Poker-AI.org

iPoker announced new HTML5 apps.

Is HTML5 support to collect information about my computer id?

It would be a pretty big security issue if any website could get your computer ID. However, they can get other fingerprints, like browser type/version, OS, IP, etc.

I applaud them for taking the net step in development. These days it's kind of silly to have to install an OS specific application to play a game like poker.

These can be easily spoofed.

In fact there's nothing you can't spoof in a browser based app, so I'm really curious what are they going to do with security.

I don't think they're too concerned with bots, which is an enlightened perspective, IMO.

I know for a fact they don't care about detecting bots as much as other sites. However, they do listen to other players that complain and might start an investigation based on that.
Having said that, HTML5 would be a great interface.

Coupled with Selenium http://docs.seleniumhq.org/ botting just became a piece of cake!

_________________
Cheers.

Interesting. Has anybody looked at the iPoker web app? Are they recording things like mouse click location?

They have not released it. Please wait.

@pokerfuse

Do you think that ID ban is effective measure?

What do you mean by ID ban?

ban by hardware ID.

That kind of information isn't sent via browser.

And even if it was, as I said earlier - there's nothing you can't spoof via browser based requests

you got me wrong.

Your quote:
What do they do with the security of the download client? — collect data about IP, hardware ID, but ban by hardware ID is an inefficient measure. Maybe, they started developing html5 applications, because they know it.

Sorry, I still don't follow you.

I always assumed that they way it works now is they simply ban the account, not caring about either IP or hardware ID (whatever that is - MAC? Motherboard signature?).

Assuming you have a winning bot you need valid CC to withdraw to, they ban your account - they ban your CC info.
I'm not sure about you, but I don't have that many friends I'd trust with my bot winnings on their CC, so I have 2, maybe 3 attempts before CC info ban means permanent ban for me, even if I can create a new account to play on..

They ban by IP and hardware ID for serious violations, such as СС fraud, chipdumping, etc. In other cases, it is a simple ban the account. They have a tool to detect your hardware ID.


IPv4 provides approximately 4.294 billion addresses. The world population, as of today, 7.082 billion. People is 1.65 times larger than of IP-addresses. I like that comparison. Get a new IP several times lighter than the new man.

CС is not the only deposit/withdraw method.

They still require valid personal information though, especially if you're going to withdraw on a regular basis, be it CC or bitcoin.
Do you have unlimited people you can trust and who are willing to cover for you with their personal info?

I don't get your IP analogy, with a click of a button I can purchase thousands of IP adresses for ~ $2-3 / month per IP. Not even black market, AWS. Can probably get cheaper from black market..

no, I'm creating a new pepole.

Someone should be to start selling people for $1.2 — $1.8 per unit (IP price/1.65).

So you're forging fake identities? Good luck with that!

I still don't get your IP talk. I really try, I have deep respect for members of this community and I think every contributor is a really smart person, but...
No offense, I just can't read it without cringing all the time. It feels like you're trying to make some statement, but you don't have a firm grasp of the topic, so it makes no sense...

Just a couple of things:

* 7 billion people != 7 billion IP users, it really boggles my mind you think there's a situation where it can be. Babies, grandmas, families using same connection, 3-rd world countries...
* Multiple people can connect through same IP. Some providers connect whole neibhourhoods via single IP
* IPv6...

ohhh... we strayed from the main topic

Why do you ask "what are they going to do with security"? I would like to say that there is not much difference in terms of safety between the download client and html5 client.

My analogy with IP should be seen as a joke. A rare things is more expensive, usually. IP is a rarer things than a people, but it is more expensive.

There's a huge difference between desktop client and in-browser app..

They can't scan memory, can't scan running processes, can't scan filesystem, can't track mouse movements, can't generate hardware IDs, can't detect VPN, can't detect VM.
Heck, they can't even detect if browser is headless, which means there's potential for serious bot farms on relatively cheap VDS.

that's all only need to detect bots. Bot is not the main cause for concern. It's not work against СС scammers. Get rid of the CC scammers of their main task.