Thursday, 6 May 2010

Absolute/Ultimate Bet Security Flaw Found (Again!)

Masters of always being in the press for the wrong reasons, Ultimate Bet and Absolute Poker were hit once again. This time it is the shocking revelation that they do not have SSL (or similar) encryption on their gaming software connections. So we can honestly say they learned nothing of substance from the Potripper scandal and the fact they had massive holes in their security all those years ago.

Do we need to panic? Well PokerTableRatings expert thinks not:

We have no way of knowing if this exploit has been discovered and used to steal from Cereus users, but it seems unlikely. It is our hope that this information will allow Cereus users to protect themselves.

The issue in general terms is that rather than using industry standard SSL encryption Cereus has used a custom form of encoding (not encryption) which can be cracked using the windows calculator.
Poker Table Ratings Blog




So in summary it seems not the easiest flaw to exploit but one that for a brand that has brought so much shame to the Poker industry with it's failings is surely unforgivable.

I wonder how many more times the alarm bell has to ring before the greedy amongst the poker players online realise guys like UB and AP are bad for the game in the long run and short term support for them is very damaging to the future of online poker. Of course those stupid enough to be both an informed regular and playing on UB/AP proves there is plenty of dead money in the poker world for a long time to come.

No comments:

Post a Comment