Just-Dice.com : now with added CLAMs : Play or Invest

[dooglus]

I don't use USB sticks, because they can transmit malware.  All communication between the online and offline machines is done, as Rannasha said, using webcams and QR codes.

Good to know you change what you say as you see fit, you have said in the chat maybe 1 or 2 months ago that you did use usb sticks. I don't have the chat logs, btw.

I change what I say when the situation changes.

I used to use a USB stick, so I said I used a USB stick.

Now I use QR codes and webcams, so that's what I say.

I made the change after reading this Halloween horror story:

http://arstechnica.com/security/2013/10/meet-badbios-the-mysterious-mac-and-pc-malware-that-jumps-airgaps/

Whether it's true or not doesn't really matter.  What matters is that the cold wallet is more secure as a result of the change I made.

I have chat logs.  I searched them for me mentioning 'usb stick' and 'qr *code' and found:

[I started off claiming to use a USB stick]

2013-09-01 08:13:06 <dooglus> Schaden: I don't run anything that auto-runs USB sticks on the cold wallet
2013-09-13 15:40:18 <dooglus> Josh: I wrote a script that makes a raw transaction on the laptop and copies it to a USB stick
2013-09-17 22:48:39 <dooglus> Loss: this is the cold wallet: blockchain.info/address/14o7zMMUJkG6De24r3JkJ6USgChq7iWF86 -- I
                              use a USB stick to transfer transactions to and from it
2013-10-03 15:51:21 <dooglus> john: I use an offline laptop and USB stick for the cold storage

[then some 'charlotte' came into the chat with the crazy idea of using QR codes to communicate with a cold wallet]

2013-10-22 17:41:39 <dooglus> charlotte: QR codes can encode arbitrary text strings
2013-10-22 17:42:26 <dooglus> so "yes" is the answer.  whatever you were going to put on the memory stick, encode as a QR
                              code and use a camera to do the transfer
2013-10-22 17:51:53 <dooglus> charlotte: even if it does, can't you just encode whatever it writes to the memory stick as a
                              QR code and transfer it over that way?
2013-10-22 17:53:24 <dooglus> charlotte: also, armory is open source Python.  it shouldn't be too hard to get it to run the
                              QRcode encoding software itself

[a week later I read the scary article, remembered charlotte's idea, and implemented it]

2013-11-01 19:28:37 <dooglus> well, USB sticks are big and complex.  do they have re-writable firmware on them?  does your
                              computer auto-run something when you stick it in?
2013-11-01 19:28:58 <dooglus> a QR code can't contain more than about 5kB of data, so that limits what they can do for a
                              start
2013-11-01 19:31:43 <dooglus> sqwerty: so now I type a command on my laptop to request coins from the cold wallet.  it pops
                              up a QR code like https://i.imgur.com/OTVXQ8w.png which I show to the cold wallet.  the cold
                              wallet machine prompts for the passphrase, and shows me a similar ...
2013-11-01 19:44:58 <dooglus> dac: I use QRcodes to do it now
2013-11-03 07:41:01 <dooglus> the off-line storage is more off-line than before now.  I used to use a usb stick to carry
                              transactions to and from it
2013-11-03 07:41:08 <dooglus> now I use webcams and qr codes
2013-11-03 07:41:59 <dooglus> yesterday I had someone in the chat transfer 500 BTC from the cold wallet using a QR code that
                              the cold wallet generated.  was pretty cool
2013-11-03 07:48:34 <dooglus> the online one shows a code saying "sign this".  the cold wallet reads the code, signs the tx,
                              generates a new qr code for the signed tx, and the online one scans it
2013-11-03 07:50:04 <dooglus> either way, malware on usb sticks isn't unrealistic
2013-11-03 17:12:38 <dooglus> Aah: I don't know how real the risk of malware spreading between linux distros via a USB stick
                              is, but I set up a QR code system now anyway
2013-11-03 17:12:56 <dooglus> it's kinda cool - the online machine and the cold wallet show each other QR codes to their
                              webcams
2013-11-03 17:15:56 <dooglus> Aah: it's a work in progress.  currently I'm limited by the amount of data I can put into a
                              qrcode

[lucaspm98]

Hell will freeze over before Douglas steals anyone's bitcoins.

This is the kind of conclusive proof that makes this forum so amazing.

This isn't proof either, but hopefully it's a little more compelling:

The site has over 5000 BTC wagered each day, even after the recent BTC price increase.

The site has a 1% house edge, and so expects to keep 50 of those 5000 wagered BTC.

I charge 10% commission on profit, so I expect to keep 5 BTC per day.

And so I have the choice of:

a) be honest, collect plenty of BTC, sleep at night, feel good about myself

b) be dishonest, collect plenty of BTC, be afraid, feel like a piece of shit

I pick (a).  Maybe if I had massive debts, an expensive drug habit, or other such need for piles of coins it wouldn't be such an easy choice.  But I don't, so (a) is a no-brainer for me.

Good way of explaining your situation, if only everyone else would follow your choice.

[pitchbend]

I'm "charlotte" from JD chatroom, and I just wanted to corroborate what Dooglus is saying. I had the idea of air-gapped cold/hot machines that use QR to send unsigned/signed transactions from one to the other, I was asking casually in the chat room and dooglus mentioned it was possible and gave me some ideas, yet he also mention he was using usb sticks.

I don't use USB sticks, because they can transmit malware.  All communication between the online and offline machines is done, as Rannasha said, using webcams and QR codes.

Good to know you change what you say as you see fit, you have said in the chat maybe 1 or 2 months ago that you did use usb sticks. I don't have the chat logs, btw.

I change what I say when the situation changes.

I used to use a USB stick, so I said I used a USB stick.

Now I use QR codes and webcams, so that's what I say.

I made the change after reading this Halloween horror story:

http://arstechnica.com/security/2013/10/meet-badbios-the-mysterious-mac-and-pc-malware-that-jumps-airgaps/

Whether it's true or not doesn't really matter.  What matters is that the cold wallet is more secure as a result of the change I made.

I have chat logs.  I searched them for me mentioning 'usb stick' and 'qr *code' and found:

[I started off claiming to use a USB stick]

2013-09-01 08:13:06 <dooglus> Schaden: I don't run anything that auto-runs USB sticks on the cold wallet
2013-09-13 15:40:18 <dooglus> Josh: I wrote a script that makes a raw transaction on the laptop and copies it to a USB stick
2013-09-17 22:48:39 <dooglus> Loss: this is the cold wallet: blockchain.info/address/14o7zMMUJkG6De24r3JkJ6USgChq7iWF86 -- I
                              use a USB stick to transfer transactions to and from it
2013-10-03 15:51:21 <dooglus> john: I use an offline laptop and USB stick for the cold storage

[then some 'charlotte' came into the chat with the crazy idea of using QR codes to communicate with a cold wallet]

2013-10-22 17:41:39 <dooglus> charlotte: QR codes can encode arbitrary text strings
2013-10-22 17:42:26 <dooglus> so "yes" is the answer.  whatever you were going to put on the memory stick, encode as a QR
                              code and use a camera to do the transfer
2013-10-22 17:51:53 <dooglus> charlotte: even if it does, can't you just encode whatever it writes to the memory stick as a
                              QR code and transfer it over that way?
2013-10-22 17:53:24 <dooglus> charlotte: also, armory is open source Python.  it shouldn't be too hard to get it to run the
                              QRcode encoding software itself

[a week later I read the scary article, remembered charlotte's idea, and implemented it]

2013-11-01 19:28:37 <dooglus> well, USB sticks are big and complex.  do they have re-writable firmware on them?  does your
                              computer auto-run something when you stick it in?
2013-11-01 19:28:58 <dooglus> a QR code can't contain more than about 5kB of data, so that limits what they can do for a
                              start
2013-11-01 19:31:43 <dooglus> sqwerty: so now I type a command on my laptop to request coins from the cold wallet.  it pops
                              up a QR code like https://i.imgur.com/OTVXQ8w.png which I show to the cold wallet.  the cold
                              wallet machine prompts for the passphrase, and shows me a similar ...
2013-11-01 19:44:58 <dooglus> dac: I use QRcodes to do it now
2013-11-03 07:41:01 <dooglus> the off-line storage is more off-line than before now.  I used to use a usb stick to carry
                              transactions to and from it
2013-11-03 07:41:08 <dooglus> now I use webcams and qr codes
2013-11-03 07:41:59 <dooglus> yesterday I had someone in the chat transfer 500 BTC from the cold wallet using a QR code that
                              the cold wallet generated.  was pretty cool
2013-11-03 07:48:34 <dooglus> the online one shows a code saying "sign this".  the cold wallet reads the code, signs the tx,
                              generates a new qr code for the signed tx, and the online one scans it
2013-11-03 07:50:04 <dooglus> either way, malware on usb sticks isn't unrealistic
2013-11-03 17:12:38 <dooglus> Aah: I don't know how real the risk of malware spreading between linux distros via a USB stick
                              is, but I set up a QR code system now anyway
2013-11-03 17:12:56 <dooglus> it's kinda cool - the online machine and the cold wallet show each other QR codes to their
                              webcams
2013-11-03 17:15:56 <dooglus> Aah: it's a work in progress.  currently I'm limited by the amount of data I can put into a
                              qrcode

[VTC]

Cold wallet is on an offline machine. Communication is done via QR codes and webcams so no storage medium or network interface connects the cold wallet machine to an online machine.

LOL dude, cold wallet is by definition on an offline machine. If it is not, then the operator is simple lieing. doog just copies the unsigned transaction hex to a usb and sticks it into the supposedly offline machine, where he signs and copies it to the usb, plug the usb back to the online computer and broadcast the transaction.

"cold wallet" could refer to a paper wallet or brain wallet too.  Anything not online is "cold", as I see it.

But Rannasha is right.  It's on an old laptop which never goes online.

I don't use USB sticks, because they can transmit malware.  All communication between the online and offline machines is done, as Rannasha said, using webcams and QR codes.

I have backups of the cold wallet private key, so losing the cold wallet isn't a problem.

What would be a problem would be if someone broke into my house, installed a keylogger on the cold wallet, then came back days later after I had typed the passphrase into it to harvest the unencrypted private key.

Someone did come in recently when we weren't home, but people around here don't even know Bitcoin exists.  All they took was a bottle of vodka...

It is quite possible to someone to install malware and come back later to steal the laptop.  Take some preventative measure if you aren't already:use truecrypt and full drive encryption, use bios and boot password / hard drive password if supported.  If you cannot fit your laptop in small safe, keep the truecrypt bootloader on a usb/cd that you can hide when you leave for extended periods of time.  While an attacker can override the bootloader with his that will capture your truecrypt password, you won't be even loading from this bootloader as you will use CD/USB.  Or just keep the whole operating system on an encrypted USB disk that you can hide.

[dooglus]

Incredible luck.

Deposited 1 BTC, and lost it.  Then deposited a further 0.5 BTC and turned it into over 1000 BTC before losing a bunch and quitting at a net profit of 533 BTC.

[drawingthesun]

Damn dooglus that is mad, would you mind releasing a zip of his roles?

[dooglus]

Damn dooglus that is mad, would you mind releasing a zip of his roles?

09:17:09 (1) <dooglus> wokehaha: do you mind if I publish a list of your bets? people want to see how you did it
09:17:27 (239632) <wokehaha> sure no problem about that

https://just-dice.com/239632.txt.bz2

[haightst]

Damn dooglus that is mad, would you mind releasing a zip of his roles?

09:17:09 (1) <dooglus> wokehaha: do you mind if I publish a list of your bets? people want to see how you did it
09:17:27 (239632) <wokehaha> sure no problem about that

https://just-dice.com/239632.txt.bz2

is that a virus? that file won't open on my computer! 

[sairon]

Damn dooglus that is mad, would you mind releasing a zip of his roles?

09:17:09 (1) <dooglus> wokehaha: do you mind if I publish a list of your bets? people want to see how you did it
09:17:27 (239632) <wokehaha> sure no problem about that

https://just-dice.com/239632.txt.bz2

is that a virus? that file won't open on my computer! 

Try 7zip (assuming windows)

[haightst]

Damn dooglus that is mad, would you mind releasing a zip of his roles?

09:17:09 (1) <dooglus> wokehaha: do you mind if I publish a list of your bets? people want to see how you did it
09:17:27 (239632) <wokehaha> sure no problem about that

https://just-dice.com/239632.txt.bz2

is that a virus? that file won't open on my computer!  

Try 7zip (assuming windows)

still hard to read ,,,got it thanks!  

[lucaspm98]

Just-Dice User turns 1.5 BTC into ~500 BTC

Wokehaha who just recently got into bitcoin bought 6.5 BTC and used 1.5 BTC to gamble at Just-Dice.

Deposits
http://pastie.org/pastes/8482985/text

Wow, that is absolutely incredible. Such luck....

[casinobitco]

Well he just made it +1030 coins

Holy S...

[dooglus]

Well he just made it +1030 coins

Indeed:



And then gave 2 BTC to 10 different people in the chat:

Code:

2013-11-15 18:31:20 bet #254027558: 20.48 BTC @ 48% lo: lucky:537902 profit:-20.48000000 tot:896.23719539
2013-11-15 18:31:23 bet #254027691: 40.96 BTC @ 48% hi: lucky:235585 profit:-40.96000000 tot:855.27719539
2013-11-15 18:31:27 bet #254027802: 40.96 BTC @ 48% hi: lucky:762128 profit:43.52000000 tot:898.79719539
2013-11-15 18:31:30 bet #254027935: 81.92 BTC @ 48% hi: lucky:721785 profit:87.04000000 tot:985.83719539
2013-11-15 18:31:52 bet #254028636: 20.48 BTC @ 48% hi: lucky:300242 profit:-20.48000000 tot:965.35719539
2013-11-15 18:31:55 bet #254028744: 20.48 BTC @ 48% lo: lucky:289288 profit:21.76000000 tot:987.11719539
2013-11-15 18:32:00 bet #254028919: 40.96 BTC @ 48% lo: lucky:197392 profit:43.52000000 tot:1030.63719539
2013-11-15 18:33:16 chat: <wokehaha> up 1030
2013-11-15 18:33:29 chat: <wokehaha> top 10 2 btc
2013-11-15 18:34:39 chat: <wokehaha> ok got the top 10
2013-11-15 18:35:05 chat: <wokehaha> give me some time when done will let u all know =)
2013-11-15 18:35:10 chat: <wokehaha> rain over dudes
2013-11-15 18:35:40 chat: <wokehaha> lucky
2013-11-15 18:35:45 chat: <wokehaha> dooglus chart~
2013-11-15 18:36:26 chat: <wokehaha> yeah its from top 10 2 btc =)
2013-11-15 18:38:48 ACTION (withdraw) success: 1.99990000 to 1BWPgHWrWib872bcxpT37y16V7GiJtnr1y txid 0af1df6f7e7c44932496b30ec1ff8999e1536012c85f8c59bfe501b8c54fb36d
2013-11-15 18:39:11 ACTION (withdraw) success: 1.99990000 to 1GkP2akCwsKokudE6Vcq3i8gKskWRpv9iL txid 734dd936a69ed125878f3df57a29cbf8e384476182803f216a2ab52c404f0cc7
2013-11-15 18:39:38 ACTION (withdraw) success: 1.99990000 to 1ACKeJKZKNPDzTHUxyBxJN6tVJ95vgzc7d txid 552be93a452cec02557519f6fff32924014a4af85bb724a90a110f1eb0f49c6a
2013-11-15 18:40:10 ACTION (withdraw) success: 1.99990000 to 1BiTcHes6GEuuutHYcNP4zU5qRN5vnfNxM txid 0dbe64b88f8a6725b0ab7221463eaa7b18816c3d49b3bc4c729d1f96d1e4b1ea
2013-11-15 18:40:37 ACTION (withdraw) success: 1.99990000 to 1P74LoEGrwXUERqbDKcRmzrUANH54t6RGZ txid 30160d1925ab403ea9ad693ce18c7722d17be416c31d0ade5507c0ed3e5b130c
2013-11-15 18:41:13 ACTION (withdraw) success: 1.99990000 to 1M4RxtjtbRHX1ybHohUJ5e58btgTm3NKU6 txid fa624ea9fb475b02487a6274e05d474dddc59b6b3f271460f2a0de8fbe097d93
2013-11-15 18:41:45 ACTION (withdraw) success: 1.99990000 to 13wZt74rDowJznv1TACrZVHiPywKAynYCe txid 7137f55e52dba81966a1287f46e0f789a3afec2dd7b07bd0f8d58a1035ecc5ff
2013-11-15 18:42:08 ACTION (withdraw) success: 1.99990000 to 1AmzT2ETbmXjxXTcqdqAm36VyRA1F24Xv9 txid b1be8f36bc3909176527c2abcbe1a20bce69b2deb4285dfd04e6f23a28074d5a
2013-11-15 18:42:37 ACTION (withdraw) success: 1.99990000 to 1BdSVfpqBCYeqoQVdG2oScQYoff2Jwsf7f txid 22fc0c424abd3c52963558544623734e1fa123dd153c59a23a418e938cf73dae
2013-11-15 18:43:08 ACTION (withdraw) success: 1.99990000 to 19iorKEh6eogqePRvrrek2ujvdAJynqjnw txid 888679f63022d3ec8655fbaec411e2c62e0aac60c0446950321a59e7d393b324
2013-11-15 18:43:36 chat: <wokehaha> ok top 10 play the 2 btw well =)
2013-11-15 18:43:41 chat: <wokehaha> enjoy

I updated https://just-dice.com/239632.txt.bz2 to include the new bets.

[Martijnvdc]

Dang... I didn't divest. I was not at home.
I wish i could daytrade like in the nakowa days.

[Marcopolo123]

insane his powerlevel is over 9000

[erre]

He also donated 2 btc to 10 people when he won 1000!
Karma buying is the best strategy... knowing when to stop is the only other skill needed to profit

[lucaspm98]

Well he just made it +1030 coins

The luckiest man on earth.

[mprep]

He also donated 2 btc to 10 people when he won 1000!
Karma buying is the best strategy... knowing when to stop is the only other skill needed to profit

Man, I wish I was there. With the current exchange rate, a gift of 2 BTC definitely won't get in the way.

[erre]

Well he just made it +1030 coins

The luckiest man on earth.

Well he is sitting at +230ish right now

AND a bad gamble addition for the whole life...

[lucaspm98]

Well he just made it +1030 coins

The luckiest man on earth.

Well he is sitting at +230ish right now

AND a bad gamble addition for the whole life...

If he was smart he would withdraw or invest it and never gamble for the rest of his life. He would be one of the few people to MAKE money gambling.