For maintenance reasons, the ability to add, remove or change poker site names will be down until Monday, May 20 at 09:00 AM (GMT - 6:00). Thanks for your patience.
-
lol it took this guy less than 3 hours to do something bodog has been claiming is impossible to do. its a security breach because its not anonymous, he can even change the ID #s to screen names if he wants. bodog is trying to stop data mining yet in less then 3 hrs this guy has found a way to do it. complete fail by bodog with this update.
-
yeah typos ftw cant type while mass tabling
Originally Posted by mapunk
Again, how is this making accounts more vulnerable? And how is it a security breach? It's not like passwords are being publicly transmitted or anything, it's simply an ID for users' accounts (very similar to how stars allows you to log in with your username). I'm not trolling, I really want to know...
And it's called "brute" force btw
basically if someone has half of your login info its going to be alot easier for them to hack into your accnt and dump your money on the tables, just like what happens on stars all the time.
Also as mark said it means ppl arent protected by anonymity as they have been led to believe. -
I was never a fan of HUDs, and never will be, so I don't mind that change. However, the email response earlier in this thread which stated "Bring it back to the essence of the game itself rather than who you are playing against and what you or your opponent have done in the past" is just laughable. Playing based on what you know about your opponent IS the game! That said, what you know about your opponent should be based on what you are able to gather by your personal observation skills, and not via the use of tracking software or HUDs. Notes should be allowed, as well as player names. Tracking devices and HUDs should be illegal and blocked, and you should be permanently banned from playing on the site if you are caught using any of this (IMO). '
Sync breaks are a must.
The noise needs to go, or we should at least be able to adjust which sounds are heard and have the ability to mute the sounds we do not like.
Get rid of the blackjack button on the poker tables FFS. -
Thank you for contacting Bodog Poker Customer Service.
Edited By: tedSTRETCH Dec 6th, 2011 at 04:45 AM
It's very understandable if our players are very concerned about the security of their accounts because of this video that has been posted on the internet but we are assuring all of our players that all your account information is secured. We are aware of this video and we are investigating looking into this.
Regarding your concern with our software being viewed in 2+2 and that account numbers are visible, we are aware that account numbers can be viewed in the back end of the software as they exist so that we can still monitor the activity of our players for security and reporting purposes. In a future phase of improvements, we will likely remove these numbers so that they can only be viewed internally and not externally using the software you're inquiring about.
As per the anonymity of our Poker tables, for the vast majority of our players, they will not know who they are playing against as they can't see a screen name or account number while at the tables; however, if someone wants to and has the technical skills to develop the software you saw on the forum they are able to - we are confident this will only be pursued in very isolated cases between now and a future upgrade which will prevent it from working.
If you are worried about the security of your account, having access to an account number is similar to having a screen name in the past. You still must have a password or the answers to your private security questions in order to access any personal or banking information
Thank you very much for writing. Should you have any questions, or require any further assistance, please do not hesitate to contact us.
Regards,
Poker Customer Service
poker@bodog.eu
1-866-909-ACES (2237)
"we will likely remove these numbers so that they can only be viewed internally and not externally using the software you're inquiring about."
that sounds reassuring -
Originally Posted by Duffy08
but bro...zomg...I NEED MY RECOGNITION from fellow bros when I win donkament for moniez...i then need too INSTANTLy bug p5 mods too update my point status so I can get make believe awards like farmland so even more bros can see my domination. Poker isn't about money, it's about forum rep, twitter status, and self promotion so some day I can share my leet tips and tricks with other bros for a buy in at 1/2 on one of the elite, select 25-35 training sites that employ only a select few, 300-600 backed bros
Lol. Well put DuffOriginally Posted by Duffy08
I mean Bodog prolly went a little too far too fast with it, but anonymous online poker...or at least poker where you cannot know someone's past results, or their stats without calculating them urself, is the future of poker and I hope the big time casinos and other companies recognize this so as too prolong the online poker industry. I mean how much $ would guys like GUe and other whales continue too dump if they knew no one could see how much they've lost? The collusion/MAing needs too be figured out, BUT I believe no player transfers GREATLy decreases the effectiveness of said practices right? and with payment processors being siezed, etc... it's safe too say sickos like jjprodigy are not going too be MAing bodog in the current poker climate.
It pisses me off how ass backwards the poker industry has things and we could learn tons from other bigger and better industries in every since of the word. Casinos treat their whales like kings and queens. Comps, personal help, welcoming warm faces. Poker looks up your stats riducules you for dumping maybe 1/100th of ur disposable income, and then goes and posts about it too bros on the forums. IN the markets, you almost never hear of the top day traders giving away their knowledge or edges for cheap. In poker, we idolize young bros who are making modest at best(and super high % backed) clips and then selling their ideas in the form of training videos that can be displayed for all of time for almost always a lousy, one time fee. Never ever would software that tracks succesful day traders tactics ever be allowed, or even promoted in that industry. But here in poker, we praise everythin HOldem manager does.
Glad I haven't put money on there. After hearing about the Brand change I figured I'd wait to see what goes down. Love being able to play anonymously. Guess I'll wait and see how this all plays out. -
I'm not quite sure why you're so upset about this. Before the update your screen name was public to anyone who wanted to download the software and watch a table, and you were presumably okay with that. This screen name is not only easy to track for software (huds, data scrapers, etc), but it's also easy to remember this screen name and also linked to your other screen names (through sites like pocket fives). It was also used for logging into the Bodog software.
Originally Posted by tedSTRETCH
"we will likely remove these numbers so that they can only be viewed internally and not externally using the software you're inquiring about."
that sounds reassuring
Then Bodog comes out with an update that hides your screen name completely and "attempts" to hide your user ID (but in reality probably ~0.25% of the players are capable of seeing this information, and probably much less will actually use it to track your playing history), and you start getting nervous about it. Unless you've publicly given out your ID, people don't know that ID 555555 is actually linked to testSTRETCH -- they just know it's ID 555555. So I don't see how this can be considered a security breach or where the paranoia is coming from, just because some unique ID that they internally use is being broadcast. -
Originally Posted by mapunk
I'm not quite sure why you're so upset about this. Before the update your screen name was public to anyone who wanted to download the software and watch a table, and you were presumably okay with that. This screen name is not only easy to track for software (huds, data scrapers, etc), but it's also easy to remember this screen name and also linked to your other screen names (through sites like pocket fives). It was also used for logging into the Bodog software.
Then Bodog comes out with an update that hides your screen name completely and "attempts" to hide your user ID (but in reality probably ~0.25% of the players are capable of seeing this information, and probably much less will actually use it to track your playing history), and you start getting nervous about it. Unless you've publicly given out your ID, people don't know that ID 555555 is actually linked to testSTRETCH -- they just know it's ID 555555. So I don't see how this can be considered a security breach or where the paranoia is coming from, just because some unique ID that they internally use is being broadcast.
they said there are more videos coming soon so that isnt the only flaw. ALso you could easily sit at a cash table, get everyones id numbers, and then after playing for awhile get up and take the seat again and know exactly who ur playing against meanwhile they think you are a new player who just sat down. Just one of many reasons why this is unacceptable and bodog is really gonna have to back out of this whole anonymous idea or become the joke of the poker world (might be too late) -
...or just fix it's implementation
Originally Posted by nevertilt22
Just one of many reasons why this is unacceptable and bodog is really gonna have to back out of this whole anonymous idea or become the joke of the poker world (might be too late)
again, i don't see why the anonymous thing is supposed to be so bad. -
My issue is that someone could write a program and sell it and provide ways to track your opponents. Now, instead of making everyone anonymous to protect the "average player", you end up making everyone anonymous, except to those willing to pay for additional information. If someone creates such a product, it actually has the opposite effect of what bodog wanted
Originally Posted by mapunk
I'm not quite sure why you're so upset about this. Before the update your screen name was public to anyone who wanted to download the software and watch a table, and you were presumably okay with that. This screen name is not only easy to track for software (huds, data scrapers, etc), but it's also easy to remember this screen name and also linked to your other screen names (through sites like pocket fives). It was also used for logging into the Bodog software.
Then Bodog comes out with an update that hides your screen name completely and "attempts" to hide your user ID (but in reality probably ~0.25% of the players are capable of seeing this information, and probably much less will actually use it to track your playing history), and you start getting nervous about it. Unless you've publicly given out your ID, people don't know that ID 555555 is actually linked to testSTRETCH -- they just know it's ID 555555. So I don't see how this can be considered a security breach or where the paranoia is coming from, just because some unique ID that they internally use is being broadcast. -
had a long convo with bodog. they said they were aware of the video and were working on it.
nearing the end of our convo they wanted my account number.
i told them to play the same table with me and they'd know.
they hung up -
Hit and runners must love this anonymous shit. Can Grimstar it up like a mofo now.
-
Exactly, and I was going to add that to the end of my post but decided not to. I'm obviously aware that's a pretty big issue, but my point was that people seem to think this is a huge security risk when it's really not (as far as I can tell).
Originally Posted by tyson219
My issue is that someone could write a program and sell it and provide ways to track your opponents. Now, instead of making everyone anonymous to protect the "average player", you end up making everyone anonymous, except to those willing to pay for additional information. If someone creates such a product, it actually has the opposite effect of what bodog wanted
-
This was posted by Justin the Bodog rep on 2p2:
Originally Posted by mapunk
Exactly, and I was going to add that to the end of my post but decided not to. I'm obviously aware that's a pretty big issue, but my point was that people seem to think this is a huge security risk when it's really not (as far as I can tell).
So for those saying that someone is going to somehow hack in and get player identities because it supposedly happened on party its not possible unless you somehow got the information directly from the Bodog server. This is the issue with only doing some anonymous tables, in that way your program runs a certain way and some packets of information may be diverted for anon tables. Bodog NEVER sends this information to the tables, there is NOTHING to intercept. That information stays on their server side for reporting and security.
So are you going to test Bodog to catch chip dumpers and bots?
Plus those anonymous tables aren't so anonymous are they? -
Tyson nailed it. Bum hunters can still bum hunt, and tourney players that have a way of knowing which player is which in their database have a big advantage over 'casual' players that don't.
Originally Posted by tyson219
My issue is that someone could write a program and sell it and provide ways to track your opponents. Now, instead of making everyone anonymous to protect the "average player", you end up making everyone anonymous, except to those willing to pay for additional information. If someone creates such a product, it actually has the opposite effect of what bodog wanted
-
How do you know the id number cant be linked to your screename? A day ago ppl thought tables were anonymous....
Originally Posted by mapunk
I'm not quite sure why you're so upset about this. Before the update your screen name was public to anyone who wanted to download the software and watch a table, and you were presumably okay with that. This screen name is not only easy to track for software (huds, data scrapers, etc), but it's also easy to remember this screen name and also linked to your other screen names (through sites like pocket fives). It was also used for logging into the Bodog software.
Then Bodog comes out with an update that hides your screen name completely and "attempts" to hide your user ID (but in reality probably ~0.25% of the players are capable of seeing this information, and probably much less will actually use it to track your playing history), and you start getting nervous about it. Unless you've publicly given out your ID, people don't know that ID 555555 is actually linked to testSTRETCH -- they just know it's ID 555555. So I don't see how this can be considered a security breach or where the paranoia is coming from, just because some unique ID that they internally use is being broadcast.
Its a big issue for me because if you are told by the client that your play is anonymous it shouldnt be trackable by someone with elementary knowledge of programming.
Think about the kind of edge you would have on HU or cash tables while using a hud taking notes on players and remaining anonymous.
Pretty ridiculous and unacceptable imo -
We're not going to be able to support Bodog in the PocketFives Rankings any longer. Our tournament feed, like Bodog's tables, no longer contains player names. We reached out to Bodog staffers, who said they won't be able to support the feed any longer.
Therefore, any tournaments you cash in on Bodog after December 1st won't be tracked for the PocketFives Rankings. -
There is a new video out, i'm on my phone and having a hard time posting it maybe someone can. Sounds like from the 2p2 forum might be something on passwords.
-
Originally Posted by vicvegas007
There is a new video out, i'm on my phone and having a hard time posting it maybe someone can. Sounds like from the 2p2 forum might be something on passwords.
Wow. This video from the same guy shows that it could be possible to hack a bodog account with the account number, especially if the user doesn't have a secure password. Still no blog post on 2+2 about the video, but it's supposed to be forthcoming. -
i agree this software blows
-
Has there been any response from Bodog reps in this thread? Scanned through it, but haven't seen anything.
-
I have been playing poker on Bodog for 4 years. I have loves there sounds , avatars, animations, great customer service, speedy payouts and Bodog poker was no exception. Had fun and won alot of money BUT this new software absolutley blows. No screennames takes away from the purpose of online poker. If you cant track your opponent or even track your table or the person next to you , well I say that sucks. I find the new software to be boring and a joke.. Im done until they at least bring back screennames
-
Edited By: mapunk Dec 7th, 2011 at 12:28 AMSigh, all of that is very basic information and the logic can be applied to any web login form. If someone knows how to program a script to POST login credentials, they're going to know how to bypass an IP ban with proxies, which is really the next step they could have taken to secure that form a bit more. The logic in the video can be used to try and brute force any website (facebook, gmail, p5s, etc) -- it's not something that only bodog is susceptible to. Once again, knowing someone's user ID doesn't open up any security risks at all. The bigger issue, as has been discussed, is the fact that they don't obfuscate the user IDs at all, which allows data mining programmers and websites to track the users.Originally Posted by tyson219
Wow. This video from the same guy shows that it could be possible to hack a bodog account with the account number, especially if the user doesn't have a secure password. Still no blog post on 2+2 about the video, but it's supposed to be forthcoming.
I don't, which is why I said "as far as I can tell." What I'm saying, though, is if all that is being transmitted is a user ID the it's not a big issue. And believe me, it takes more than "elementary knowledge of programming" to be able to grab the user IDs from the bodog client. It involves some relatively complex ideas, which include sniffing the network packets and decrypting the stream into something the script can make use of. I'm not supporting Bodog in any way (actually quite the opposite), but people need to stop thinking this is some crazy security risk. It allows data mining and that's it.Originally Posted by tedSTRETCH
How do you know the id number cant be linked to your screename? A day ago ppl thought tables were anonymous....
Its a big issue for me because if you are told by the client that your play is anonymous it shouldnt be trackable by someone with elementary knowledge of programming.
Reason: typos -
Edited By: tyson219 Dec 7th, 2011 at 12:04 AMFair enough. However, most other poker sites have alternatives (PS and FTP have/had secondary measures, merge uses emails not user ids, etc). So your login credentials were not as susceptible as on bodog. In addition, unlike other companies (FB, gmail, banks, etc), bodog/poker sites have generally taken no responsibility if your account is hacked. So although this may be rudimentary, I find it an unacceptable security risk for a poker site. Especially since their attempt to mask ids was to add a "1" at the end of each id.Originally Posted by mapunk
Sigh, all of that is very basic information and the logic can be applied to any web login form. If someone knows how to program a script to POST login credentials, they're going to know how to bypass an IP ban with proxies, which is really the next step they could have taken to secure that form a bit more. The logic in the video can be used to try and brute force any website (facebook, gmail, p5s, etc) -- it's not something that only bodog is susceptible to. Once again, knowing someone's a user ID doesn't open up any security risks at all. The bigger issue, as has been discussed, is the fact that they don't obfuscate the user IDs at all, which allows data mining programmers and websites to track the users.
-
Edited By: mapunk Dec 7th, 2011 at 12:29 AMlol yeah that whole "1" thing is really laughable. But anyway, my whole argument is that the new update didn't bring out any NEW security risks. I'm not, however, saying that their security is adequate.Originally Posted by tyson219
Fair enough. However, most other poker sites have alternatives (PS and FTP have/had secondary measures, merge uses emails not user ids, etc). So your login credentials were not as susceptible as on bodog. In addition, unlike other companies (FB, gmail, banks, etc), bodog/poker sites have generally taken no responsibility if your account is hacked. So although this may be rudimentary, I find it an unacceptable security risk for a poker site. Especially since their attempt to mask ids was to add a "1" at the end of each id.
-
Here's a list of ways the new software screws multitablers. Everyone knows the software has these issues -- my point is that there's a theme, which is that they all make multitabling more difficult. I think it's by design. I think most of these flaws/bugs are intentional on Bodog's part.
Edited By: KingTriton Dec 7th, 2011 at 01:42 AM
They allow us to 20-table MTTs now, but it's hardly possible to keep up with even 8-10 tables because the software is nefariously (imho) designed to slow down our actions.
- The action alert beep sounds every time you win a pot, for no apparent reason. This is distracting.
- Tables do not pop to the front reliably when it is your action.
- The bet box does not work correctly. The user is required to click three or four times before he/she is able to type a number in the box, meaning the user is in danger of timing out at other tables while trying to type the bet. Wouldn't programmers almost have to be trying to fuck up such a stupid basic feature?
- It takes several clicks to grab and drag a window. This is obviously distracting when a new tournament pops up in the middle of a session.
- When a new tournament starts, the user is required to click "OK" on a pop-up box before being able to act at any other table. Pretty infuriating when this happens in the middle of a hand.
- The sounds. No alert-only option, resulting in a cacophony of horrible noises coming from every table.
- Tables do not cascade properly. Has this ever been a problem with any poker software in history? (Other than the old Bodog software, which had no cascade option at all. But this one has a cascade button that should work...)
- When using two monitors, when you click the tile tables button, half of the tables are sent to one screen, and half to the other. Same thing with cascading. (The only people this idiotic flaw will ever affect are multitablers.)
- The auto-post/sit out/auto checkboxes are in a menu that appears and disappears when you push a button. This menu is automatically pulled out when new tables pop up. When it's pulled out, it partially covers the "seat" in the lower right corner, obscuring the player number. (Incidentally, how many clicks does it take to sit out at 10 tables at the same time? Something that could be done with one click on stars takes many, many, many clicks on this innovative new software.) I also think this is designed to cause the user to misclick sit out.
- When you close and re-open the software mid-session, the tables don't automatically pop up when you log back in. The lobbies do...so you have to click into each table one by one.
- No preferred seating. The one and only reason not to have preferred seating is to make multitabling harder. -
You have summed up all of my complaints very well Triton. It's so sick of them to pull this crap. Only thing I can't complain about is that the site is still very profitable, still the same amount of poor players in the cash games.
-
http://calvinayre.com/2011/12/07/pok...y-more-robust/

Calvin Ayre 1 comment collapsed CollapseExpand
Funny....this is really really funny. -
Well put Triton, so many of those things I had issues with but couldnt put them all together in one post.
Thanks -
guess guy ITT said it for me but that doesn't look like some sort of new security breach or way of doing it. TBH, this is the same kind of method that people were using back in 1997-2001'ish to crack people's passwords on the almighty powerful n popular AOL.
Shit ain't that serious, just don't make your pw something sofkngobv n you'll be ok.
Similar Threads
-
76 Replies
A question about the differences beween a date when dating and a date in a relationship.
By Aznsportsnut in Off Topic
Last Post: Dec 18th, 2009, 03:25 AM -
1 Replies
Full-Tilt Latest Software Up-date?
By SeRvE_VolleY in Poker Discussion
Last Post: Sep 12th, 2008, 07:33 AM -
25 Replies
Bodog old software vs new software
By PanchoStern in Poker Discussion
Last Post: Jul 22nd, 2008, 11:43 AM -
37 Replies
so remember my friend who scored the date, his first date ever?(pic of girl inside)
By RonKarkovice in Off Topic
Last Post: Nov 5th, 2007, 07:04 PM - 5 Replies









