Superuser Caught on GGPoker - "MoneyTaker69" Thread - Page 7 - Poker News

OP: Well done for exposing this.

GG: Your security is shockingly bad in the context of the size of your business and the level of rake charged. Also, your statement after the event lacks honesty and transparency.

Money Taker: The way you played shows me that you don't have the brains to have created the cheat. That means at least one other person knows the method.

It seems very likely that others are using this and related methods to cheat. Those with half a brain could take out large $$$ without detection.

Quote

12-29-2023 , 10:56 AM

#152

CmonSon

adept

Join Date: Sep 2010 Posts: 789

I am glad they had a quick turn around and atleast explained how it was exploited.

Choice of the name is def a troll to the hacker group and makes us wonder even more what we dont know.

Big kudos to the community helping to bring awareness.

Quote

12-29-2023 , 11:06 AM

#153

jayme87

veteran

Join Date: Apr 2010 Posts: 3,496

Quote:

Originally Posted by raidalot

this is exactly what i am thinking... dont understand linus barak ect sat at 20-40k with no qualms,, too rich or too stupid to care?

Quote

12-29-2023 , 11:13 AM

#154

ten25

adept

Join Date: Feb 2012 Posts: 1,093

Perfect example of why nobody should play at sites (or live rooms to a bit lesser extent) who only care about how much they rake (Preflop rake too … WTF), and attracting new players so they can rake even more.

That was pretty obvious about GGPoker with all the threads about low or nonexistent win rates.

Companies that incentivize short term profits instead of having a long term game plan cut corners.

Quote

12-29-2023 , 11:15 AM

#155

Vronge

enthusiast

Join Date: Jul 2019 Posts: 71

Watched 2 minutes of a Charlie Carrel video on this and he says "I'm sure GG is gonna be ON this, they have hundreds of people working for them, they really take this stuff seriously".

Riiiiiight

Their shills already out in full force trying to control the narrative.

Quote

12-29-2023 , 11:17 AM

#156

p0ker_n00b

veteran

Join Date: Jul 2013 Posts: 2,264

Quote:

Originally Posted by GazzyB123

Stars should find a way to accept BTC deposits ASAP. The position of king of the hill is there for the taking once more.

Thats assuming the stars team understands that being at the top of the hill is an advantage. I tend to believe they believe it more of a strategical advantage to stand at the bottom and be fired upon from above.

+100 points to team Malmuth. Epic trolling sir. You had me going for a bit.

Quote

12-29-2023 , 11:25 AM

#157

bigleanmandarin

stranger

Join Date: Dec 2023 Posts: 6

Guys, please check this out:

https://forumserver.twoplustwo.com/2.../#post58393040

Quote

12-29-2023 , 12:00 PM

#158

Harmonica

journeyman

Join Date: Jan 2005 Posts: 269

Quote:

Originally Posted by GazzyB123

You're right, but how do GG get away with it?

The benefit of being a private company, even if Stars accepted BTC deposits would change **** all, because they would still only operate in jurisdictions in there tos.

Quote

12-29-2023 , 12:01 PM

#159

WehrmatsWormhat

journeyman

Join Date: May 2017 Posts: 353

Quote:

Originally Posted by Vronge

This has been the strategy all along. They care way more about PR than actually fixing the issue and stopping cheating.

Quote

12-29-2023 , 12:03 PM

#160

TripleBerryJam

grinder

Join Date: Oct 2023 Posts: 470

Quote:

Originally Posted by MicroDonkYT

It’s damage control. They don’t want to let everyone know they were completely compromised.

Anyone on Windows who knew about the exploit was able to see their current equity. Sounds like the games were "completely comprised" to me.

Quote

12-29-2023 , 12:08 PM

#161

checkraisdraw

veteran

Join Date: Jun 2018 Posts: 2,882

GG admits it happened but won’t commit to an independent investigation? Something is fishy here. If I had money on the site I would withdraw immediately.

Quote

12-29-2023 , 12:09 PM

#162

POKER0123456789

stranger

Join Date: Dec 2023 Posts: 2

I've just read it.
Gosh! This is very serious

Quote

12-29-2023 , 12:09 PM

#163

LimpDitka

Pooh-Bah

Join Date: Jun 2010 Posts: 4,024

Curious to see what GG ambassador Mr. Daniel Negreanu has to say. Will it be similar to when PokerStars started charging more rake? Ie. More superusers are good for the game...?

Quote

12-29-2023 , 12:10 PM

#164

p0ker_n00b

veteran

Join Date: Jul 2013 Posts: 2,264

Quote:

Originally Posted by EddieKing

I had a few meetings with technical people from GG team and i have sent them email about the ability to view hole cards in certain conditions ( I had the ability to see hole cards in NEAR real time ).

I have sent GG networking a proof of concept where i can view cards about 5 seconds after the hand is over / this includes hole cards of all players (even the people who mucked) I also told them that I suspect that given a little time and research I may gain the ability to beat the 5 seconds and see the hole cards in real time.

hi boss

if Im reading this correctly arent you saying that even you couldnt figure out a way to view in real time? (without further research or w/e?)

makes me wonder how wide spread super user could be then

if one person discovers the hack, some highly advanced technical guy, could he hit up other players and sell the hack in some software form to others en masse?

or would it be contained to a highly rare specific case of one guy who cant share the hack?

Quote

12-29-2023 , 12:16 PM

#165

ScotchOnDaRocks

Carpal \'Tunnel

Join Date: May 2015 Posts: 7,200

Quote:

Originally Posted by Vronge

Not sure which part isn’t true

GG going to be on this - one way or another, check

Hundreds of people working for them - check

They take this stuff seriously- why wouldn’t they, check

Not sure what he is supposed to say. As far as working for GG poker, I’m not sure a Snow White pure good company exists in this world

Quote

12-29-2023 , 12:17 PM

#166

GazzyB123

Pooh-Bah

Join Date: Jan 2012 Posts: 5,968

Quote:

Originally Posted by LimpDitka

Curious to see what GG ambassador Mr. Daniel Negreanu has to say. Will it be similar to when PokerStars started charging more rake? Ie. More superusers are good for the game...?

He will lie in bed and do podcasts telling us how it's a good thing while lying to the players and telling them he's on their side and he totally might resign

Quote

12-29-2023 , 12:26 PM

#167

diva_esq

stranger

Join Date: Nov 2023 Posts: 4

So many security flaws in the GG design:

1. Calculating all-in equity prior to all-in state;
2. Communicating all-in equity to client prior to all-in state;
3. Communicating all-in equity in unencrypted format;
4. Failing to force security updates to client before allowing further play;
5. Concealing a known vulnerability from users even after it was apparent that it was known and exploited;
6. Failing to conduct regular audits of accounts with extreme variance

I’m sure there are others to add to the list but GG’s response is wholly inadequate to address these problems.

Quote

12-29-2023 , 12:29 PM

#168

420legalize420

centurion

Join Date: Dec 2019 Posts: 123

MoneyTaker is just a legend of online poker like Mike Postle was on live poker.

They both use a very unique strategy based on pure intuition.
Its something a common human can´t understand, its a gift from the poker gods.

Quote

12-29-2023 , 12:34 PM

#169

diva_esq

stranger

Join Date: Nov 2023 Posts: 4

Quote:

Originally Posted by botornot

Every smart poker client out there calculates the all-in odds client side.

This is plainly incorrect. Calculating all-in equity requires knowledge of at least all hole cards still in play and it is definitely against any notion of basic poker security to expose hole card data of one player to another prior to completion of the hand. This should never be done client side.

Quote

12-29-2023 , 12:36 PM

#170

paulcastellano

stranger

Join Date: Oct 2022 Posts: 9

|I just got 60 bucks from it

probably it doesnt include tournaments yet since I made a deep run on the 150 he got 1st

Quote

12-29-2023 , 12:44 PM

#171

TheOneBeer

enthusiast

Join Date: Feb 2017 Posts: 69

Quote:

Originally Posted by Anonimi

No this is incorrect. All in equity displayed in poker clients does not take unknown hole cards into account.

You can see this from when people published pokerstars cashout feature being +ev when after paying the fee because all in equity used for cash out does not take cards people folded into account.

How can Moneytaker see the all in equity he has against someone else, without a calculation, that most likely include the hole cards before the hands are revealed?

Quote

12-29-2023 , 12:50 PM

#172

Anonimi

journeyman

Join Date: Jan 2019 Posts: 223

Quote:

Originally Posted by TheOneBeer

How can Moneytaker see the all in equity he has against someone else, without a calculation, that most likely include the hole cards before the hands are revealed?

Because obviously on gg this calculation is done on the server and not in the client. Then it was shared to the client before it was needed. This is the exploit they claim was used.

Quote

12-29-2023 , 12:54 PM

#173

Atarirob

veteran

Join Date: May 2005 Posts: 2,597

GGPoker will be fine. An apology, maybe some smoothing over from Daniel, and it's the same as it ever was. Ultimate Bet was still going after the scandal, they changed their name to UB, paid off a few players to sell their soul to sponsor the site, and was still the 3rd-4th place site until Black Friday.

Quote

12-29-2023 , 12:55 PM

#174

_billyjex_

stranger

Join Date: Sep 2023 Posts: 11

The most remarkable thing to me is that they knew this was an exploit up to two weeks ago, yet they clearly don't have the capability to go through their databases to see anomalys, such as absurdly high win rates coupled with extremely high VPIPs, to verify if the issue has been/is being exploited.