A few critical points... According to your Provably Fair Explanation  It says you use Combination = Server Seed + Client Seed + Nonce and Hash = SHA512 (Combination)
This formula/statement is false and misleading. Given the values: const ServerSeed = "c678cae375a07e4456a5532a19e5b1311d3434795f5bcdf50e7f4f27ae660d5d"
const ClientSeed = "client"
const Nonce = 0;
According to your Verification page  1. The Combination Value is wrong. It shows " clientc678cae375a07e4456a5532a19e5b1311d3434795f5bcdf50e7f4f27ae660d5d0" but on your explanation above it should be " c678cae375a07e4456a5532a19e5b1311d3434795f5bcdf50e7f4f27ae660d5dclient0" - (this is still wrong btw, read below) 2. The SHA512 value shows " 8c0bd8c9ad2261ccaf0650de9135088484085d328293a42ce9a69e734f93ded96ae3a6f6e31c908 3a59e97650d97a0f3eda8e71d0210ef44f9132214ccfb9531" which is also wrong if we follow the given formula above. Even if we hash either " clientc678cae375a07e4456a5532a19e5b1311d3434795f5bcdf50e7f4f27ae660d5d0" or "" c678cae375a07e4456a5532a19e5b1311d3434795f5bcdf50e7f4f27ae660d5dclient0" both will not result to the SHA512 that is being shown (you can test it here https://www.convertstring.com/Hash/SHA512) Question is: Where did that SHA512 result come from? Why is the formula given not resulting in the correct values? The answer is: You actually don't use SHA512. But instead, you are use HMAC-SHA512. HMAC-SHA512 accepts a message and a secret value. And in site's case, the message is constructed like " ClientSeed:Nonce" (the : is included), and the ServerSeed acts as the secret value. There's a big difference between the two, SHA512 and HMAC-SHA512. The correct formula is: // hmac512(message, secret)
hmac512( ClientSeed + ":" + Nonce, ServerSeed )
If you expect players to just trust your verifier, you'd be mistaken and this could lead to many concerns. Here is a quick verifier that would explain the verification properly. https://codepen.io/uniibu/full/OJyyNgLCheers! |
|
|
|
The Bets are publicly available, and the user's (Bharatpuri) bets where once available also on the Big Wins tab on the front page but since there where other Big wins, his bets where replaced with the new ones. The difference between the accuser and the bitsler team is that we have records to back up our claims. Here is one example of the user's betting session: Currency: LTC
38365101861,NONCE 83288, TARGET <0.15, ROLL 0.14, BET 0.20505052, PROFIT 135.12829268
38365100616,NONCE 83282, TARGET >99.84 ROLL 99.85, BET 0.27935513, PROFIT 184.09503067
38365081915,NONCE 83135, TARGET >99.74 ROLL 99.81, BET 0.50064898, PROFIT 197.75634710
38365032577,NONCE 82762, TARGET >99.49 ROLL 99.69, BET 0.82020209, PROFIT 161.57981173
38365020493,NONCE 82675, TARGET >99.49 ROLL 99.98, BET 0.92449881, PROFIT 182.12626557
38364997973,NONCE 82499, TARGET >99.59 ROLL 99.71, BET 0.80000104, PROFIT 197.20025636
38364981451,NONCE 82377, TARGET >99.59 ROLL 99.75, BET 0.80000104, PROFIT 197.20025636
Again the bets are publicly available, anyone can check the bet ids for themselves and this is just one of the user's betting sessions. These bets were on the Big Wins all together at one point, so if the accuser was really "analyzing" the bets, you would have seen these bets. These wins all happened in just <1000 rolls. -unibtc |
|
|
|
Just dropping by to give my 2 cents. Being a "Provably Fair" game means the player itself could "Prove" that the game session was not tampered in any way. Let's digest how a game session works according to your help page1. Before a game session starts Mine/s location is picked in random and in advance when you create a game. Mine/s Location is based on random_int generator function which picks the mine location from tile 1 - 25 in random.
I would assume random_int function it is referring to is https://www.php.net/manual/en/function.random-int.php2. You generate a truely unique string and concatenate the result of no.1. example: 20-pHZ984WcwT1578416354 where 20 is the result of no.1 plus a "-" and "pHZ984WcwT1578416354" as your unique string. 3. Hash the concatenated string 20-pHZ984WcwT1578416354 via SHA256 which is "7b7373e545db76a277c85d4efc80675b8c32588a1484581ab8b07e0fc372b769" and shows this to the user to "prove" that the game session was not tampered. 4. At the end of the game, you reveal 20-pHZ984WcwT1578416354 so that users can hash it themselves and prove that the hash are the same as no.3. 5. Then starts all over again for every game session. The implementation may look like solid, but it is not. No. 1. The user cannot prove that random_int was indeed used in this step. The user just believes that it is, and this is where the flaw comes in. You as the house, could pick any number that you would please and the user would never know. If a user has a tendency of always picking the 1st tile, the house could then choose the number 1 for the succeeding game sessions and the user would never know it. Scenario: A Whale is playing 3 mines. The house could easily be programmed to watch and analyze the player's "usual" picks, and the house could easily put the mines on those on the succeeding game sessions. This gives an advantage to the house, while the player would never know if he/she was cheated or not. (I'm not saying the op will) Suggestion: The mine locations should be generated using a server secret plus a client secret this way the house could not cheat or pick the tiles at their advantage. |
|
|
|
Great news from the No1 crypto gambling website.
given that you have many currencies on Bitsler casino, can we expect to implement local exchange there?
It will be fine if we can convert any currency to our personal favorite crypto asset fro gamble.
It would make bitsler like exchange site while they known as gambling site. We just simply need to exchange our local currency to bitcoin/other coins and then we just need to deposit to our bitsler account. Its only take a while though to receive your deposit I am not talking about the exchange as a business model. No need for a tradeable platform, I am thinking about exchanging currency using middle rate. For example, I like to gamble with ETH, XRP but I want to hold my profit in BTC. So it will be fine if I can just convert it on the casino, I don't have to withdraw eth to external exchange, convert there to BTC and withdraw to my wallet. I find this option on one gambling site, and it seems very useful to me. It is just a suggestion. You can exchange one currency to another by simply going to cashier then exchange and you can play with it instantly. The only difference is that the rate is a bit lower than the market, this is to protect the site from volatility since the exchange transaction is between house and player and not p2p. This is as close it can get to an exchange. |
|
|
|
Why I can't open forum page https://forum.bitsler.com when I am logged in using my Bitsler username/password? Casino and all function working well, but on forum page, I have error "forum.bitsler.com is currently unable to handle this request. HTTP ERROR 500". When log-off, everything is normal and I have access to all Bitlser webpages. Tried with two different internet provider, the same problem is on both. Any idea what is wrong? Do I need to create another one account directly on forum.bitsler.com? Have you tried clearing your cache, and re logging in yet? Tried on three different browsers (Chrome, Opera, Firefox) and mobile phone, always the same problem. Playing games on the casino normal as usual, subdomain blog blog.bitsler.com also working well, but the forum is offline for me when I logged in. Log off and refresh the page, everything is normal.  Can you try doing this from an incognito browser tab for me. Also share a screenshot of what you're seeing or give me the error message please. I create a video, sent you a link on pm Thx Please let me know if you are still having issues accessing https://forum.bitsler.com-uni |
|
|
|
username: unibtc  |
|
|
|
I never thought that using a VPN can ban my account and points raised by BTCevo is possible. Im using VPN by avast, so far everything works fine. Now I am having second thoughts of using it when playing at Bitsler although I never had a problem playing without a VPN, its just that my pc automatically activates the VPN when I go online.
Few times I accidentally logged on to Bitsler using VPN, received only email to confirm the new IP address and use them without any problem. I think the probability two users to use same IP from VPN is very low, and there is no overriding reason to worry if you do not do illegal activities. I also do this on the website and I could logged in the website without any problem also I received an email also that I have a different IP from before the IP protocol use are different. I think it is impossible to have the same IP maybe you logged different accounts in the sites my they detected it from the server. Using your IP websites and server could easily get your location in the network I think nothing is wrong if you want to hide your location from different websites beside VPN is recommended in many platforms. Well, there is no problem if we log in using VPN and use the same PC/Browser, because the server certainly keeps a log of activities such as cookies and sessions so the server will recognize our activities even though using a different IP. Usually the account will be locked if we log in using a different IP and PC/Browser, but I don't know whether Bitsler implements security like this. Bitsler does not lock accounts automatically just by logging in using different IP and/or PC/browser unless the IP was previously banned already. However, if Email Confirmation is enabled on your account under settings, the system will send a confirmation email first before you can successfully logged in. So 2FA and Email Confirmation are definitely recommended for security. -uni |
|
|
|
I never thought that using a VPN can ban my account and points raised by BTCevo is possible. Im using VPN by avast, so far everything works fine. Now I am having second thoughts of using it when playing at Bitsler although I never had a problem playing without a VPN, its just that my pc automatically activates the VPN when I go online.
Few times I accidentally logged on to Bitsler using VPN, received only email to confirm the new IP address and use them without any problem. I think the probability two users to use same IP from VPN is very low, and there is no overriding reason to worry if you do not do illegal activities. Question is, is there an official statement or there is something stated in the terms and conditions that we can use VPN or VPN is allowed when playing at Bitsler giving the benefit of a doubt that the player has no bad intention in using such VPN in logging in at Bitsler. It all boils down on how you are using the VPN. According to Bitsler's Terms and Conditions 6.2.3. We do not wish to and shall not accept registration from persons resident in jurisdictions that prohibit you from participating in online gambling, gaming, and/or games of skill, for and/or with bitcoin. By registering an account with us you confirm that you’re not using any third party software to access our sites from jurisdictions that are prohibited, please refer to section 6.2.2 for the jurisdictions that are prohibited.
Specific countries includes but not limited to: 6.2.2.
... United States of America (and her dependencies, military bases and territories), Netherlands, Curacao, Dutch Caribbean Islands, France, Syria, Ethiopia, North Korea ...
So if you are using a VPN to be able to circumvent the said prohibition/restriction and access Bitsler, then you might be breaching the agreement you accepted upon registration. 7.1. In the event that the user commits a partial or whole breach in any provision contained in the agreement, BITSLER reserves the right to carry out any action deemed fit, including termination of the current or past agreements with the user, or taking legal action again the user.
But if you are merely using a VPN other than the said above such as for network stability, static ip, network speed, network protection etc.. and residing in a non-prohibited country, then it should be fine. -uni I do use a dedicated VPN with a static IP |
|
|
|
Hey im not able to login to my bitsler account. everytime i try i get an error saying "wrong 2fa code" i contacted support twice now and waited 24h between each message. so is there any admin here that can help me out?(cant think of a better way to contact u)
thank you
Why did you contacted them twice? You should wait at least 24 hours before create another ticket. They might be still busy or have something to do with another support ticket i clearly stated that i have waited a full 24h before creating another ticket,and only wrote this reply after 48h have passed without hearing anything from them You actually don't have to create another ticket, you can simply update your previous ticket. There are two ways to do this, one, by simply replying to the email, this will update your ticket and support will get notified, or two, you can sign-in to https://help.bitsler.com using your Bitsler email, and you will be able to see all your tickets and be able to update them. I'm not with the support team, but by making multiple tickets, it gets routed to different support agents which will make it harder to solve. Also to have your concern solved as soon as possible, provide all necessary details that can prove that your account really belongs to you. example(but not limited to) your registered email, any tx id that you may have a record of on your account or anything that could prove you own the said account. This way, you and the support agent won't have to exchange replies back and forth. -uni |
|
|
|
|
One of the basic things to have when creating a website would be to have an SSL certificate so users could visit the site using https. SSL certificates nowadays are not expensive, you can even get a free one either via Cloudflare or via LetsEncrypt, so I see no reason for not having one unless the intended purpose is for a quick exit.
|
|
|
|
A message received, just now.  You guys also received a similar message? Do we have to apply for KYC in the EGC cash out now, that's very inconvenient for us who have no account at sec bank. It looks strange nga, sa SMS mo ba to nareceive? Bakit nagtatanong sila ng active na gmail address eh hindi paba sapat yung verification natin sa coins.ph. Wala akong natanggap na ganito siguro lahat ng cash outs ko ay sa LBC remittance. I also received this exactly the same message today, even tho i have not done any cashout via EGC today. I guess they send it out to users that have used EGC before. IMO, they should integrate PesoPay and/or InstaPay to enable its clients to instantly transfer to their Bank accounts. Gcash uses both services para mag transfer to/from banks instantly. |
|
|
|
For freelance job, it would be easy if the company will just pay in BTC rather than paypal, that would save the fee especially if the lightning network will be implemented. Yes, we earn a decent amount here from campaign, but I don't consider it as a salary since this is not permanent or short term only. Ang sahod ko ay Dollar amount converted sa BTC sa mismong araw ng sahod. Ang ginagawa ko, transfer ko agad sa coins.ph tapos exchange sa BTC-PHP sa coins pro, then cash out sa bank. Ok naman sya, walang problema for 3 years na.
-uni
What's your job mate? I'm interested to know, is this related with the signature you are wearing? I work as a Full-time Dev for Bitsler for more than 3 years now. Nice to see you here, (if i’m not mistaken) alam ko pilipino ang may ari ng bitsler and ang developer din pala. What an inspiration dahil ang bitsler ay isa sa pinaka kilala at most trusted gambling site.
Indeed. Naka depende na satin kung paano natin ihahadle ang sinasahod natin na bitcoin.`
Di ko masasabi kung anong nationality nya, pero ako, yes pinoy po, di lang masyadong aktib dito sa forum kasi sobrang busy  |
|
|
|
|
Ang sahod ko ay Dollar amount converted sa BTC sa mismong araw ng sahod. Ang ginagawa ko, transfer ko agad sa coins.ph tapos exchange sa BTC-PHP sa coins pro, then cash out sa bank. Ok naman sya, walang problema for 3 years na.
-uni
|
|
|
|
I see that its ready to be downloaded as well on desktops, phones and tablets but I tried to search in google playstore, I see 1 app for Bitsler and its not official. How do we download this on our phones? Is it available in playstore and IOS?
Hello, Bitsler app is not available yet on IOS or on Android Playstore, so please do not download any apps from any of the said sites. However, the latest update "Bitsler v3" uses modern web technology and one of this is called PWA(progressive web app). By employing this technology, a player can "Install" Bitsler as a Web Application. A simple demonstration of this feature:(Using latest version of Chrome as of the writing "Version 72.0.3626.119") 1. Open the options menu of chrome and look for "Install Bitsler..."  2. After clicking the "Install Bitsler..." A confirmationation popup message will appear, you just click "Install"  3. This create a shortcut icon on you Desktop(as you can see below) and loads the Bitsler site as a Web App.  4. You can now just simply double click the icon to open up Bitsler. Cheers! -uni |
|
|
|
New to bitsler.
Deposited nearly .5 btc.
After about 15 mins the sites down.
Been down now for a while. No updates anywhere. Forum also down.
GG
Best $3600 gamble ever.
Why even bother to have a twitter if you don't update it?
EDIT:
So this is how you guys do it?
I get that it's early in the Philippines, but you can't even have a mod update the forum or twitter?
How about have visible open and closed business hours if this is how you choose to conduct your casino.
Not sure where you got the info that admins/owners are from Philippines(which certainly they are not), anyhow, I apologize for the inconvenience you just experienced. Bitsler admins and staffs are from different Time Zones and we try our best to update players. And as much as we want to stay online 24/7, with the current heavy ddos attack(been going on for a week now), Bitsler team decided to put down the servers to avoid any bad incident. As stated above, your coins are safe, and if the down time takes longer, Bitsler Team will manually refund your balance. -uni PS: Forum is up btw. Even though its very unfortunate that your site is getting DDoS, in the past when Bitcoin sites and services have been getting DDoS its usually the healthy sign of a bull market.
Even Bitcointalk forum seems to get DDoS from time to time. The last time I can remember this happening was during the crazy bull run.
No idea why hackers pick times like this because in the end I don't think they actually gain anything. When Bitcoin was getting spam attacked back in Dec-Jan 2018 it was very damaging because many where mad at the $20-$50 they had to pay to get a single transaction confirmed. However I have no idea how hackers benefit when they DDoS a site like Bitsler or a forum like Bitcointalk.
'Hackers/Ddosers' actually can/do earn from this, If (just an if, not pointing to anyone) they are being paid to do the attack. |
|
|
|
hey, all i wanted was my doge i won. i'm not here trying to make them look bad or good.
they sent the doge about an hour later. everything is good
but it did take 7 hours.
all i'm saying this is crypto world 2018 not cryptoworld 2013 where you had to wait 8 hours to get your btc from seals with club poker
i know you have to check withdraws for anyone scamming. but 7 hour turnaround time will soon unacceptable in this industry.
I like playing at bitsler.
they are one of a few dice sites that made it thur this roller coast ride of ups and downs crypto world
I do agree that waiting for withdrawals is a pain. But lets take pros and cons into consideration. With the current system, Bitsler is able to filter out frauds, scams and even hacks. The system protects Bitsler's assets by filtering frauds such as faucet farmers, money laundering, illegal lending services, multi-accounts etc.. and it also protects player's coins - We had several situations where a player downloaded a scam/hack script which steals the player's balance, and because of the current system, we where able to reverse and save the player's coins. And with Bitsler's assets safe, it is able to give out great promotions and contests for legit players. There are a lot of other pros of the current system,so IMHO, the pros greatly outweighs the cons. And I can say this system is better than having instant withdrawal but having to KYC. -uni |
|
|
|
Partners
...
|
|
|
|
|
Show Posts
