l0tt0.com ⚡ retro crypto casino

[dewez]

a) i have a version of the login page that sends a 6 digit number to be entered into the login page after you submit your email. do you think i should offer this as another option, or just make it the main login system, instead of the one-time link?

I dont see the big difference between clicking the link received in the email and entering six numbers.
Maybe adding both of the would be better so that both work in he same time.

b) when it comes to 2FA i'm leaning towards a withdrawal pin; which will be created when you login for the first time. the pin will be needed for any withdrawal. i feel this is a better  solution that asking for more info like a users phone- which brings in outside tech for sending txts.

Phone number should never be asked and 2FA will be more secure with secure code.

the difference is- you can get a code emailed to you- read it off from your computer and type it into your phone.. the link you cant really do that.

[Fivestar4everMVP]

below is taken from my post on our l0tt0 review page- i just wanted to post it here to get some input. BTW- I'll have the new homepage live next week.


so i hate passwords. i was building the registration system and kept asking myself the magic question: do i need this? what i was left with was the current one-time login link. login passwords are only as secure as your email password (pw resets). i totally get the issue of the one-time login link with regards to different devices, not everyone wants to play on the device they have their email on. so i do have some solutions for that and for securing the account more with 2FA.

For me, I see no issue with the current registration/login system, but it's also a good thing that you are thinking of creating a system that make provison for those who are playing with a phone or computer that they don't have their email account on, my opinion on this is below.

a) i have a version of the login page that sends a 6 digit number to be entered into the login page after you submit your email. do you think i should offer this as another option, or just make it the main login system, instead of the one-time link?

Make the sending of six digit login pin as an option alongside the sending of one time login link.
That is for example, when ever I enter my email address on the site to register/login, the system will send me both a six digit login pin and a one time login link, it's up to me to chose which of those I wanna make use of.
I think one crypto exchange I am using has that feature where they send both a one time link and a six digit pin in one email message, the user chooses which one he or she wants to make use of.

b) when it comes to 2FA i'm leaning towards a withdrawal pin; which will be created when you login for the first time. the pin will be needed for any withdrawal. i feel this is a better  solution that asking for more info like a users phone- which brings in outside tech for sending txts.

what are your thoughts on this?
Josh

I honestly think a Google 2fa will be better, but on the other hand, making the two available for use, that is, a withdrawal pin and a Google 2fa, will simply be the best, google 2fa doesn't or won't require you asking users for their phone numbers.

So, for a top notch security, make both a withdrawal pin available and a Google 2fa available as well, the two will help just incase a user forgets his or her withdrawal pin and wants to reset it, reseting will require the user to enter both a code sent to their email address and a code from their Google 2fa, this will prevent scammers or hackers from stealing a user's account and reseting their withdrawal pin easily.

[dewez]

-Make the sending of six digit login pin as an option alongside the sending of one time login link.
That is for example, when ever I enter my email address on the site to register/login, the system will send me both a six digit login pin and a one time login link, it's up to me to chose which of those I wanna make use of.
I think one crypto exchange I am using has that feature where they send both a one time link and a six digit pin in one email message, the user chooses which one he or she wants to make use of.

-I honestly think a Google 2fa will be better, but on the other hand, making the two available for use, that is, a withdrawal pin and a Google 2fa, will simply be the best, google 2fa doesn't or won't require you asking users for their phone numbers.

-So, for a top notch security, make both a withdrawal pin available and a Google 2fa available as well, the two will help just incase a user forgets his or her withdrawal pin and wants to reset it, reseting will require the user to enter both a code sent to their email address and a code from their Google 2fa, this will prevent scammers or hackers from stealing a user's account and reseting their withdrawal pin easily.

great idea regarding the option- not on the site but in the email..

regarding the withdrawal pin- that couldn't be reset. it would be setup when you first login- and it can never be changed, thus ensuring only you know it.. i know what you're going to say, what is someone forgets it? well... do you forget your atm pin? and also- this is crypto.. we are already in an unforgiving environment.

i will look into google 2fa- i just dont want to bring google into the codebase. i dont use GA for that reason. i LOVE that you visit my site and there are zero trackers.

[Fivestar4everMVP]

great idea regarding the option- not on the site but in the email..

regarding the withdrawal pin- that couldn't be reset. it would be setup when you first login- and it can never be changed, thus ensuring only you know it.. i know what you're going to say, what is someone forgets it? well... do you forget your atm pin? and also- this is crypto.. we are already in an unforgiving environment.

😂 Hahaha
Very funny though, but honestly, don't underrate how lazy and dumb some people can be, the fact I myself have never forgetten my ATM pin does not mean there aren't people out there who have.
And also under that, people are likely to use their ATM cards more frequently than how frequent they play on a gambling casino.
Some body may sign up on the casino today, carelessly create a withdrawal pin just to complete the sign up since he or she has no intention depositing immediately.
And one day, maybe after like 1 year or more, they may come across the casino again, and this time, decide to login and deposit since they already have an account, they play, possibly win and want to withdraw, and they are asked for a withdrawal pin, only for the person to discover that he or she has forgotten the pin he or entered during the registration, since it's been a long time, and upon discovering that they can't reset the pin, next thing will be that, they start creating thread tagging the casino as a scam casino.😀

So, I think you should rethink this decision

i will look into google 2fa- i just dont want to bring google into the codebase. i dont use GA for that reason. i LOVE that you visit my site and there are zero trackers.

OK, a good and understandable reason though, but there are other alternatives to Google 2fa, like Authy and the some others.

[dewez]

great idea regarding the option- not on the site but in the email..

regarding the withdrawal pin- that couldn't be reset. it would be setup when you first login- and it can never be changed, thus ensuring only you know it.. i know what you're going to say, what is someone forgets it? well... do you forget your atm pin? and also- this is crypto.. we are already in an unforgiving environment.

😂 Hahaha
Very funny though, but honestly, don't underrate how lazy and dumb some people can be, the fact I myself have never forgetten my ATM pin does not mean there aren't people out there who have.
And also under that, people are likely to use their ATM cards more frequently than how frequent they play on a gambling casino.
Some body may sign up on the casino today, carelessly create a withdrawal pin just to complete the sign up since he or she has no intention depositing immediately.
And one day, maybe after like 1 year or more, they may come across the casino again, and this time, decide to login and deposit since they already have an account, they play, possibly win and want to withdraw, and they are asked for a withdrawal pin, only for the person to discover that he or she has forgotten the pin he or entered during the registration, since it's been a long time, and upon discovering that they can't reset the pin, next thing will be that, they start creating thread tagging the casino as a scam casino.😀

So, I think you should rethink this decision

i will look into google 2fa- i just dont want to bring google into the codebase. i dont use GA for that reason. i LOVE that you visit my site and there are zero trackers.

OK, a good and understandable reason though, but there are other alternatives to Google 2fa, like Authy and the some others.

yeah i'm looking into it. maybe the pin idea wasn't the best. it worked for silk road

[SamReomo]

yeah i'm looking into it. maybe the pin idea wasn't the best. it worked for silk road

Pin idea isn't a bad one but it would be better if the user could request a new pin in case of losing or forgetting the previous one. I think you should implement the pin system in a way that when a user forgets his/her pin then he/she may get an option to request a new pin or may get the old pin automatically via email. That way even is someone loses the pin they can get a new or or they can get the one that they have set during registration.

[dewez]

yeah i'm looking into it. maybe the pin idea wasn't the best. it worked for silk road

Pin idea isn't a bad one but it would be better if the user could request a new pin in case of losing or forgetting the previous one. I think you should implement the pin system in a way that when a user forgets his/her pin then he/she may get an option to request a new pin or may get the old pin automatically via email. That way even is someone loses the pin they can get a new or or they can get the one that they have set during registration.

Sure.. but then there is no point. The login link is secure- only if your email account is secure.. if your email account gets compromised- and someone gets acccess to your account and can just reset the withdrawal pin, whats the point? I mean, thats why 2FA came about in the first place. a site username/password can be reset if someone gets into your email.. so adding 2FA to say your phone secures it up..

I love the withdrawal pin idea.. I honestly find it very hard to believe that someone would forget a 4 digit pin number they setup. It will prob be their bday or their ATM pin. But... I bet 90% of them will be 1111 or 1234.. and that is the problem.

I'm looking into 2FA, I'll prob go that route, I just need to figure out if I'm going to collect the phone numbers in the site and send out the sms myself or use something like Okta.

[SamReomo]

The login link is secure- only if your email account is secure.. if your email account gets compromised- and someone gets acccess to your account and can just reset the withdrawal pin, whats the point? I mean, thats why 2FA came about in the first place. a site username/password can be reset if someone gets into your email.. so adding 2FA to say your phone secures it up..

2FA is way better than pin code without doubt and it's the safest option available, but it also have some drawbacks. Let's say if someone's email is compromised then pin changing may not be useful but at the same time if someone has installed authenticator for 2FA on their phone and the phone gets stolen the same will happen.

Each security measure has pros and cons but we should give more importance to the pros and avoid the cons. I guess you selection of going with 2FA is better than going with a pin based withdrawal mechanism, and you should go with it instead of going with the pin based system.

[notblox1]

I'm looking into 2FA, I'll prob go that route, I just need to figure out if I'm going to collect the phone numbers in the site and send out the sms myself or use something like Okta.

Why would you need phone numbers for 2FA?!
This is not secure way of suing it and we saw many cases of sim swaps.
Codes can be sent with email and backup codes should be saved locally, and different device dont have to be phone.

[Potato Chips]

I'm looking into 2FA, I'll prob go that route, I just need to figure out if I'm going to collect the phone numbers in the site and send out the sms myself or use something like Okta.

That is SMS 2FA, btw

I think what Fivestar was suggesting is TOTP 2FA where folks can use authenticator apps. But as with anything, if you're careless enough, you could lose access of this too lol.

Thankfully, there's an app called aegis that does automated backups of all saved entries in one encrypted file. Folks could also choose between local and cloud backups --  personally, I prefer local backups.

[dewez]

I'm looking into 2FA, I'll prob go that route, I just need to figure out if I'm going to collect the phone numbers in the site and send out the sms myself or use something like Okta.

That is SMS 2FA, btw

I think what Fivestar was suggesting is TOTP 2FA where folks can use authenticator apps. But as with anything, if you're careless enough, you could lose access of this too lol.

Thankfully, there's an app called aegis that does automated backups of all saved entries in one encrypted file. Folks could also choose between local and cloud backups --  personally, I prefer local backups.

yeah.. im looking into both options. hope everyone has a good weekend.

[dewez]

i wanted to show everyone the new homepage design, since it was a topic of discussion a couple weeks back.
keep in mind the numbers are just placeholders-- they will be in crypto, the header buttons/menu are getting redesigned--it's still in dev, all the images are getting custom made--but will have that look and feel.

I think it adds a modern look while still keeping the nostalgic feel of the brand. i hope everyone likes it! (it will be live in a week or so)

[Fivestar4everMVP]

i wanted to show everyone the new homepage design, since it was a topic of discussion a couple weeks back.
keep in mind the numbers are just placeholders-- they will be in crypto, the header buttons/menu are getting redesigned--it's still in dev, all the images are getting custom made--but will have that look and feel.

I think it adds a modern look while still keeping the nostalgic feel of the brand. i hope everyone likes it! (it will be live in a week or so)

https://talkimg.com/images/2024/03/22/J9ROo.jpeg

This is absolutely stunning 😍, wow, what a really nice and amazing look, this is a very commendation work Dev, I personally really love it to be honest.

And you are completely right, this design indeed gives the casino a more mordern look and feel, actually, with this design and several new games added, not just luck based games though, and several other nice features users request for through the just ended review campaign, I think this will set l0tt0.com on the part to greatness.

Been a while I last visited the casino by the way, and it's not just this casino but majorly all casinos i usually played on, let me just say that it's been a while I last gambled or placed any online bet , and this is because work got heftier for me since the past few months, hoping things get easier for me in the coming months, so I can have time to play some gambling again, and by then, I believe that this new look would have been implemented.

[notblox1]

i wanted to show everyone the new homepage design, since it was a topic of discussion a couple weeks back.
keep in mind the numbers are just placeholders-- they will be in crypto, the header buttons/menu are getting redesigned--it's still in dev, all the images are getting custom made--but will have that look and feel.

This redesign looks much better than before and it is improved a lot.
I see more dark colors and I hope this is a sign that new dark theme is coming soon together with other updates  
Last time I played on l0tt0 I lost everything from my account trying to win big and impress everyone in forum

[dewez]

i wanted to show everyone the new homepage design, since it was a topic of discussion a couple weeks back.
keep in mind the numbers are just placeholders-- they will be in crypto, the header buttons/menu are getting redesigned--it's still in dev, all the images are getting custom made--but will have that look and feel.

This redesign looks much better than before and it is improved a lot.
I see more dark colors and I hope this is a sign that new dark theme is coming soon together with other updates  
Last time I played on l0tt0 I lost everything from my account trying to win big and impress everyone in forum

i gave you two some bonus money. round two of trying to impress!

[Fivestar4everMVP]

i wanted to show everyone the new homepage design, since it was a topic of discussion a couple weeks back.
keep in mind the numbers are just placeholders-- they will be in crypto, the header buttons/menu are getting redesigned--it's still in dev, all the images are getting custom made--but will have that look and feel.

This redesign looks much better than before and it is improved a lot.
I see more dark colors and I hope this is a sign that new dark theme is coming soon together with other updates  
Last time I played on l0tt0 I lost everything from my account trying to win big and impress everyone in forum

Lolz, gambling will always be gambling regardless of who we try to impress, and the fact about playing solely for the win and profit is that, it can easily become very discouraging when you continue to lose it all over and over again the harder and harder you try and keep trying. And I guess this is the reason why every win is alway heartlifting, most especially the really tangible ones, and for some players, they still celebrate even their little wins for non of it is easy to achieve.

But true gamblers never give up, the best way to enjoy gambling and always stay motivated is to treat gambling as a fun activity, count not on your loses or wins, not actually an easy task but for those who are disciplined strong enough to pull this through, they will enjoy gambling and will always be motivated to play at any time regardless of whether they are luck or not.

Anyways, I also will have a run on pick six tonight 😁, my favorite game on l0tt0.com so far, thought I had an empty balance all this while, but just checked and discovered I actually have like $7 worth of bitcoin on my account  .

[notblox1]

i gave you two some bonus money. round two of trying to impress!

Thank you.
I received $5 in bitcoin and I will try to multiple it to some big and impressive number 

One small thing I saw after latest release.
I can see my balance only in bitcoin, and only way to see value in dollars is when I move mouse over My Account button.

[dewez]

One small thing I saw after latest release.
I can see my balance only in bitcoin, and only way to see value in dollars is when I move mouse over My Account button.

yeah.. the next version will support other currencies- but i'm trying to figure out the best way to show USD. i was thinking mousing over any crypto value- maybe a toggle to show the value. not really sure yet. but yes- that is a hold out from the previous version when it was in all USD. my gf likes it because she has no clue what the value of sats are.. so she constantly mouses over the my account button before and after bets. heh

[dewez]

Things are moving along, I'm almost done with the new homepage. It got delayed a little because we couldn't launch it without the new header- which is built for multiple currencies. So it's going live with LTC added to the platform. Lots of changes!

BTW- we still have our 100 satoshi bonus for new accounts, so if you haven't joined- do so now! If anyone else wants another free bonus, just send me a PM or email.


Josh

[Fivestar4everMVP]

Things are moving along, I'm almost done with the new homepage. It got delayed a little because we couldn't launch it without the new header- which is built for multiple currencies. So it's going live with LTC added to the platform. Lots of changes!

BTW- we still have our 100 satoshi bonus for new accounts, so if you haven't joined- do so now! If anyone else wants another free bonus, just send me a PM or email.


Josh

Keep doing your best for the casino, it's sometimes always kind of a struggle at the very beginning like this, but then, as soon as traffic starts rolling in, every thing becomes much more easier ans faster.
I like that LTC will become another alternative means of deposits and withdrawal on the casino, this I believe should encouraged gambler to want to try this casino.

Also believing that a new marketing will be launched as a soon as the new version of the casino is launched, so as to create the much needed awareness, and marketing doesn't have to be on this forum alone, you can try other places and types of marketing like Google ads and so on, like I will always quote a man who said "in the old days, creating a website was very difficult, but getting traffic was very easy, but today, creating a site has become very easy, but getting traffic very hard" which is to that it's one thing to build a project that is really good, and it is entirely another thing to have enough money to promote it until the project becomes so popular that it can promote itself.

Looking forward to the new version of the site.