DaDice.com - Next Gen Social Gambling Dice Experience | Progressive Jackpot

[vendetahome]

It seems there is an issue before when the site is approaching the 500 millionth roll ( references below ). Im not literally sure about the references though as there are only two user that reported that , would be nice if someone could clarify about this ( or that if the two quoted user could clarify more about this ) . Again Im not accusing things, just stating my skeptical opinion though   Cheers

Well I was talking about downtime earlier. The issue before the 500 millionth roll was connectivity issue.

is that because of too much people connecting to your website for the milestone hit? i guess you are getting popular if you are breaking down because of player count

[kyxap]

So dadice_dev can you answer when site will works?

[sana9821]

So dadice_dev can you answer when site will works?

i guess they dont have an estimated time announced as they dont know how deep are problems and how much it will take to fix

[fulgdenea]

So dadice_dev can you answer when site will works?

As i think it will be up by tomorrow and op will announce when it be back online.

hmm, I got that too yesterday. Manual bets and autobet didn't work and that error kept showing up.

Site is down. Might take upto around 48 hours to fix.

[dadice]

Update regarding downtime:

After our second, at first unexplainable downtime, within two days, we'd like to share some findings with the community:

1. After accessing our server following the website went down yesterday evening, internal alarms were raised when the checksum of some critical files didn't add up.

2. There was a hacking attempt and the hacker edited the admin area authentication logic of the login script, in order to be able to bypass authentication requirements.

3. It seems to us, that this is clearly an inside job, as nobody else except our host has the main root password.

4. We analyzed the logs and we were able to trace the hacking attempts, but we couldn't stop it from repeating.

5. To fix this we have encoded all files on server and changed our root password, and informed our hosting provider if this happens one more time, we have to move away.

6. We are now waiting for them to conclude their investigations.

We just cannot put the site back online until we are sure that this threat has been taken care of. This is in the interest of all our players and stakeholders.

[Lutpin]

Update regarding downtime:

After our second, at first unexplainable downtime, within two days, we'd like to share some findings with the community:

1. After accessing our server following the website went down yesterday evening, internal alarms were raised when the checksum of some critical files didn't add up.

-snip

We just cannot put the site back online until we are sure that this threat has been taken care of. This is in the interest of all our players and stakeholders.

Can you yet share information about how deep the attacker got access?
Can you confirm all funds are safe/will be returned to investors?
Thanks for the update though, looking foreward to the 750 Million once there are alle issues dealt with.
Greetings, Lutpin

[ACCTseller]

2. There was a hacking attempt and the hacker edited the admin area authentication logic of the login script, in order to be able to bypass authentication requirements.

3. It seems to us, that this is clearly an inside job, as nobody else except our host has the main root password.


5. To fix this we have encoded all files on server and changed our root password, and informed our hosting provider if this happens one more time, we have to move away.

You are sure that your hosting provider is behind the hacking attempts but you are staying with your hosting provider?

If there is any significant evidence that your hosting provider is attempting to hack your site then the only prudent course of action would be to move to a different hosting provider. Period. To even consider anything other then this is just gross incompetence.

[dadice]

Can you yet share information about how deep the attacker got access?
Can you confirm all funds are safe/will be returned to investors?
Thanks for the update though, looking foreward to the 750 Million once there are alle issues dealt with.
Greetings, Lutpin

We cannot share further information yet. No funds are missing.

If there is any significant evidence that your hosting provider is attempting to hack your site then the only prudent course of action would be to move to a different hosting provider. Period. To even consider anything other then this is just gross incompetence.

I wouldn't call it strong or significant evidence. But as a matter of fact only they and ourselves had access to the root password. Our password is pretty strong, so we can exclude a brute force attack. We have considered to move away, as I've mentioned earlier, but since we are pretty happy with them so far, we have decided to await the outcome of their investigation.

[cazkooo]

Just wondering will this downtime be reduced for the prediction game? this downtime isnt really itentional as something happens . Also is the first downtime happened because someone try to hack as well?

[marioantonini]

The most importante notice is all funds are safe 

Tomorrow is saturday, i hope site back online first to monday

[eightbits]

Was there logins in the auth.log from an outsider using root or a bash_history showing someone was using the root account?  It's a bad idea to have ssh access open to root accounts.  You should use another account and SU.  Also you should have hidden bastion server access and not allow any ssh from IP's other than two bastions (the other as a backup).

I ask because rarely does a hack happen with a root password.  Typically it's poor code allow cross-site scripting, SQL injection etc. etc.  If there is no proof of shell access search access logs for PUTS and POSTS to narrow it down.  Or, check your database integrity to see if it was compromised.

[Hexcoin]

Just wondering will this downtime be reduced for the prediction game? this downtime isnt really itentional as something happens . Also is the first downtime happened because someone try to hack as well?

No worries here. We will deduct the hours of downtime, to make it fair for our predictors. Same for the 750 millionth roll bounty reward.

[birdcat90]

i think for 750 m bounty will be postponed right?

because the date is skipped 2 or more days for recovering the site..hope all fund safe and dadice dev can secure the site..

shame on hacker..

[james.lent]

i think for 750 m bounty will be postponed right?

because the date is skipped 2 or more days for recovering the site..hope all fund safe and dadice dev can secure the site..

shame on hacker..

Better hope then that it's really a hacker. Not the first time we've heard 'such issues' .

[ndnh]

May be DD should split 50:50 the 750 million roll bounty for 750 and 800 million? so that most can estimate when they should be online to make the 800 millionth roll even if they say miss the 750m ?

The prediction contest should go on as already decided by deducting the downtime.

i think for 750 m bounty will be postponed right?

because the date is skipped 2 or more days for recovering the site..hope all fund safe and dadice dev can secure the site..

shame on hacker..

Better hope then that it's really a hacker. Not the first time we've heard 'such issues' .

I don't remember any major downtime before.

[Monopoly]

I play dice regularly ! but for 3 days i hadn't this fun ....... Very boring site ...... i will withdrawal and playing on other sites ......

[dadice]

Was there logins in the auth.log from an outsider using root or a bash_history showing someone was using the root account?  It's a bad idea to have ssh access open to root accounts.  You should use another account and SU.  Also you should have hidden bastion server access and not allow any ssh from IP's other than two bastions (the other as a backup).

I ask because rarely does a hack happen with a root password.  Typically it's poor code allow cross-site scripting, SQL injection etc. etc.  If there is no proof of shell access search access logs for PUTS and POSTS to narrow it down.  Or, check your database integrity to see if it was compromised.

Thanks for the info, I will forward it to the tech guys.

[lottoitaliano]

I play dice regularly ! but for 3 days i hadn't this fun ....... Very boring site ...... i will withdrawal and playing on other sites ......

Yes, 3 day offline is a problem for btc deposited and can't withdraw.
For lucky , i withdraw every time win more of 0,1 and leave only a few mbtc for play another time

[sana9821]

i hope the problems will be fixed as soon as possible, a lot of people are holding their bitcoins on this website and now they cant withdraw it even if they need it

[Havelivi]

i hope the problems will be fixed as soon as possible, a lot of people are holding their bitcoins on this website and now they cant withdraw it even if they need it

Be patient dadice team is working hard to get fixed that issue, i also hopeful about this dadice will be back soon as it was almost to hit the 750th million roll with nice bounty.