FORTUNEJACK.COM |Deposit 777 play with 1777 mBTC |Live Casino, Slots, Betting

[jalef15]

Apologies for my delayed response, it was a hectic weekend, but I am now able to finally sit down at my pc.

To clarify, this doesn't allow the ability to alter/change a 2fA on account by just knowing the username. In order for an account takeover to be necessary, both the username and the password need to known. This is done through brute forcing, credential stuffing, phishing attacks, and other types of malware such as clippers or cookie stealers. There are many ways your login details can become exposed on the web, and this is an entirely separate topic itself.

When you have 2fa enabled, after you enter your login details, you are presented with a screen asking for the 6-digit code which revolves in a timed rotation on your Google Authentication app. For an attacker, this is where the dead end would normally be. Without access to the device which has the authentication set up, there is nothing you should be able to do which would side step this.

This is not the case for Fortune Jack. This 2FA feature is useless if an attacker knows your login details.


Fortune Jack never responded to anything I wrote them, whether it was through a direct email, making an account on their support site, talking to their live chat, etc.

For reasons unknown to me, this is not important to Fortune Jack, as I never did, and still haven't received as much as a single word. They close my open reports with them, they respond to other people commenting on this thread, I really just do not understand it.

When a user creates a new account, the first thing you see in big, bold red letters at the top of the screen states, "DUE TO THE NATURE OF THE ONLINE GAMBLING INDUSTRY, ACCOUNT TAKEOVER IS EXTREMELY HIGH. PLEASE SETUP TWO-FACTOR-AUTHENTICATION TO ENSURE THE SAFETY OF YOUR ACCOUNT" (might not be word for word, but it is something close)


This is not any kind of bait or phishing attempt.

This can be replicated as many times as you like. If someone makes a new account (The information used can be all made up and not tied to you at all) and enables 2FA, if you supply m e with the login username and password to the account, I can have full control of the account in less than a minute.

I am more than happy to do this, and to show you that what I am saying is valid. However, if you don't want to believe what I am saying, that' 100% up to you.

I made this post to tell the players of Fortune Jack, that you are using a system with a completely flawed security practice. The company in charge of holding all your balances and account info safe, doesn't seem to give a shit. I will tell you right now though, that if you log into your account and some malicious actor drained your balances, Fortune Jack's response to this will informing you that you have two-factor authentication setup, and this ensures only YOU are able to log in to your account.

Change your pm settings so I can message you, or send me you

[manosqq]

They dont send mobile confirmation code again.
Is there anybody else with the same problem?

[FortuneJack]

Apologies for my delayed response, it was a hectic weekend, but I am now able to finally sit down at my pc.

To clarify, this doesn't allow the ability to alter/change a 2fA on account by just knowing the username. In order for an account takeover to be necessary, both the username and the password need to known. This is done through brute forcing, credential stuffing, phishing attacks, and other types of malware such as clippers or cookie stealers. There are many ways your login details can become exposed on the web, and this is an entirely separate topic itself.

When you have 2fa enabled, after you enter your login details, you are presented with a screen asking for the 6-digit code which revolves in a timed rotation on your Google Authentication app. For an attacker, this is where the dead end would normally be. Without access to the device which has the authentication set up, there is nothing you should be able to do which would side step this.

This is not the case for Fortune Jack. This 2FA feature is useless if an attacker knows your login details.


Fortune Jack never responded to anything I wrote them, whether it was through a direct email, making an account on their support site, talking to their live chat, etc.

For reasons unknown to me, this is not important to Fortune Jack, as I never did, and still haven't received as much as a single word. They close my open reports with them, they respond to other people commenting on this thread, I really just do not understand it.

When a user creates a new account, the first thing you see in big, bold red letters at the top of the screen states, "DUE TO THE NATURE OF THE ONLINE GAMBLING INDUSTRY, ACCOUNT TAKEOVER IS EXTREMELY HIGH. PLEASE SETUP TWO-FACTOR-AUTHENTICATION TO ENSURE THE SAFETY OF YOUR ACCOUNT" (might not be word for word, but it is something close)


This is not any kind of bait or phishing attempt.

This can be replicated as many times as you like. If someone makes a new account (The information used can be all made up and not tied to you at all) and enables 2FA, if you supply m e with the login username and password to the account, I can have full control of the account in less than a minute.

I am more than happy to do this, and to show you that what I am saying is valid. However, if you don't want to believe what I am saying, that' 100% up to you.

I made this post to tell the players of Fortune Jack, that you are using a system with a completely flawed security practice. The company in charge of holding all your balances and account info safe, doesn't seem to give a shit. I will tell you right now though, that if you log into your account and some malicious actor drained your balances, Fortune Jack's response to this will informing you that you have two-factor authentication setup, and this ensures only YOU are able to log in to your account.

As s leading crypto casino in the world, securing company digital assets and keeping user data secure from various online threats is a top priority for us. So far, we have rolled out successful application security strategy as a defense-in-depth approach, constantly adding additional layers of protection to reduce the risks, attack surface and to prevent and detect real-time cyber attacks on the FortuneJack resources.

Especially we pay a lot of attention to ATO (Account Takeover) protection, preventing attackers from compromising user accounts through brute-force or credential stuffing attacks.

In addition, we offer multi-factor authentication (MFA) as a service for our customers, which is the top-of-the range among other solutions.


P.S - If there are any concerns regarding the MFA or account takeovers, feel free to get in touch with us. We would gladly answer all of your questions.


FJ

[malubit]

Fortunejack, the website looks very decent with nice layout. Only thing I am not sure about are the betting limits. Maybe it is also an idea to put the rollover requirements more clear in the conditions, so users are aware of therequirements.

[manosqq]

Fortunejack have you resolve the problem with the sms confirmation?

[FortuneJack]

Fortunejack, the website looks very decent with nice layout. Only thing I am not sure about are the betting limits. Maybe it is also an idea to put the rollover requirements more clear in the conditions, so users are aware of therequirements.

Thanks for your feedback. We're working hard onto making all the related information you mentioned, easily accessible.

I will get you updated, if there's anything to note.

[FortuneJack]

Fortunejack have you resolve the problem with the sms confirmation?

Not yet, technical department is actively working on getting the issue fixed. I will make sure you guys are aware of any updates, if there's any 


UPDATE - we did double check your concern, yet there's all good on our end. I will get back to you after having the right info about it.

[malubit]

Regarding sms verification, I know from experiences that is might be confusing to customers with the prefix from country code. Some systems ask to enter the full mobile number (included the + country code, while other systems asks you to enter the prefix separate and then ask to mobile number from the country only. Maybe its an idea to display this information so users know what they should enter.

[FortuneJack]

⚔️ REMINDER ⚔️

We're already counting the hours before the Champions League playoffs kick in. Don't forget that you can win FREE bets as early as making the streak of three.

GET THE GAME STARTED!

[jostorres]

We have been here trying to do jackmate from the start of the season and I have not heard anyone reach the 7/7 at all, and that was just 1 bitcoin one, this is more like a 16/16 and that is really looking impossible for 1/2 as well, there is no way anyone is getting that 10 bitcoin, they could have named it 100 bitcoins and nothing would change since I doubt anyone would get it anyway.

However, the great thing about fortunejack is the fact that they realize nobody may win that so in order to help us get motivated they put a lot of rewards to lesser wins and allow us to make a good amount of money or free bets etc with a lot lesser streaks so that we would get at least something even if we can't win the big prize so there is always a reason to join to get those.

You should probably read the FAQ and preceding texts more. It's actually 29 picks (only 16 now because we don't know who progresses). Yes, it's virtually impossible but along the way there's plenty of prizes to win. All you need is ONE 3-win streak and you get a 3mbtc freebet, which will mean you've already more than up for the entry fee. I think the odds of coming out +EV on this one's really high!

I'll share my picks ONCE my streak ends, haha.

P.S. Anyone want to test Squasha? I don't want to create a new account=) It does seem like something to look into... from the effort he's put into his posts.

Yeah, the results of 16 games is very difficult because you have to not only know the results of the current round but will have to know the next rounds as well, so if you are even wrong on this round for once, all of your future ones will be wrong as well because you already picked the wrong team once and then the next games will not happen against that team anymore so you can't ever possibly know who will win the next round since the team you picked is no longer there, even if you said opponent will win. That is why knowing 16 games in a row is just such a low odd that it makes sense why it was a 10 bitcoin reward for anyone who can do it, I am not saying nobody can do it, I have seen x1000+ odds hitting on dice in my life, I am just saying it deserves to be a 10 bitcoin reward since it is such a difficult task.

[buwaytress]

Yeah, the results of 16 games is very difficult because you have to not only know the results of the current round but will have to know the next rounds as well, so if you are even wrong on this round for once, all of your future ones will be wrong as well because you already picked the wrong team once and then the next games will not happen against that team anymore so you can't ever possibly know who will win the next round since the team you picked is no longer there, even if you said opponent will win. That is why knowing 16 games in a row is just such a low odd that it makes sense why it was a 10 bitcoin reward for anyone who can do it, I am not saying nobody can do it, I have seen x1000+ odds hitting on dice in my life, I am just saying it deserves to be a 10 bitcoin reward since it is such a difficult task.

I think you misunderstood the concept, and it's been explained and clarified by FJ already. And you also seem to misunderstand how Champions League works.

For this contest, once you pick the wrong team, your streak ends, but your counter resets as well. So, let's say this is your outcome in 16 selections (Y for correct, N for wrong):
YNYYYNYYYNYNNYYN
You will still get 3 mbtc twice for the 3-right-streaks hit twice.

And in the 16 games, this is home and away (2 legged round) so both teams are guaranteed to play no matter the outcome of the first leg so you still will have to pick an outcome of 1x2. So you're totally wrong that the next games will not happen.

[wozzek23]

there's plenty of prizes to win. All you need is ONE 3-win streak and you get a 3mbtc freebet, which will mean you've already more than up for the entry fee. I think the odds of coming out +EV on this one's really high!

I agree that there is a lot of prizes to be won, that is one of the redeeming qualities of fortunejack, even on the 7/7 jackmate thing you do get some stuff for getting as low as 5/7 and many people actually reached that, but as far as we know there hasn't been a single person who got it 7/7 all right.

That is what I was trying to aim at, getting all correct is not possible for the 10btc reward and I do say it is "impossible" but in theory it is not impossible, it is just unlikely, so giving out 10 bitcoin for something that actually would worth 10 btc to begin with is a good reward. At the end of the day even if you get nothing, it is great to have the chance to spend zero dollars and still have a shot at 10 btc or smaller ones, after all you are not paying anything at all.

[JeromeTash]

-snip-

It's unfortunate that i missed predicting results for the two opening champion's League matches tonight. I would like to know if one can still enter the competition even after some matches jave already been played?  The game looks  fun and i don't wanna miss out again.

[BitSat19]

-snip-

It's unfortunate that i missed predicting results for the two opening champion's League matches tonight. I would like to know if one can still enter the competition even after some matches jave already been played?  The game looks  fun and i don't wanna miss out again.

Go to site and check T8C as you can enter any time just you have to pay fees and make your predictions before 30 minutes all available on promo page good luck.

[tokeweed]

Right off the bat...  Looks like I'm not winning 10 BTC.  -_-

Anyway...  With all these games it feels like FJ has something brewing for Khabib vs Ferguson (I hope.  )?  That event is yuuuge. 

[donsifon]

⚔️ REMINDER ⚔️

We're already counting the hours before the Champions League playoffs kick in. Don't forget that you can win FREE bets as early as making the streak of three.

GET THE GAME STARTED!

I love this promotion, I am already 2/2,, need Atlanta to win to get the min. prize. Good Luck to all the participants!

Its good to see how Fortunejack improve new ways of contests and promotions for everybody that love sports betting. I know to win 10 BTC is almost impossible in this competition but there is always one chance and you never know,, even 3 in a row (5mbtc freebet) is a good win.

[BugSquasha]

While I do appreciate getting a response, the only reason I took it upon myself to write this all publicly on Bitcoin Talk's board was because I could not get any kind of response when I was trying to get a hold of anyone that seemed concerned about the gravity of the situation.

My inbox is still empty from you guy though, and I don't want to waste our time having you explain to me how secure your system is, when I know beyond a shadow of a doubt, that isn't close to the truth.

Although your security practices have worked in the past, they fell short in this regard. I am concerned that you just want to list off the things you have done right, while still ignoring the things that are currently going wrong. The MFA once again does not hold much weight, seeing the nature of this exploit, and account takeovers are indeed a huge issue with this industry, which is why I would think you would rather fix the problem, rather than explain to me how their isn't one.

My main questions and concerns I have regarding 2FA related security issues, is what would be done for the players on this board if someone other broke into their account, and drained their funds because of this flaw?
Regardless if it was $20 dollars or if it was $25,000 dollars, by incorporating the 2FA features on your site, you are protecting yourselves just as much as it protects the players.
The players on your site should have the security to not have their accounts possibly in jeopardy, and they should not be subject to dealing with the after affects of  having something as irreversible as a crypto payment removed from their account.
At the same time, this gives your company the protection from players who fair and square lost their bankroll, who may desperately approach you and lie about having their account breached by hackers., This shouldn't be possible with 2FA, since you need to have the physical device as well as knowing your login details.

This is only when it is working though. Right now, the tables have sharply turned against the players, because you have your entire customer base more exposed to this vulnerability / exploit
While you still are able to maintain arguments, similar to these

https://www.askgamblers.com/casino-complaints/account-hacked-2

https://bitcointalk.org/index.php?topic=934177.0


Offer is still on the table though. Maybe a random higher ranking Bitcoin Talk user (who doesn't have an account with FJ currently) would be willing to set aside a small amount of time so I can show this to.

I have spent a lot of time on these forums, and learned a huge amount of information throughout the years on various topics. I really like this community, and I am appreciative on all the knowledge and all the insightful and nice (for the most part) users on these forums I have got to interact with over the years.  I want to make it very clear that I am not brute forcing accounts, or doing any  of these takeovers. I have not told anyone else this, nor do I plan on doing so.

My inbox is now able to receive PM's

[buwaytress]

@donsifon well well well, we have our first 3-streak, not bad, you an Atleti fan? I picked 2 right, but no min prize streak for me yet.

My performance so far:

X✓✓X

Yeah, I don't know why I picked Spurs knowing their 2 best strikers were out injured. Perhaps I thought Mou magic Mou joy.

Seems like no=p

@BugSquasha I'll see if I have time, cause Í'm really curious, on the weekend to see if I can convince someone to try it. No promises.

[FortuneJack]

While I do appreciate getting a response, the only reason I took it upon myself to write this all publicly on Bitcoin Talk's board was because I could not get any kind of response when I was trying to get a hold of anyone that seemed concerned about the gravity of the situation.

My inbox is still empty from you guy though, and I don't want to waste our time having you explain to me how secure your system is, when I know beyond a shadow of a doubt, that isn't close to the truth.

Although your security practices have worked in the past, they fell short in this regard. I am concerned that you just want to list off the things you have done right, while still ignoring the things that are currently going wrong. The MFA once again does not hold much weight, seeing the nature of this exploit, and account takeovers are indeed a huge issue with this industry, which is why I would think you would rather fix the problem, rather than explain to me how their isn't one.

My main questions and concerns I have regarding 2FA related security issues, is what would be done for the players on this board if someone other broke into their account, and drained their funds because of this flaw?
Regardless if it was $20 dollars or if it was $25,000 dollars, by incorporating the 2FA features on your site, you are protecting yourselves just as much as it protects the players.
The players on your site should have the security to not have their accounts possibly in jeopardy, and they should not be subject to dealing with the after affects of  having something as irreversible as a crypto payment removed from their account.
At the same time, this gives your company the protection from players who fair and square lost their bankroll, who may desperately approach you and lie about having their account breached by hackers., This shouldn't be possible with 2FA, since you need to have the physical device as well as knowing your login details.

This is only when it is working though. Right now, the tables have sharply turned against the players, because you have your entire customer base more exposed to this vulnerability / exploit
While you still are able to maintain arguments, similar to these

https://www.askgamblers.com/casino-complaints/account-hacked-2

https://bitcointalk.org/index.php?topic=934177.0


Offer is still on the table though. Maybe a random higher ranking Bitcoin Talk user (who doesn't have an account with FJ currently) would be willing to set aside a small amount of time so I can show this to.

I have spent a lot of time on these forums, and learned a huge amount of information throughout the years on various topics. I really like this community, and I am appreciative on all the knowledge and all the insightful and nice (for the most part) users on these forums I have got to interact with over the years.  I want to make it very clear that I am not brute forcing accounts, or doing any  of these takeovers. I have not told anyone else this, nor do I plan on doing so.

My inbox is now able to receive PM's

replied to you via DM. 

[Avirunes]

@donsifon well well well, we have our first 3-streak, not bad, you an Atleti fan? I picked 2 right, but no min prize streak for me yet.

My performance so far:

X✓✓X

Yeah, I don't know why I picked Spurs knowing their 2 best strikers were out injured. Perhaps I thought Mou magic Mou joy.

I also am with 3 streak. Started off with Liverpool defeat and then nailed all 3. Sitting now with atleast minimum and next is 15 

I have Chelsea vs Bayern Draw and Napoli vs Barca Draw next on line.