bustabit.com -- The Social Gambling Game

[alani123]

Uh, take a look at this guy's chart. It seems to me that he's cheating. Ryan might want to investigate this.

https://www.moneypot.com/user/foo

https://www.moneypot.com/user/foo

The page you are looking for doesn't exist...



^hmmmm

His stats were deleted by Ryan.

[1715336427]

1715336427

[1715336427]

1715336427

[1715336427]

1715336427

[1715336427]

1715336427

[kuusj98]

Uh, take a look at this guy's chart. It seems to me that he's cheating. Ryan might want to investigate this.

https://www.moneypot.com/user/foo

https://www.moneypot.com/user/foo

The page you are looking for doesn't exist...



^hmmmm

His stats were deleted by Ryan.

Sure, but is the problem solved? Someone redrawing such amounts of money is ofcourse not something you'd want as a business

[Brewins]

What was the attack on PD? Was it the guy who flat bet many bets and won.?

Apparently somebody was able to gain access to their server seed, so they could know what their rolls would be before they rolled.

As I remember, he won over 100 max bets in a row at 49.5%, and was able to withdraw 40 BTC before being caught.

There are screenshots on the PD thread - go back a couple of weeks I guess.

Edit:

something like 150 wins in a row 




Hacked? Or admins having some fun with a gag 

Any hint how he managed to get access to the server seed?

And if it is already corrected or not(more important)

[alani123]

Sure, but is the problem solved? Someone redrawing such amounts of money is ofcourse not something you'd want as a business

It was actually fixed some hours after someone noticed foo was probably using an exploit.

Here's Ryan's response from few pages back.

Sorry guys, I was asleep! Thanks for letting me know. Foo did find an exploit, and was kind enough to reveal it. I have quickly pushed up a fix, and purged Foo's games from the database to preserve meaningful stats.

Foo used quite a clever exploit in some what should be dead code: http://privatepaste.com/354dae40cd

I'd like to thank him for not abusing the bug further, or slowly bleeding me over time. I'm extremely thankful for that, that would have been a nightmare situation. Thanks Foo!

Sorry about all the drama people, please enjoy the game.

[jaysabi]

I'm really impressed by the person who abused this bug. Not only due to the complexity of the exploit, but the fact he only took 5 of the 25 BTC in the hot wallet. He likely could have slowly abused the bug leading the eventual shutdown of MP, but instead was a class act. I'm really thankful for that and working on better security measures so I won't need to rely on the kindness of strangers as much.

Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?

[J3VVL]

I'm really impressed by the person who abused this bug. Not only due to the complexity of the exploit, but the fact he only took 5 of the 25 BTC in the hot wallet. He likely could have slowly abused the bug leading the eventual shutdown of MP, but instead was a class act. I'm really thankful for that and working on better security measures so I won't need to rely on the kindness of strangers as much.

Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?

there is something not right about this... out of the kindness of his heart he didn't take it all? yeah right!!! i don't buy it

[RHavar]

Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?

Yes. He had used the exploit to get somewhere in the order of over 30 BTC in profit. He did withdraw his original deposit, plus 5 BTC as a bounty for finding the exploit. Had he wanted, he would have been allowed to withdraw up to 25 BTC which was the contents of the hot wallet. But being a decent guy he didn't even make an attempt to do so, something that I am very grateful for.

[J3VVL]

Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?

Yes. He had used the exploit to get somewhere in the order of over 30 BTC in profit. He did withdraw his original deposit, plus 5 BTC as a bounty for finding the exploit. Had he wanted, he would have been allowed to withdraw up to 25 BTC which was the contents of the hot wallet. But being a decent guy he didn't even make an attempt to do so, something that I am very grateful for.

i call bullshit 

[jaysabi]

Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?

Yes. He had used the exploit to get somewhere in the order of over 30 BTC in profit. He did withdraw his original deposit, plus 5 BTC as a bounty for finding the exploit. Had he wanted, he would have been allowed to withdraw up to 25 BTC which was the contents of the hot wallet. But being a decent guy he didn't even make an attempt to do so, something that I am very grateful for.

I wouldn't call stealing 5 btc a decent action, or one who does it a decent person, just because he could have taken more. Stealing is stealing. The guy stole from you, and if you had investors yet, it would have been stealing from them. I understand you're grateful he didn't clean you out, but I'm still puzzled by your gushing praise for someone who is a thief.

[blockage]

Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?

Yes. He had used the exploit to get somewhere in the order of over 30 BTC in profit. He did withdraw his original deposit, plus 5 BTC as a bounty for finding the exploit. Had he wanted, he would have been allowed to withdraw up to 25 BTC which was the contents of the hot wallet. But being a decent guy he didn't even make an attempt to do so, something that I am very grateful for.

I wouldn't call stealing 5 btc a decent action, or one who does it a decent person, just because he could have taken more. Stealing is stealing. The guy stole from you, and if you had investors yet, it would have been stealing from them. I understand you're grateful he didn't clean you out, but I'm still puzzled by your gushing praise for someone who is a thief.

I was in the chat at the time, here's a chatlog. As you can see at 10:47 UTC foo was up >15 BTC and Ryan came online more than 2h later. He could've just withdrawn with a few clicks, but he didn't. He also send a support message to Ryan that explains how the exploit works, which allowed him to patch it fast.

I still don't get it. I would've assumed anybody in his position would clean the hot wallet.

[jaysabi]

Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?

Yes. He had used the exploit to get somewhere in the order of over 30 BTC in profit. He did withdraw his original deposit, plus 5 BTC as a bounty for finding the exploit. Had he wanted, he would have been allowed to withdraw up to 25 BTC which was the contents of the hot wallet. But being a decent guy he didn't even make an attempt to do so, something that I am very grateful for.

I wouldn't call stealing 5 btc a decent action, or one who does it a decent person, just because he could have taken more. Stealing is stealing. The guy stole from you, and if you had investors yet, it would have been stealing from them. I understand you're grateful he didn't clean you out, but I'm still puzzled by your gushing praise for someone who is a thief.

I was in the chat at the time, here's a chatlog. As you can see at 10:47 UTC foo was up >15 BTC and Ryan came online more than 2h later. He could've just withdrawn with a few clicks, but he didn't. He also send a support message to Ryan that explains how the exploit works, which allowed him to patch it fast.

I still don't get it. I would've assumed anybody in his position would clean the hot wallet.

Chatlog link doesn't load anything. Is it me or the link? (Also, someone posted a chatlog earlier, is it the same as that?)

I think the juxtaposition of reactions on this forum is interesting. Website owner steals investor funds but selectively refunds to some people, this forum is doxing people left and right, calling ex-girlfriends of people who may or may not be involved, etc. But some guy steals through an exploit and also doesn't take everything, and he's heralded as a saint. What a commendable chap that he only stole some of the money!

Could the perception of these two people be any more different? If this guy was such a good dude, he wouldn't have taken any of the money. He would have notified Ryan of the exploit so it could be patched and maybe asked for a reward, not help himself to it.

Just my opinion though. I wouldn't go praising someone cuz they only stole a little bit.

[J3VVL]

Does this mean he got was able to withdraw and keep 5 btc on account of the exploit?

Yes. He had used the exploit to get somewhere in the order of over 30 BTC in profit. He did withdraw his original deposit, plus 5 BTC as a bounty for finding the exploit. Had he wanted, he would have been allowed to withdraw up to 25 BTC which was the contents of the hot wallet. But being a decent guy he didn't even make an attempt to do so, something that I am very grateful for.

I wouldn't call stealing 5 btc a decent action, or one who does it a decent person, just because he could have taken more. Stealing is stealing. The guy stole from you, and if you had investors yet, it would have been stealing from them. I understand you're grateful he didn't clean you out, but I'm still puzzled by your gushing praise for someone who is a thief.

I was in the chat at the time, here's a chatlog. As you can see at 10:47 UTC foo was up >15 BTC and Ryan came online more than 2h later. He could've just withdrawn with a few clicks, but he didn't. He also send a support message to Ryan that explains how the exploit works, which allowed him to patch it fast.

I still don't get it. I would've assumed anybody in his position would clean the hot wallet.

Chatlog link doesn't load anything. Is it me or the link? (Also, someone posted a chatlog earlier, is it the same as that?)

I think the juxtaposition of reactions on this forum is interesting. Website owner steals investor funds but selectively refunds to some people, this forum is doxing people left and right, calling ex-girlfriends of people who may or may not be involved, etc. But some guy steals through an exploit and also doesn't take everything, and he's heralded as a saint. What a commendable chap that he only stole some of the money!

Could the perception of these two people be any more different? If this guy was such a good dude, he wouldn't have taken any of the money. He would have notified Ryan of the exploit so it could be patched and maybe asked for a reward, not help himself to it.

Just my opinion though. I wouldn't go praising someone cuz they only stole a little bit.

dooglus will formulate a legit explaination i'm sure!!! ROTFLMFAO

[dooglus]

http://nethack.wikia.com/wiki/Troll has some good advice:

[J3VVL]

(troll post)

nicely played mr sock puppet!

[dooglus]

As for being unable to imagine someone having the opportunity to steal coins and not stealing them, that is just sad.

You're saying not only that you would have cleaned out the whole hot wallet in his situation, but that you can't imagine anyone existing who wouldn't do the same.

The guy who found the exploit in MoneyPot claims to make a living from finding exploits. In my experience it is hard to get paid properly for an exploit, so he helped himself to what he considered his work to be worth. That's questionable morally, of course, but he put a lot of work into developing the exploit code and wanted to make sure he was suitably rewarded for it. He reported it to MoneyPot in a responsible manner, and shared his exploit code once it was fixed.

In MoneyPot's position I would probably be feeling pretty stupid for leaving the site vulnerable like that, and relieved that the hole was fixed without causing serious damage to the site's bankroll.

[J3VVL]

As for being unable to imagine someone having the opportunity to steal coins and not stealing them, that is just sad.

You're saying not only that you would have cleaned out the whole hot wallet in his situation, but that you can't imagine anyone existing who wouldn't do the same.

The guy who found the exploit in MoneyPot claims to make a living from finding exploits. In my experience it is hard to get paid properly for an exploit, so he helped himself to what he considered his work to be worth. That's questionable morally, of course, but he put a lot of work into developing the exploit code and wanted to make sure he was suitably rewarded for it. He reported it to MoneyPot in a responsible manner, and shared his exploit code once it was fixed.

In MoneyPot's position I would probably be feeling pretty stupid for leaving the site vulnerable like that, and relieved that the hole was fixed without causing serious damage to the site's bankroll.

so it was you? lol   u r a funny guy

[ticoti]

As for being unable to imagine someone having the opportunity to steal coins and not stealing them, that is just sad.

You're saying not only that you would have cleaned out the whole hot wallet in his situation, but that you can't imagine anyone existing who wouldn't do the same.

The guy who found the exploit in MoneyPot claims to make a living from finding exploits. In my experience it is hard to get paid properly for an exploit, so he helped himself to what he considered his work to be worth. That's questionable morally, of course, but he put a lot of work into developing the exploit code and wanted to make sure he was suitably rewarded for it. He reported it to MoneyPot in a responsible manner, and shared his exploit code once it was fixed.

In MoneyPot's position I would probably be feeling pretty stupid for leaving the site vulnerable like that, and relieved that the hole was fixed without causing serious damage to the site's bankroll.

I think you are coming to precipitate conclusions

[RHavar]

I do not believe it was stealing, as many times I've openly offered bounties of that order of magnitude. He merely pulled it from me, rather than wait on me to push it to him. And that's fine by me, what he found was clearly worth a lot more than that.

In my experience it is hard to get paid properly for an exploit, so he helped himself to what he considered his work to be worth. That's questionable morally, of course, but he put a lot of work into developing the exploit code and wanted to make sure he was suitably rewarded for it. He reported it to MoneyPot in a responsible manner, and shared his exploit code once it was fixed.

I'm not sure what motivates him, but if he ever wants to claim credit and add it to his list of achievements, I wanted to be clear that I bear no ill will, nor do I feel wronged (but rather the contrary).

[J3VVL]

I do not believe it was stealing, as many times I've openly offered bounties of that order of magnitude. He merely pulled it from me, rather than wait on me to push it to him. And that's fine by me, what he found was clearly worth a lot more than that.

In my experience it is hard to get paid properly for an exploit, so he helped himself to what he considered his work to be worth. That's questionable morally, of course, but he put a lot of work into developing the exploit code and wanted to make sure he was suitably rewarded for it. He reported it to MoneyPot in a responsible manner, and shared his exploit code once it was fixed.

I'm not sure what motivates him, but if he ever wants to claim credit and add it to his list of achievements, I wanted to be clear that I bear no ill will, nor do I feel wronged (but rather the contrary).

i know of a major bug !     yet you refuse to pay the bounty !!! your credibility is shit .. lmfao

[dooglus]

I think you are coming to precipitate conclusions

I had to google that:

adjective
prəˈsipədət/
1.
done, made, or acting suddenly or without careful consideration.
"I must apologize for my staff—their actions were precipitate"
synonyms:   hasty, overhasty, rash, hurried, rushed;

So I'm not sure what conclusion you think was hasty, but you may be missing some context - J3 is just the latest reincarnation of an old forum troll who has many times accused me of being a scammer. He doesn't seem able to conceive of someone being presented with the chance to steal and not taking it. I feel that this reflects much more on his character than on mine.