Absolute Poker Network Encryption Vulnerability

[SacEvil777]

he sounds like tom dwan at times, CHEATER

[ndid3]

@TBKV hmm...are u serious ? how can they detect what i'm doing with my computer lol ? and what webpages i'm browsing

[pawppy]

what about when having a cable internet network in your neighbourhood. someone could track those packets if he has access to the hub or even the isp servers right? if so could you track at which stake you get dealt a hand on let's say PokerStars? meaning if it would be possible to sniff the cable connection or maybe even listen from the isp and you would have 1 table of 5/10$ and 11 tables of 0.01/0.02c$ could you track what holecards you get dealt just at the 5/10 table?

[beardgcqc]

Got huge $600? poker deposit bonus by using this Fulltilt poker bonus code POKERDEAL14

[cupidityolfactoryk]

PKR online poker $800 sign up bonus code DEAL14

[inductorhjbjdm]

If you use fulltilt referral code POKERDEAL14 you will get $600 Free bonus!!

[brocktherock68]

Wow you are going to cheat everyone by knowing your own hole cards! powerful information there buddy! try making your sniffer show their cards idiot.

[simonjeste]

@brocktherock68 brock... pay attention to what is said at the start of the video.

The server only sends him HIS hole card information -- which should ONLY be understood by the poker client application. Instead, it is sent almost "clear text" over the internet, which means ANYONE who is tapped into the network stream could simply XOR the text contents and see the information, including the hole cards. Someone at his ISP could even do it -- if they knew his IP, and knew how to tap the stream.

[pawppy]

@simonjeste k so what if you open 1 table of 25/50$ and 11 tables of 1c/2c could you track what hand you get dealt at the 25/50 hand specifically? on PokerStars for example?

[simonjeste]

@pawppy on Pokerstars/FullTilt etc. they encrypt the data, so it looks like *&^@*&#$@JHKJFHDFHDO*&ZX^&%!11­2764 gobbledygook (unless you have the key to decrypt it).

But on Absolute Joker, apparently it was sent as "free text" and probably also contained the identifying information for Player and Table Name/Number, since that would be needed by the poker site's client software.

The issue is that the data (whatever it contained!) was not encrypted once it gets to your home computer :(

[Rodney21a]

This site is still in business? Why?

[squarerabbits]

Do people cheat on pokerstars and full tilt?

[Carlp]

@squarerabbits

No, the big sites are safe. Its tested regularly and its not possible to cheat on stars or full tilt.

[Syrnion]

the only realistic way for this to happen is if you are on the same local area network or WiFi network as the person you are playing against. Once the data goes past your ISP it is just one of BILLIONS of data transactions and realistically imposable to catch and use. Now that dose not mean your neighbor or fellow poker buddy is not exploiting this to cheat. So it is something to address, but it is nothing likely to be exploited in any large scale.

[dealace1]

After their last public lack of security scandal Cereus promised independent security reviews.We can only conclude that they did not in fact engage in a truely independent software security audit, or they chose to dismiss the findings.

It's just not reasonable to conclude that an actual audit missed looking at the client server encryption technique. In fact they should be able to sue the 3rd party company if in fact they missed it.

Crooked from the top down!

[illjustice]

Only sites safe to play at would be poker stars and full tilt poker, all others I wouldn't feel safe using.

[sicksickstan]

great exposing this

[m4rkyboy]

AP and UB had already lost all their credibility-and now this!I guess this means they have now moved from having zero credibility to being in the - negative credibility region.Why would anyone still play there?I mean,they have went beyond 0 and into whole new territories.i would say this is unprecedented,but.....

[Martinblack187]

i nedd this software dudes! where can i find it?

:-D

[PocketTits]

Great job. Online poker community FTW.

[ak2304]

LOL @ this shitty, scamming site. Die UB/AP!!!

[bradfordcity1980]

ok so we got to see your cards what about the other people on the hand?

[18000rpm]

@bradfordcity1980 other players hole cards are not sent to your network. The point is if I can tap into the network ANYWHERE between your computer and the AP server, I can in theory see your hole cards.

[simonjeste]

@18000rpm BROCK should read this response!

[thirdfloorview]

Wow! Great video guys. I'm glad someone is standing up in the online poker world!!

[CautionCU]

Cereus is rigged. Proven cheaters and now proven to still have security flaws.