PenguinDice: An Open Source Bitcoin Dice Betting Tor Hidden Service

[Patatas]

Haven't gone through the entire post and you didn't have a TL;DR,I'm curious to know where I can find the dice game's repository ? Since the project is open-source,how does one fork it ? I know the changes will be committed to the main branch which will be compiled on the tor but how can one only bother the code from the surface web?

[1714941136]

1714941136

[1714941136]

1714941136

[1714941136]

1714941136

[1BitcoinMillionaire]

Not sure how many people will actually use this...

[eaLiTy]

Not sure how many people will actually use this...

This is a good idea and people do like to have some privacy when it comes to gambling rather than giving out verification IDS for claiming their winnings as some sites ask you to verify when you are winning big and if they build a good reputation people would gamble if they could create a good platform .

[penguindice]

Patatas,

If you want to see the source code, just download it from the site:

http://penguinsyuo2gtvz.onion/source.php

I don't have it in any kind of interactive source code management system like GitHub.

-PenguinDice

[rollorspin]

how to get tor? not in window 10?

[piloder]

how to get tor? not in window 10?

You can check this https://www.torproject.org/download/download-easy.html.en
Yes they support windows 10

Tor Browser for Windows
Version 6.5 - Windows 10, 8, 7, Vista, and XP

If you don't like to download TOR browser than you can visit this site in google chrome too using this link
https://penguinsyuo2gtvz.onion.to/

However you will not get full privacy like using TOR.

[just_Alice]

I was given 0.00050000 btc (50 betting units) to check how the site works. Here’s my review:

When I visited the site for the first time I've accessed it without Tor, simply by adding .to at the end of the .onion url like user piloder suggested in this thread.

But this time I’ve downloaded the Tor Browser and accessed the site through it.
My first bet was with 1 unit on 2 (Odds 35:1, Payout x34.650)
After hitting the ROLL button I got this message “Error! You can't access the play page unless you are logged in.” although I was Logged in.
Then I tried to make bets with other odds, but the result was always the same: “Error! You can't access the play page unless you are logged in.”

Then I logged out and logged in again.
I placed a bet with 1 unit on 2 (Odds 35:1, Payout x34.650) and … it has started working!
After losing 2 times in row fortune smiled upon me and I've won 0.00034650 btc!!!
Then I tried to play with other odds, 5:1, Payout x4.950. And after losing 2 times in row I’ve won again! This time 0.00004950 btc.

Overall it’s a great site IMO. Now I have 0.00085600 btc (85 betting units) on my Balance and I'm going to play there again when I have more time.

[penguindice]

just_Alice,

Thanks for providing your feedback on the site!

That's strange that you got an error that you weren't logged in. But it's good that logging out and back in fixed the issue.

Is it possible that you logged in with your normal browser (using onion.to), and then tried to play with your tor browser? Or that you had two browser windows open on the site, and logged out using one window, but then tried to play using the second window?

I haven't heard anyone else report the "not logged in" error, so hopefully we can figure out why that happened.

If anyone else gets that error, please let me know.

-PenguinDice

[Catmony]

After you logged into site, if you put subdomain in front of site address it will show homepage in guest mode. Also owner don't you think saving random string data in database will be vulnerable? I have gone though source code and found that you are actually saving next random string (unhashed) in database users table. 

[lister storm]

Not sure how many people will actually use this...

Actually, this casino might be really successful, in my opinion there are tons of gamblers with bitcoin who would prefer to just stay anonymous when gambling because of a variety of reasons such as hiding the amount of bitcoins they have and so on

[penguindice]

Catmony,

Thanks for looking at the source code and for making your comments. My responses:

"After you logged into site, if you put subdomain in front of site address it will show homepage in guest mode."

I don't understand what you mean by this. What URL are you putting in exactly to see the homepage in guest mode?

"Also owner don't you think saving random string data in database will be vulnerable? I have gone though source code and found that you are actually saving next random string (unhashed) in database users table."

That is true. The database needs to store the next random roll string for each user, so it knows what roll the user will get next time. The web site presents the hash of this string to the user before he/she rolls, so that after the roll the user can verify the roll was determined in advance before the user decided what to bet on. What do you see as the problem of storing this in the database? The user has no way to see what random roll string is stored in the database for his/her next roll, so he/she doesn't know what will be rolled next. What kind of vulnerability were you thinking about with this way of doing things?

-PenguinDice

[Catmony]

@Penguindice i have actually tried to find bug depositing my own fund but can't get success. There are lots of tools that can target database and can read some variables from database table remotely specially if it is stored under user column. I can't go deep about this but i have one friend who can find out any bug if there is in your script. Please pm me we can discuss about it.

[just_Alice]

~

Is it possible that you logged in with your normal browser (using onion.to), and then tried to play with your tor browser? Or that you had two browser windows open on the site, and logged out using one window, but then tried to play using the second window?
~

-PenguinDice

Yeah, I think I had two browsers opened, Tor and Google Chrome, with your site in each, so that was my bad.

I really love playing on this site. Now my balance is 0.00106320 btc. I've won 0.00056320 with just 12 rolls.

[penguindice]

just_Alice,

Ok, that makes sense as to why you got that "not logged in" error if you were trying to use 2 browsers on the site at the same time. I guess you were logged in using one browser, but not the other.

Glad to hear you are a little ahead and that you're enjoying using the site!

-PenguinDice

[piloder]

Why don't you also add domain name for clear net? It will be nice addition also don't forget to add chat in your next update.

You can continue beta testing for next few days and than think about expanding site bankroll with your own fund or you can add investor page and i am quite sure you will get few good investors.

[penguindice]

Thanks, piloder, those are good suggestions!

[veleten]

veleten,

Glad that you got connected to tor and were able to create an account. I have added a 0.0005 btc credit to your account. Let me know what you think of the site once you make some bets.

Good luck!

-PenguinDice

so,got my hands on Penguindice yet again
what I liked is the ability to choose several numbers for one roll: for example you can cover 2-6 range to give yourself
higher chances to win,or risk and roll on ,say,single number 12 or 8
the betting went smooth,I lost some rolls,then hit number 7 twice
my balance is 70 units at the moment,went up 20!
planning to return and continue betting when I have spare time
what would I like to see is clear all button,should be useful if you were betting on a range of numbers
and then you wantrd to change it,this way you don't have to manually enter 0 into each field
all in all if you are looking for a no hookers and blackjack dice site on TOR-Penguindice provides just that

[penguindice]

I have added a button to Set all Bets to 0 next to the Roll button, per veleten's suggestion.

I've also increased the maximum bets.

Old maximums:
0.0002 to 0.001

New maximums:
0.0005 to 0.003

The minimum bet remains 0.00001.

The maximum bet is different for each number. You can bet the most on 7 and the least on 2 and 12.

[just_Alice]

I have added a button to Set all Bets to 0 next to the Roll button, per veleten's suggestion.

I've also increased the maximum bets.

Old maximums:
0.0002 to 0.001

New maximums:
0.0005 to 0.003

The minimum bet remains 0.00001.

The maximum bet is different for each number. You can bet the most on 7 and the least on 2 and 12.

That was a good suggestion I was going to make it myself. Also adding chat would be nice.

I've been playing again on this site today, via Tor browser. This time I wasn't so lucky, lost 36 units today and now i have only 63 units left.

Haha. While I was writing this I was playing on the site and BOOM!

You rolled a 6 and a 6 for a total of 12.

This comes from the first two numbers between 1 and 6 in the random roll string:
760baafd64b1a6344feb7e07db189966b46d8fde344db55262e3f83579bab1f5

Your balance changed by 0.00033650 btc.

So now I have 96 units. 

[hinterlog]

Hello Bitcointalk Members,

I am announcing an open source dice betting tor hidden service called PenguinDice. The onion address is:

penguinsyuo2gtvz.onion

You'll need the tor browser to access the site. You can download that here:

https://www.torproject.org/

There are already a bunch of bitcoin dice gambling sites out there, so what's unique about this one? PenguinDice was designed with tor users in mind. It implements the following tor-friendly features:

1. Since it's a hidden service, tor users don't have to worry about MITM attacks from malicious exit nodes (which are common when accessing clearnet sites over tor).

2. The site uses a username and password login. Other dice betting sites try to make the player's life easier by automatically setting a browser cookie that will allow the user to access his/her account later without logging in. The tor browser clears cookies when closed. So a username/password login system is necessary for tor users.

3. The site functions without JavaScript, Flash, or any other insecure browser add-ons that tor users tend to keep disabled for security reasons.

A few important facts:

1. The house edge is 1%.

2. The site is open-source! Users may download the site's MySQL and PHP code.

3. Withdrawal transactions are sent immediately with adequate transaction fees, so you won't have to deal with long waits for withdrawals to complete.

The main disadvantage to this site right now is that the betting maximums are low (0.0005 to 0.003 btc per roll, depending on what number you want to bet on). So you're not going to win (or lose) huge amounts at once like on the big sites. I hope, however, to raise the betting maximums as the site gets more users.

As far as I know, this is the only dice betting hidden service out there (though please do tell me if you know of others).

This is a brand-new site and thus feedback is much appreciated.

Thank you for your time.

-Penguiner

PS: For those of you curious about tor: Tor (or The Onion Router) is an anonymity network that you access with the tor browser. Why use tor? When you use tor, your ISP doesn't know which sites you're accessing and can't block what you view. And web sites you visit don't know your true IP address, and thus can't restrict your access based on where you live. The tor browser also comes with security features (like NoScript and HTTPS-Everywhere) to keep you safer from malware and phishing sites.

Is your dice site using blockchain to store and create the deposit addresses?