CrazyMMG

Cyber Security // iGaming

Founder @ProvablyFairFdn

[CrazyMMG @CrazyMMG]

@KeyboardMonkey3 @Rager @GalacticOverlor @cobie @WazzCrypto Unfortunately, singleplayer games like plinko are typically only verifiably fair for the player who is betting, and outcomes can't be proven in scenarios where both the house and player are colluding.

[Provably Fair Foundation ⚖️ @ProvablyFairFdn]

We are slowly rolling out our Provably Fair Certifications as shown by @xdotfun. If you run an iGaming business that offers in-house Provably Fair games of chance, DM us to join the growing list of Certified Operators who believe fairness should be guaranteed in our industry.

[WAXPEER @WAXPEER]

🚨 Steam may have authorization issues allowing account misuse.

Some OpenID libraries like passport-steam have potential security vulnerabilities.

What to do:

Validate parameters
Verify openid.return_to
Use secure nonce generation
Validate signatures
Sanitize inputs
Ensure openid.return_to matches the correct URL

[CrazyMMG @CrazyMMG]

@CSGOEmpireV2 @nasyonelkopke @variancewarren Good system. Only problem I have with it is the potential added complexity on the user who has to verify the result. If Rollbit publically broadcasts the random value, proof and VRF inputs for every users' bets it would allow third parties to audit bets as well.

[CrazyMMG @CrazyMMG]

@csfloatcom 🤦‍♂️

[Provably Fair Foundation ⚖️ @ProvablyFairFdn]

Over the last few days, the Provably Fair Foundation has been working with @gamdom to identify and fix an issue with their Provably Fair system. Read more: https://t.co/MQaEpuGyZ8

[Provably Fair Foundation ⚖️ @ProvablyFairFdn]

@MihaiBmA @gamdom Hey, please could you DM us!

[CrazyMMG @CrazyMMG]

@CSGO500 Archived for posterity:

https://t.co/UFaoV2hqzU
https://t.co/ilDosuD8HM

[CrazyMMG @CrazyMMG]

@CSGO500 Hey, is the code used to generate round outputs being changed alongside this reseeding event?

[CrazyMMG @CrazyMMG]

@zachxbt Tried to warn em

https://t.co/a5KVlvAnqM

[CrazyMMG @CrazyMMG]

coinspaid hacked? lmeow

[CrazyMMG @CrazyMMG]

coinspaid hacked? lmeow

[Provably Fair Foundation ⚖️ @ProvablyFairFdn]

Provably Fair technology is commonly used, and misused, in the iGaming industry to ensure the fairness of player’s bets, and to prove the randomness of gambling outcomes.

Read the full article at: https://t.co/dyBZtK3TRR

[CrazyMMG @CrazyMMG]

@cantryde Guess who bagged the first tweet on it :)

https://t.co/2Ly0mSuZQt

[CrazyMMG @CrazyMMG]

PSA: Big Steam OpenID Packages are currently vulnerable to an exploit. Shut down your sites asap.

[CrazyMMG @CrazyMMG]

PSA: Big Steam OpenID Packages are currently vulnerable to an exploit. Shut down your sites asap.

[CrazyMMG @CrazyMMG]

PSA: Big Steam OpenID Packages are currently vulnerable to an exploit. Shut down your sites asap.

[CrazyMMG @CrazyMMG]

@DaddyskinsCSGO I have discovered an issue with your provably fair system. Please DM me.

[CrazyMMG @CrazyMMG]

@TalkTalk Well it's fixed now lol. It was out for an hour from 1 till 2

[CrazyMMG @CrazyMMG]

@TalkTalk If you could turn the Internet back on that would be appreciated

[CrazyMMG @CrazyMMG]

@ATVIAssist Can you DM me? I found a security vulnerability with one of your websites.