Bitcoin Forum
November 19, 2017, 10:54:29 AM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 [23] 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 »
  Print  
Author Topic: ★FastBets.io - A New Way to Gamble ★  (Read 57446 times)
FastSlots
Hero Member
*****
Offline Offline

Activity: 770


Founder of FastBets (formerly FastSlots)


View Profile WWW
April 09, 2015, 02:40:04 PM
 #441

Hey!
any eta when your website is fixed ?
But well, good i didn't deposit more , hope so this website will be safer after this issue.

It's hard to say atm cause we are still working on a fix. The one thing that is for sure is that FastSlots will be more secure when this is over. We are working with a great group of smart people on this...

You do not need to worry about your deposit. If you like I can send it to an address of your liking. Just email me at henry@fastslots.co.


A NEW WAY TO GAMBLE               FASTBETS.IO              FUN GAMES & GREAT ODDS
1511088869
Hero Member
*
Offline Offline

Posts: 1511088869

View Profile Personal Message (Offline)

Ignore
1511088869
Reply with quote  #2

1511088869
Report to moderator
1511088869
Hero Member
*
Offline Offline

Posts: 1511088869

View Profile Personal Message (Offline)

Ignore
1511088869
Reply with quote  #2

1511088869
Report to moderator
Join ICO Now A blockchain platform for effective freelancing
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1511088869
Hero Member
*
Offline Offline

Posts: 1511088869

View Profile Personal Message (Offline)

Ignore
1511088869
Reply with quote  #2

1511088869
Report to moderator
1511088869
Hero Member
*
Offline Offline

Posts: 1511088869

View Profile Personal Message (Offline)

Ignore
1511088869
Reply with quote  #2

1511088869
Report to moderator
Nowi
Full Member
***
Offline Offline

Activity: 140


View Profile
April 09, 2015, 05:21:35 PM
 #442

Ok Ilost everything, again  Roll Eyes but its really fun Cheesy so maybe if I get rich I will try it again.

GrandmaJean
Sr. Member
****
Offline Offline

Activity: 280


View Profile
April 09, 2015, 05:49:28 PM
 #443

Ok Ilost everything, again  Roll Eyes but its really fun Cheesy so maybe if I get rich I will try it again.
how did you manage to loose everything if they are fixing the site? thats just impossible
yakuza699
Hero Member
*****
Offline Offline

Activity: 935


View Profile
April 10, 2015, 01:23:32 PM
 #444

Ok Ilost everything, again  Roll Eyes but its really fun Cheesy so maybe if I get rich I will try it again.
how did you manage to loose everything if they are fixing the site? thats just impossible
That above your post is a perfect example of a paid to post signature campaign noob.They should get banned for a few days minimum.For example I am advertising Bitdice for over 3 weeks for free and don't ask a penny for that.I in past only advertised sites to get some testing coins I knew that I gonna need some coins on testing and I knew I gonna post anyways.Now that I have more than enough coins for testing I advertise them for free since I like their signature.

▄▄▄▄▄▄▄▄
▄▄▄▄▄▄
▄▄▄▄
BTC BitDice.me 
.
FastSlots
Hero Member
*****
Offline Offline

Activity: 770


Founder of FastBets (formerly FastSlots)


View Profile WWW
April 10, 2015, 08:11:49 PM
 #445

Hi guys,

We finally know what happened during the hack and can now start fixing things. I cannot disclose many details, all I can say is that the attacker was able to predict server secrets which allowed him to rake in huge wins.

We have learned a lot from this incident and the result will be that FastSlots will be more secure than ever. We've worked with a group of trusted bitcointalk users to scrutinize FastSlots' security. The result is that we know much more precisely what our weak points are and are able to address these accordingly. We really like to think of FastSlots as an organism: every time we survive and attack that makes us stronger.

We will get back online in a few days. As mentioned previously, just send me an email (henry@fastslots.co) if you'd like to withdraw your balance. 

Henry


A NEW WAY TO GAMBLE               FASTBETS.IO              FUN GAMES & GREAT ODDS
yoloer808
Full Member
***
Offline Offline

Activity: 168


Web dev for hire


View Profile
April 11, 2015, 04:31:58 PM
 #446

Holy s***, Im so sorry this happened man. I've been loosely following your site from the beginning and I thought it was pretty solid... I hope you indeed have enough money to continue running the site, I cant imagine losing 5 btc...

Im glad that you found the problem and are fixing it, hope to see the site up soon. Keep up the great work!

FastSlots
Hero Member
*****
Offline Offline

Activity: 770


Founder of FastBets (formerly FastSlots)


View Profile WWW
April 11, 2015, 10:45:40 PM
 #447

Holy s***, Im so sorry this happened man. I've been loosely following your site from the beginning and I thought it was pretty solid... I hope you indeed have enough money to continue running the site, I cant imagine losing 5 btc...

Im glad that you found the problem and are fixing it, hope to see the site up soon. Keep up the great work!

Thanks mate appreciate your support.

Actually our system is pretty solid. We've had it tested by several talented hackers that could not break anything. However we did have a small vulnerability. With respect to security that's basically just as bad as having no security at all (at least it can cost the same amount of money...). Nonetheless this is a wakeup call for us to double down on security even more and to rethink all aspects of our system. Once we get this done, FastSlots will be even more secure.

It's still hard to estimate when exactly we will be back. I have the tendency to be too optimistic in my estimates, but I really hope it will not take more than a few days.

If anyone would like to withdraw just email me (henry@fastslots.co). My purchase of additional coins has now cleared so that I will be able to payout all deposits immediately.


A NEW WAY TO GAMBLE               FASTBETS.IO              FUN GAMES & GREAT ODDS
yoloer808
Full Member
***
Offline Offline

Activity: 168


Web dev for hire


View Profile
April 12, 2015, 01:41:08 PM
 #448

Holy s***, Im so sorry this happened man. I've been loosely following your site from the beginning and I thought it was pretty solid... I hope you indeed have enough money to continue running the site, I cant imagine losing 5 btc...

Im glad that you found the problem and are fixing it, hope to see the site up soon. Keep up the great work!

Thanks mate appreciate your support.

Actually our system is pretty solid. We've had it tested by several talented hackers that could not break anything. However we did have a small vulnerability. With respect to security that's basically just as bad as having no security at all (at least it can cost the same amount of money...). Nonetheless this is a wakeup call for us to double down on security even more and to rethink all aspects of our system. Once we get this done, FastSlots will be even more secure.

It's still hard to estimate when exactly we will be back. I have the tendency to be too optimistic in my estimates, but I really hope it will not take more than a few days.

If anyone would like to withdraw just email me (henry@fastslots.co). My purchase of additional coins has now cleared so that I will be able to payout all deposits immediately.

such a pity that bitcoin is associated with these kind of people. I am really skeptical about introducing my friends to it because of all the scams..

If you have time, would you mind outlining how exactly he hacked you? (of course after you patch things up)... I think it could be an interesting read, as well as a warning for other sites...

FastSlots
Hero Member
*****
Offline Offline

Activity: 770


Founder of FastBets (formerly FastSlots)


View Profile WWW
April 13, 2015, 10:25:58 PM
 #449

Sorry for my late reply. Was unsure how to answer your second question (see below)

such a pity that bitcoin is associated with these kind of people. I am really skeptical about introducing my friends to it because of all the scams..
I think you should not be. I think consumers are pretty safe these days (at least they are much more than a few years ago).

What annoys me most about this incident is that hackers keep the barrier to entry into the gambling world high. Operators need to waste a lot of time and money on security instead of implementing games. This is one of the reasons why building an online casino is hard. If opening an online casino was as easy as writing and online game I'd bet that gambling would be way more awesome (and way more fair for that matter).

If you have time, would you mind outlining how exactly he hacked you? (of course after you patch things up)... I think it could be an interesting read, as well as a warning for other sites...
I have though about your question for a bit but have not come to a final conclusion as to how much info to share. I do not want to put too many details out there that might put us in jeopardy in the future. I can however point to resources that people setting up bitcoin casinos might find useful. They are all related to server security as that is what we are focussed on atm.

There is a great article on how to get a baseline level of security for a web server. Everybody who want's to get into the bitcoin game as an operator should follow these instructions from day one:
https://www.linode.com/docs/security/securing-your-server

The rest of your security will depend on your application and your level of paranoia. The best in depth resource on server security that I could find on the web is the "Securing Debian Howto".
https://www.debian.org/doc/manuals/securing-debian-howto/index.en.html

Will not share more info atm but might in the future. If anyone knows security related resources that will help us and other operators build more secure casinos, feel free to post them here.


A NEW WAY TO GAMBLE               FASTBETS.IO              FUN GAMES & GREAT ODDS
CryptoMrM
Hero Member
*****
Offline Offline

Activity: 721


View Profile
April 13, 2015, 11:37:38 PM
 #450

Sorry to hear about what happened to you guys.

Best of luck with everything!
joter85
Sr. Member
****
Offline Offline

Activity: 349


Crypto-Games.net: #1 Gambling Site


View Profile WWW
April 16, 2015, 01:48:58 PM
 #451

Did you check server seeds if they were the same on all bets? All random functions that run on today computers are calculated based on time. So if two procedures trigger random generator at the same time, you can get duplicate server seeds.... that could be potential risk. We solved it with table that stores all used server seeds, so they are always unique. Random generator just isn't good in this case.
Just idea, maybe it helps.

 

▇▇▇▇
▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇
▇▇▇▇▇▇
 
Havelivi
Hero Member
*****
Offline Offline

Activity: 896



View Profile
April 16, 2015, 02:00:39 PM
 #452

hello admin any time frame when you will get back online, it taking to much to get back the things right, any update about the current situation what is going on there?
joter85
Sr. Member
****
Offline Offline

Activity: 349


Crypto-Games.net: #1 Gambling Site


View Profile WWW
April 16, 2015, 02:04:18 PM
 #453

hello admin any time frame when you will get back online, it taking to much to get back the things right, any update about the current situation what is going on there?

They surely won't start it until they have found security problem. And that is not so easy in online casino case.

 

▇▇▇▇
▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇
▇▇▇▇▇▇
 
FastSlots
Hero Member
*****
Offline Offline

Activity: 770


Founder of FastBets (formerly FastSlots)


View Profile WWW
April 16, 2015, 02:06:12 PM
 #454

Did you check server seeds if they were the same on all bets? All random functions that run on today computers are calculated based on time. So if two procedures trigger random generator at the same time, you can get duplicate server seeds.... that could be potential risk. We solved it with table that stores all used server seeds, so they are always unique. Random generator just isn't good in this case.
Just idea, maybe it helps.

Hi joter85, thanks for your input. In the case of this hack this was not the case though. We have detailed logs that show that the server secret was different on each bet. But it is also apparent that the attacker could predict the next server secret, most likely because he had access to the db.

hello admin any time frame when you will get back online, it taking to much to get back the things right, any update about the current situation what is going on there?

Basically the problem was about the security of our server and not a problem with our application code. We are currently setting the server back up with all sorts of security measures in place. We will test things thoroughly and will be back most likely in a day or two, but worst case at the beginning of next week. I really do not want to rush this just to get hacked again.

Sorry to hear about what happened to you guys.

Best of luck with everything!


Thanks mate :-)


A NEW WAY TO GAMBLE               FASTBETS.IO              FUN GAMES & GREAT ODDS
joter85
Sr. Member
****
Offline Offline

Activity: 349


Crypto-Games.net: #1 Gambling Site


View Profile WWW
April 16, 2015, 02:13:19 PM
 #455

Quote
Hi joter85, thanks for your input. In the case of this hack this was not the case though. We have detailed logs that show that the server secret was different on each bet. But it is also apparent that the attacker could predict the next server secret, most likely because he had access to the db.

I see. That is totally different level of problem Smiley Do you run your own server or do you have site hosted at third party provider?

 

▇▇▇▇
▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇
▇▇▇▇▇▇
 
FastSlots
Hero Member
*****
Offline Offline

Activity: 770


Founder of FastBets (formerly FastSlots)


View Profile WWW
April 16, 2015, 02:16:23 PM
 #456

Quote
Hi joter85, thanks for your input. In the case of this hack this was not the case though. We have detailed logs that show that the server secret was different on each bet. But it is also apparent that the attacker could predict the next server secret, most likely because he had access to the db.

I see. That is totally different level of problem Smiley Do you run your own server or do you have site hosted at third party provider?

We run our own server. I just noticed that you run http://crypto-games.net. It's a great site! Would love to exchange thought on security with you. Will send you a pm in a bit.


A NEW WAY TO GAMBLE               FASTBETS.IO              FUN GAMES & GREAT ODDS
joter85
Sr. Member
****
Offline Offline

Activity: 349


Crypto-Games.net: #1 Gambling Site


View Profile WWW
April 16, 2015, 02:19:20 PM
 #457

Quote
Hi joter85, thanks for your input. In the case of this hack this was not the case though. We have detailed logs that show that the server secret was different on each bet. But it is also apparent that the attacker could predict the next server secret, most likely because he had access to the db.

I see. That is totally different level of problem Smiley Do you run your own server or do you have site hosted at third party provider?

We run our own server. I just noticed that you run http://crypto-games.net. It's a great site! Would love to exchange thought on security with you. Will send you a pm in a bit.

Sure, why not!

 

▇▇▇▇
▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇▇▇
▇▇▇▇▇▇▇▇
▇▇▇▇▇▇
 
yoloer808
Full Member
***
Offline Offline

Activity: 168


Web dev for hire


View Profile
April 18, 2015, 06:51:21 AM
 #458

Basically the problem was about the security of our server and not a problem with our application code. We are currently setting the server back up with all sorts of security measures in place. We will test things thoroughly and will be back most likely in a day or two, but worst case at the beginning of next week. I really do not want to rush this just to get hacked again.

good to hear you are on track to reopen again. Just a word of advice: you've been hacked, people may be skeptical of your solvency / ability to pay out winnings and therefore be wary of depositing. It would be a good idea to sign a message with your wallet proving that you are in possession of a bankroll to actually pay out winners.

keep your chin up and keep doing what your doing, looking forward to the reopening!

FastSlots
Hero Member
*****
Offline Offline

Activity: 770


Founder of FastBets (formerly FastSlots)


View Profile WWW
April 18, 2015, 10:07:10 AM
 #459

Basically the problem was about the security of our server and not a problem with our application code. We are currently setting the server back up with all sorts of security measures in place. We will test things thoroughly and will be back most likely in a day or two, but worst case at the beginning of next week. I really do not want to rush this just to get hacked again.

good to hear you are on track to reopen again. Just a word of advice: you've been hacked, people may be skeptical of your solvency / ability to pay out winnings and therefore be wary of depositing. It would be a good idea to sign a message with your wallet proving that you are in possession of a bankroll to actually pay out winners.

keep your chin up and keep doing what your doing, looking forward to the reopening!

Great point yoloer808. Will actually do that right now: I just signed our new hot wallet which currently holds 5.468 BTC.

Address: 1FCEXDW4Em8qVbfNbGcMttFxGmLty7amFG
Message: FastSlots Main Wallet - we will be back!
Signature: H0iDQlgfXCdtSvO8A8N3yim4/bl7gmxv4n5I/9ueC7ogQmC4B29GGPEGClW/E0j9WpLmed8PBY9BRBBoj6yJf4Y=

To verify just head over to https://brainwallet.github.io/#verify, click on Bitcoin-QT, and insert the above.


A NEW WAY TO GAMBLE               FASTBETS.IO              FUN GAMES & GREAT ODDS
amiryaqot
Legendary
*
Offline Offline

Activity: 1050



View Profile
April 18, 2015, 10:20:31 AM
 #460

That is great news to hear you are back and now open again for betting, will play there with some amount just waiting for it.
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 [23] 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 »
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!