➫ ➬ ➫ ➬ LUCKYB.IT Classic ★★★ the oldest Bitcoin on-chain game ★★★

[BRE]

Congratulations To 1M58


Congratulations To 18Yr



Click Here => MeMe Contest - 1.5 BTC In Prizes <= Click Here

[BRE]

Congratulations To HODOR




Click Here => MeMe Contest - 1.5 BTC In Prizes <= Click Here

[edmundduke]

Congratulations To HODOR




Click Here => MeMe Contest - 1.5 BTC In Prizes <= Click Here

That is a really nice promo you guys are doing again! Ill see if i can come up with something creative (i doubt it is good enough to win but ill try lol). Is there something special in the works for Christmas ? Or will the players provide the gifts for the admin this year ?

[janggernaut]

 

hmmm, wonder is that biggest lotto ever had sir?

[JumperX]

 

hmmm, wonder is that biggest lotto ever had sir?

nope, AFAIK its just a turbo lotto. some users in the past got around .2BTC in the past and thats not a happy hour that time. IIRC it was a trex or godzilla lotto

[BRE]

Congratulations To Flux




Click Here => MeMe Contest - 1.5 BTC In Prizes <= Click Here

[safari88]

Nice flux Congratulations, been a while I have not seen you play and it seems a good start on the line promo
I hope you can get better at least X130 or x2016

[Dannie]

hmmm, wonder is that biggest lotto ever had sir?

AFAIK, the biggest ever chat lotto on luckybit is 1.5 BTC https://blockchain.info/tx/f63d6415327db9ce0407cf4bc4b6e6bfd307a339079360b79051a3dbf9ad0ec5. It happened during a "legendary happy hour" in March.

[nachoig]

Excuse me, but websites like this MUST work properly with HTTPS (and enabled by default). It's unacceptable the use of HTTP in this type of thing, due to the risk of MITM attacks.

Unfortunately, trying to use it with HTTPS (inserting 'https://' before the domain name) just redirects to the CloudFlare page with the 522 error.

[BRE]

Congratulations To HODOR




Click Here => MeMe Contest - 1.5 BTC In Prizes <= Click Here

[lolxxxx]

Congratulations To HODOR




Click Here => MeMe Contest - 1.5 BTC In Prizes <= Click Here

Nice! Did he hit both in 1 tx ?

Seems like he hit in one transaction look at the timing it means he hitted with same transaction..
Congratulations to HODOR

[lite]

Congratulations To HODOR




Click Here => MeMe Contest - 1.5 BTC In Prizes <= Click Here

Woah 24x hit twice!! congrats HODOR. good luck hope you hit x999.

[stingleword]

Excuse me, but websites like this MUST work properly with HTTPS (and enabled by default). It's unacceptable the use of HTTP in this type of thing, due to the risk of MITM attacks.

Unfortunately, trying to use it with HTTPS (inserting 'https://' before the domain name) just redirects to the CloudFlare page with the 522 error.

LuckyBit doesn't use HTTPS because it doesn't need it. LuckyBit does not hold user funds for any significant time and all plays are conducted "on-chain", i.e. they occur in response to blockchain events, not website events. A MITM attack against LuckyBit could - at worst - replace the game addresses with malicious ones. If you are unsure about where you are sending your funds, simply double-check on the blockchain first; the game addresses are public information that is easily verified independently. One could play LuckyBit without even opening the website.

There has never been a report of MITM attacks against LuckyBit.

[Girlscout]

Excuse me, but websites like this MUST work properly with HTTPS (and enabled by default). It's unacceptable the use of HTTP in this type of thing, due to the risk of MITM attacks.

Unfortunately, trying to use it with HTTPS (inserting 'https://' before the domain name) just redirects to the CloudFlare page with the 522 error.

LuckyBit doesn't use HTTPS because it doesn't need it. LuckyBit does not hold user funds for any significant time and all plays are conducted "on-chain", i.e. they occur in response to blockchain events, not website events. A MITM attack against LuckyBit could - at worst - replace the game addresses with malicious ones. If you are unsure about where you are sending your funds, simply double-check on the blockchain first; the game addresses are public information that is easily verified independently. One could play LuckyBit without even opening the website.

There has never been a report of MITM attacks against LuckyBit.

I've actually have played many times with out the site...  .... and now sarcastic side... how did luckyb.it make it so long with no issues if y all miss Something that ob vious... lol I ahave faith administration and stinglinstration are on top of things

[nachoig]

A MITM attack against LuckyBit could - at worst - replace the game addresses with malicious ones.

This is a sufficient reason to put HTTPS. The attacker has a financial incentive to repllace those addresses.

There has never been a report of MITM attacks against LuckyBit.

Until it happens. But why wait until an incident happens if you already can fix the issue?

[BRE]

Congratulations To 1EL3


Congratulations To HODOR


Congratulations To 1D4Y

[safari88]

Nice hit Congratulations to 1EL3. you are really lucky a couple of hours to get profit 33 BTC

[stingleword]

A MITM attack against LuckyBit could - at worst - replace the game addresses with malicious ones.

This is a sufficient reason to put HTTPS. The attacker has a financial incentive to repllace those addresses.

There has never been a report of MITM attacks against LuckyBit.

Until it happens. But why wait until an incident happens if you already can fix the issue?

SSL implementation is not a simple process. Getting a signed certificate, implementing security across the site and filtering for non-essential services such as the LuckyBit Community Hub are not a quick-switch option. These things take time and money that aren't justified by a "potential" threat that hasn't been realized and can be easily avoided by customers. Most of our players don't even depend on the site to provide the addresses; the information is available elsewhere and the majority of wallets also provide address-book services that would make this attack ineffective.

tl;dr: not worth the effort for an attacker, not worth the effort for us

[seoincorporation]

A MITM attack against LuckyBit could - at worst - replace the game addresses with malicious ones.

This is a sufficient reason to put HTTPS. The attacker has a financial incentive to repllace those addresses.

There has never been a report of MITM attacks against LuckyBit.

Until it happens. But why wait until an incident happens if you already can fix the issue?

SSL implementation is not a simple process. Getting a signed certificate, implementing security across the site and filtering for non-essential services such as the LuckyBit Community Hub are not a quick-switch option. These things take time and money that aren't justified by a "potential" threat that hasn't been realized and can be easily avoided by customers. Most of our players don't even depend on the site to provide the addresses; the information is available elsewhere and the majority of wallets also provide address-book services that would make this attack ineffective.

tl;dr: not worth the effort for an attacker, not worth the effort for us

Man in the middle attack isn't a problem for luckybit because:

1.- MITM is a LAN attack. That mean the only users who will be affected are those who are on the local area network of the attacker. Users access point is users responsability, if you are on a not secure network better don't use bitcoin, because if you are under MITM attack, the hacker will not change the betting addys, he will get your blockchain.info wallet access information.

2.- MITM can be detected by users with tools like wireshark. But is responsability of the user to verify if the network is secure.

3.- MITM have a tool called sslstrip to bypass the SSL connection, so, change the site to SSL will fix nothing about the attack.

Make a man in the middle to change luckybit addys, is one of the worst things you can do with this attack. Because if the users don't see the bets rolling they will ask to support what happen?, then we will ask for the TX ID, and in that moment we will see the fake addy. How much the hacker get? 0.005? 0.01?... not really a big lost. So, that attack is just a waste of time if some one is thinking about use it that way.

I want to make emphasis on the point of; This has never happened to luckybit and isn't something to worry about.

[LFC_Bitcoin]

Nice hit Congratulations to 1EL3. you are really lucky a couple of hours to get profit 33 BTC

33 bitcoin profit?

God damn that is a very nice day gambling. I wish I could win that much. Well done 1EL3.