Open Side Menu Go to the Top
Register
Superuser Caught on GGPoker - "MoneyTaker69" Thread Superuser Caught on GGPoker - "MoneyTaker69" Thread

12-29-2023 , 09:38 AM
Hi ,

Just to SUM up things and my thoughts for what they are worth:

1. The main problem here is not the hack - he could see the EV and this is enough to know if you win or lose the hand. He did it by examining packets ... I wonder where he got this idea ;-). The main problem is the fact that GG was and still clueless about security status of their game and players. In perfectional cyber terms they lack the VISIBILITY they need to detect such things.

2. The community must demand FULL disclosure , unfortunately, I know for a fact that the pros and GG will try to burry this story , When i published my article some of the GG pros ( I will not name names , but i have the messages kept) asked me what +EV do I have from publishing such thing. I found it very strange and troubling ...

3. This player got caught thanks to the community and information sharing. If someone smart is still doing such cheats It will take a little bit more than just information sharing to catch...

These things will always happen, its almost impossible to fully protect such application. GG should disclose the full protection plan as well as what measures are being deployed on the fraud / cheat detection and why they did not work on that case.

Thanks ,
Eddie.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 09:39 AM
Quote:
Originally Posted by GGSuperUser
User "MoneyTaker69" is alleged to be superusing on GG Poker.

The Hands

The following hands were collected by various users as examples of likely foul play.






But is he supersing on Stars as well? There in the middle i can see a couple of hands played on Stars
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 09:44 AM
Quote:
Originally Posted by herbalerv
GG specifically mention the date 16th December as the date they first acted in that update ,
So they allowed players to play for two weeks on their site despite knowing their security was compromised ?
They did not know anything about that , when i published my findings they also said we knew about it for 6 months but we did not want to take action so far....

they did not know about it . They have 0 visibility and they will not admit that.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 09:48 AM
Quote:
Originally Posted by GazzyB123
Stars should find a way to accept BTC deposits ASAP. The position of king of the hill is there for the taking once more.
They'd have to work around the issue they have with deposit limits too, though. Especially for people in countries without p2p transfers. And that seems impossible with all the nonsensical regulations nowadays.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 09:48 AM
Quote:
Originally Posted by jayme87
so if he couldnt see peoples hole cards, how did he make a client that could deduce his all in equity?

I dont get it....
The ODDS are calculated at the server and sent to the client as percentages. The client does not calculate the odds. By tapping the network he could detect the percentages sent prior to card revealing
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 09:48 AM
Quote:
Originally Posted by The Etruscan
But is he supersing on Stars as well? There in the middle i can see a couple of hands played on Stars
GG hands converted to PS hands to be readable in traditional form
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 09:49 AM
Quote:
Originally Posted by Mr Spyutastic
Value bet and calling river jams w/ 6th pair. Fish on a heater!
6th pair made my day
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 09:50 AM
I dont get why online sites don't screen for biggest winners (and losers for money laundering purposes) to scrutinize their actual hand histories.

the sad thing is those that actually did not want to get caught could have known about this leak and milking the GG poker world at a more respectable hourly to just be in for the long grind.


I also wonder if this leak was possible with other clients from paradise poker to present day.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 09:51 AM
Quote:
Originally Posted by jayme87
can someone explain in laymens terms what they mean by the above statment, i dont get how he could deduce his all in equity without seeing holecards?

lets make this site burn guys.
It’s damage control. They don’t want to let everyone know they were completely compromised.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 09:52 AM
Quote:
Originally Posted by threatnasty
In addition to the observations that GG didn’t identify this problem, didn’t do anything when told about it, and was completely late to the party…

what do we make of the $29k figure?

…it seems they are only addressing part of the suspected problem. Wasn’t the mtt win worth $49k? What about all the other cash winnings on the graphs?
29k was probably just what was left in the players account for them to seize
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 09:56 AM
Quote:
Originally Posted by GazzyB123
Stars should find a way to accept BTC deposits ASAP. The position of king of the hill is there for the taking once more.
Crypto deposits are not the issue here. Main issue is that stars are trying to do everything the legal way. They do not operate in grey market areas anymore. GG on the other hand is happy to provide serivces in China and many other countries.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 09:57 AM
Quote:
Originally Posted by herbalerv
29k was probably just what was left in the players account for them to seize
Or him and his friends already made so much money fleecing a pokersite with poor security that the 29k meant next to nothing to them.

Cant wait for Negreanu to come out and say “more superusers are better”.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 09:59 AM
Quote:
Originally Posted by ppkdmilkyway
Crypto deposits are not the issue here. Main issue is that stars are trying to do everything the legal way. They do not operate in grey market areas anymore. GG on the other hand is happy to provide serivces in China and many other countries.
You're right, but how do GG get away with it?
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 10:01 AM
Quote:
Originally Posted by GazzyB123
You're right, but how do GG get away with it?
You really expect a breakdown on international law?

They probably just give the right politcians a cut so they dont go after them.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 10:01 AM
Quote:
Originally Posted by EddieKing
The ODDS are calculated at the server and sent to the client as percentages. The client does not calculate the odds. By tapping the network he could detect the percentages sent prior to card revealing
thanks, makes sense now, thanks for the article you put out almost a year ago that didnt get any traction, i did read it but im too stupid to understand any of it at the time and i guess it was passed off as a nothing even though it was an everything.

if its happening on gg poker, im scared to think what might be happening on unregulated sites...

we need a site for the people, built by the people!!!!
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 10:02 AM
Quote:
Originally Posted by GazzyB123
You're right, but how do GG get away with it?
Because of the addicted players.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 10:04 AM
its hilarious 20k still running after this flaw... i wouldnt even fire 2nl out of principle now. i hope we can boycott this sector, we need to make it ours, **** the governments!
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 10:09 AM
Quote:
Originally Posted by ppkdmilkyway
Crypto deposits are not the issue here. Main issue is that stars are trying to do everything the legal way. They do not operate in grey market areas anymore. GG on the other hand is happy to provide serivces in China and many other countries.
Very true along with what I said above with ridiculous deposit limits players have. The worst part is that these regulations do a lot more to hurt players than help, both in the crypto space and with poker. It's just dumb.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 10:17 AM
Quote:
Originally Posted by GazzyB123
You're right, but how do GG get away with it?
1) Bribery happens everyday.
2) High stake poker players and majority of poker players in general are pretty naïve and stupid outside of being good-great at poker. Just gotta look at their worldly views on any given topic not poker strategy or related to see this.

Also there's a lot of Dnegs cucks out there. So GG easily gets away with it.

EDIT: As of posting this edit currently almost 300k online playing at GG. Majority of poker players are outright morons.

Cheers!!!

Last edited by hardongear; 12-29-2023 at 10:42 AM.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 10:18 AM
Quote:
Originally Posted by DoyleandIvey
They got 29k, if that's the total or if they're going to pay part of what they've already withdrawn... although this situation is very serious, it's something that can happen and DOES happen on any site, and much worse are the situations that nobody catches.

It's happened in banks and crypto currencies exchanges...
Every day there are people being scammed or cheated in institutions that are far more "respectable" than poker sites

Congratulations and thanks to all those who made it possible to identify this situation
Saying that this "DOES happen on every site" is pretty absurd, as if there's not a one huge site out there who takes their security and game integrity as serious as possible.

Even if you assume these security/software leaks are always somehow possible (which I doubt), to think that stars internal game security team wouldn't notice something as obvious as someone with a huge VPIP having an astronomical winrate and identify and minimize the issue themselves quickly, then you don't understand how serious of a security team they have. GG would have never done a single thing if regs didn't identify the problem AND post about it publicly. There's a huge difference there. One site cares about this stuff (a lot) and one obviously doesn't give a ****.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 10:18 AM
Quote:
Originally Posted by EddieKing
Hi All ,

My Name is Eddie Harari and I am the one wrote the article on GG networking security hole:

https://cardplayerlifestyle.com/ggne...-player-names/

I had a few meetings with technical people from GG team and i have sent them email about the ability to view hole cards in certain conditions ( I had the ability to see hole cards in NEAR real time ).

I also told GG about the possibility about such incident and I was more concerned about the fact that they are not monitoring the action as they claim to do, I also offered to help them with real data monitoring and RTA detection.

Their response was: Thank you but we know what we are doing , they were more concerned about fishing sites then discovering cheaters in the software.

I think it is very likely that this "hack" is one of two options:

1. Superuser like activity - GG networking has a "back-door" to view hole cards in real time.
2. Race condition in the Craft interface - Viewing live cards of all the players via the CRAFT interface.

I have sent GG networking a proof of concept where i can view cards about 5 seconds after the hand is over / this includes hole cards of all players (even the people who mucked) I also told them that I suspect that given a little time and research I may gain the ability to beat the 5 seconds and see the hole cards in real time.

GG dismissed my claims and told me they are monitoring all players and such incident can't happen on their site.
Great article and LMAO at GG's response. This is a huge issue in itself (regardless of this superuser and whether his hack/cheat is related to the same issue) and the fact that GG brush it off is ludicrous. With this its extremely easy to cheat almost anyone who isnt cyber security savvy by targeting their router/network.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 10:19 AM
Quote:
Originally Posted by EddieKing
The ODDS are calculated at the server and sent to the client as percentages. The client does not calculate the odds. By tapping the network he could detect the percentages sent prior to card revealing
Every smart poker client out there calculates the all-in odds client side.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 10:19 AM
So he binks a tourney for 46k, than wins thousands of hands he shouldn't have gg's response to this all is "we were only able to confiscate 29k so thats all your getting back guys". Are we supposed to believe that only 1 out of 7 billion people and Eddie found this exploit? They are paying shills like Negraenu millions of dollars yet they can't reimburse the players effected properly? I mean this is ultimatebetx2 exactly unravelling. Have someone cheating, do damage control, minimize and downplay the cheating, and don't reimburse players fully. There was only 1 player who blatanly was obviously cheating, imagine the people who have common sense and can mask it and have common sense to only win 20bb/100 or just bink 1 big tourney per account? No 3rd party investigation no nothing, just a weak ass statement and a push to sweep everything under the rug, shows how they conduct business at GGpoker.
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote
12-29-2023 , 10:22 AM
Quote:
Originally Posted by EddieKing
Hi ,

Just to SUM up things and my thoughts for what they are worth:

1. The main problem here is not the hack - he could see the EV and this is enough to know if you win or lose the hand. He did it by examining packets ... I wonder where he got this idea ;-). The main problem is the fact that GG was and still clueless about security status of their game and players. In perfectional cyber terms they lack the VISIBILITY they need to detect such things.

2. The community must demand FULL disclosure , unfortunately, I know for a fact that the pros and GG will try to burry this story , When i published my article some of the GG pros ( I will not name names , but i have the messages kept) asked me what +EV do I have from publishing such thing. I found it very strange and troubling ...

3. This player got caught thanks to the community and information sharing. If someone smart is still doing such cheats It will take a little bit more than just information sharing to catch...

These things will always happen, its almost impossible to fully protect such application. GG should disclose the full protection plan as well as what measures are being deployed on the fraud / cheat detection and why they did not work on that case.

Thanks ,
Eddie.

Nice write up. Two questions:

1. Do you think the system pokerstars has in place is better?

2. Why do you note name the players?
Superuser Caught on GGPoker - "MoneyTaker69" Thread Quote

      
m