PDA

View Full Version : How would one cheat at online poker? (Party) (long)


Exsubmariner
06-08-2005, 08:25 AM
From the party website... [ QUOTE ]
Because the numbers the RNG generates are completely random, both the player and the online poker room are assured of complete fairness.

PartyPoker.com uses a secure RNG (SHA-1 cryptographic hash algorithm) implemented by SUN which is cryptographically certified. SUN's SeedGenerator class generates the initial seed. The seed is produced by counting the number of times the VM manages to loop in a given period.The samples are translated using a permutation (s-box) and then XORed together. This process is non linear and prevents the samples from "averaging out".

The s-box is designed to have even statistical distribution. A number of sleeper threads are also created which add entropy to the system by keeping the scheduler busy.These are gathered in the background by a daemon thread thus allowing the system to continue performing it's different activities, which in turn add entropy to the random seed.The class also gathers miscellaneous system information, some machine dependent, some not.

This updated seed is then used for dealing cards during each card dealing round. Cards in all subsequent hands will be dealt using a seed which is completely random and which is completely unrelated to the seed used to deal the previous hands of cards, thus ensuring total randomness and hence, complete fairness.


[/ QUOTE ]

I have been reading 2+2 for some time now. In that time, I have heard numerous bad beat stories, stories of epic downswings & bad runs where everything always goes wrong. These things make players question themselves, their strategy, probability theory, and the fairness of the game.
I myself have dealt with numerous 10K+ hand downswings in the 300K or so hands I have logged in my databases. There are lots of things that can go wrong riding the waves of probability. You can miss your draws an inordinate number of times, your opponents can make theirs an inordinate number of times, you can get every AA-JJ cracked everytime you have them, you can go long spells without getting a playable hand. Every online poker player goes through this very same thing. I sometimes wonder with the streaks being what they are, how would one do this live? A losing streak of 10K hands at 50 hands an hour could take months to play out, but that's a different post.
As you might suspect, I am in the midst of one of those 10K hand downswings, so I am naturally asking myself questions. I have pretty much dismissed the idea that things are rigged against me. I have come to believe in luck, to some degree, in that one can make his own luck by being prepared to exploit opportunity when it arises, but the opposite can manifest itself when the universe presents no opportunity or turns every one sour. That leaves cheating. I have never really delved into the exercise of learning how one would go about cheating at online poker.
I have seen a few postings refering to the incident that happened at Planet Poker sometime back. I do not have the links, but know the material is out there if one searches google. I seem to recall that a group of software engineers hacked the psuedoRNG algorithm being used by the software and by sharing their hole cards with one another were able to, by process of elimination determine the shuffle of the cards and therefore what their opponents held and the remaining cards to come. Planet Poker is no longer the premiere site on the net for poker, Party is, making them the biggest target, so I got to thinking specifically about them.
Of course, the easiest method of cheating at any form of poker is collusion and signaling. Matador placing his chips so that he could communicate with his cohorts. The online equivalent to this would be IMs. OF course this isn't that hard to spot from a poker site's stand point. All you have to do is look for accounts that play together over and over and consistent betting patterns between them. Not hard at all. This leaves hacking the software.
From what I read on Party's website, I was left with the impression that the algorithm they use will determine a deal for a specific game, then deal the cards out to that game in sequence. If the shuffle of the cards is determined before a game is dealt, this must mean that that information is stored in a log or memory location somewhere. That could be read. Alternatively, if the deal is simply another card excluding the cards already dealt, then one could concievably copy the clock and the seed generator, sync the two, and know what was coming. The cards dealt to the opponents, if you knew their IP's could be intecepted and decrypted using the cypher already present in the program. I have even heard conjecture out there that opponents screens could be read, revealing their cards.
The above is just my vague conception of how I might approach the problem if I had the know how to attempt to do so. I don't. I am speaking a little above my level of understanding about how things work in the world of computers and the internet. I am hoping to incite some discussion as to what might be possible to do given the knowledge and resources. The motivation (money) is certainly present. I seriously think that one team of programmers can be out thunk by a team of motivated hackers and am not confident that they would even be able to know it. How good is Anurag Dikshit at what he does?
If you could crack the algorithms, copy the RNG and sync with it, you could even couple that with a bot and you would have an unstoppable money vacuum. I'm not saying this has been done. But I can think of it, and that means that someone somewhere with more know how about how to go about it than me has also thought about it. I find that somewhat unsettling.
Discussions? Wrinkle my brain please.
X

HesseJam
06-08-2005, 09:00 AM
[ QUOTE ]

If you could crack the algorithms, copy the RNG and sync with it, you could even couple that with a bot and you would have an unstoppable money vacuum.

[/ QUOTE ]

Even if you had the algorithm you would still not know the independent variables the algorithm uses (like Party's main server system clock)

Exsubmariner
06-08-2005, 09:15 AM
Would these things really be that impossible to know/ discover/copy?

Sifmole
06-08-2005, 09:56 AM
If done right, yeah pretty much.

BlueBear
06-08-2005, 10:57 AM
Even if you knew the entire algorithm, it is impossible to beat the RNG as it obtains "entropy" (disorder) from external sources such as user mouse movements, and other sources.

Overdrive
06-08-2005, 11:35 AM
I cheat by playing quality cards, staying away from baby pairs; except if I can see the flop cheaply like in the BB or SB. I stay away from the stupid connecters - some people call them suited connecters - except for the good ones like AKs, and the like. I also don't chase on the flop. This method of cheating works great for me on-line and I have also found that this method works just as well in a B&M or a home game.

itsmarty
06-08-2005, 11:49 AM
</font><blockquote><font class="small">In Antwort auf:</font><hr />
If you could crack the algorithms

[/ QUOTE ]

The algorithm in use (SHA-1) was broken in February of this year. I'll explain the technical aspects at the end of this message, after the layman's version:

The reason this is not a problem is because SHA-1 is a one-way hash, meaning you can make a hash from a message but not a message from a hash. Breaking it in the way it was broken only affects it's use in situations where the same hash is used over and over (website security certificates, for example) and there is plenty of time to break it.

In situations like you have with online gambling's use of SHA-1, where a new hash is computed for each hand, there's no time to break it before it's discarded and a new hash is generated for the next hand.

Now the technical part of breaking the hash: Hashes, as mentioned above, are one way. This distinguishes them from what most people think of when they consider encryption, where you use some form of "substitute A for B and C for D", and once you break the code you can instantly decrypt any message created with it.

Because hashes have a limited size (SHA-1 produces up to 160 bits) and an unlimited number of different messages could be encrypted, there will always be 'collisions', a situation where two distinct messages have identical hashes.

Hashes are broken if you can show that they're not one way (a drastic failure, and NOT the case for SHA-1), or if you can find a collision in less than the expected number of tries.

In SHA-1's case, that expected number was 2**80. It turned out to be 2**69 (2,000 times faster), still not fast enough (by an incredibly wide margin) to be a problem for hashes created and discarded as quickly as a hand of poker is played.

It's not actually a problem for any use of SHA-1 at the moment. It's just a signal that it's time to develop a new hash.

Martin

Exsubmariner
06-08-2005, 11:49 AM
LOL,
That would be that bot program weaktightrock, son of saabpo.
X

Jurollo
06-08-2005, 11:53 AM
Ask PITTM how he did.
~Justin

Exsubmariner
06-08-2005, 12:05 PM
Wow,
Thank you for the detailed reply. I did not know about the SHA-1 hash being broken.
What is your opinion about someone's potential ability to see other player's hole cards?
X

krimson
06-08-2005, 12:43 PM
I'm not saying this is impossible, but I think it's pretty absurd to think there are people cheating at everyday poker games.

Let's say in theory I had a program to see all the hole and board cards and always knew whether I would win the hand or not at the start of the hand. Is it better for me to do this for 5 hours a day at 5/10 and increase my risk of being caught (and increase the risk even further by getting a bot to do this), or to take quick stabs at 30/60 or high buy-in sng games to quickly make large sums of money. Since you have less hands for the site to analyze there is less way for them to pin you for cheating, and not that you just had a good run of cards.


With this in mind, there is no reason to believe people are cheating the small stakes games, and even if someone was cheating at 30/60, I wouldn't imagine they would be there very long.

sourbeaver
06-08-2005, 01:05 PM
Algowhat ?
Partywho ?

Ask the cheat spammers on Party, they've done it weeks ago !

PITTM
06-08-2005, 02:10 PM
you going for funny or boring at this point? kind of a yawnfest...

rj

kapw7
06-08-2005, 02:32 PM
Just accept that Party is rigged. If you win all the times with your superior play then someone has to lose. And that will be the novice player. Party just gives him a second chance. If he loses his money fast he'll pay less rake (and if you make your money fast you'll pay less rake too) and won't come back. He'll go to another site where he can make his gutshot on the river.

More seriously I have no idea if it is rigged. But I find it WAY more likely than your cheaters scenario.

itsmarty
06-08-2005, 02:36 PM
You're welcome.

Regarding people seeing your hole cards: Malicious programs that allow people to completely take over your computer have existed for quite some time, so that's a possibility. It's about the last one you have to worry about, but a possibility /images/graemlins/smile.gif

If your computer were to be taken over, there are two more likely outcomes. One, your computer becomes part of a bot-net (having nothing to do with poker playing bots), which is then used for extortion. This has the "shear a sheep many times" benefit of consistently generating profit with no further effort. Two, they steal your passwords and loot your accounts (poker and otherwise). This is killing the sheep, but it's a quick score.

Contrast that with having to play poker against people to get the money by watching their screens. This is slow, it requires interaction for each relatively small amount of gain, and it's unreliable (how many computers would you have to infect before getting someone with a decent bankroll who would be playing the limits you want at the time you want?)

In other words, don't sweat it.

Martin

utmt40
06-08-2005, 04:09 PM
http://cheat-poker.net

aeakos
06-08-2005, 04:20 PM
That picture showing "revealed" hole cards has one major issue...there are 2 7 spades. /images/graemlins/blush.gif

I guess someone stupid enough to buy poker cheating software wouldn't notice that bad photoshop work.

Now if only party would do something about those damn spam ads.

BreakEvenPlayer
06-08-2005, 04:26 PM
If you spent your time learning how to become a better poker player rather than wasting it trying to find any way to push the blame from yourself onto others we wouldn't have to put up with your nonsense.

utmt40
06-08-2005, 04:55 PM
I noticed that too but wasnt going to point it out. LOL

Exsubmariner
06-08-2005, 06:14 PM
I don't think that position is an unreasonable one. Thanks for contributing.
X

Exsubmariner
06-08-2005, 06:18 PM
Thanks. I think you are right, there are probably more efficient ways to steal my money with a computer. I'm glad you responded. Sometimes the zoo is worthwhile.
X

Exsubmariner
06-08-2005, 06:18 PM
I'm sorry the pimp beat your mother when you lost his money playing me.
X

Rick Nebiolo
06-10-2005, 04:42 AM
Exsubmariner,

The Planet Poker shuffling algorithm was posted on their website and it only provided a small subset of all possible hands. They also only used only one seed, and if my memory serves me it was some sort of offset from GMT. In some other recent thread I'm too tired to search for I mentioned I received a refund of several hundred dollars.

Anyway, interesting post and responses.

Regards,

Rick

archmagi
06-10-2005, 07:43 AM
[ QUOTE ]
LOL,
That would be that bot program weaktightrock, son of saabpo.
X

[/ QUOTE ]
/images/graemlins/laugh.gif