Two Plus Two Publishing LLC Two Plus Two Publishing LLC
 

Go Back   Two Plus Two Poker Forums > General Poker Discussion > News, Views, and Gossip

Notices

News, Views, and Gossip For poker news, views, and gossip

Reply
 
Thread Tools Display Modes
Old 05-18-2010, 06:20 PM   #826
adept
 
TAG-NIT's Avatar
 
Join Date: Oct 2008
Location: 101 Casino, Petaluma, CA
Posts: 872
Re: Another hole in UB and AP security

Quote:
Originally Posted by GrindUnumb View Post
DUDE, just cash your paychecks from UB, and shut your ****ing shilling mouth.
So angry and so wrong.

“Remember, always give your best. Never get discouraged. Never be petty. Always remember, others may hate you. But those who hate you don't win unless you hate them. And then you destroy yourself.”

Anyway, it is a serious question. Why doesn't 2+2 just cut off all AP/UB involvement?
TAG-NIT is offline   Reply With Quote
Old 05-18-2010, 06:30 PM   #827
IB and A/R Mod
 
Join Date: Dec 2003
Location: 1 Cardboard Box
Posts: 7,986
Re: Another hole in UB and AP security

Quote:
Originally Posted by TAG-NIT View Post
So angry and so wrong.

Anyway, it is a serious question. Why doesn't 2+2 just cut off all AP/UB involvement?
They aren't going to censor this type of discussion and when someone posts asking about the bonuses or promos they get bombarded with the past crimes.

I believe when the cheating scandals broke 2+2 stated they would not accept advertising from these two rooms. IIRC an affiliate was even asked to remove AP/UB from a rotating banner. I could be mistaken but I believe this is the 2+2 policy. I'm sure someone will correct me if I'm wrong.
Pokeraddict is offline   Reply With Quote
Old 05-18-2010, 06:36 PM   #828
adept
 
TAG-NIT's Avatar
 
Join Date: Oct 2008
Location: 101 Casino, Petaluma, CA
Posts: 872
Re: Another hole in UB and AP security

Quote:
Originally Posted by Pokeraddict View Post
They aren't going to censor this type of discussion and when someone posts asking about the bonuses or promos they get bombarded with the past crimes.

I believe when the cheating scandals broke 2+2 stated they would not accept advertising from these two rooms. IIRC an affiliate was even asked to remove AP/UB from a rotating banner. I could be mistaken but I believe this is the 2+2 policy. I'm sure someone will correct me if I'm wrong.
Thank you. I would not want this type censored, and I was aware of the promo ban. I meant threads like "Official" AP/UB regulars, and AP mod threads, or and thread started concerning anything from the site. A mod insta-closing it seems appropiate punishment.
TAG-NIT is offline   Reply With Quote
Old 05-18-2010, 07:00 PM   #829
adept
 
ElevenGrover's Avatar
 
Join Date: Dec 2009
Posts: 902
Re: Another hole in UB and AP security

Quote:
Originally Posted by NOSUP4U View Post
Do you really talk like this in normal conversation?

Mark
No, sometimes I talk like this.

Writing is a craft. Because the Internet operates in perpetual casual Friday mode does not make it less so...
ElevenGrover is offline   Reply With Quote
Old 05-18-2010, 08:57 PM   #830
Is Right
 
NoahSD's Avatar
 
Join Date: Aug 2005
Posts: 18,795
Re: Another hole in UB and AP security

PTR's summary.
NoahSD is offline   Reply With Quote
Old 05-18-2010, 09:58 PM   #831
Carpal \'Tunnel
 
Join Date: Oct 2002
Location: @Kevmath
Posts: 27,675
Re: Another hole in UB and AP security

Tokwiro's PR confirming the security upgrade:

Quote:
Tokwiro Enterprises ENRG (“Tokwiro”) has announced that a new version of its CEREUS software was released yesterday, upgrading security at both of the Network’s online poker rooms, UB and Absolute Poker. The new software release uses Open SSL encryption to secure all Client-Server communication, and reestablishes the CEREUS Poker Network as a safe and secure online poker environment. PokerTableRatings (“PTR”) has also confirmed that SSL is live at CEREUS and operating as it should.

“Our priority is our players, and providing them with a secure online poker environment,” said Tokwiro Enterprises (“Tokwiro”) Chief Operating Officer Paul Leggett. “The implementation of the Open SSL standard achieves this for our players, and we will continue to conduct rigorous verification tests and submit to third party audits to ensure our entire operation is secure.”

This latest CEREUS security software release completes the implementation of the Open SSL encryption for all Client-Server communication at both UB and Absolute Poker.

Throughout this process, Tokwiro has developed a solid working relationship of transparency with PTR, and the collaboration is expected to be ongoing.

“We are communicating openly with PTR, our players, and the rest of the poker community to prove ourselves as a company that is safe to play at, and that we are serious about security,” added Leggett.

Tokwiro management will also work with their various regulatory bodies, including the Kahnawake Gaming Commission, and third party auditing firms to ensure everything possible is being done to provide a secure gaming environment for players.
Kevmath is offline   Reply With Quote
Old 05-18-2010, 11:12 PM   #832
veteran
 
superleeds's Avatar
 
Join Date: Jul 2003
Location: Ooh, you lucky bastard
Posts: 2,825
Re: Another hole in UB and AP security

Quote:
Originally Posted by Kevmath View Post
Tokwiro's PR confirming the security upgrade blah blah
Why do they bother with this crap. The only people who read it are us and we just throw up a little. Maybe that's why.
superleeds is offline   Reply With Quote
Old 05-18-2010, 11:17 PM   #833
Carpal \'Tunnel
 
Reefypoopoo's Avatar
 
Join Date: Nov 2007
Location: ninny rubbin'
Posts: 8,481
Re: Another hole in UB and AP security

how did they implement SSL so fast? It was my understanding via all the techie posts that this took a matter of weeks
Reefypoopoo is offline   Reply With Quote
Old 05-18-2010, 11:27 PM   #834
Is Right
 
NoahSD's Avatar
 
Join Date: Aug 2005
Posts: 18,795
Re: Another hole in UB and AP security

Quote:
Originally Posted by Reefypoopoo View Post
how did they implement SSL so fast? It was my understanding via all the techie posts that this took a matter of weeks
A lot of people said about a week and they took about a week.
NoahSD is offline   Reply With Quote
Old 05-18-2010, 11:59 PM   #835
newbie
 
pwlsuv15's Avatar
 
Join Date: May 2010
Location: Michigan
Posts: 17
Re: Another hole in UB and AP security

Quote:
Originally Posted by NoahSD View Post
TY for paying so much attention to this matter noah :-)
pwlsuv15 is offline   Reply With Quote
Old 05-19-2010, 12:12 AM   #836
adept
 
level 4-3's Avatar
 
Join Date: Apr 2010
Location: on the move
Posts: 853
Re: Another hole in UB and AP security

Quote:
Originally Posted by NoahSD View Post

Nice article.
level 4-3 is offline   Reply With Quote
Old 05-19-2010, 02:15 AM   #837
grinder
 
wiggum's Avatar
 
Join Date: Jul 2007
Location: ITT
Posts: 420
Re: Another hole in UB and AP security

Quote:
Tokwiro Enterprises ENRG (“Tokwiro”) has announced that a new version of its CEREUS software was released yesterday, upgrading security at both of the Network’s online poker rooms, UB and Absolute Poker. The new software release uses Open SSL encryption to secure all Client-Server communication, and reestablishes the CEREUS Poker Network as a safe and secure online poker environment.
This might have sounded impressive during the dot-com bubble in 1998. It makes them sound like a joke, over a decade later.
wiggum is offline   Reply With Quote
Old 05-19-2010, 02:16 AM   #838
newbie
 
Join Date: May 2009
Posts: 48
Re: Another hole in UB and AP security

criminals should be behind bars
AlaskanDogRunner is offline   Reply With Quote
Old 05-19-2010, 04:34 AM   #839
journeyman
 
Join Date: Sep 2008
Location: Sydney
Posts: 292
Re: Another hole in UB and AP security

Quote:
Originally Posted by Reefypoopoo View Post
how did they implement SSL so fast?
By patching it together very, very quickly and (probably) not worrying too much about the possible consequences.

I used to work as a programmer (though a long time ago now) and a week sounds like the minimum time needed to do the job, which was not enormously difficult in itself. They didn't implement SSL; they would have used a library.

But to have done it all in a week means that, beyond a shadow of a doubt, they left themselves no time for an adequate testing regime. The new version hasn't been properly tested -- we can infer this simply from how little time has elapsed. That's why they have outsourced the "testing" to PTR, which in any case has no access to the source code so is not capable of testing the system rigorously. This is incompetence pure and simple.
Eleatic Stranger is offline   Reply With Quote
Old 05-19-2010, 04:43 AM   #840
banned
 
wilneedheart's Avatar
 
Join Date: Oct 2006
Location: Location: Location
Posts: 2,261
Re: Another hole in UB and AP security

Quote:
Originally Posted by Eleatic Stranger View Post
they have outsourced the "testing" to PTR, which in any case has no access to the source code so is not capable of testing the system rigorously. This is incompetence pure and simple.
Quote:
Originally Posted by PTR Website; May 18, 2010
On Friday May 7th we first reported on the now well known security holes in the Cereus network’s data encoding, and ten days later we’re pleased to say that the known issues appear to have been fully resolved. The Cereus network has upgraded all of their server communications to adhere to industry standards of OpenSSL, which will prevent any user data from being stolen.
Your post suggests that PTR is incompetent because they have endorsed the new security without testing it rigorously.
wilneedheart is offline   Reply With Quote

Reply
      

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT -4. The time now is 12:24 PM.


Powered by vBulletin®
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.6.0 ©2011, Crawlability, Inc.
Copyright © 2008-2010, Two Plus Two Interactive