Unauthorized gambling

**omega_grunt666** · 02-24-2014, 08:54 AM

*edit*
Since it isn't clear enough, This thread is about the vulnerability posed by untraceable gambling bets. The transaction log exists to help solve credit theft/exploits through transfers and the gambling hall can be used to bypass it. Transfer credits, no record, no repercussions.

If you don't have anything constructive to say about that topic, please refrain from posting in this thread. Tip: If you don't like the thread, don't post it in, it will go away faster.

Note: Clearly this was posted in the wrong subforum, if it could be moved to FFR General that would be nice. (I was a little flustered at time of posting, not thinking too clearly)

**devonin** · 02-24-2014, 09:01 AM

If your account was logged into by another IP, they have the ability to see which other accounts have also logged in from that IP, but it is pretty trivially easy to route a connection through a new IP for that purpose.

The fact that you lost all the bets is an unfortunate coincidence. Somebody using your account in this way could just as easily have won and then I'm not sure you'd be as upset :P

Having changed your password is about the best you can do.

**Arkuski** · 02-24-2014, 09:06 AM

You can't tell who the wagers were against?

**devonin** · 02-24-2014, 09:16 AM

Of course you realise this is really indistinguishable from "I lost a bunch of credits and now I'm hoping for a refund" unless IP checking shows something.

Izzy · 02-24-2014, 09:18 AM

Good thing its fake credits and nothing that matters. Also not chit chat. This goes in ffr general talk.

**omega_grunt666** · 02-24-2014, 09:23 AM

I would hope on the back-end its as easy to track as normal credit transactions. To keep an eye out for exploits and what not. I can understand not making that public, because some people are frankly toxic and would probably harass the people they lost credits to. But I seriously hope someone with the power to do so is looking into this, in the case it wasn't just some troll trying to upset me by betting them blindly. If someone has a history of using this to steal credits from people who aren't legitimately betting, then something should be done about it.

If at all possible, I would request some sort of opt-out from the gambling hall. I have no temptation to risk credits on something that in its history has been exploited. And all it really does for me is make my account more vulnerable in the situation it is hacked again. (I honestly have no idea how it was in the first place. Unique password never shared with anyone. Logged out on public computers, never save password.) I think it should be an option to have your account permanently blocked from the hall, if people change their mind later nothing stops them from making an alt and sending credits to it. But then at least it will be trackable with the transaction log.

**devonin** · 02-24-2014, 09:25 AM

It wasn't hacked. If it was actually hacked in the real meaning of the term, no offence to you, they'd have had better things to do with their arbitrary access to the user base than take a couple hundred k through the gambling hall from some dude.

There are people known to have millions of credits, not to mention all the people with authority to ban users, delete content and change account information.

**omega_grunt666** · 02-24-2014, 09:28 AM

Fair enough, Unauthorized Access =/= Hacked

I understand its extremely unlikely if not impossible to get my credits back due to the nature of the problem and its exploitability. But at least I would hope to see changes made so this doesn't happen to anyone else. (And by extension, myself if I decide to build my credits back up)

**devonin** · 02-24-2014, 09:32 AM

To make sure that somebody who has access to your account can't use the functions of your account? Not sure how they're supposed to do that.

**DarkManticoreX2** · 02-24-2014, 09:35 AM

I think Omega's asking for something like a back (Mod/Admin) end ability to void a gambling contract.

It'll never happen because the claims of "i've been hacked" will explode.

**omega_grunt666** · 02-24-2014, 09:37 AM

I mean a way to opt-out of the gambling hall permanently, seeing as it can be used to bypass the normal credit transaction log. It would probably be helpful to people with gambling problems too, making it a little more difficult to bet credits (having to create an alt-transfer-etc) Or to block people who have exploited it. Since the alternative of having a betting log that includes usernames isn't viable, because people would be harassed for getting lucky.

Just a simple click, confirm, "OK, you can no longer bet credits with this account."

*edit* Hell, if it were possible to lock the credits to my account, no betting/transactions. Only purchasing songs, I would have done so in a heart beat.

DotKritic · 02-24-2014, 11:28 AM

Quote:

Originally Posted by omega_grunt666

If at all possible, I would request some sort of opt-out from the gambling hall.

I would love to opt-out of the poor decisions I made in my life, but that isn't going to happen.

If the credits are the only thing that you care about, then I suggest quitting the game. Just like Izzy said, "...they're fake credits and nothing that matters." Move on.

**Arkuski** · 02-24-2014, 11:46 AM

Wow you guys are ruthless. Let's just wait for an admin to decide what to do and not give omega a hard time

Wafles · 02-24-2014, 11:48 AM

Should never have been posted anyway. PM the admins, don't make this a public issue when you simply couldn't keep your own passwords safe.

**clasko1000** · 02-24-2014, 11:58 AM

I really dont see why everyone is slamming him so hard. He came out and asked for an admin to help him solve his issue. Its not like he just said "Give me back my fucking credits hacked hacking hax0rz", he asked someone with the power to, to provide proof that he was telling the truth. You could at least give him the benefit of the doubt and with until someone can verify the information. If its true, something can be discussed then.

I am very disappointed to see the way some of you responded.

**devonin** · 02-24-2014, 12:00 PM

When someone chooses to make a private issue public, they invite public reaction to their situation.

This should have been a PM to a forum admin and never posted on the forums.

**Charu** · 02-24-2014, 12:03 PM

I bet you guys never freaked out about having something go missing that was worthless in value.

dAnceguy117 · 02-24-2014, 12:05 PM

Quote:

Originally Posted by Charu

worthless in value

that's subjective.

**devonin** · 02-24-2014, 12:06 PM

Quote:

Originally Posted by Charu

I bet you guys never freaked out about having something go missing that was worthless in value.

Sure I have, but I don't' go out in public and demand that everybody pay attention to my issue when none of them can do a damn thing about it.

**Charu** · 02-24-2014, 12:07 PM

I meant in terms of general consensus and not personal value, doho.

02-24-2014, 09:01 AM	#2
devonin Very Grave Indeed Join Date: Apr 2004 Location: Ontario, Canada Age: 40 Posts: 10,098	Re: Unauthorized gambling If your account was logged into by another IP, they have the ability to see which other accounts have also logged in from that IP, but it is pretty trivially easy to route a connection through a new IP for that purpose. The fact that you lost all the bets is an unfortunate coincidence. Somebody using your account in this way could just as easily have won and then I'm not sure you'd be as upset :P Having changed your password is about the best you can do.

02-24-2014, 09:16 AM	#4
devonin Very Grave Indeed Join Date: Apr 2004 Location: Ontario, Canada Age: 40 Posts: 10,098	Re: Unauthorized gambling Of course you realise this is really indistinguishable from "I lost a bunch of credits and now I'm hoping for a refund" unless IP checking shows something.

02-24-2014, 09:18 AM	#5
Izzy Snek Join Date: Jan 2003 Location: Kansas Age: 34 Posts: 9,192	Re: Unauthorized gambling Good thing its fake credits and nothing that matters. Also not chit chat. This goes in ffr general talk.

02-24-2014, 09:23 AM	#6
omega_grunt666 Nescio quid faciam Join Date: Jul 2004 Location: Edmonton, AB Posts: 892	Re: Unauthorized gambling I would hope on the back-end its as easy to track as normal credit transactions. To keep an eye out for exploits and what not. I can understand not making that public, because some people are frankly toxic and would probably harass the people they lost credits to. But I seriously hope someone with the power to do so is looking into this, in the case it wasn't just some troll trying to upset me by betting them blindly. If someone has a history of using this to steal credits from people who aren't legitimately betting, then something should be done about it. If at all possible, I would request some sort of opt-out from the gambling hall. I have no temptation to risk credits on something that in its history has been exploited. And all it really does for me is make my account more vulnerable in the situation it is hacked again. (I honestly have no idea how it was in the first place. Unique password never shared with anyone. Logged out on public computers, never save password.) I think it should be an option to have your account permanently blocked from the hall, if people change their mind later nothing stops them from making an alt and sending credits to it. But then at least it will be trackable with the transaction log. __________________ Last edited by omega_grunt666; 02-24-2014 at 09:25 AM..

02-24-2014, 09:25 AM	#7
devonin Very Grave Indeed Join Date: Apr 2004 Location: Ontario, Canada Age: 40 Posts: 10,098	Re: Unauthorized gambling It wasn't hacked. If it was actually hacked in the real meaning of the term, no offence to you, they'd have had better things to do with their arbitrary access to the user base than take a couple hundred k through the gambling hall from some dude. There are people known to have millions of credits, not to mention all the people with authority to ban users, delete content and change account information.

02-24-2014, 09:28 AM	#8
omega_grunt666 Nescio quid faciam Join Date: Jul 2004 Location: Edmonton, AB Posts: 892	Re: Unauthorized gambling Fair enough, Unauthorized Access =/= Hacked I understand its extremely unlikely if not impossible to get my credits back due to the nature of the problem and its exploitability. But at least I would hope to see changes made so this doesn't happen to anyone else. (And by extension, myself if I decide to build my credits back up) __________________

02-24-2014, 09:32 AM	#9
devonin Very Grave Indeed Join Date: Apr 2004 Location: Ontario, Canada Age: 40 Posts: 10,098	Re: Unauthorized gambling To make sure that somebody who has access to your account can't use the functions of your account? Not sure how they're supposed to do that.

02-24-2014, 09:37 AM	#11
omega_grunt666 Nescio quid faciam Join Date: Jul 2004 Location: Edmonton, AB Posts: 892	Re: Unauthorized gambling I mean a way to opt-out of the gambling hall permanently, seeing as it can be used to bypass the normal credit transaction log. It would probably be helpful to people with gambling problems too, making it a little more difficult to bet credits (having to create an alt-transfer-etc) Or to block people who have exploited it. Since the alternative of having a betting log that includes usernames isn't viable, because people would be harassed for getting lucky. Just a simple click, confirm, "OK, you can no longer bet credits with this account." edit Hell, if it were possible to lock the credits to my account, no betting/transactions. Only purchasing songs, I would have done so in a heart beat. __________________ Last edited by omega_grunt666; 02-24-2014 at 10:04 AM..

02-24-2014, 11:48 AM	#14
Wafles FFR Player Join Date: Feb 2013 Location: Wisconsin Posts: 1,988	Re: Unauthorized gambling Should never have been posted anyway. PM the admins, don't make this a public issue when you simply couldn't keep your own passwords safe.

02-24-2014, 12:00 PM	#16
devonin Very Grave Indeed Join Date: Apr 2004 Location: Ontario, Canada Age: 40 Posts: 10,098	Re: Unauthorized gambling When someone chooses to make a private issue public, they invite public reaction to their situation. This should have been a PM to a forum admin and never posted on the forums.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)