Quote from: StripDiceV2 on May 01, 2015, 06:47:22 AM

Quote from: dooglus on May 01, 2015, 04:50:36 AM

Quote from: StripDiceV2 on May 01, 2015, 04:45:01 AM

I didn't turn off the Daemon because you were "winning big". I turned of the daemon because I saw you blatantly cheating while I was watching, as well as the SQL injection you attempted in the chat window. Go to hell. Have a nice day.

How is it possible for players to cheat?

What effect do you anticipate this feature to have upon the willingness of people to invest in your bankroll?

It is certainly possible to cheat when you find a way to inject false bets in the DB via an SQL injection. Not to mention that he was able to obtain the root PW. And there is no need for people to invest anymore as we will be closing until we can isolate and fix the security flaw that happened today.

Hate to break this to you, but if the root password really was Abc%1234 you don't need sql injection to find that (side note: SQL injection won't reveal the root password for a server*). Any standard brute force tool will find that password in a matter of minutes. Surprised it took only 5 hours for you to get hacked.

* Yes, in a roundabout way you could eventually find the root password with sql injection being your first foot in the door. But it won't reveal it as a matter of course.

If you believe that, or if you believe sql injection is a way to, as you put it, "inject false bets into the database", anyone who may have invested with you should, as much as I hate all this bitcoin hacking bullshit, probay thank whoever did it for saving them money. You've no business soliciting investments on a server with both rusty latch security and an admin who doesn't seem to understand the most basic security concepts.

I'm not trying to be a dick. What happened sucks. But if what's said here is true they did you, your "investors", and anyone gaming there a favor.