|
Just rechecked transactions. Found that not all hacker's withdrawals were successful. Only 680 btc stolen.
|
|
|
|
Yes I am correct. Open a play money pokerstars table, with limit betting. 200/400 limit holdem has 100/200 blinds. etc
I do not have a lot experience in online poker, so I am sorry for stupid questions.. Could you explain what is referenced by these 200/400 then if blinds are 100/200? You must implement all hands to be shown at showdown. At current time, sometimes only winning hand is shown. This is to prevent teamplay/collusion, people working together. All players on table should be able to see the losing hand, at least in the "dealer chat" window.
The whole server I believe is built around idea of dealing with hands like in real poker. I do not believe I will be able at this point modify code to enforce showdown cards in the end of game (I do not have needed skills for this). I still believe our community is small enough to have such problems. If you do not believe to someone - do not play with them. |
|
|
|
the particular security issue hacker used will not be avoided by technique you describe. Any code can have security issues. My bug was so simple... =)) Here is it - https://github.com/hippich/Bitcoin-Poker-Room/commit/ef5f1a181fb207fe5e1260b3190835384fe99190I am using much more stupid but rigid system - coins are transferred from server to my own local wallet. Only small change is left to process small withdrawal amounts. Big ones proceeded manually. So even if code will be hacked (and this happens), only change will be lost, not the whole balance. On the other note - hacker, who contacted me, never replied nor sent funds. So either he was not real hacker or just decided to use money instead of returning. |
|
|
|
wow.. that's close to $3k. real stuff!
yeah, you're telling me... I had my heart set on winning it all and buying a bus for my band... Sigh.... Well at least it wasn't "real" money. -EP Hehe. I was telling same "it's not real money" when I found someone took all bitcoins... =)) On the other note, someone contacted me via email as mikerka and said he decide to return money. So fingers crossed.. =) That's good to know... I wonder if he's trying to see if he can get traced somehow... Have a bunch of poker playing bitcoiners showing up at his house with guns. ha. Probably his point is just to teach me or something like this. Bug was really stupid. Anyway, let me see coins on my address first. This email could come from anybody. |
|
|
|
wow.. that's close to $3k. real stuff!
yeah, you're telling me... I had my heart set on winning it all and buying a bus for my band... Sigh.... Well at least it wasn't "real" money. -EP Hehe. I was telling same "it's not real money" when I found someone took all bitcoins... =)) On the other note, someone contacted me via email as mikerka and said he decide to return money. So fingers crossed.. =) |
|
|
|
|
wow.. that's close to $3k. real stuff!
|
|
|
|
ewww 5%... Thats not much on small pots but damn that would be REALLY annoying!
start with 3%!
5% with cap, not 5% from the whole pot. in November i had 3% rake without limit. it was annoying to some guys when they were playing with hundreds in stakes. =) Cap I believe should be somehow correlated with blinds size. |
|
|
|
|
They have complicated enough rake structure tho.. i will probably try to implement it as 5% with some fixed cap for all table for now. Implementing rake per table will be too much for me right now =) But do not afraid - I have more important stuff to work on so this room will be rake-free for a while. But donations/tips are always welcomed! =)
|
|
|
|
|
What is adequate size of rake?
Keeping in mind bugness and beta state of software.. =))
|
|
|
|
Second, I have some suggestions, you need to adjust your tables really.
Thanks for your input. I would like to hear what other members think about best combination of tables. This part is matter of messing with configuration files, so I can implement this fairly easy. Also I never played anything beside hold'em, so I really do not know any details about other poker games (it just came with software and I left it as is). If there are bugs with it - please let me know. Probably it will make sense to push bug report to server software author. Finally, you must fix the structure in limit tables. The problem is, the software makes the blinds 2x big as they should be. In .02-.04 limit for example, the blinds are .02 and .04, when they should be .01 and .02. This makes the opening raise size to .06, when it should be .04. Now, due to this fact you would have to have .005 and .01 blinds, if you want to keep the .01-.02, limit tables. This would be fine, and I would make 5 of those as well. Currently at the .01-.02 limit tables the blinds are .01 and .02, and the opening raise size is .03, when it should be .02, and blinds .01 and .01. That would actually work too, so either .005 and .01 blinds, or .01 and .01, if you can't do 3 decimal points.
Could someone else comment on this too? I do not have much experience in poker, but I always believe .01-.02 should refer to small and big blinds. Is this really incorrect? Any examples? |
|
|
|
Good work, hippich! This leaves me with an interesting question: Do I now owe you 10 BTC for identifying your own thief? I'll go with whatever the community says, but I'd prefer to make it my first contribution to a pool for paying similar bounties in the future, which I may start later today. Thefts like this will only become more common as the community grows.
If you want to donate to project - you are free to do it. =) As for information I posted here I got from google and another bitcoin forum member. If he wants me to disclose his nickname - I can do it. That's been said - this info do not identify exact physical person, so I do not believe bounty should be paid anyway =) |
|
|
|
SunAvatar, I really appreciate the fact you want to share this and help! I already found thief email and tried to contact him and convince him to return money. He did not respond. And bitcoin non-reversible nature is not helping here too =)) His nickname - mikerka - is pretty uniq one and he is registered over a lot of hacking-related websites. His email is mikerka@gmail.com . He is registered at Minecraft. There is a secondlife avatar named mikerka Cluny who bought some coins from another bitcoin forum member recently. His IRC and otc-wot nick is FaktioNN. Keeping in mind bitcoin community size and uniqueness of nickname I am pretty sure all of this is the same person. I think I seen somewhere age of someone with nickname mikerka of 41 years, but not sure about this part at all. There is also another guy from CZ, but he too young and looks like not involved in coding/hacking at all, and there is another gal from russia, who is fan of stupid tv show - i doubt she do any hacking. So I believe our mikerka is from USA. I doubt these bitcoins make any real difference to him in long run, but he did not agreed to return these in exchange for all due respect for finding hole in my software (really dumb one btw =)). On the other hand this will force me to put more time in to this project and at some point start monetizing it. Either through rake or some sort of sign up fee. =) |
|
|
|
The front page should display how many players are online.
For real. Why do we have to log in to see the tables list? probably because i was concentrated on more important things? =) you can always check http://twitter.com/betcoin for now. It spams this channel with current statistics on online users. You do not need to be registered with twitter for this. |
|
|
|
its working great now.... we just need some lower stakes NL Omaha8 plz. no one is going to play 100/200 on this site. a bunch of us have been playing .50/1 and .25/.50 lately
added 4 omaha8 low stakes nl tables. have no clue if these works correctly tho.. and if something comes to your mind for name for the table - let me know to =) |
|
|
|
|
i have shut old server completely to make sure nothing is messed up. so there is no web server to do redirect...
anyway, it's already runs on new server. I am keeping an eye on it and finish moving other stuff, but it should be playable now. (i hope so =)). So let me know how it works for you.
|
|
|
|
|
New server was finally shipped and I started to work on moving everything to new place. Expect 3-4 days of down time. Thank you in advance for your patience.
|
|
|
|
Thank you for the update, and that sucks that someone stole all the money. Good thing you don't keep full balances on the server for security, though.
Your payment is processed. If someone did not receive their payments - please email me, but I think all others are withdraw money without problems already. |
|
|
|
I'm concerned not so much about the security breach but about the fact that if I hadn't visited this thread I would have no idea that it happened. There is no message on the main page and the site appears to be running normally.
I am traveling. I closed breach using phone. Passwords to everything else is at home. |
|
|
|
|
This is not a commercial project. I hope it will be sometimes tho...
This just a test. I passed it in terms of saving users money. Will see how importa.t this project is for every one here tho. Will keep an eye on donations address.
Boarding on aircraft. Will be back soon and proceed all wizdraw requests.
|
|
|
|
|
I already wrote answer to email and will repeat here for everybody else.
I keep small amount of bitcoins on server for security. When there is no enough money on server I process transactions manually. In this case you withdraw more then available balance on server.
I am traveling right now and will be back home in 24 hours.
On the other hand I am traveling and significant amount of money were deposited.
I just found someone with nickname mikerka found security hole in withdrawal code in successfully withdraw all money from the poker room to addresses:
1LdLEx6UhJfqDk3umY7xP6xU1geB6bvhyw
15FKrowdeAuuYchV2rmuWfUTuSgVRDwtQS
1GiPbAgjueb9N4mC9eY9ivSQohUvPK2P3F
1NS3PXX3TAwfbWD5go96jG9c6J35zCPSxd
1Ghkvw73yxHW4XHRYHq8MbfijfB28tqc47
1DUMMNpN7UMLmMfM71iFAoQFkdXaShQqx2
1FYMxvf5ZQtQNsXhSaAPLvELVYezfyyCKH
1fzyhsVGCPZsKutiT1XWpurZQuAL5r1N7
1C9GHhMJPQpPC5kdQYRAMkJsjXaGjReyMR
121CrVNnDkmqscwNDKJobeHKhvXKbBmaam
1LufSuuzs1LRZ3SBLohbGg3N2i6nnrBCix
1L8pxthTCzr3GbtL3XkBdrmdjHwVs9kwyZ
1Gr5BPJwmLHN3mJp2EJGQqWHhevUVQHgnu
1ENzxFpashPqCE8hCza4BA15rxigFcXs8q
1CzXBb7Pmpz8g1f9HmTxUBM9kK5sRjUYRt
1Pbzkyhoy2MwTLW8EKyuXXoKj7tQDLcWXt
1Eyr6CUgC646bpXsnMnQ2xZsDTDubEtjN3
13pCwrqQnjdwAPv8rv5Rvo2zqsZcEGMrzY
1Cp3pnnVdoy7JxuqSbbrQS6WzU3g3nDWbh
133TqWksjNEc7DkqHGhp3MMkFooRiBNo2Y
1BfrWmiwSAHn9NJoR9W1XCDFxrjDp5GmTx
1H9mAMX3rewKkjXQ62TAiaDdnYMKfPebKr
13aCsFYhtM1AAxhcXvugX97Go9G4mC7E82
1ASWJWD3hGhZXLVc5gLA9rnmMZtB9AVqDw
147neArqKo2y3qSYu5pKq5ptetGa1A1Wrn
19rpEJHChVWf2Mf7bxjGcaUaYPMQDLduTj
1DpzUsna4Sv8uZbUUpjVbtJB7JsjL1Q2jn
1AaSDKcn8zebYPZ5KvyiUBq1RDzX8GNirQ
1CbKTvFqV8xe8VRFcQqRarWSHEH4FGXrju
12zKjiJiqvMyvHqyce48ZEP4NpsoMKwhYc
I already fixed this hole. Now, if mikerka reading this I will really appreciate if you return money.
Withdrawn amount is 680 BTC.
2everybody else - i have enough reserve to cover this issue. So your balances are good. But any donations will be really appreciated.
|
|
|
|
|
Show Posts
