shulio
Legendary
Offline
Activity: 1540
Merit: 1016
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 23, 2015, 01:44:54 PM |
|
So I can I take the hot wallet and you won't mind it?And I will get extra 0.5 if I tell you how I did it.Sounds good.How many btc's in hot wallet again?
The hot wallet holds 0.4999btc atm. I'd prefer you to tell me for free if you can take it but that would be up for discussion. Nah 0.5BTC not worth the effort. effort of hacking into it? its 100$+ , which I think is a nice amount and not to said that you might receive an additional if you can either tell fastslot about the vulnerabilites or also help to fix them. To Henry, I will be trying this one too, althought Im not sure If I will be able to get them. ![Grin](https://bitcointalk.org/Smileys/default/grin.gif) Thanks Shulio! I also think that 100$+ is not too bad as a bug bounty. If you like to play at FastSlots you get the added benefit that once this is over you will know that you are playing at a secure site :-) yes it is not a bad prize, but what if there might be someone who will be able to hack the 0.5 bitcoin but does not let you know what the vulnureabilities is and try it again after the sites goes live?This could get the sites to be hack once more after it goes live That is true, but we are logging stuff like crazy now so it is likely that we will be able to figure out what happened. No matter what we do, there is no such thing as 100% security. The idea is just to be more secure than other casinos so that attackers turn away from us... I see, so I got an idea for next time if you will to hold such contest again, you should probably only put 0.01 in the hot wallet with the rules, whoever hack the 0.01 from the hot wallet may keep it but if he tells us how he do it, another 0.49 will be rewarded for him. This will make the attacker needs to tell you how the exploit is done
|
|
|
|
FastSlots (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 23, 2015, 01:46:28 PM |
|
So I can I take the hot wallet and you won't mind it?And I will get extra 0.5 if I tell you how I did it.Sounds good.How many btc's in hot wallet again?
The hot wallet holds 0.4999btc atm. I'd prefer you to tell me for free if you can take it but that would be up for discussion. Nah 0.5BTC not worth the effort. effort of hacking into it? its 100$+ , which I think is a nice amount and not to said that you might receive an additional if you can either tell fastslot about the vulnerabilites or also help to fix them. To Henry, I will be trying this one too, althought Im not sure If I will be able to get them. ![Grin](https://bitcointalk.org/Smileys/default/grin.gif) Thanks Shulio! I also think that 100$+ is not too bad as a bug bounty. If you like to play at FastSlots you get the added benefit that once this is over you will know that you are playing at a secure site :-) yes it is not a bad prize, but what if there might be someone who will be able to hack the 0.5 bitcoin but does not let you know what the vulnureabilities is and try it again after the sites goes live?This could get the sites to be hack once more after it goes live That is true, but we are logging stuff like crazy now so it is likely that we will be able to figure out what happened. No matter what we do, there is no such thing as 100% security. The idea is just to be more secure than other casinos so that attackers turn away from us... I see, so I got an idea for next time if you will to hold such contest again, you should probably only put 0.01 in the hot wallet with the rules, whoever hack the 0.01 from the hot wallet may keep it but if he tells us how he do it, another 0.49 will be rewarded for him. This will make the attacker needs to tell you how the exploit is done lol, I'm an idiot, that would have been the way to do it. Too late now I guess :-)
|
|
|
|
Mitchell
Legendary
Offline
Activity: 4032
Merit: 2215
Verified awesomeness ✔
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 23, 2015, 01:47:59 PM |
|
I see, so I got an idea for next time if you will to hold such contest again, you should probably only put 0.01 in the hot wallet with the rules, whoever hack the 0.01 from the hot wallet may keep it but if he tells us how he do it, another 0.49 will be rewarded for him. This will make the attacker needs to tell you how the exploit is done Or the attacker doesn't take the 0.01 BTC, writes down his method somewhere and waits for the website to go live. After that they wait till there is a nice amount in the hot wallet, which they can either steal right away or just constantly take a small part from it.
|
| | | . Duelbits | | | ▄████▄▄ ▄█████████▄ ▄█████████████▄ ▄██████████████████▄ ▄████▄▄▄█████████▄▄▄███▄ ▄████▐▀▄▄▀▌██▄█▄██▐▀▄▄▀▌███ ██████▀▀▀▀████▀███▀▀▀▀█████ ▐████████████■▄▄▄■██████████▀ ▐██████████████████████████▀ ██████████████████████████▀ ▀███████████████████████▀ ▀███████████████████▀ ▀███████████████▀ | | | | | . ▄ ▄▄▀▀▀▀▄▄ ▄▀▀▄ █ █ ▀▄ █ ▄█▄ ▀▄ █ ▄▀ ▀▄ ▀█▀ ▄▀ ▀█▄▄▄▀▀ ▀ ▄▀ ▄▀ ▄▀
Live Games | | ▄▄▀▀▀▀▀▀▀▄▄ ▄▀ ▄▄▀▀▀▀▀▄▄ ▀▄ ▄▀ █ ▄ █ ▄ █ ▀▄ █ █ ▀ ▀ █ █ ▄▄▄ █ ▀▀▀▀▀▀▀▀▀▀▀▀▀ █ █ █ █▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█ █▄█ █ ▀▀█ ▀▀█ ▀▀█ █ █▄█
Slots | | . ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▄ █ ▄▄ █ ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▄ █ █ ▄▄ █ █ █ █ █ █ ▄▀▀▄▀▀▄ █ █ █ ▀▄ ▄▀ █ █
Blackjack | | | | █▀▀▀▀▀█▄▄▄ ▀████▄▄ ██████▄ ▄▄▄▄▄▄▄▄█▀ ▀▀█ ████████▄ █ █████████▄ █ ██████████▄ ▄██ █████████▀▀▀█▄▄████ ▀▀███▀▀ ████ █ ███ █ █▀ ▄█████▄▄▄ ▄▄▀▀ ███████▀▀▀ | | | | | | | | | | [ Đ ][ Ł ] AVAILABLE NOW | |
Advertisements are not endorsed by me.
|
|
|
shulio
Legendary
Offline
Activity: 1540
Merit: 1016
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 23, 2015, 01:50:37 PM |
|
lol, I'm an idiot, that would have been the way to do it. Too late now I guess :-)
lol, atleast you know to do it in the future isnt it ![Grin](https://bitcointalk.org/Smileys/default/grin.gif) I see, so I got an idea for next time if you will to hold such contest again, you should probably only put 0.01 in the hot wallet with the rules, whoever hack the 0.01 from the hot wallet may keep it but if he tells us how he do it, another 0.49 will be rewarded for him. This will make the attacker needs to tell you how the exploit is done Or the attacker doesn't take the 0.01 BTC, writes down his method somewhere and waits for the website to go live. After that it's just a waiting game to get a nice amount in the hot wallet, after which they can either steal everything or constantly take a small part from the hot wallet. You are right, but the same thing could be applied for now as well, I could save the exploit for later until the sites goes live, the amount of the hot wallet must be higher than 0.5 btc right? ![Sad](https://bitcointalk.org/Smileys/default/sad.gif) it seems that way for me, hope no one gets into the site after it goes live
|
|
|
|
FastSlots (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 23, 2015, 01:53:16 PM |
|
lol, I'm an idiot, that would have been the way to do it. Too late now I guess :-)
lol, atleast you know to do it in the future isnt it ![Grin](https://bitcointalk.org/Smileys/default/grin.gif) I see, so I got an idea for next time if you will to hold such contest again, you should probably only put 0.01 in the hot wallet with the rules, whoever hack the 0.01 from the hot wallet may keep it but if he tells us how he do it, another 0.49 will be rewarded for him. This will make the attacker needs to tell you how the exploit is done Or the attacker doesn't take the 0.01 BTC, writes down his method somewhere and waits for the website to go live. After that it's just a waiting game to get a nice amount in the hot wallet, after which they can either steal everything or constantly take a small part from the hot wallet. You are right, but the same thing could be applied for now as well, I could save the exploit for later until the sites goes live, the amount of the hot wallet must be higher than 0.5 btc right? ![Sad](https://bitcointalk.org/Smileys/default/sad.gif) it seems that way for me, hope no one gets into the site after it goes live @shulio: That is exactly what I am trying to prevent with this campaign. From the hackers perspective it's a risk to wait bc some other hacker might jump in, get the 0.5, and I'll be able to fix afterwards. @Mitchełł: Actually, our hot wallet will not be much bigger for a while. We'll just manage it more actively where we increase the bal if it is too low and decrease the bal when it is too high.
|
|
|
|
boopy265420
Legendary
Offline
Activity: 1876
Merit: 1005
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 23, 2015, 04:08:00 PM |
|
I will suggest to go far some good security provider like mcafee as they pay compensation if your site gets hacked if you are protected by them. There can be other security providers too that I wrote for explanation.
|
|
|
|
FastSlots (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 23, 2015, 10:53:19 PM |
|
We have finally made it. After we got hacked over two weeks ago, we have reviewed every aspect of our security system. To test our work we have asked both the original hacker and the general public to break into our system - nobody succeeded. At this point I think it is safe to say that FastSlots is among the more secure bitcoin casinos. I'm really happy that this is over. The last weeks have been quite stressful to be honest. But I have also experienced an incredible amount of support from this forum. This has ranged from people I did not know that would just leave a friendly comment here in the thread, to a group of trusted users that have spent hours analyzing the hack together with me. I am deeply thankful for this and will try to repay over time. Now that we are back we are changing our name to FastBets.io. The main reason for the change is that we do not want to focus on slots in the future, but on experimental games instead. For our users not much will change, accounts are carried over and if you go to fastslots.co you will be directed to fastbets.io. Enough said, I'm glad we're back, hope to see you guys around in the chat :-) Henry
|
|
|
|
FastSlots (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 23, 2015, 11:07:23 PM |
|
I will suggest to go far some good security provider like mcafee as they pay compensation if your site gets hacked if you are protected by them. There can be other security providers too that I wrote for explanation.
That's a great suggestion, thanks. I was not aware that these companies work with bitcoin casinos. Will be in touch tomorrow by pm.
|
|
|
|
somuchee
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 24, 2015, 12:12:12 AM |
|
well done . welcome back ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif)
|
|
|
|
louise123
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 24, 2015, 01:49:34 AM |
|
I'm really disappointed that your site was hack. If you site is hacked please give us some information about it either in opening thread or link a link to the all information you know about the hack thanks
|
|
|
|
Coef
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 24, 2015, 02:09:09 AM |
|
Welcome back, FastSlots FastBets. I notice that fastslots.co still works but it doesn't redirect visitors to fastbets.io. So if some of your players haven't visited this bitcointalk thread recently, they won't know aboout the rebranding and will keep using their bookmarked link.
|
|
|
|
FastSlots (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 24, 2015, 11:05:17 AM |
|
Welcome back, FastSlots FastBets. I notice that fastslots.co still works but it doesn't redirect visitors to fastbets.io. So if some of your players haven't visited this bitcointalk thread recently, they won't know aboout the rebranding and will keep using their bookmarked link.
Great point. I will have to add some sort of popup that informs users that we rebranded. I'm guessing many people do not even notice at this point cause the names are quite similar.. I'm really disappointed that your site was hack. If you site is hacked please give us some information about it either in opening thread or link a link to the all information you know about the hack thanks
I've been pretty open about this whole issue to be honest. Just have a look at my previous posts in this thread and you'll find a lot of info about what happened. You are right though that I should get this into a more digestible form. I'm thinking about distilling my learnings into some sort of a security check list for bitcoin casinos that will make it easier for people to avoid my past mistakes :-) well done . welcome back ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif) Thank you Mr So Muchee!!
|
|
|
|
LiQuidx
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 24, 2015, 11:51:10 AM |
|
Welcome back officially man! ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif)
|
|
|
|
BTCevo
Legendary
Offline
Activity: 1834
Merit: 1008
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 24, 2015, 01:27:43 PM |
|
I will suggest to go far some good security provider like mcafee as they pay compensation if your site gets hacked if you are protected by them. There can be other security providers too that I wrote for explanation.
I dont think they will work with bitcoin and they must question what kind of currency is that, but its worth a try and if they agree I guess this site must be the most secure and surely got many people playing this site, since this site is just coming back online We have finally made it. After we got hacked over two weeks ago, we have reviewed every aspect of our security system. To test our work we have asked both the original hacker and the general public to break into our system - nobody succeeded. At this point I think it is safe to say that FastSlots is among the more secure bitcoin casinos. I'm really happy that this is over. The last weeks have been quite stressful to be honest. But I have also experienced an incredible amount of support from this forum. This has ranged from people I did not know that would just leave a friendly comment here in the thread, to a group of trusted users that have spent hours analyzing the hack together with me. I am deeply thankful for this and will try to repay over time. Now that we are back we are changing our name to FastBets.io. The main reason for the change is that we do not want to focus on slots in the future, but on experimental games instead. For our users not much will change, accounts are carried over and if you go to fastslots.co you will be directed to fastbets.io. Enough said, I'm glad we're back, hope to see you guys around in the chat :-) Henry Welcome back again and good job to bring this back alive and I am sure it will be no problem now Thanks
|
|
|
|
FastSlots (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 24, 2015, 02:29:03 PM |
|
I will suggest to go far some good security provider like mcafee as they pay compensation if your site gets hacked if you are protected by them. There can be other security providers too that I wrote for explanation.
I dont think they will work with bitcoin and they must question what kind of currency is that, but its worth a try and if they agree I guess this site must be the most secure and surely got many people playing this site, since this site is just coming back online ... Have shortened my ramblings here :-)
Welcome back again and good job to bring this back alive and I am sure it will be no problem now Thanks Thanks mate. To your point above, would be really interesting to know if companies like mcafee work with bitcoin casinos. If anyone knows would be rad if they could let me know. I'm sure that if John McAfee were still in charge, that would not be a problem :-) https://www.youtube.com/watch?v=bKgf5PaBzygWelcome back officially man! ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif) Thanks a lot man. Also thanks for the great help with getting everything back up :-) Unfortunately we are still having some stability and load time issues as we get all systems up to speed. In particular some users are experiencing unusually long page load times. We are working on a fix and speed should be back to normal soon.
|
|
|
|
Vaskiy
Legendary
Offline
Activity: 2646
Merit: 1106
Enterapp Pre-Sale Live - bit.ly/3UrMCWI
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 24, 2015, 10:18:37 PM |
|
Please check the new update You don't need no popup that informs users new things You can make a simply redirected to new dom with old dom.
|
|
|
|
FastSlots (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 24, 2015, 11:58:30 PM |
|
Please check the new update You don't need no popup that informs users new things You can make a simply redirected to new dom with old dom.
Unfortunately we seem to have a bug in our payment system where deposits do not clear in the way they should. As I'm too tired to fix that now I've taken the site offline. Have also moved all funds to our cold wallet as a security measure. As usual, if you'd like to withdraw in the mean time, just email henry@fastslots.co. _____ Message: FastSlots Cold Wallet Address:1JHbVn7W9DUXn6ZnfqhsGJWhhfNxNTtWdb Signature: H/IT4PuIdYLaY47NrwXqslHjTsuuBl20/bkQdtbwKN+xLMhohPG6SHsquVKRFRqtmWjFaEvva5LmTN93j5M4BJI= Balance: 5.16221 BTC
|
|
|
|
trafficolaa
Legendary
Offline
Activity: 1008
Merit: 1000
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 25, 2015, 08:04:34 AM |
|
Please check the new update You don't need no popup that informs users new things You can make a simply redirected to new dom with old dom.
Unfortunately we seem to have a bug in our payment system where deposits do not clear in the way they should. As I'm too tired to fix that now I've taken the site offline. Have also moved all funds to our cold wallet as a security measure. As usual, if you'd like to withdraw in the mean time, just email henry@fastslots.co. _____ Message: FastSlots Cold Wallet Address:1JHbVn7W9DUXn6ZnfqhsGJWhhfNxNTtWdb Signature: H/IT4PuIdYLaY47NrwXqslHjTsuuBl20/bkQdtbwKN+xLMhohPG6SHsquVKRFRqtmWjFaEvva5LmTN93j5M4BJI= Balance: 5.16221 BTC Henry any update about current progress for fixing that bug? fastbets will be back online today for betting?
|
|
|
|
Slark
Legendary
Offline
Activity: 1862
Merit: 1004
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 25, 2015, 08:34:42 AM |
|
Is www.FastSlots.co down because I can't play right now. What is going on with the site? I got this error: This webpage is not available ERR_CONNECTION_REFUSED
|
|
|
|
FastSlots (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 25, 2015, 09:00:21 AM |
|
We are still working on an issue with the payment system. The issue will be fixed soon, certainly today. As usual, if you'd like to withdraw in the mean time, just email henry@fastslots.co. _____ Message: FastSlots Cold Wallet Address:1JHbVn7W9DUXn6ZnfqhsGJWhhfNxNTtWdb Signature: H/IT4PuIdYLaY47NrwXqslHjTsuuBl20/bkQdtbwKN+xLMhohPG6SHsquVKRFRqtmWjFaEvva5LmTN93j5M4BJI=
|
|
|
|
|