I'm going to sleep now, so I'll handle the draw/payment in the morning =) |
|
|
|
How did he get the negative trust again? It just got removed this morning  This is weird. I removed it earlier, as a show of good faith as I didn't want to harm them, just get them to stop spamming. However they kept going at Dexon/bustabit didn't stop (even after I linked their owner on support with the spamming), so I ended up just re-adding it. |
|
|
|
Dexon is a admin of bustabit quit lying. After your team of admins have attacked my site + trying to bash us, makes me not care anymore about your site being spammed. I suggest you fix your site from being spammed.
I'm really not sure what your problem is. I don't expect you to care if my site is spammed, I just expect your site to not participate or encourage it. And as I've said, I am the sole owner and admin of bustabit. Dexon is just a user who has the ability to mute people (a mod). |
|
|
|
How stupid of me, sent 0.01 BTC using a web wallet lol. Oh well, a little donation to the pot anyway  ) Don't worry, it's not a problem at all. If you won, I'll work with you and help you get the money =) [This is why I don't just blindly send back to the sending address] |
|
|
|
|
Just around ~4 hours (21 blocks) to go! Also thanks to betking.io and just-dice.com for sponsoring next round, it looks like it'll have some good early bird bonuses! So get in early!
|
|
|
|
is he running the lottery from his own funds? if so its very generous of him.
Yes, and yes it is. I do help him top it up every so often though =) Edit: will there be some sort of a referral system, have you ever thought about doing it?
There's really not enough of a margin to support a meaningful referral program. I mean, despite incredible volume (~18k BTC wagered in the last 30 days), our thin house edge has still managed to be down 55 BTC during that time period (good player luck). So we really do rely on organic word-of-mouth to survive =) |
|
|
|
@jlfvr your only other post is you talking about bustabit so clearly your just here to bash us.. Reading over your post all your saying we are untrustworthy. The same thing can be said for guys site. This site is all about player vs player when your site is players vs the house. Clearly we are a threat or you guys would not be putting so much effort into trying to make us look bad.
Yeah, that's definitely it, nothing to do with the spam from the last couple hours: 21:46 spammychat: [Lotto] Every 30 seconds at btc-raffle.com
22:09 comeatmedexon: [Lotto] Every 30 seconds at btc-raffle.com
22:53 D3Xon: [Lotto] Every 30 Seconds At Btc-raffle.com
23:16 youbutthurt: [Lotto] Every 30 seconds at btc-raffle.com
23:25 notgoingtostop: [Lotto] Every 30 Seconds At Btc-raffle.com
23:41 doubleyourbtcfas: [Lotto] Every 30 seconds on btc-raffle.com
and I've already confirmed that it's not any of your players, but someone from your site who handles your support claiming to be an owner (based on ip/session match). I do not want to see anymore post from the bustabit admins on my thread.
Dexon's not an admin of bustabit, just a user with a mute stick. I'll ask him to leave this alone, and I'd appreciate if you (or one of your fellow co-owners) cut the spam bullshit out. |
|
|
|
I have said it is not me who is saying anything on your site. There are 5 owners to this site i messaged everyone saying do not use your chat box. What else do you want me to do?
Incase you need help finding which one of your 5 owners is spamming: I contacted support yesterday and confirmed they were (one of) the owners, after which I sent them a link a made-up URL on bustabit.com (/misc/btc-raffle-spam.png), and immediately in bustabit access logs were a request from the exact browser/ip/session that has been used to spam my site. If you check your support logs, who ever handled my ticket is without a doubt the spammer  |
|
|
|
First off you both are running bustabit you both are attacking me i have not once went and spammed your site chat. I have a bunch of people generating traffic for me it could be one of them ill message everyone.
But the fact is you both are trying to bash my site because you also own pevpot a competitor site.
Please stay off my thread when all your doing is flaming.
First of all, I really don't have a problem with competitors at all. Hell, you can download a copy of bustabit and run it yourself if you want *and* even talk about it on my chat. I don't mind. I'm pretty much the least competitive person you'll find. Pevpot doesn't even come close to paying the bills, it's just a bit of fun for me. Hell, if you want, I'll give you a coule bitmillicents to buy a sponsorship on the page  As for the spammer being you, this is message was made 9 days before the bitcointalk thread ("2015-12-05 23:00:44.336+00"): (a message that's completely fine, and the sort of conversation I like to see on my site. I personally didn't check out your site, but I know Dexon was) and later you discuss bug-fixing. All which is fine. But then after you launched, I can definitively link the original account with 100% certainty to these accounts: "lolatdexon"
"ReignofTerror"
"KatnissEverdeen"
"zeb"
"tomtom"
"BTC-Raffle-com"
"botmarket"
"hahahahllololol"
"tahoecale"
"lolatryan"
many which were used to spamming, and some which were created in response to mutes, so you could continue spamming. Or maybe I'm wrong, and one of the "bunch of people" you've hired is an overzealous marketers who impersonates you and then won't stop spamming? Anyway, I'll stop posting here if you can refrain from advertising on my site (unless its actual conversation, not just "got some big pots going at btc-raffle.com"). Good luck with everything. |
|
|
|
|
Show Posts
