jjc326
|
 |
August 25, 2014, 12:11:50 AM |
|
I reporped that bug 10 minutes after primedice 3 was opened. Along with same nonce on bets. When using the api and sending request to the server to make bets, you can get 6 bets with the same nonce and the same result (I tested it using fiddler). Also I reported that the faucet could be claimed from the same ip on different accounts (Already fixed)
Well the question for you then is did you get any bounties? 
|
|
|
|
Thicho
Newbie
Offline
Activity: 4
Merit: 0
|
 |
August 25, 2014, 12:41:56 AM |
|
https://i.imgur.com/vFDtJjl.pngDo we really need to pay now mods for getting help, if the so promised guarantee to get back to you within 12 hours doesn't work? I think mods are only there to moderate the chat. They aren't affiliated with the site operators, so there's not much MICRO can help you with.
|
|
|
|
Thicho
Newbie
Offline
Activity: 4
Merit: 0
|
 |
August 25, 2014, 12:48:32 AM |
|
Well in that case adding or implementing a timer script would work Something like Tips to same account add to time a function of the number of tips it receives from the same user That or can't tip same person more than once per 1 hour period. Except for Moderators ^^ (But there are other ways around it if you think about it so its tricky)
Still easy to abuse (as you said). Make one account, collect faucet, deposit 0.0005, make new account, collect faucet in it and send 0.000505 from first account to it then make new account and send those 0.00051 to it after collection faucet first on it and keep doing that. It would be easily noticed in chat though. But it would work easily with pvp. In an earlier post Stunna said he was going to re-evaluate the faucet and I think it is clear that the "tip" feature is not being used as intended, unless Stunna wanted to make it easier to move satoshi between a bunch of alt accounts for the players on PD. I had always thought the faucet was to give people a way to try out PD but obviously that is not it as a one time giveaway of site script would work better. Then I thought the faucet was basically a marketing angle to keep chat active, PD's chat is a lot more active than other dice sites, and I assumed that was why. Seemed like good marketing. But I don't see how going up to 10K faucet really helps this, in fact, it would make it horribly expensive. So given that there is no easy way to stop faucet abuse in conjunction with the new tip feature I'm guessing both will have to be revised in the near future. I'd suggest picking one in the interim. And in unrelated area, the whole VIP room for 1 BTC was just a joke. I agree. The faucet is a great way to try out the site, but there are actually people who sit there all day claiming the faucet. It's sad.
|
|
|
|
nahtnam
Legendary
Offline
Activity: 1092
Merit: 1002
nahtnam.com
|
 |
August 25, 2014, 12:50:02 AM |
|
Has anyone been able to port the provably fair code from Node.js (https://primedice.com/verify) to plain javascript?The source of it would be highly appreciated!  I'm pretty sure this is what you are asking for: http://rgbkey.github.io/verify/PrimeDiceIt's a little buggy, where it says "if (index + 5 == 128 + 1) {" but that shouldn't matter in the lifetime of this universe. View the source of that page - it runs in your browser, and so must be "plain javascript". Thanks! 
|
|
|
|
nahtnam
Legendary
Offline
Activity: 1092
Merit: 1002
nahtnam.com
|
 |
August 25, 2014, 12:59:05 AM |
|
Has anyone been able to port the provably fair code from Node.js (https://primedice.com/verify) to plain javascript?The source of it would be highly appreciated!  I'm pretty sure this is what you are asking for: http://rgbkey.github.io/verify/PrimeDiceIt's a little buggy, where it says "if (index + 5 == 128 + 1) {" but that shouldn't matter in the lifetime of this universe. View the source of that page - it runs in your browser, and so must be "plain javascript". @dooglus that code is no where near working. I tried a few different rolls, and they were all computed wrong. That means either every roll on PD is not provably fair (unlikely) or the JS is wrong (much more likely).
|
|
|
|
Antless
Newbie
Offline
Activity: 2
Merit: 0
|
 |
August 25, 2014, 01:00:06 AM |
|
Well in that case adding or implementing a timer script would work Something like Tips to same account add to time a function of the number of tips it receives from the same user That or can't tip same person more than once per 1 hour period. Except for Moderators ^^ (But there are other ways around it if you think about it so its tricky)
Still easy to abuse (as you said). Make one account, collect faucet, deposit 0.0005, make new account, collect faucet in it and send 0.000505 from first account to it then make new account and send those 0.00051 to it after collection faucet first on it and keep doing that. It would be easily noticed in chat though. But it would work easily with pvp. In an earlier post Stunna said he was going to re-evaluate the faucet and I think it is clear that the "tip" feature is not being used as intended, unless Stunna wanted to make it easier to move satoshi between a bunch of alt accounts for the players on PD. I had always thought the faucet was to give people a way to try out PD but obviously that is not it as a one time giveaway of site script would work better. Then I thought the faucet was basically a marketing angle to keep chat active, PD's chat is a lot more active than other dice sites, and I assumed that was why. Seemed like good marketing. But I don't see how going up to 10K faucet really helps this, in fact, it would make it horribly expensive. So given that there is no easy way to stop faucet abuse in conjunction with the new tip feature I'm guessing both will have to be revised in the near future. I'd suggest picking one in the interim. And in unrelated area, the whole VIP room for 1 BTC was just a joke. I agree. The faucet is a great way to try out the site, but there are actually people who sit there all day claiming the faucet. It's sad. Not everyone has money to gamble asshole. The faucet allows people who don't have money or would rather not gamble their money to be able to still have fun and be a part of the community. It's not only for trying out the site.
|
|
|
|
Thicho
Newbie
Offline
Activity: 4
Merit: 0
|
 |
August 25, 2014, 01:06:39 AM |
|
Nice! I wish I could be that lucky 
|
|
|
|
Thicho
Newbie
Offline
Activity: 4
Merit: 0
|
 |
August 25, 2014, 01:18:39 AM |
|
Well in that case adding or implementing a timer script would work Something like Tips to same account add to time a function of the number of tips it receives from the same user That or can't tip same person more than once per 1 hour period. Except for Moderators ^^ (But there are other ways around it if you think about it so its tricky)
Still easy to abuse (as you said). Make one account, collect faucet, deposit 0.0005, make new account, collect faucet in it and send 0.000505 from first account to it then make new account and send those 0.00051 to it after collection faucet first on it and keep doing that. It would be easily noticed in chat though. But it would work easily with pvp. In an earlier post Stunna said he was going to re-evaluate the faucet and I think it is clear that the "tip" feature is not being used as intended, unless Stunna wanted to make it easier to move satoshi between a bunch of alt accounts for the players on PD. I had always thought the faucet was to give people a way to try out PD but obviously that is not it as a one time giveaway of site script would work better. Then I thought the faucet was basically a marketing angle to keep chat active, PD's chat is a lot more active than other dice sites, and I assumed that was why. Seemed like good marketing. But I don't see how going up to 10K faucet really helps this, in fact, it would make it horribly expensive. So given that there is no easy way to stop faucet abuse in conjunction with the new tip feature I'm guessing both will have to be revised in the near future. I'd suggest picking one in the interim. And in unrelated area, the whole VIP room for 1 BTC was just a joke. I agree. The faucet is a great way to try out the site, but there are actually people who sit there all day claiming the faucet. It's sad. Not everyone has money to gamble asshole. The faucet allows people who don't have money or would rather not gamble their money to be able to still have fun and be a part of the community. It's not only for trying out the site. There's no need for name calling. I don't think stunna made a faucet available with the intention of having a bunch of lowlifes sitting there milking it dry all day. You're probably one of those people that take all of the free peppermints when you go to a restaurant 
|
|
|
|
Sprour
Newbie
Offline
Activity: 1
Merit: 0
|
 |
August 25, 2014, 01:25:42 AM |
|
when will the mobile version by live?
stunna?
I would also like to know this
|
|
|
|
Stunna (OP)
Legendary
Offline
Activity: 3192
Merit: 1280
Primedice.com, Stake.com
|
 |
August 25, 2014, 04:03:10 AM |
|
when will the mobile version by live?
stunna?
I would also like to know this Our dev has been hard at work on this for the past 1-2 days, should have something working soon. This should hopefully fix the optimization issues with certain browsers as well.
|
|
|
|
Antless
Newbie
Offline
Activity: 2
Merit: 0
|
 |
August 25, 2014, 05:05:32 AM |
|
Well in that case adding or implementing a timer script would work Something like Tips to same account add to time a function of the number of tips it receives from the same user That or can't tip same person more than once per 1 hour period. Except for Moderators ^^ (But there are other ways around it if you think about it so its tricky)
Still easy to abuse (as you said). Make one account, collect faucet, deposit 0.0005, make new account, collect faucet in it and send 0.000505 from first account to it then make new account and send those 0.00051 to it after collection faucet first on it and keep doing that. It would be easily noticed in chat though. But it would work easily with pvp. In an earlier post Stunna said he was going to re-evaluate the faucet and I think it is clear that the "tip" feature is not being used as intended, unless Stunna wanted to make it easier to move satoshi between a bunch of alt accounts for the players on PD. I had always thought the faucet was to give people a way to try out PD but obviously that is not it as a one time giveaway of site script would work better. Then I thought the faucet was basically a marketing angle to keep chat active, PD's chat is a lot more active than other dice sites, and I assumed that was why. Seemed like good marketing. But I don't see how going up to 10K faucet really helps this, in fact, it would make it horribly expensive. So given that there is no easy way to stop faucet abuse in conjunction with the new tip feature I'm guessing both will have to be revised in the near future. I'd suggest picking one in the interim. And in unrelated area, the whole VIP room for 1 BTC was just a joke. I agree. The faucet is a great way to try out the site, but there are actually people who sit there all day claiming the faucet. It's sad. Not everyone has money to gamble asshole. The faucet allows people who don't have money or would rather not gamble their money to be able to still have fun and be a part of the community. It's not only for trying out the site. There's no need for name calling. I don't think stunna made a faucet available with the intention of having a bunch of lowlifes sitting there milking it dry all day. You're probably one of those people that take all of the free peppermints when you go to a restaurant  you say no need for name calling and then you go and call people lowlifes. I don't think you have any idea why Stunna made faucet so stop pretending like you know what your talking about
|
|
|
|
Holdaaja
Legendary
Offline
Activity: 1274
Merit: 1000
|
 |
August 25, 2014, 05:30:14 AM |
|
so its a bug i found?
I found it first  Btw where is my bounty for this  Can I see faucet level amounts somewhere? And why I can't do this bet?   Will fix this, for some reason you can only do roll under on this bet, just need to change a parameters. Thanks for letting us know None posted right now, I'll get a list for later. Right now we are still determining if we want to keep or boost each level. I reported this like a week ago and I was told it was already reported. Who knows, they could just say everything is already reported. Yeah... I reported it 14 days ago. (as you can see from quote timestamp) @Stunna, can I get bounty for this?
|
|
|
|
Stars
|
 |
August 25, 2014, 06:44:08 AM |
|
so its a bug i found?
I found it first  Btw where is my bounty for this  Can I see faucet level amounts somewhere? And why I can't do this bet?   Will fix this, for some reason you can only do roll under on this bet, just need to change a parameters. Thanks for letting us know None posted right now, I'll get a list for later. Right now we are still determining if we want to keep or boost each level. I reported this like a week ago and I was told it was already reported. Who knows, they could just say everything is already reported. Yeah... I reported it 14 days ago. (as you can see from quote timestamp) @Stunna, can I get bounty for this? I'm pretty sure you only get a bounty when it's extremely serious.
|
|
|
|
Holdaaja
Legendary
Offline
Activity: 1274
Merit: 1000
|
 |
August 25, 2014, 06:47:28 AM |
|
so its a bug i found?
I found it first  Btw where is my bounty for this  Can I see faucet level amounts somewhere? And why I can't do this bet?   Will fix this, for some reason you can only do roll under on this bet, just need to change a parameters. Thanks for letting us know None posted right now, I'll get a list for later. Right now we are still determining if we want to keep or boost each level. I reported this like a week ago and I was told it was already reported. Who knows, they could just say everything is already reported. Yeah... I reported it 14 days ago. (as you can see from quote timestamp) @Stunna, can I get bounty for this? I'm pretty sure you only get a bounty when it's extremely serious. Incorrect. There is bug bounties paid mostly for cosmetic "bugs". And total of more than 0.4btc.
|
|
|
|
Stars
|
 |
August 25, 2014, 06:52:04 AM |
|
so its a bug i found?
I found it first  Btw where is my bounty for this  Can I see faucet level amounts somewhere? And why I can't do this bet?   Will fix this, for some reason you can only do roll under on this bet, just need to change a parameters. Thanks for letting us know None posted right now, I'll get a list for later. Right now we are still determining if we want to keep or boost each level. I reported this like a week ago and I was told it was already reported. Who knows, they could just say everything is already reported. Yeah... I reported it 14 days ago. (as you can see from quote timestamp) @Stunna, can I get bounty for this? I'm pretty sure you only get a bounty when it's extremely serious. Incorrect. There is bug bounties paid mostly for cosmetic "bugs". And total of more than 0.4btc. Oh, interesting.. I did not know that.
|
|
|
|
Holdaaja
Legendary
Offline
Activity: 1274
Merit: 1000
|
 |
August 25, 2014, 06:54:39 AM |
|
so its a bug i found?
I found it first  Btw where is my bounty for this  Can I see faucet level amounts somewhere? And why I can't do this bet?   Will fix this, for some reason you can only do roll under on this bet, just need to change a parameters. Thanks for letting us know None posted right now, I'll get a list for later. Right now we are still determining if we want to keep or boost each level. I reported this like a week ago and I was told it was already reported. Who knows, they could just say everything is already reported. Yeah... I reported it 14 days ago. (as you can see from quote timestamp) @Stunna, can I get bounty for this? I'm pretty sure you only get a bounty when it's extremely serious. Incorrect. There is bug bounties paid mostly for cosmetic "bugs". And total of more than 0.4btc. Oh, interesting.. I did not know that. And that is actually more than just cosmetic so I would really expect some kind of bounty 
|
|
|
|
nicemycoin
|
 |
August 25, 2014, 03:54:03 PM Last edit: August 26, 2014, 01:08:14 AM by nicemycoin |
|
received,thx to stunna.
|
|
|
|
apsvinet
|
 |
August 25, 2014, 05:58:12 PM |
|
hi, excuse me! Payments(7.17 to 8.17) haven't received!will you plz check it !
What is the amount owed and what is your address, can verify it soon. at least 90 posts with member signature,and the bitcoin address:189BueK9JAEesSDomHbnkedha7bcRxor53 hi,stunna,don't forget this! Wouldn't it be easier to PM him rather than discuss it in the wrong topic? At least use the thread made for discussion about the signature campaign! 
|
|
|
|
dooglus
Legendary
Offline
Activity: 2940
Merit: 1334
|
 |
August 25, 2014, 06:29:47 PM |
|
@dooglus that code is no where near working. I tried a few different rolls, and they were all computed wrong. That means either every roll on PD is not provably fair (unlikely) or the JS is wrong (much more likely). I think you might be using it wrong - it works for me (although it's annoying that it will only verify one roll at a time). I made some bets to test it out, then revealed my server seed:  Then I verified the first two rolls and the last one:   
|
Just-Dice | ██ ██████████ ██████████████████ ██████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████ ██████████████ ██████ | Play or Invest | ██ ██████████ ██████████████████ ██████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████████████ ██████████████████████ ██████████████ ██████ | 1% House Edge |
|
|
|
nahtnam
Legendary
Offline
Activity: 1092
Merit: 1002
nahtnam.com
|
 |
August 25, 2014, 06:32:39 PM |
|
@dooglus that code is no where near working. I tried a few different rolls, and they were all computed wrong. That means either every roll on PD is not provably fair (unlikely) or the JS is wrong (much more likely). I think you might be using it wrong - it works for me (although it's annoying that it will only verify one roll at a time). I made some bets to test it out, then revealed my server seed: - snip - Sorry, I made a big mistake. I was using the primedice api, and when I get the information of a bet, it gives me the SHA encrypted version of the bet, and not the unhashed version. Not sure why that happens, but I think @stunna should change it so that the unhashed version is sent VIA the API. If for some reason people wanted the hashed version, they can easily do it themselves.
|
|
|
|
|