|
TheQuin
|
 |
July 04, 2018, 09:03:08 AM |
|
Just one free roll?
Yeah, that one was easy to spot and ban. Might even be the same guy that then tried another tactic to try and fool us. |
|
|
|
|
|
|
|
|
|
|
|
|
If you want to be a moderator, report many posts with accuracy. You will be noticed.
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
|
|
|
fbtcvip10
Jr. Member
 Offline
Activity: 237
Merit: 2
|
|
July 04, 2018, 09:07:11 AM |
|
Just one free roll?
Yeah, that one was easy to spot and ban. Might even be the same guy that then tried another tactic to try and fool us. Our conversation made me feel heart attack but will make abusers cry. |
|
|
|
|
broke_tradah
Jr. Member
Offline
Activity: 348
Merit: 6
|
|
July 04, 2018, 01:55:40 PM
Last edit: July 04, 2018, 02:18:49 PM by broke_tradah |
|
Curious, you say the fingerprint is unique to each machine. But as far as I know there are only a few things truly unique to each machine and none of them should be available to js or a browser without actually hacking the machine. Those would be the HD serial (in the case of windows machines it makes a unique serial upon formatting), the machines network card mac address, and the gateway devices mac address. None of these are available to js or a browser with only 1 exception, java can access those.
So im curious what else you consider as unique? Obviously its not the email or btc adderess because that ss you just showed has tons of accounts with the same fingerprint and the site doesnt allow duplicate btc or emails. So its something else or wetsuit is abusing malware to access things he should not be. I suppose the external ip could also be, but i thought freebitco had measures against that already so making a fingerprint that uses the ip seems silly as it would then make better sense to simply use the ip for ease of human readability. That to me would be like making another md5sum of an existing md5sum, pointless heh.
Another would be browser canvas fingerprinting but that is NOT unique to each machine and is an seo marketing tactic to group machines into similar categories to display targeted ads. So a lot of machines would have the same fingerprint yet have nothing to do with each other other than the fact that they like similar things such as freebitco and other crypto places probably. Its not a security method to identify specific machines. Is he actually trying to use canvasing as a security measure? I surely hope not or you will have ALOT more problems like you just had with this guy by falsely accusing his account. Any security person would know you never use canvasing for anything other than marketing. Sounds to me like wetsuit may need help in the security dept maybe.
I just tested my theory and it appears I am correct. Different browsers on the same machine produced different fingerprints. I think hes trying to use canvas printing incorrectly and thats really bad. Alot of innocent people are going to get grouped into buckets with bad people and we have an example already. The fingerprinting seems to be something new as far as logins go as it didnt exist for login requirements until recently. Now it requires the fingerprint id to login. I dont like wetsuit at all, but some friendly advice would be to stop attempting to use canvasing as a security measure. Its going to fail more than its successful.
|
Watch me rape Freebitco.in 24x7 with my gambling bot (you can to) here: https://dlive.tv/btctrading I also do some trading there as well.
|
|
|
fbtcvip10
Jr. Member
Offline
Activity: 237
Merit: 2
|
|
July 04, 2018, 02:18:49 PM |
|
Curious, you say the fingerprint is unique to each machine. But as far as I know there are only a few things truly unique to each machine and none of them should be available to js or a browser without actually hacking the machine. Those would be the HD serial (in the case of windows machines it makes a unique serial upon formatting), the machines network card mac address, and the gateway devices mac address. None of these are available to js or a browser with only 1 exception, java can access those.
So im curious what else you consider as unique? Obviously its not the email or btc adderess because that ss you just showed has tons of accounts with the same fingerprint and the site doesnt allow duplicate btc or emails. So its something else or wetsuit is abusing malware to access things he should not be. I suppose the external ip could also be, but i thought freebitco had measures against that already so making a fingerprint that uses the ip seems silly as it would then make better sense to simply use the ip for ease of human readability. That to me would be like making another md5sum of an existing md5sum, pointless heh.
Another would be browser canvas fingerprinting but that is NOT unique to each machine and is an seo marketing tactic to group machines into similar categories to display targeted ads. So a lot of machines would have the same fingerprint yet have nothing to do with each other other than the fact that they like similar things such as freebitco and other crypto places probably. Its not a security method to identify specific machines. Is he actually trying to use canvasing as a security measure? I surely hope not or you will have ALOT more problems like you just had with this guy by falsely accusing his account. Any security person would know you never use canvasing for anything other than marketing. Sounds to me like wetsuit may need help in the security dept maybe.
I just tested my theory and it appears I am correct. Different browsers on the same machine produced different fingerprints. I think hes trying to use canvas printing incorrectly and thats really bad. Alot of innocent people are going to get grouped into buckets with bad people and we have an example already. The fingerprinting seems to be something new also as it didnt exist for login until recently. Now it requires the fingerprint id to login. I dont like wetsuit at all, but some friendly advice would be to stop attempting to use canvasing as a security measure. Its going to fail more than its successful.
I think they should never tell us what the fingerprint is. |
|
|
|
|
broke_tradah
Jr. Member
Offline
Activity: 348
Merit: 6
|
|
July 04, 2018, 02:21:07 PM |
|
Security by obscurity never works. Theres no issue saying what the fingerprint is comprised of because we still dont know how its created/hashed. But knowing what the components are would help to understand why you were falsely accused and im almost certain its canvas fingerprinting which is really bad practice. No security person would ever do something so dumb. Wetsuit is likely not a security professional and he may not know this is bad.
|
Watch me rape Freebitco.in 24x7 with my gambling bot (you can to) here: https://dlive.tv/btctrading I also do some trading there as well.
|
|
|
|
TheQuin
|
|
July 04, 2018, 02:25:44 PM |
|
I think they should never tell us what the fingerprint is.
It's exactly the same techniques that every other online casino uses. Don't pay any attention to the diarrhea that comes out of that idiot's mouth. |
|
|
|
broke_tradah
Jr. Member
Offline
Activity: 348
Merit: 6
|
|
July 04, 2018, 02:27:46 PM |
|
Yet i am still correct in that its going to prove to fail which clearly it has. You took this guys btc incorrectly thinking he was the account spammer. And if its the same as all other casinos, that would insinuate that the practice is documented somewhere. Which its not because thats simply a lie. No idiot would document using canvas printing for security. Thats got to be the dumbest idea ive ever witnessed lol. You can defeat it by simply installing something like this: https://chrome.google.com/webstore/detail/canvas-defender/obdbgnebcljmgkoljcdddaopadkifnpm?hl=enSo again your claim that every machine has a unique fingerprint is an outright fucking lie because thats simply not possible with web browsers...... for a reason. Again i caught you in another lie this time using your own screenshits lol. |
Watch me rape Freebitco.in 24x7 with my gambling bot (you can to) here: https://dlive.tv/btctrading I also do some trading there as well.
|
|
|
|
TheQuin
|
|
July 04, 2018, 02:30:32 PM |
|
Yet i am still correct in that its going to prove to fail which clearly it has. You took this guys btc incorrectly thinking he was the account spammer.
Stop lying. |
|
|
|
fbtcvip10
Jr. Member
Offline
Activity: 237
Merit: 2
|
|
July 04, 2018, 02:36:37 PM |
|
Yet i am still correct in that its going to prove to fail which clearly it has. You took this guys btc incorrectly thinking he was the account spammer.
They didn't get my btc. I think The fingerprint is not important, but email address and ip address is. Maybe there is so many accounts with same fingerprints that are working fine , but If someone tries to abuse free rolls admin should have a look at fingerprints. |
|
|
|
|
broke_tradah
Jr. Member
Offline
Activity: 348
Merit: 6
|
|
July 04, 2018, 02:39:21 PM |
|
You missed the point. He tried to say every machine had a unique fingerprint and thats an utter lie as far as websites are concerned. He does this type of thing all the time. Trying to sneak in lies like this. The only way to truly id a machine is to have access to things that web browsers do not and should not have access to. Im actually very familiar with canvas printing as well as uuid's for machines as its used in the gaming industry for hardware banning. I helped develop punkbuster.
|
Watch me rape Freebitco.in 24x7 with my gambling bot (you can to) here: https://dlive.tv/btctrading I also do some trading there as well.
|
|
|
|
TheQuin
|
|
July 04, 2018, 02:43:32 PM |
|
You missed the point. He tried to say every machine had a unique fingerprint and thats an utter lie. He does this type of thing all the time. Trying to sneak in lies like this.
You just told an outright lie that we took someones Bitcoin. Fingerprints are unique enough to give a very high degree of certainty. I'm not going to waste my time explaining the technical details of that to an imbecile like you that would never possibly understand it. |
|
|
|
broke_tradah
Jr. Member
Offline
Activity: 348
Merit: 6
|
|
July 04, 2018, 02:50:14 PM |
|
Fingerprints are unique enough to give a very high degree of certainty. I'm not going to waste my time explaining the technical details of that to an imbecile like you that would never possibly understand it.
Thats like saying we are hurling a grenade into a crowd packed with innocent people, its close enough to the bad guys anyway. Thats utterly disgusting. Your statement of its close enough just goes to prove I am correct in everything I said, except the btc part. I misread that. Big whoop. The bigger story here is using canvasing for security. Thats fucking hilariously stupid and even easier to defeat. Especially with a bot. |
Watch me rape Freebitco.in 24x7 with my gambling bot (you can to) here: https://dlive.tv/btctrading I also do some trading there as well.
|
|
|
fbtcvip10
Jr. Member
Offline
Activity: 237
Merit: 2
|
|
July 04, 2018, 02:51:35 PM |
|
You missed the point. He tried to say every machine had a unique fingerprint and thats an utter lie. He does this type of thing all the time. Trying to sneak in lies like this.
You just told an outright lie that we took someones Bitcoin. Fingerprints are unique enough to give a very high degree of certainty. I'm not going to waste my time explaining the technical details of that to an imbecile like you that would never possibly understand it. If someone is trying to abuse free rolls and made deposits to do it easily then if you take his money it's natural. So No one should complain about this. And it's better not to explain what the fingerprint is, since there is always a way to cheat by reverse engineering. My referrals deposited about 4btc , now that i realized they were cheating me and you I'm not disappointed anymore. |
|
|
|
|
|
TheQuin
|
|
July 04, 2018, 02:59:49 PM |
|
Your statement of its close enough just goes to prove I am correct in everything I said, except the btc part.
You thinking that you have been proved correct is as predictably laughable as you being wrong in the first place. Fingerprints are unique enough but only part of the reason these accounts could be identified as multi-accounting abuse. The use of similar email addresses, reusing a set of IP addresses, the timing of signing the accounts up all one after the other and them all having the same fingerprint can leave no doubt. Now if you've finished making a complete dick of yourself again I've better things to do than argue with a moron who is too thick to know he's wrong. |
|
|
|
broke_tradah
Jr. Member
Offline
Activity: 348
Merit: 6
|
|
July 04, 2018, 03:37:15 PM
Last edit: July 04, 2018, 03:48:53 PM by broke_tradah |
|
every device has an individual fingerprint.
False. Every device has A fingerprint. There is absolutely nothing 'individual' or 'unique' about it. https://en.wikipedia.org/wiki/Canvas_fingerprinting Fingerprinting is for marketing. Not security, and should never be considered when addressing security concerns either. For example, it's ok to pass out a flier to a group of people with similar likes/dislikes, but its not cool to toss a grenade into that same group of mixed people with similar likes/dislikes simply because you know somewhere in there are some bad guys. And the claim that " exactly the same techniques that every other online casino uses" for security is just utterly retarded. No casino in their right mind would use canvasing for security. Ever. For advertising? Absolutely. For security? Not a snowballs chance in hell unless they were completely stupid. I'm starting to suspect you dont even know what "Canvas" actually means let alone fingerprinting of the canvas element. But thats not surprising since you're not an IT security person. However it doesnt excuse you from attempting to make it sound like you know what you're talking about. The correct reply should be "What is canvas fingerprinting, I dont think we use that". |
Watch me rape Freebitco.in 24x7 with my gambling bot (you can to) here: https://dlive.tv/btctrading I also do some trading there as well.
|
|
|
|
TheQuin
|
|
July 04, 2018, 03:48:45 PM |
|
False. Every device has A fingerprint. There is absolutely nothing 'individual' or 'unique' about it. https://en.wikipedia.org/wiki/Canvas_fingerprinting Fingerprinting is for marketing. Not security. For example, it's ok to pass out a flier to a group of people with similar likes/dislikes, but its not cool to toss a grenade into that same group of mixed people with similar likes/dislikes. That wiki article is about canvas fingerprinting. There is a lot more you can do. I see you totally ignored all the other factors that were also involved and just want to carry on making an argument about something else. You are so boring and live up to your broken_record reputation. Ignore the fact that fingerprinting wasn't the only issue and pretend to yourself you are winning some argument or other rather than making a complete prat of yourself. Maybe you have to fool yourself to keep any self-esteem but you certainly don't fool anyone else. If you want to carry on I'll have to leave you talking to yourself again. |
|
|
|
broke_tradah
Jr. Member
Offline
Activity: 348
Merit: 6
|
|
July 04, 2018, 03:50:44 PM |
|
I see you totally ignored all the other factors that were also involved and just want to carry on making an argument about something else.
You're right, I'm carrying on about HOW YOU LIE about the little minor details in EVERYTHING. Leaving out important details, tossing in complete lies hoping they go unnoticed, etc etc. So yes, I am picking on just your particular fuck up lie  I'm glad you are finally catching on  So it comes as no surprise that you wouldnt want to discuss something you screwed up on lol. |
Watch me rape Freebitco.in 24x7 with my gambling bot (you can to) here: https://dlive.tv/btctrading I also do some trading there as well.
|
|
|
SunGlassesRon
Newbie
Offline
Activity: 20
Merit: 1
|
|
July 04, 2018, 05:54:43 PM |
|
I have been using this site for years well about six weeks ago I decided to deposit some bitcoin in here for the %4 interest not a lot luckily as my account was hacked apparently, I never had an email to confirm address change I was on the site on the 2nd and by the 3rd someone had changed my email address my wallet address and withdrew all btc in less the 24 hours.
Now if that is not a sign of a hack I dont know what is surely the should have some security is it cryptopia or polo where if you change a wallet address you cant withdraw until 48 hours later
I have emailed Freebitcoin but with no response
|
|
|
|
|
|
Chris314
|
|
July 04, 2018, 06:01:46 PM |
|
I have been using this site for years well about six weeks ago I decided to deposit some bitcoin in here for the %4 interest not a lot luckily as my account was hacked apparently, I never had an email to confirm address change I was on the site on the 2nd and by the 3rd someone had changed my email address my wallet address and withdrew all btc in less the 24 hours.
Now if that is not a sign of a hack I dont know what is surely the should have some security is it cryptopia or polo where if you change a wallet address you cant withdraw until 48 hours later
The hacker would have needed your password (you used the same on other websites?), then he can change email. After that he receives all new notifications instead of you. If à substantial amount is on your balance, best security way is 2FA. |
|
|
|
SunGlassesRon
Newbie
Offline
Activity: 20
Merit: 1
|
|
July 04, 2018, 06:34:54 PM |
|
I have been using this site for years well about six weeks ago I decided to deposit some bitcoin in here for the %4 interest not a lot luckily as my account was hacked apparently, I never had an email to confirm address change I was on the site on the 2nd and by the 3rd someone had changed my email address my wallet address and withdrew all btc in less the 24 hours.
Now if that is not a sign of a hack I dont know what is surely the should have some security is it cryptopia or polo where if you change a wallet address you cant withdraw until 48 hours later
The hacker would have needed your password (you used the same on other websites?), then he can change email. After that he receives all new notifications instead of you. If à substantial amount is on your balance, best security way is 2FA. Okay maybe he had my password from somewhere I dont know but surely if he changes email address it has to be confirmed on old email adress |
|
|
|
|
|
