When Random Isn't Random Enough: Lessons from an Online Poker Exploit
lauradhamilton.com
When Random Isn't Random Enough: Lessons from an Online Poker Exploit
1–10 of 90 posts
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#2This is one of those times you'd really want to use an actual random number generator, rather than a pseudo-random number generator.
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#3C:\TAD\Text\BIBLE.TXT
bundance without weight; 22:4 Also cedar trees in abundance: for the Zidonians and they of Tyre brought much cedar wood to David.
22:5 And David said, Solomon my son is young and tender, and the house that is to be builded for the LORD must be exceeding magnifical, of fame and of glory throughout all countries: I will therefore now make preparation for it. So David prepared abundantly before his death.
22:6 Then he called for Solomon his son, and charged him to build an house for the LORD God of Israel.
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#4This is one of those times you'd really want to use an actual random number generator, rather than a pseudo-random number generator.
PRNG would be fine if you could ensure that there's no leakage or reversible information.
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#5This is one of those times you'd really want to use an actual random number generator, rather than a pseudo-random number generator.
PRNG would be fine if you could ensure that there's no leakage or reversible information.
A CSPRNG is fine (just use any decent stream cipher), but as the article suggests, properly seeding it is crucial.
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#6This was an interesting article. (Font size is tiny using Chrome on iOS).
> If your business or technology depends on using random numbers, your best bet is to use a hardware random number generator.
Some hardware RNGs would be hopeless for this task. It'd be scary to have to buy one of these things and trust the output.
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#7I like to use this as an example of a problem that secure multiparty computation can solve i.e. that you can remove a buggy / malicious central dealer from a system.
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#8true random based on atmospheric noise: random.org
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#9I'm curious how actually random are current generators in online poker? I mean, some rather subtle patterns, situations would generate larger pots, therefore more rake. Or being on the new players side in 50/50 situations would 'help' to get him addicted.
I am not talking about 100% of the time dealing someone pocket kings, and someone else pocket aces and king on the flop.
Something subtle and very rare would be enough to count for large amounts of money at the end of the year, given the volume of major poker sites. On other hand, if someone would leak it, that might ruin the business for good.
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#10I'm curious how actually random are current generators in online poker? I mean, some rather subtle patterns, situations would generate larger pots, therefore more rake. Or being on the new players side in 50/50 situations would 'help' to get him addicted. I am not talking about 100% of the time dealing someone pocket kings, and someone else pocket aces and king on the flop. Something subtle and very rare would be eno…
Professionals monitor the play of other players and identify statistically abnormalities. You would have to be clever and conservative enough to evade those types of checks which, while I am sure is possible, is not trivial.