Search content
Sort by
Showing 14 of 14 results by EBitcoinBetting
Re: Launching the Beta of EBitcoinBetting.com! - A Bitcoin Sportsbook
Sounds like you are over your head and not around enough.
I'm around. Trying to fix the issues. One more week until NFL season starts and things should be running smoothly. Did not anticipate the amount of hiccups. Things will get rolling smoothly coming opening day of the NFL season.
Re: Launching the Beta of EBitcoinBetting.com! - A Bitcoin Sportsbook
Review
A well-designed site, but there are many issues.
First the big stuff
CSRF vulnerability
There is a major CSRF[1] vulnerability in various parts of your website. A malicious attacker can exploit this vulnerability to steal funds from bettors. Please PM me if you need any more information on this issue.
Most visible is the withdrawal script. An attacker can update the withdrawal destination and withdraw arbitrary amounts from user balance. A malicious webpage contains two inline frames, one of which updates the withdrawal address through a POST to http://ebitcoinbetting.com/account.php?id=2&a=1, and the other which withdraws money through another POST to http://ebitcoinbetting.com/account.php?id=2&a=2.
As far as I can tell, this isn't a problem with the password change form because the old password is required. This is also not likely a problem with betting, as there is a confirmation screen for that. Confirmations screens are generally poor at solving CSRF attacks, however, and care should be taken.
(On a related note, withdrawal does not currently work. The error given is:)
Some thoughts
Combined login/register
The combined login/register form is a bad idea. When I went to log in, I had to scroll down to see the Login button and initially thought I should fill my information in the upper form, which was instead for Registering.
Logo discrepancy
The logo, which says EBitCoingBetting, is confusing. The site's name is given elsewhere as EBitcoinBetting, without the g that follows the Bitcoin. Regardless of whether this is an error or an intentional discrepancy, it is a source of confusion. Brand should be unified, even if the difference is only a g.
Cosmetic balance display issue
On two separate occasions, the Balance in use shows nothing when no balance is being used. See: http://i.imgur.com/3bB0NsB.png and http://i.imgur.com/YX8jDN0.png.
Username issue?
On the deposit page, my username is displaying thus:
The username I signed up with is not l3jNF. I'm not sure what this is. Perhaps this is intentional, but clarification would be helpful if that is the case.
Bet sizes
The minimum bets for all the ones I can see is 0.21 BTC. Not sure if this is intentional, again, but it certainly makes testing the bet system hard, since we only have 0.1 BTC to work with...
A well-designed site, but there are many issues.
First the big stuff
CSRF vulnerability
There is a major CSRF[1] vulnerability in various parts of your website. A malicious attacker can exploit this vulnerability to steal funds from bettors. Please PM me if you need any more information on this issue.
Most visible is the withdrawal script. An attacker can update the withdrawal destination and withdraw arbitrary amounts from user balance. A malicious webpage contains two inline frames, one of which updates the withdrawal address through a POST to http://ebitcoinbetting.com/account.php?id=2&a=1, and the other which withdraws money through another POST to http://ebitcoinbetting.com/account.php?id=2&a=2.
As far as I can tell, this isn't a problem with the password change form because the old password is required. This is also not likely a problem with betting, as there is a confirmation screen for that. Confirmations screens are generally poor at solving CSRF attacks, however, and care should be taken.
(On a related note, withdrawal does not currently work. The error given is:)
Quote
Catchable fatal error: Object of class mysqli_stmt could not be converted to string in /home3/dokula/public_html/ebit/account.php on line 186
Some thoughts
Combined login/register
The combined login/register form is a bad idea. When I went to log in, I had to scroll down to see the Login button and initially thought I should fill my information in the upper form, which was instead for Registering.
Logo discrepancy
The logo, which says EBitCoingBetting, is confusing. The site's name is given elsewhere as EBitcoinBetting, without the g that follows the Bitcoin. Regardless of whether this is an error or an intentional discrepancy, it is a source of confusion. Brand should be unified, even if the difference is only a g.
Cosmetic balance display issue
On two separate occasions, the Balance in use shows nothing when no balance is being used. See: http://i.imgur.com/3bB0NsB.png and http://i.imgur.com/YX8jDN0.png.
Username issue?
On the deposit page, my username is displaying thus:
Quote
Hey, l3jNF!
The username I signed up with is not l3jNF. I'm not sure what this is. Perhaps this is intentional, but clarification would be helpful if that is the case.
Bet sizes
The minimum bets for all the ones I can see is 0.21 BTC. Not sure if this is intentional, again, but it certainly makes testing the bet system hard, since we only have 0.1 BTC to work with...
All of these have been fixed as well. Amazing write up! Thank you!
Re: Launching the Beta of EBitcoinBetting.com! - A Bitcoin Sportsbook
Thanks,
Was able to reset my password, via the email verification link.
Site is a little hard to navigate around and I had to look for Football then click NCAA to make some bets. Also not a very good checkout area, errors and errors trying to get a parlay to work,
Minimum Bet: .21 BTC
Maximum Bet: .24 BTC
Incorrect table name ''349
What I did like it had the old parlay feel, I remember 25 years ago being 10 picking my 11 teams on my Dad's slip he was going to play for me for $1, but when i got to be 20 I realized it was a rouse and no 10 year old could pick a 11 teamer with odds. But I remember doing that though.
I tried and was unable to make my bets on a 4 team parlay
I want play the full 0.10 BTC on
South Carolina ML -530
SMU H:5 -106
LSU ML -180
FSU ML -371
I will try again tonight and hopefully be back before kickoff tonight, or if you can get in put in that would greatly be appreciated.
Was able to reset my password, via the email verification link.
Site is a little hard to navigate around and I had to look for Football then click NCAA to make some bets. Also not a very good checkout area, errors and errors trying to get a parlay to work,
Minimum Bet: .21 BTC
Maximum Bet: .24 BTC
Incorrect table name ''349
What I did like it had the old parlay feel, I remember 25 years ago being 10 picking my 11 teams on my Dad's slip he was going to play for me for $1, but when i got to be 20 I realized it was a rouse and no 10 year old could pick a 11 teamer with odds. But I remember doing that though.
I tried and was unable to make my bets on a 4 team parlay
I want play the full 0.10 BTC on
South Carolina ML -530
SMU H:5 -106
LSU ML -180
FSU ML -371
I will try again tonight and hopefully be back before kickoff tonight, or if you can get in put in that would greatly be appreciated.
All of these issues have been fixed. Let me know if you cannot place the bet, then I will do it myself.
Re: Launching the Beta of EBitcoinBetting.com! - A Bitcoin Sportsbook
We have awarded the following players with .1 BTC:
We decided on the picking the players that have contributed the most to Bitcointalk.org community. We've messaged whoever did not list their username. You are can pick any bet and your winnings + risk will be rewarded. We will not withdraw the credited BTC if it has not been used to place on a bet. Please let us know if you have any questions and don't hesitate to report and bugs or things that we can improve on. Good luck!
EBitcoinBetting.com
Quote
mscharleneb
uvwvj
dree12
KingOfSports
HollowIP
bitcoinsrock
spurs32
cparsley
Icecube
rogerto
uvwvj
dree12
KingOfSports
HollowIP
bitcoinsrock
spurs32
cparsley
Icecube
rogerto
We decided on the picking the players that have contributed the most to Bitcointalk.org community. We've messaged whoever did not list their username. You are can pick any bet and your winnings + risk will be rewarded. We will not withdraw the credited BTC if it has not been used to place on a bet. Please let us know if you have any questions and don't hesitate to report and bugs or things that we can improve on. Good luck!
EBitcoinBetting.com
Re: Launching the Beta of EBitcoinBetting.com! - A Bitcoin Sportsbook
Hi, I deposited and I am unable to withdraw. Also never received .1
I messaged you.
Launching the Beta of EBitcoinBetting.com! - A Bitcoin Sportsbook
We have just finished the final touches on the website and would love to get some feedback from users that actually have experience in betting with bitcoins.
My offer:
I will credit the first 10 people who are willing to beta test the site with .1 BTC on August, 28th. That is when we are officially planning to launch the site to allow wager with real money. If would like to do this, PM me with the username that you registered with on EBitcoinBetting.com with and let us know.
The .1BTC will be offered as a betting credit on the website. You win, you get paid and are able to withdraw. You lose, you are outta luck. I will send out the emails on the opening day.
I would love to hear about your experience (positive or negative), any bugs, recommendations or comments that you can possibly think of things that we can fix.
Would love to hear from you guys. Hope we can be your sportsbook of choice in the near future!
http://EBitcoinBetting.com
My offer:
I will credit the first 10 people who are willing to beta test the site with .1 BTC on August, 28th. That is when we are officially planning to launch the site to allow wager with real money. If would like to do this, PM me with the username that you registered with on EBitcoinBetting.com with and let us know.
The .1BTC will be offered as a betting credit on the website. You win, you get paid and are able to withdraw. You lose, you are outta luck. I will send out the emails on the opening day.
I would love to hear about your experience (positive or negative), any bugs, recommendations or comments that you can possibly think of things that we can fix.
Would love to hear from you guys. Hope we can be your sportsbook of choice in the near future!
http://EBitcoinBetting.com
Long time BTC user for several purposes, but it's the first time I have came across this forum. I'm looking to promote new Bitcoin Sportsbook. It has been a long project for myself and my colleagues, but it has finally came together as of late. I'm excited to mix my love of sports, betting and bitcoin. I believe Bitcoins can truly revolutionize the way that sportswagers are executed and take a significant piece of the pie from currency based bookies. No fees, anonymity, fast payouts are all the things that are GREAT when using Bitcoins. I frequently used cash bookies, but I'm proud to say I have not used any BUT the Bitcoin ones for the past couple of years. Bitcoin being in it's introductory stages (still), I feel like I can improve the regular Bitcoin user's experience mixed with sports betting and with our knowledge to expand the bitcoin industry. There are lots of features that are not available for bitcoin based bettors. I'm looking to change that, and look forward for you guys to come join me for the ride!
PS: Couple of sentences turned almost into an essay
PS: Couple of sentences turned almost into an essay