Open Side Menu Go to the Top
Register
Possibly superusers on Cake -- Lee Jones responds Possibly superusers on Cake -- Lee Jones responds

08-06-2010 , 01:50 AM
Quote:
Originally Posted by THAY3R
Just an anecdote but :
Maybe 2-3 years ago I triple barrelled with 54s on an A73xx board. My opponent called my all in on the river with....54. I stopped playing high stakes on Cake after that.
is there a HH that could be dug up from somewhere?
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 02:10 AM
Can someone please post a quote of Lee saying "None of your business"?

I think he may have said it at one point, but it was in regards to how Cake is run. And in all reality, that is none of our business.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 02:28 AM
Hi Everyone:

I made this post in the other thread:

Quote:
Originally Posted by Lee Jones
Without excusing, in any way, our security vulnerability, this is 100% correct and is the standard protocol in the computing industry. If you find a security leak in somebody's software, you alert the company that has the software, wait an appropriate period to let them fix it, and then tell the world.

There are a million ways PTR could have "escrowed" the scoop on this. They could have alerted us and also told some respected person in the business (e.g. Kevmath and/or another respected 2+2 mod). Had we not responded, not fixed the problem, or pretended we found it ourselves, Kevmath would have been there to tell the whole story.

Once we had the problem fixed, PTR could have then gone public and said "Aha! Look at the vulnerability we found at Cake!" We'd have no way of denying that (and we wouldn't have denied it, anyway).

I say all this to get here: ask yourself why PTR would tell the world simultaneously when they told us (thus raising the risk level for anybody playing on Cake).

Best regards,
Lee Jones

Cake Poker Cardroom Manager
Lee:

If you're going to represent Cake Poker and write that you are the "Cake Poker Cardroom Manager," it's probably time that you begin to answer the tough questions. If not, perhaps you should step down from these forums until you (or perhaps another representative from Cake) can begin to answer the questions and concerns in a realistic and straightforward manner.

Mason
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 02:34 AM
Quote:
Originally Posted by Mason Malmuth
Hi Everyone:

I made this post in the other thread:



Lee:

If you're going to represent Cake Poker and write that you are the "Cake Poker Cardroom Manager," it's probably time that you begin to answer the tough questions. If not, perhaps you should step down from these forums until you (or perhaps another representative from Cake) can begin to answer the questions and concerns in a realistic and straightforward manner.

Mason
Oh snap. Love this statement from M.M. It's so easy for someone under fire to avoid the tough questions on online forums. Good for you.

Last edited by Doug Lee's Shrink; 08-06-2010 at 02:37 AM. Reason: Added substance to my pithy comment.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 02:37 AM
Quote:
Originally Posted by NoahSD

...

One of our goals as a community who relies on these unregulated businesses that often have incentives that are aligned against us should be to try to better align their interests with our own. Currently, our best methods seem to be making a big stink on the internet and having a bunch of 2p2ers take their rake elsewhere until a smaller group comes back to play in the softer games. Those suck. If anyone's got a better idea, I'd love to hear it.
Some kind of honesty stance has to be taken by the poker media about the trustworthiness of online poker sites.

Bluff magazine owners for example needs to think hard before selling the front several pages of their magazine every month to UB during and after the scandal and now Cake should be on that list. Sites like pokernews needs to come out and refuse to publicize sites with known vulnerabilities, not run ads for them and pretend nothing is wrong.

cause that's where the unscrupulous sites get all their fish, and thats why some better players will go back there looking for them after the smoke clears after a 2+2 / ptr bust.

It's lousy that magazines and big poker news sites continue to do business with the scammers during and after scandals. Why should people like that be some kind of poker world spokesperson that writes mild reports and says everything is just fine to the general community?
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 02:37 AM
I think we are about to get some questions answered. That Mason.

Also, Lee Jones response about PTR is laughable.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 02:43 AM
Quote:
Originally Posted by Sawcruhteez
is there a HH that could be dug up from somewhere?
I posted it on here when it happened, though iirc it's not retrievable because their HH's are through a website and the link doesn't work anymore. It absolutely happened, though at the time I didn't think too much about it other than "lulz ruskies", I kind of just assumed he was some fish who wanted to see what I had.


Found : http://archives1.twoplustwo.com/show...e#Post11007972

Last edited by THAY3R; 08-06-2010 at 03:09 AM. Reason: lol @ the naivety
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 03:08 AM
Quote:
Originally Posted by 1outter
Can someone please post a quote of Lee saying "None of your business"?

I think he may have said it at one point, but it was in regards to how Cake is run. And in all reality, that is none of our business.
I don't think he ever used those exact words. People are paraphrasing this statement:

Quote:
Those of you who are asking for a specific time-line about the series of events leading up to this mess will be disappointed; I am not going to provide a time-line. Once the technical problem is solved, we certainly have a corporate obligation to do a post-mortem and understand what happened and how. But I don't believe we have a responsibility to share those results with the public.
I don't think anyone's really putting words in his mouth, though. That's clearly what he meant.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 03:12 AM
Quote:
Originally Posted by █████
To be clear, Lee also mentioned that when the Cereus SSL scandal broke, he asked his tech team if they had the same problem (which they had), and they assured him that they didn't.
You know, it's a serious issue that needs to be addressed but when you say stuff like this you really undermine your cause.

You're stating opinion when you say they were the same problems. Some very smart tech people have said that wasn't the case.

Stick to the facts. I think most would agree that Lee and Cake deserve that.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 03:32 AM
Quote:
Originally Posted by AdamSchwartz
You know, it's a serious issue that needs to be addressed but when you say stuff like this you really undermine your cause.

You're stating opinion when you say they were the same problems. Some very smart tech people have said that wasn't the case.

Stick to the facts. I think most would agree that Lee and Cake deserve that.
Cereus didn't have encryption. Cake didn't have encryption. They actually both used roughly the same version of non-encryption (or "encoding" or whatever you wanna call the unsecure method that they used).

Even Lee agrees with black line guy on this point:

Quote:
when the issue came up in May, I asked our software management team. They told me that we were more secure than Cereus. When this all came to light a few hours ago and they got down into the actual code, it turned out they were wrong (as one of the senior managers just admitted to me).
I guess you could get super technical and point out that they didn't use exactly the same version on fake encryption (In fact, IIRC everyone that I've talked to who understands this stuff better than I do agrees that Cake's "encoding" or whatever was worse than Cereus's because they didn't use MD5 hashing for passwords). You might be misinterpreting some posts by people who are interested in this stuff who were pointing out these small technical differences. But it's pretty much the exact same problem, and Lee has acknowledged this. As BLG said in the statement you quoted, he had previously assured people that that was not the case, though he says this is because he was given bad information.

Last edited by NoahSD; 08-06-2010 at 03:43 AM.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 03:49 AM
Quote:
Originally Posted by NoahSD
Cereus didn't have encryption. Cake didn't have encryption. They actually both used roughly the same version of non-encryption (or "encoding" or whatever you wanna call the unsecure method that they used).

Even Lee agrees with black line guy on this point:



I guess you could get super technical and point out that they didn't use exactly the same version on fake encryption (In fact, IIRC everyone that I've talked to who understands this stuff better than I do agrees that Cake's "encoding" or whatever was worse than Cereus's because they didn't use MD5 hashing for passwords). You might be misinterpreting some posts by people who are interested in this stuff who were pointing out these small technical differences. But it's pretty much the exact same problem, and Lee has acknowledged this. As BLG said in the statement you quoted, he had previously assured people that that was not the case, though he says this is because he was given bad information.
This exactly.

At the end of the day it's essentially the exact same problem (a failure to implement a secure encryption method) with Cake's issue being that much worse given that they basically had a grace period (when PTR's attention was locked onto Cereus) and still managed to disregard their customers.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 03:50 AM
Thanks for clarifying Noah, I certainly did mis-interpret what was said then.

I apologize to black line guy for my previous post and will go back to the old thread to read again.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 04:17 AM
Quote:
Originally Posted by THAY3R
Just an anecdote but :
Maybe 2-3 years ago I triple barrelled with 54s on an A73xx board. My opponent called my all in on the river with....54. I stopped playing high stakes on Cake after that.
Now that's insane. It's too bad this player wasn't looked into further at the time.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 05:07 AM
The fact that you guys really think Cakes operation is ran from a basement in Dublin is so funny. Do you think Doyles Room and many other sites would ever move to Cake if they went to a meeting in a basement in Dublin? They have four offices world wide. With about 100 employees.

Also with thousands of players playing online, I seriously doubt they would do some super user bull****. They are a multimillion dollar company. I have been a poker affiliate for 7 years now. I have met many people in their staff and they are honest people. Ok there was a security issue, but the rest of this is just ******ed. Im going to have to back them up on this one.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 05:21 AM
Quote:
Originally Posted by GOLDFLOP
The fact that you guys really think Cakes operation is ran from a basement in Dublin is so funny. Do you think Doyles Room and many other sites would ever move to Cake if they went to a meeting in a basement in Dublin? They have four offices world wide. With about 100 employees.

Also with thousands of players playing online, I seriously doubt they would do some super user bull****. They are a multimillion dollar company. I have been a poker affiliate for 7 years now. I have met many people in their staff and they are honest people. Ok there was a security issue, but the rest of this is just ******ed. Im going to have to back them up on this one.
This means a lot considering your income depends on their success.

One day they're going to release a movie about internet poker, and it's going to be hilarious when we all find out how much they stole.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 05:38 AM
Quote:
Originally Posted by ekky
I'd wager a good sum that he was offered equity in the company to go there. He had it in stars I'm pretty sure , so he would want a more substantial replication going to another company. I still dont believe in my heart that this would be enough for him to let a scam like this go on if he was aware of it, but money does strange things to people. Hope thats not the case here.
It is definitely the case (I brought this up in my first post after the announcement - equating money to the upkeep of Lee's house and lifestyle).
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 05:39 AM
Anyone who is even slightly concerned about the future of online poker should be against cake at this point.

A) They didn't shut down their site after it was announced that their security system was flawed? WTF, HOW can you justify this other then being greedy trying to get as much rake as you can from people not caring if they get cheated or not, I even got an email from cake like the day after PTR posted this... "GOLD SPREE GET YOUR FPPS THIS WEEK FOR A KAMIKAZE FREEROLL!!!" , wtf, scammers

B) Yet ANOTHER example to the media and the world that online poker IS RIGGED

C) Blaming PTR for warning people, good job man, seriously

D) I should've known tbh even when you're updating the cake poker software you still get some bull**** ms-dos screens flashing on your screen like its freaking windows95 software, wtf get some decent software designers no wonder your security system is from freaking middle ages
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 06:03 AM
Quote:
Originally Posted by GOLDFLOP
The fact that you guys really think Cakes operation is ran from a basement in Dublin is so funny. Do you think Doyles Room and many other sites would ever move to Cake if they went to a meeting in a basement in Dublin? They have four offices world wide. With about 100 employees.

Also with thousands of players playing online, I seriously doubt they would do some super user bull****. They are a multimillion dollar company. I have been a poker affiliate for 7 years now. I have met many people in their staff and they are honest people. Ok there was a security issue, but the rest of this is just ******ed. Im going to have to back them up on this one.
Many of the affiliates that have posted in these threads are also money driven, i.e. they would prefer that players continue to play - so they get their payment, as opposed to shutting the site down.

I know you put a lot of work (or not) into getting your referrals. So which is it - Money, or Player security?
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 06:06 AM
Quote:
Originally Posted by Mason Malmuth
Hi Everyone:

I made this post in the other thread:



Lee:

If you're going to represent Cake Poker and write that you are the "Cake Poker Cardroom Manager," it's probably time that you begin to answer the tough questions. If not, perhaps you should step down from these forums until you (or perhaps another representative from Cake) can begin to answer the questions and concerns in a realistic and straightforward manner.

Mason

A+ Mason


when I finally become admin, I believe I'll let Mason stick around.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 06:12 AM
Is there any reason that i maybe should Be concerned about my BR at cake?
Like them going busto and not paying out because of this story?

If it's a dumb question, sry. Just wondered
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 06:23 AM
Quote:
Originally Posted by Mason Malmuth
Hi Everyone:

I made this post in the other thread:



Lee:

If you're going to represent Cake Poker and write that you are the "Cake Poker Cardroom Manager," it's probably time that you begin to answer the tough questions. If not, perhaps you should step down from these forums until you (or perhaps another representative from Cake) can begin to answer the questions and concerns in a realistic and straightforward manner.

Mason


Mason bringing down the hammer.

+1, respect.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 06:27 AM
Quote:
Originally Posted by rabscott
Is there any reason that i maybe should Be concerned about my BR at cake?
Like them going busto and not paying out because of this story?

If it's a dumb question, sry. Just wondered
Quite frankly if they have this much disregard for not only security but also maintaining their relationship with their customers then in a nutshell - yes.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 06:40 AM
Quote:
Originally Posted by rabscott
Is there any reason that i maybe should Be concerned about my BR at cake?
Like them going busto and not paying out because of this story?

If it's a dumb question, sry. Just wondered
At this point, honestly, given how things are going I wouldn't leave much money on Cake....at all.

The situation comes down to either of these possibilities:

1. The whole Cake operation is a scam from the top down, management included.
They left a huge security hole so they could rape their players by superusing and everyone is in on it (not the most likely)

2. Management hired a tribe of evolutionarily-challenged penguins to do security on their network.
The penguins install penguin-level encryption and players get raped by:

-The penguins, who did all of this on purpose and lied to management about security levels.
-Random 10 yo hackers who saw the gaping hole in Cake's security all the way from Russia.
-No one, because the penguins are just so ******ed they didn't even take advantage of the security holes, and no one else found the leaks in Cake's security.

My choice goes to #2, and then it's pretty much a 3 way toss in terms of who got raped by whom (although I'm pretty sure there's been superusing on Cake, tbh.
Too many reports of weird things happening, and Lee's silence about how long the security holes have been present suggests that they have been in place from the beginning. Nothing else makes sense, and that's a long time for no one to have taken advantage of these holes.)

Either way, Cake handled the situation in a very poor way, no doubt because of everyone's vested interests in the company (including Lee's, of course).

There's also the fact that I think Lee is emotionally invested in the company.
It's hard to understand if you've never been involved in the full development of a project such as this, but because of the sheer amount of time and sweat you've put into it, you tend to become strongly emotionallly attached to it, and as we know as poker players, any time you start trying to make logically or ethically sound decisions using your emotions, well....you just fail.

My advice is get your money out and wait to see what happens.
I wouldn't be surprised if Cake management were just weathering the storm, waiting for things to settle so they can get their money out before the whole thing hits the ground.

Last edited by GloupnaktouK; 08-06-2010 at 06:56 AM.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 06:58 AM
Quote:
Originally Posted by FutureInsights
Many of the affiliates that have posted in these threads are also money driven, i.e. they would prefer that players continue to play - so they get their payment, as opposed to shutting the site down.

I know you put a lot of work (or not) into getting your referrals. So which is it - Money, or Player security?
I work with almost every poker room out right now, not just cake. It would not make a difference if the players that I have on cake, go to merge or where ever. I actually don't have that much rake on the cake network compared to other sites. This has nothing to do with money, I am just stating that their operation is not in a basement in Dublin and that the people I have met from Cake have been nothing but honest.

I love how you all are coming up with these allegations, apparently everyone in this thread is ignorant that it is possible for an employee to do something bad. If an employee wanted to, he could change your password go home and steal your bankroll. If any of the sites wanted to cheat, they could build it into the software and no one would ever know.

Last edited by GOLDFLOP; 08-06-2010 at 07:21 AM.
Possibly superusers on Cake -- Lee Jones responds Quote
08-06-2010 , 07:19 AM
Quote:
My advice is get your money out and wait to see what happens.
I wouldn't be surprised if Cake management were just weathering the storm, waiting for things to settle so they can get their money out before the whole thing hits the ground.
AP/UB was caught red handed super using, they are still one of the largest networks in the world. Do you think some 2p2 sticky posts and bad threads is going to mess with cake so bad that the owners will think of running with the player funds? You are highly mistaken.

Unless you are playing on insecure wireless.. and someone knows about it.. and knows how to retrieve the info.. and knows your username.. and can sit with you..
you are fine..

its like 1/10000000 that anyone ever took advantage of this.
Possibly superusers on Cake -- Lee Jones responds Quote

      
m