For the ones who are looking at hole card packets with wireshark, here is a much better filter: tcp contains "*115%"

-m

Actually it wasnt on purpose, I am sorry about that.

Well, i guess its possible they never had encryption set up correctly. Just assumed nobody would be careless enough to launch a poker site without a tested client<->server encryption.

As why to disable it later: One obvious reason would be to make cheating possible. (Or they were dealing with performance issues and tried to decrease load by disabling encryption?)

But you are probably right, they should be long aware of it by now, and would have enabled it again if they could.

Btw, i did some more playmoney testing and was able to reproduce moofz results. At least for playmoney, hole-card information is definitely transmitted unencrypted.

Shill for PBP seems obvious, new account, first post, in the midst of controversy, supporting the site.

Over/under on ban coming?

Me too. And since the application lets you choose playmoney or real money in the same menu, it's doubtful that the communication protocol changes for real money. I'm not depositing to find out.

You rip into chester and hen wonder why your post got "buried" deep into the middle of the thread (i.e. one page back??)

LOOK AT MEEEEE!!

or canada montreal-bahahahhahaha

Hi everyone,

As it seems you are concerned about the communication protocol we use, we went on to ask our techs in charge to provide a explanation on how our system work. I am quoting the techs reply:

"Our flash client was built using actionscript 2 and uses a flash object XMLSocket. In order to use it our Client Listener must understand the protocol used by this object, which is as follows:

- XML messages are sent over a full-duplex TCP/IP stream socket connection.
- Each XML message is a complete XML document, terminated by a zero byte.
- An unlimited number of XML messages can be sent and received over a single XMLSocket connection.

Using XML messages, the design of the game was oriented to avoid any logic on the client, and use messages only to display what was happening at the server side. The flash client is only an interface between the server and EACH user; therefore the client displays what the server orders it to display, nothing else. Each message is unique for every client connection, so that only the cards’ owner receives the message which contains his cards for example.

This was our security metric followed to avoid the fact that anyone could be reading the messages using XMLSocket’s."

I am not a tech savvy naturally, but I'd appreciate you if you guys send me your inquiries and questions pertaining this to my email and I will be more than glad to bring them to our techs for answers. Please be specific and make real questions of initerest. Note that there will be pieces of information I will not be able to disclose for security reasons.

Thank you all!

Dave Brenes
Network Manager
Pitbull Poker
Pitbull Partners

Why ban me?

You are saying that people on the other thread are derailing it, when the majority of that thread is made of of excellent points. There is currently a discussion about encryption going on there.

Sorry if that didn't just grind to a halt so you could enlighten us.

as i said-GRINDERS-thas not pro-1-2 or 5 are considered to be low stakes-name me a PRO-playing these stakes-they can't even be called semi-pro in fact

Go away skunked

Dave nothing in here talks about the hole cards being encrypted, which they aren't. This means anyone in the chain of networks and routers between your server and the PB client can see those hole cards. Think of it as a post card vs. a sealed letter. You guys are sending the hole cards on a post card.

No one is saying that you can see the other players' hole cards through the communication between the server and each individual client. But anyone with access to the network at any point between your server and your ISP in Costa Rica, would be able to see every individual communication, and thus see everyone's hole cards. It wouldn't be much work to write a script that parses these out and saves them to a file. The file could then be tailed (viewed as it grows in real time) by each individual super user, probably with some kind of smart filter to only show only the players at his table. There are other methods of pushing the hole cards to the individual superusers. This is just one simple way to do it.

You could help us by sharing information you have instead of whining like a spoiled child over a study nobody knew was happening. Grow up.

.

They ripped this straight from Adobe's Website
Also, a cursory google search shows that this technology is inherently unsecure.