Just-Dice.com : now with added CLAMs : Play or Invest

[willphase]

This isn't that far fetched if Just Dice uses a predictable way of generating random numbers. For example, if the server seed was a PRNG seeded by time then...

Of course, I think dooglus is smart enough to use a cryptographically secure PRNG to seed.

assuming just-dice is using node.js (safe assumption since he's using sockets.io) - then it would call crypto.randomBytes() [source] which in turn calls OpenSSL RAND_bytes() which 'puts num cryptographically strong pseudo-random bytes into buf.' [source]

it doens't get much stronger than OpenSSL's cryptographically random number generator and if there's a flaw in that, but then the whole internet (e.g. SSL session keys, root CA private keys) would be a lot more worried and just-dice losing a few million dollars would be the least of our problems.

Will

[exxe]

Hey doog,

How do I access the websocket from localhost/other domain? It always says

Code:

Origin null is not allowed by Access-Control-Allow-Origin

Help is appreciated.

Localhost: You could simply run the script as a chrome packaged app.

http://developer.chrome.com/apps/about_apps.html

[KingOfSports]

Doog did a manual withdraw for 1300 BTC and forgot to take it out of the player's account...that person just so happened to be Celeste, the site whale. Thus the whale goes and gambles away the 1300 BTC that was not suppose to be in the account. Doog has now paid 1300 BTC out of pocket to cover this joke of a degenerate.

[vlees]

Doog did a manual withdraw for 1300 BTC and forgot to take it out of the player's account...that person just so happened to be Celeste, the site whale. Thus the whale goes and gambles away the 1300 BTC that was not suppose to be in the account. Doog has now paid 1300 BTC out of pocket to cover this joke of a degenerate.

[mechs]

Doog did a manual withdraw for 1300 BTC and forgot to take it out of the player's account...that person just so happened to be Celeste, the site whale. Thus the whale goes and gambles away the 1300 BTC that was not suppose to be in the account. Doog has now paid 1300 BTC out of pocket to cover this joke of a degenerate.

I don't understand this. Are you claiming Doog just gave away 1300BTC of other investor's funds?!

[🏰 TradeFortress 🏰]

> whale won
> whale gets cashed out
> dooglus didn't remove balance
> whale keeps gambling
> whale loses
> dooglus finds out
> dooglus covering it with his own funds

[KingOfSports]

Doog did a manual withdraw for 1300 BTC and forgot to take it out of the player's account...that person just so happened to be Celeste, the site whale. Thus the whale goes and gambles away the 1300 BTC that was not suppose to be in the account. Doog has now paid 1300 BTC out of pocket to cover this joke of a degenerate.

I don't understand this. Are you claiming Doog just gave away 1300BTC of other investor's funds?!

NO, he paid the 1300 freeroll basically by divesting 1300 of his own funds and sending them to the cold storage wallet. He sent Celeste's 1300 BTC withdraw and forgot to take it out of Celeste's account. THEN Celeste goes and loses the whole balance, basically leaving the house with 1300 more coins then if should have had. So if everyone withdrew their balances it would be 1300 BTC short. Dooglus acknowledged the error and paid 1300 BTC of HIS OWN BTC to cover this mistake. I feel awful for dooglus.

[Raoul Duke]

Doog did a manual withdraw for 1300 BTC and forgot to take it out of the player's account...that person just so happened to be Celeste, the site whale. Thus the whale goes and gambles away the 1300 BTC that was not suppose to be in the account. Doog has now paid 1300 BTC out of pocket to cover this joke of a degenerate.

I don't understand this. Are you claiming Doog just gave away 1300BTC of other investor's funds?!

NO, he paid the 1300 freeroll basically by divesting 1300 of his own funds and sending them to the cold storage wallet. He sent Celeste's 1300 BTC withdraw and forgot to take it out of Celeste's account. THEN Celeste goes and loses the whole balance, basically leaving the house with 1300 more coins then if should have had. So if everyone withdrew their balances it would be 1300 BTC short. Dooglus acknowledged the error and paid 1300 BTC of HIS OWN BTC to cover this mistake. I feel awful for dooglus.

So, the whale turned out to be "only" a shark?

[🏰 TradeFortress 🏰]

Now cele claims he was hacked.

[Herbert]

> whale won
> whale gets cashed out
> dooglus didn't remove balance
> whale keeps gambling
> whale loses
> dooglus finds out
> dooglus covering it with his own funds

Holy ****! If this is true I feel terribly sorry for doog :-( This is the kind of mistake you do only once in a lifetime i suppose 

[dooglus]

Holy ****! If this is true I feel terribly sorry for doog :-( This is the kind of mistake you do only once in a lifetime i suppose 

It's true.  Whale claims he didn't lose the coins, but that he left his laptop in a cafe, with a copy of his google-auth code on it, and someone else scanned the code, logged in as him, and lost the balance using a betting pattern very similar to the whale himself.

Here's the post in the invest thread which includes more details.

[dooglus]

Here's the post in the invest thread which includes more details.

I made an address for donations to help towards my loss:

  17r66d9Sis99eZWtsZpEuK1rtpZCgr2sDU

I received a little under 10 BTC in donations, and also was given 120 BTC back by the whale himself.  So I'm "only" 1170 down now...

[dooglus]

I'm willing to donate my future JD earnings - maybe you could add an option to change the 1% fee on profits to something bigger.

It's 5% currently.  But for the foreseeable future it doesn't matter, since not many investors will be making new profits, and so I'll be charging nothing.

[Bugpowder]

Here's the post in the invest thread which includes more details.

I made an address for donations to help towards my loss:

  17r66d9Sis99eZWtsZpEuK1rtpZCgr2sDU

I received a little under 10 BTC in donations, and also was given 120 BTC back by the whale himself.  So I'm "only" 1170 down now...

Don't forget your investment returns on the 1300 as well.. Should be at least 100BTC there too. right?

[Bugpowder]

I'm willing to donate my future JD earnings - maybe you could add an option to change the 1% fee on profits to something bigger.

It's 5% currently.  But for the foreseeable future it doesn't matter, since not many investors will be making new profits, and so I'll be charging nothing.

I will donate 20% of my overall investment gains, up to (1300-120)BTC * my percentage invested at the time of the error.  Thus I don't take a terrible immediate hit for an error that was not my fault, and Dooglus has an incentive to keep the site humming along so we can earn his coins back.  

Since I was an early investor, I'm actually still up 40BTC, so I'll start with an 8BTC donation and continue until my 'ill-gained' earnings are paid up.

Perhaps other investors could take a similar approach? As profits roll-in in the future, carve a slice off until your 'ill-gains' are balanced out.

Ultimately, we don't want to kill the golden goose that is Just-Dice.   And I trust that Doog will take steps to ensure errors like this don't happen again.

[mechs]

I'm willing to donate my future JD earnings - maybe you could add an option to change the 1% fee on profits to something bigger.

The fee is 5%

[dooglus]

I received a little under 10 BTC in donations, and also was given 120 BTC back by the whale himself.  So I'm "only" 1170 down now...

Don't forget your investment returns on the 1300 as well.. Should be at least 100BTC there too. right?

Yes.  I was forgetting that.  I probably had 9 or 10% of the bankroll throughout the 1300 BTC loss, so that's another 130 BTC I got back.

The chat is buzzing with suggestions of how I can claw the losses back from investors.  I figure if they want to give it back they will, and if not I don't want to antagonize them.  Just know that the 1300 lost should never have been played with, and would not have been cashed out whether it won or not.  So the investors weren't risking anything by having it gambled.

I understand not many will be wanting to pay back their share of the 1300 I lost to them, given their recent losses on the site due to the whale.  That's fine.

[thy]

I received a little under 10 BTC in donations, and also was given 120 BTC back by the whale himself.  So I'm "only" 1170 down now...

Don't forget your investment returns on the 1300 as well.. Should be at least 100BTC there too. right?

Yes.  I was forgetting that.  I probably had 9 or 10% of the bankroll throughout the 1300 BTC loss, so that's another 130 BTC I got back.

The chat is buzzing with suggestions of how I can claw the losses back from investors.  I figure if they want to give it back they will, and if not I don't want to antagonize them.  Just know that the 1300 lost should never have been played with, and would not have been cashed out whether it won or not.  So the investors weren't risking anything by having it gambled.

I understand not many will be wanting to pay back their share of the 1300 I lost to them, given their recent losses on the site due to the whale.  That's fine.

If it makes you feel any better don't forget that you will also get another 5% commision back on the other 1170 btc of your money the other investors got when they are back up in the green territory, (unless they divest at a loss before that) so you can expect another 1170*0,05= 58,5 BTC back.
So the terrible misstake you made that the celeste(31791) account took advantage of is down to 1300-130-120-58,5-10= 981,5 BTC.
It's still a lot with 981,5 BTC but at least 25% less terrible than it looked at first at 1300 BTC. If the celeste player is from some civilised country i guess you should also stand a pretty good chance at getting the rest(1180) of the 1300 BTC from the player that he/she lost and still haven't paid you back.

[xinyou]

dooglus, how decent a man. I will donate a portion of my future profit into this address. Doog, why don't you put the address somewhere on the site? I have ultimate faith that we together will cover this 1300 loss on the long run. Go, JD

[vandinn]

Wow, this is a tough one. Internet anonymity is scary - if this happened irl, I wouldn't think for a single second and give back what doesn't belong to me. But the circumstances are hard, I am still in loss despite the gain I wasn't supposed to get.

I have sent most of what should be returned to the donation address (over 50%). Will give the rest once I get to black numbers. I feel so bad for not giving everything right away. Please don't do this again. I feel so ashamed...