How secure is a casino from attacks ?

[swogerino]

I have been reading a lot of compromise cases on a daily bases now where hackers hit huge companies with ransomware and other sort of attacks.They can use seed cracking tools like hashcat to know the results of a pregenerated Md5 seed hash in a provably fair casino.How long does a pregenerated hash stay on the server and how protected is a casino against these attacks.Luckily Amazon Web Services does not give out for rent huge Gpu rigs anymore but we don’t know if they might again in the future.

[1714663422]

1714663422

[Sadlife]

A centralized server is always prone to attack. They are not safe at all its only a matter of time until someone finds a bug. If the casino site is lucky, a white hat hacker will report it to the webmaster and get a quick patch. But in reality nobody does it. What's more scary is there are ton of ways to hack and exploit web browsers such as simple SQL injection or cross site scripting. I've heard there are gambling sites that uses newer version in storing data through blockchain technology this will minimize hackers from stealing money from gamblers.

[Questat]

This is a very technical topic, casinos might not share how they secure their site but I believe they are putting the best security measures to ensure their money. I'd love to learn from here by just reading the thread, nothing I can share about security measures or other technicalities but as a gambler, I'm also interested if we can trust casinos with our funds with the measure they put in place.

[Debonaire217]

It is not always the case that a casino is using an MD5 hashing algorithm to secure the outcome of their games, most of the time, they are using SHA256 which is comparatively really hard to compute unlike MD5, whichever the case is, hashing algorithms are still advisable compared to other sites which don't encrypt the outcome of the games or even the credentials of the accounts of the users. I just noticed, I wasn't aware that Amazon is providing services to allow people to use their machines for specific computing tasks, if that is the case, anyone could brute force a task to hack and break into an account of an algorithm which could cause big trouble. It is a good decision that they are preventing it nowadays.

[Wenbing]

A centralized server is always prone to attack. They are not safe at all its only a matter of time until someone finds a bug. If the casino site is lucky, a white hat hacker will report it to the webmaster and get a quick patch. But in reality nobody does it. What's more scary is there are ton of ways to hack and exploit web browsers such as simple SQL injection or cross site scripting. I've heard there are gambling sites that uses newer version in storing data through blockchain technology this will minimize hackers from stealing money from gamblers.

Yes, I like your comment regarding the need for a decentralized server for Casina sites.

Yes, the truth is that a centralized server has limitation, as information are only in one place that's traceable, which makes it easy to hack but decentralized server doesn't have a central location to be hacked.

In a decentralized server hacking one server has no significance if you couldn't hack other servers.

This is a very technical topic, casinos might not share how they secure their site but I believe they are putting the best security measures to ensure their money. I'd love to learn from here by just reading the thread, nothing I can share about security measures or other technicalities but as a gambler, I'm also interested if we can trust casinos with our funds with the measure they put in place.

You see gambling sites are attracts black hat hackers the same way conventional banks attract armed robbers. What need to be done is the implementation of high level cybersecurity measures to prevent hacking. Also, the company can have a team of dedicated hackers who will take care of attacks on the site.

[moderator's note: consecutive posts merged]

[Insanerman]

I just noticed, I wasn't aware that Amazon is providing services to allow people to use their machines for specific computing tasks, if that is the case, anyone could brute force a task to hack and break into an account of an algorithm which could cause big trouble. It is a good decision that they are preventing it nowadays.

Apparently, Amazon has his Cloud Services, the same as Google and Microsoft Azure does. Even some companies are made for a cloud GPU services, but most of them have restrictions on how many tasks you could run on their server and how much it may costs you, so no one would even do that way lol.

Some casinos (like roobet) uses 256-bit encryption, and in which they run their own server. And if a gambling casino never discloses what type of encryption they use, they are probably using a weak one, as disclosing what encryption you are using is actually making your platform more secured with them knowing you use a strong one. But in fact, I've never played nor encountered on a gambling platform that only uses MD5, many already had their hands on various possibilities of words deciphered onto an MD5, so no one is safe in a platform that uses it.

[swogerino]

After watching many tutorials on hashcat decided to give it a try.I used the mining rigs I manage for some colleagues and tried to crack a pre generated hash result which I was unsuccessful no matter the big 15220 Mhsh bruteforcing power.I can safely say casinos implement good security measures and I am closic this topic to not let it become a spam megathread.