Slashdot Mirror


Computerized Betting System Proves Vulnerable

count3r writes "A front page article in today's New York Times reports that an employee of Autotote has been fired for (allegedly) hacking the system responsible for 65% of all horseracing bets in North America. The caper, if it is indeed a caper, resulted in a series of six bets that paid a total of $3,000,000 in last Saturday's Breeders' Cup."

282 comments

  1. dumbass. by Unknown+Poltroon · · Score: 5, Interesting

    WHy not just hit them up for several thou a week? Like theyre not gonna notice a 3,000,000 blip.

    --
    All Troll + "offtopic" mods are meta moderated as "Unfair", because you abused the system.
    1. Re:dumbass. by dlt074 · · Score: 1, Informative

      actualy that is still too much, that amount will still throw the books off enough to raise red flags.

      it may take them a while to track it down to you but they'll know something is wrong and start looking.

      if you don't get greedy you could do it for along time. the key is to not throw the books off and get thier attention.

      say a hundred bucks a day it depends on what kind of money they take in.

      that would at least cover your BEER!

    2. Re:dumbass. by unicron · · Score: 2

      I think the temptation would be too great. Greed is a powerful thing, and perhaps that big score was just too hard to resist.

      On a side note, their are so many Office Space jokes running through my head right now that they're getting stuck, like two fat guys trying to go through an open door at the same time.

      --
      Finally, math books without any of that base 6 crap in them.
    3. Re:dumbass. by ergo98 · · Score: 5, Insightful

      Sounds debatable to me. On the one hand a huge payout will garner a lot of attention, but on the other hand committing a fraud over and over every week sounds quite high on the risk scale too.

      As a bit of background regarding this, these guys didn't transfer from one bank account to another, or some other thing that's caught "in the books": One purportedly made an electronic bet, and the other altered the electronic bet after the fact to match the winners. It really isn't that ridiculous of a scam as people do win every now and then. It isn't entirely inconceivable that someone one.

      Having said that, it is the duty of responsibility of the operators to exercise due diligence, and truly not trust anyone: i.e. all databases have multiple layers including audit logs, in this case catching his transaction as it occurs for future analysis. In this case I presume that exactly that happened, as they obviously caught him.

    4. Re:dumbass. by tswinzig · · Score: 2

      WHy not just hit them up for several thou a week?

      Maybe because it's not a simple matter of hacking into the system to change a ticket, assuming he actually did that?

      --

      "And like that ... he's gone."
    5. Re:dumbass. by Vaulter · · Score: 1



      Maybe he tried to, but a couble of long shot bets came through...

      --
      I don't have a sig...Do you??
    6. Re:dumbass. by nolife · · Score: 3, Interesting

      I know a guy that was arrested for a fraudulent 900 scam. I do not know the details of HOW it was done but.. He had a 1 900 Job Line provided by MCI. He rigged it to fake calls and rack up his payout from MCI. In one month MCI owed him almost $400,000 for some cheasy job line. Times were tough back then but not that bad! At the MCI office, an FBI undercover handed him a check and then immediately arrested him.

      I'm sure a smaller amount would not have been as obvious and he may have been able to sustain it. Of course these horse cheats in the story could have started small years ago and have just now got caught.

      --
      Bad boys rape our young girls but Violet gives willingly.
    7. Re:dumbass. by why-is-it · · Score: 2
      On a side note, their are so many Office Space jokes running through my head right now that they're getting stuck, like two fat guys trying to go through an open door at the same time.

      A minimum secrutiy prision is no picnic. I have a client in there right now. He says the trick is, kick someone's ass the first day or become someone's bitch. Then everything will be alright.
      --
      *** Where are we going? And what's with this handbasket?
    8. Re:dumbass. by theperplepigg · · Score: 1
      perhaps he thought of that, but he forgot to debug his code resulting in an off-by-one error or something ala Office Space.

      --paul

      --
      -- Every time you kill a kitten, God masturbates.
    9. Re:dumbass. by ACNeal · · Score: 5, Informative

      The problem is that betting is all pool driven.

      A lopsided payout will be noticed, not because someone one, people always win in a properly booked race/game/whatever, it is that the payout was disproportionate to the take.

      If you make your book properly, you aren't making money off of people losing their bets, you make money off of the vig. Your payouts and take should roughly be equal if you did your books right.

      A horse isn't a 100:1 long shot because the book maker thinks its a bad horse. The horse is a 100:1 long shot, because off all the betting dollars, only 1 out of every 100 dollars was bet on that horse.

      The only way the house wins is to avoid making stupid bets. How does the house avoid making stupid bets? By nt betting. If I make sure that the other 99 dollars are going to cover your 1 dollar bet, and I collect the 10% vig from the losers, I make money, and don't have to worry about the long shot.

      Legalized horse betting does the same thing, except since they can't charge a vig to the losers, they don't make a 100% payout. That way, no matter who wins, they have made sure they can cover the bets, and still make a profit. In this scenerio, the winner pays the vig in the shape of the odds aren't as high as they should have been, the winner didn't win as much as was proportionally alloted to him.

      The reason why this was a dumb scheme, and the reason why they got caught is pure math. The track paid out more money then they took in, and immediately knew something was amiss. If the systems worked properly, that can't happen. Long shots hit all the time, even 100:1 long shots, but if your computer system adjusted the odds according to the bets made before post, you won't lose money.

      The fact that they changed the bet afterward means that the odds were wrong. Of course most people don't realize these subtelties to book making, so probably thought it wasn't a dumb mistake.

    10. Re:dumbass. by ergo98 · · Score: 2, Insightful

      he reason why this was a dumb scheme, and the reason why they got caught is pure math. The track paid out more money then they took in, and immediately knew something was amiss. If the systems worked properly, that can't happen. Long shots hit all the time, even 100:1 long shots, but if your computer system adjusted the odds according to the bets made before post, you won't lose money.

      Obviously you understand horse racing. Having said that, I question your claim that it's entirely pool driven. Most tracks offer multiple win wins that are many multiples the win for a single race. i.e. If this guy changed a single $1 bet for #7 in the 3rd to be a $10000000 bet, then that seems obvious. If, on the other hand, he changed a $1 bet (so $6) for #7 in the 1st, #2 in the 2nd, #4 in the 3rd, etc, for $6 races, and the track offers a mega win for six successive wins, the difference that his bets make in the win is miniscule.

    11. Re:dumbass. by Anonymous Coward · · Score: 1, Informative

      That is in a different pool altogether, still a pool bet, just a seperate pool. You don't get credit for winning 6 times in a row, unless you explicitly say you are going to win 6 times in a row by making a super-6 bet, and the track (or book maker) has a pool set up for those 6 races.

      These bets are usually called Quinella's, daily doubles, trifectas, etc.

      And I will be taken to task that of these names , I only stated one that is a multiple race bet(daily-double), but the idea is still the same.

      If I make a trifecta (first three horses of a given race) bet on horses 1,2, and 4, none of my money goes to affect the odds paid out on the #1 horse, or the #2 horse, or the #4 horse. Instead, all my money goes to affect the odds pay out on the 124 trifecta.

      Some people will try to argue that payouts on these bets do actually have something to do with the odds of a given horse. That simply isn't the case. If three long shots come in first second and third, the pool will be high, and the winner will be paid a high win.

      This isn't because the #1 horse had straight odds of 100:1. It is because of the same reason that the #1 horse had 100:1 odds, but not tied to the odds itself. If only 1 person in 100 think the horse will win, probably only 1 person in 100 will think it will be the lead horse in the top 3 also.

      Or to bring it back to your original question, if I pick 6 long shots, and they all win, the chances that anyone else picked those same 6 long shots is minimal. You can't win more than the sum total of all bets though.

      So even if you placed a super 6 bet, and each horse that won was a 100:1 long shot, but you were the only one that played the super-6 that day, you won't win anything but your bet back, because the odds of that bet is 1:1. The chances of this happening are probably less than me actually getting lucky tonight, but you get my drift.

    12. Re:dumbass. by GMontag451 · · Score: 2

      I may be completely misunderstanding you as I have absolutely no gambling experience, but are you saying that the odds are set (or changed) *after* people place their bets? If so, isn't that fraud? If not, how do they know beforehand how much people will bet on each horse?

    13. Re:dumbass. by mindstrm · · Score: 1

      Horse betting does indeed work the way he described; there is no house decision in it; the odds start out even and adjust in direct, exact proportion to how people are betting.

      This is in sharp contrast to a regular sports bookmaker, who sets the odds however he sees fit (though of course it is based partially on how people are wagering)

    14. Re:dumbass. by andynyc · · Score: 2, Informative

      are you saying that the odds are set (or changed) *after* people place their bets? If so, isn't that fraud? If not, how do they know beforehand how much people will bet on each horse?

      In horse racing, yes. The final odds are not known until after all the betting has ended, right at the start of the race. The track's computers tally up all the of the money bet on each horse, take out the vig (usually 18% or so on straight win bets, more on more exotic bets), and then determine how much to pay back to each winning ticket.

      It's not fraud at all, it's how pari-mutual betting works. Bettors understand that all the money bet will be placed in the same pool... the money I bet now joins money previously bet, and the money bet in the future will be added to that. It's common to bet a horse at 4-1 odds, and at post time the horse is only 3-1 or perhaps 6-1.

      Just as a simple example (no vig), I can make a bet a 10 minutes before post time, at which time $250 has been bet on Citation, and $750 has been bet on Secretariat. Thus, at this time, Citation pays 3-1. When the race goes off, a total of $1000 has been bet Citation, and $2000 on Secretariat. Now Citation is only 2-1. Doesn't matter that he was 3-1... only that in the final pool, he is 2-1. Sometimes it goes in your favor, sometimes the other way.

      In the end, this is the most fair... every player is betting against each other, not the house. No bookmaker is required to keep all the odds in line, the pool does it automatically. It also means that tracks aren't afraid of successful players, because they take a percentage of every dollar bet, win or lose. The track just wants to keep the total amount bet as high as possible.

    15. Re:dumbass. by andynyc · · Score: 3, Informative

      The reason why this was a dumb scheme, and the reason why they got caught is pure math. The track paid out more money then they took in

      No, the win did not pay out more than the track earned. Each winning ticket paid $428,392 from a pool of $4,569,515, which means that there were probably 8 or 9 winning tickets in total, nationwide. The guy they are investigating had 6 of them.

      Having 6 of only 9 winning tickets is obviously unusual. His betting strategy is even more unusual... making single selections for 4 races, then "wheeling" then entire field for the last 2, which means if the first four come in, he's guaranteed to win. Combined with the "flaw" in the system which doesn't report the ticket to the central database until after the fourth race, this is an obvious red flag. Finally, making the same bet 6 times is simply stupid. It's the same as buying 6 lottery tickets with all of the same numbers... the only justification is to increase your percentage of the winner's pool if you KNOW you are going to win.

      Think of recent Powerball lottery wins... if they announce there were 6 winners, and one guy shows up with 4 of the winning tickets, it's going to raise eyebrows.

      Had this guy never made these wagers, most likely there would have been 2 legit winners, each of whom would have won about $1.8 million (or maybe 3 winners each getting $1.2 mil). Instead, since there were a lot more winning tickets, the payout on each was reduced to only $428 thousand.

      Again, the track didn't lose anything, and if they disqualify his tickets, the money will get paid to the legit winners. That's how pari-mutual wagering works... the total pool is calculated, the house percenatge is taken out, and everything left is split among the winning tickets. When there are 9 winning tickets, each one gets paid less than if there were 3 winning tickets. The racetrack is unaffected. The legitimate winners are the victims.

    16. Re:dumbass. by Anonymous Coward · · Score: 0

      Excellent discussion of the circumstances. Except that, as it turns out, these 6 winning tickets were the only winning tickets.

    17. Re:dumbass. by andynyc · · Score: 1

      Excellent discussion of the circumstances. Except that, as it turns out, these 6 winning tickets were the only winning tickets.

      Upon further research, you are indeed correct. Nobody but the one player who is being investigated hit the Pick-6.

      The rules state, that 75% of the prize pool are to be distributed to those who got all 6, while the other 25% is to be distributed to those who got 5-of-6. But if nobody got 6-of-6, instead of a carry-over, which is the norm, then the "major" pool would be combined with the "minor" pool so that 100% of the pool whould be distributed to those who got 5 of 6.

      According to the NYT, the guy in question also held 108 of 186 total 5-of-6 winners, meaning that there are likely only 78 legit winners, whose tickets, which were worth $4606, will now be worth about $45,000 each. Nice.

      They should be able to find the true winners pretty easily in order to payout the true winnings, since they should have had to fill out tax forms for winning more than 600 times their original amount.

      Again, the racetrack's profit is not affected at all. This is why pari-mutual betting is so fair... if there are 186 winners, they money gets split up that many ways, but if there are only 78, the winners get a lot more.

      One other point. The bettor in question made single selections in the first 4 races. This means he chose 26-1 Domedriver in the first race and 13-1 Starine in the third, as well as lesser picks in the other 2. But he made NO ALTERNATES. Had his 26-1 shot not come in, the entire $1100+ ticket was history. Or, of course, the bet was made after those four races were over. These two guys are going down.

  2. Too much too quickly... by Anonymous Coward · · Score: 1, Interesting

    If they hadn't tried to hoover it all at once they could have kept it going for years... but then, criminals are by definition stupid, so there ya go.

    1. Re:Too much too quickly... by archeopterix · · Score: 2, Insightful
      If they hadn't tried to hoover it all at once they could have kept it going for years... but then, criminals are by definition stupid, so there ya go.
      Criminals stupid by definition? So who commits all those unresolved crimes? Or has the crime detection rate jumped up to 100% recently? Maybe the police & FBI & DEA & whatever are just dumb? Unfortunately I think there are smart criminals, you just don't hear about them.
    2. Re:Too much too quickly... by endeitzslash · · Score: 1

      Criminals that *get caught* are stupid. The smart ones are in Tahiti with your money.

    3. Re:Too much too quickly... by DNS-and-BIND · · Score: 2
      You have to watch which criminals get you.

      My little brother won a Tri-Super jackpot at a greyhound racing track a few years back. He hit three dogs in order (trifecta box) in the first race, and having won that he could then try to guess the first four dogs, in order, in the next race. Needless to say, he hit all four in order, otherwise I wouldn't be telling the story. He won $360,000. Half was split with an off-track bettor who picked the same dogs. Out of the remaining $180,000, $135,000 was left after taxes. Alas, my little brother was 16 at the time, and thus ineligible to bet - the money legally went to my mom's evil lawyer husband. My little brother got a brand-new Chevy Malibu LS (sport version), and little else. The husband spent it all on deer hunting trips, Reno gambling loss trips, and Jack Daniel's Tennesee Whiskey. Oh, and he beat the living shit out of our mom, too.

      A few years later, the Malibu had been wrecked, my mom discovered him cheating on her and divorced him (he could beat her as well as me and she wouldn't leave him, but cheat on her and he's divorced, go figure), and all the money was gone.

      --
      Shutting down free speech with violence isn't fighting fascism. It IS fascism!
    4. Re:Too much too quickly... by SEWilco · · Score: 1

      All criminals think they are smart.

    5. Re:Too much too quickly... by HogGeek · · Score: 1

      And the weather here is great ! :-)

    6. Re:Too much too quickly... by Anonymous Coward · · Score: 1, Interesting

      Shoulda' sold the Malibu, and had that bastard whacked (unfortunate freak accident?). Hell, I know people who would have done it for free.

  3. Pallidum would have solved this. by _LORAX_ · · Score: 5, Funny


    DRM will be our savior.....

    Oh wait, he required that kind of access to do his job? So DRM wouldn't have helped. What do you mean that most hacks are inside jobs? .... nothing to see, please move along.

    1. Re:Pallidum would have solved this. by Anonymous Coward · · Score: 0

      DRM is not meant to stop inside jobs. It is designed to stop outside intrusions. Just because it doesn't target a specific area doesn't mean it is not effective in another.

  4. What a dumbass by IdleTime · · Score: 1

    I guess he was to stupid to understand the odds on normal betting, so what do you expect?

    --
    If you mod me down, I *will* introduce you to my sister!
  5. What happened to the old days by nogoodmonkey · · Score: 5, Funny

    when people used to give horses steroids so that they would win their bets. All this new technology is confusing!

  6. No registration by DeadSea · · Score: 4, Informative

    Or why don't we look at one of the many articles that don't require registration. Darn NYTimes.

    1. Re:No registration by Anonvmous+Coward · · Score: 1, Offtopic

      Just wanted to say that I found the link in your sig to be useful. Thank you. :)

    2. Re:No registration by aridhol · · Score: 3, Insightful

      Hey...I have an idea (not that it will be accepted). Why don't we stop allowing registration-required links on the front page? Including free-registration. We can now find many sources for the same story with Google News, so there's no reason to keep linking to NYT.

      --
      I can't say that I don't give a fuck. I've just run out of fuck to give.
    3. Re:No registration by jimand · · Score: 5, Interesting

      Note that if you follow this link, there is a link to the NYT story that you can see without registration. The URL ends with "&partner=GOOGLE" so it seems that if you are a partner of the NYT, you can access articles without registration. Could /. apply to the Times for partnership status?

    4. Re:No registration by Anonymous Coward · · Score: 0

      Yes, they could, if they weren't bleeding money like a stuck pig.

    5. Re:No registration by Anonvmous+Coward · · Score: 1, Offtopic

      "A user has given a Offtopic (-1) moderation to your comment, Re:No registration, attached to Computerized Betting System Proves Vulnerable. Your comment is currently scored (0)."

      Ah, over-zealous moderation of my parent post here.

      Know what bugs me? I turned off the +1 bonus to let that guy know that the programmer's cheat sheet link in his sig was helpful. I have no doubt that it was off-topic, but modding me down over being polite (and turning off the bonus) was shitty.

      I wasn't expecting to get modded up for it, but modding me down for it was a waste of moderation points.

      I don't care if this +2 followup gets me modded down or not. Frivolously modding me down forced me to to defend myself.

    6. Re:No registration by 1984 · · Score: 3, Insightful

      I have another idea. Why don't you presume to never pay for anything, ever? To live in a fantasy world where all you have to do is consume.

      (Or perhaps you don't mean that, in which case I apologise. But I'm getting sick of seeing people here with the attitude, "We're all for 'Free'. And look, we can just take shit! Stick it to the man! Yeah!")

    7. Re:No registration by azizlumiere · · Score: 0

      What ? did you expect moderation to be fair ?

      --
      -Linux is SO fast it does an infinite loop in 5 seconds.
    8. Re:No registration by bwdunn · · Score: 5, Informative

      Replace GOOGLE with SLASHDOT and you are in.

      http://www.nytimes.com/2002/10/29/sports/othersp or ts/29RACI.html?ex=1036472400&en=51e22b7df3931513&e i=5062&partner=SLASHDOT

      Linked to Partner "Slashdot"

    9. Re:No registration by Anonymous Coward · · Score: 0

      Even better, how about if you don't click on links you don't like.

      It's pretty ironic that you want the rights the of person writing the article to be restricted so that you don't have to even THINK about the existence of registration sites.

      You need to organize your idealogy, son.

    10. Re:No registration by elmegil · · Score: 3, Interesting

      it's even simpler than that. You don't need the ex, en, ei values. And it doesn't care what partner is set to: http://www.nytimes.com/2002/11/01/sports/otherspor ts/01RACI.html?partner=YOMAMA works just fine. Brilliant coding, I must say.

      --
      7 November 2006: The day Americans realized corruption and incompetence weren't addressing 11 September 2001
    11. Re:No registration by mblase · · Score: 2

      Why don't we stop allowing registration-required links on the front page? Including free-registration.

      Slashdot itself requires a free registration to post even off-topic comments like that one, so besides being needlessly elitist, it would be just a bit hypocritical.

    12. Re:No registration by DeadSea · · Score: 1

      Well, I did appretiate the comment, even if you did get whacked for it. :-))

    13. Re:No registration by l33t+j03 · · Score: 0
      The fact that you A) have some kind of email notification of moderation turned on; B) actually watch it; C) give a damn about moderation; D) took the time to come back to the site and whine, is frankly pretty discouraging. If I had any faith left that most human beings didn't unduly burden themselves with concerns over the most pointless worthless ignorant bullshit you have eroded it completely.

      The next time you get that tight feeling in your chest when you see some electronic injustice committed against one of your virtual personas, climb up to the top of the highest cliff you can find (a building will do you stupid fucker) and leap the hell of. The maybe 2 seconds of freefall you will experience will be better than the 40 more years of mind atrophy ahead of you as you wallow in your geekiness.

      Hey, I have more than 40 more years left!, your little geek mind wants you to shout. Sadly you don't. All that pork grease soaked pizza and cake frosting straight from the container isn't doing you any good. Particularly in the face of the fact that your days consist primarily of sitting on your ass discussing Boba Fett related topics.

      And learn to close your fucking tags.

      Dumbass.

    14. Re:No registration by Anonymous Coward · · Score: 0

      That prompts for registration.

      Brilliant url h4x0ring, I must say.

    15. Re:No registration by Anonymous Coward · · Score: 0

      Isn't elitism joined at the hips with hypocracy?

    16. Re:No registration by Ozymandias_KoK · · Score: 1

      This isn't insightful. OP was complaining about registration required sites, not pay sites. Don't slam him for an argument he did not make. And "pay" attention next time. :)

    17. Re:No registration by elmegil · · Score: 1

      My bad. Somewhere I forgot I was logged into NYT. Beat me now.

      --
      7 November 2006: The day Americans realized corruption and incompetence weren't addressing 11 September 2001
    18. Re:No registration by endoboy · · Score: 1

      "Or why don't we look at one of the many articles that don't require registration"

      because finding a no-register link would require the /. editors to do actual work

    19. Re:No registration by Anonymous Coward · · Score: 0

      *bonk*

    20. Re:No registration by _ph1ux_ · · Score: 2

      not a good point. The newspapers and news organizations make money off of advertising. in all likelyhood they got this story from another source (which is why we see it from other sources)

      they make tons of money off advertising - and requiring readers to register for their stories is rediculous.

      I cant stand all the people who try to argue for the registration on a site that is just going to give you a story that is available from other sources without such restrictions.

      Do you pay for a subscription to slashdot? i doubt it - and if it was required from the first day, i doubt you would even be here....

      News is information that is meant to be free. If I want opinionated biased *stories* I will pay for it. If I want news about whats happening in the world around me - I will get it from traditional news sources with a very long history of subsidizing the cost of production through advertising. The model has been like that for a very long time - and by the amounts that most major news anchors make, I dont think they are hurting - or even would be hurting from our wanting of free access to the "news" they are offering.

    21. Re:No registration by Anonymous Coward · · Score: 0

      He that clicks on a goatse.cx link to find out what it is has left the path of employedness.

    22. Re:No registration by Anonymous Coward · · Score: 0

      You still need one or all of the ex, en and ei coded values, but you can delete partner.

    23. Re:No registration by Anonymous Coward · · Score: 0

      you know what bugs me.... ...not ending your italics tag.

    24. Re:No registration by Ralph+Wiggam · · Score: 2

      Another option:

      Go through the free registration. Is your time really that valuable? You're reading Slashdot, aren't you?

      Tell them that you're a 90 year old high school dropout millionaire from Afganistan (which is usually the first country on the alphabatized list). Give your email address as Fake@AOL.com (might as well waste some of their CPU time while you're at it).

      -B

    25. Re:No registration by chimpo13 · · Score: 1


      Wasn't there something in the FAQ that said they no longer accept stories that require registration. Only they make an exception for the NY Times because they'd been using it for so long?

    26. Re:No registration by nufsaid · · Score: 1

      Dude! Do you want a visit from
      the FBI or what?

      --
      Is this the promised end? Or image of that horror? KING LEAR
    27. Re:No registration by enkidu55 · · Score: 1

      I don't think that it was intended as a "Stick it to the man!" type of statement. I think that the fact that they require registration is just a massive waste of time and yet another database that can be sold to telemarketers to invade your household and sell you shit you don't want. Oh wait.... did that sound like a rant.... I apologise then. Apologies for butchering the word apologize as well.

    28. Re:No registration by Anonymous Coward · · Score: 0

      I don't visit links at NYT. Just another username/password I have to remember. And password managers don't do me much good on a public terminal. Are there any open source efforts out there to develop a secure, passport-like service so I can remember a single password for sites like the NYT and Slashdot for that matter?

      If not, what are the issues preventing this from happening?

    29. Re:No registration by Jugalator · · Score: 2

      That sounded more like a Flamebait to me. Give me one reason to pay for a service when there is another that exceed the quality of the former, while being perfectly legal. Besides, the guy didn't even complain about pay sites, but sites that requires that you go through a lot of steps just to simply read an article.

      --
      Beware: In C++, your friends can see your privates!
    30. Re:No registration by Anonvmous+Coward · · Score: 0, Offtopic

      "The fact that you A) have some kind of email notification of moderation turned on; B) actually watch it; C) give a damn about moderation; D) took the time to come back to the site and whine, is frankly pretty discouraging. If I had any faith left that most human beings didn't unduly burden themselves with concerns over the most pointless worthless ignorant bullshit you have eroded it completely."

      So let me get this straight: My post made you lose all your faith that humans don't unduly burden themselves with concerns over the most pointless worthless ignorant bullshit. Is the reason that you feel that people burden themselves with pointless worthless igorant bullshit is because you're making a big stink over pointless worthless ignorant bullshit?

      You illustrated your point well, pity you look like an overreactive idiot. I mean I could understand somebody being annoyed that I screwed up the italics tag, but to be annoyed so much over my complaint is really quite hilarious! Heh thanks for the laugh, buddy!

    31. Re:No registration by NanoGator · · Score: 1
      Hey, I have more than 40 more years left!, your little geek mind wants you to shout. Sadly you don't. All that pork grease soaked pizza and cake frosting straight from the container isn't doing you any good. Particularly in the face of the fact that your days consist primarily of sitting on your ass discussing Boba Fett related topics.


      You're a real baby, you know that?
      --
      "Derp de derp."
    32. Re:No registration by DEBEDb · · Score: 2

      In the time it takes for you to type this,
      you can easily register as a 123-year-old
      polynesian software engineer, earning 400,000
      a year. (If you are one, pick another
      example :).

      --

      Considered harmful.
    33. Re:No registration by Anonymous Coward · · Score: 0

      Really since when?

    34. Re:No registration by plover · · Score: 2
      Google is now reporting this Slashdot story as the second news link to this article, in order of relevance.

      I think that says volumes about the dangers of automated news agents.

      --
      John
    35. Re:No registration by 1984 · · Score: 2

      Most of them don't make tons of money on their online operations. And it's reasonable enough for them to ask for registration anyway; since they provide the service, they can set the terms by which its offered.

      When you register, you're using your personal details as currency, to pay for the access. You're buying that access the same as anything else. They provide a service, you pay to use it. If they provide one and ask you to pay and you say, "No, it should be free!" then you're just being naive.

      Nothing you say makes a cogent point against registration sites. You just say that you don't like them. Fine, don't like them -- there are alternatives. But don't pretend there's something "wrong" in the model.

    36. Re:No registration by 1984 · · Score: 2

      The mistake you make is thinking that this is about somthing 'free' (as in beer). It's not. You pay to access the NYT site, with your personal details. Then those details are sold on. You can buy it, or not buy it. As people are fond of pointing out: there are alternatives. But all this whinging about how stuff shouldn't be sold and should instead be free sounds like fifteen year-olds talking about how the world could be great if only they were running it.

      (BTW. Apologise: British variant of apologize.)

    37. Re:No registration by _ph1ux_ · · Score: 2

      I've written a lot about this before on slashdot... but i cant find the comment. There are a lot of reasons why registering and using your personal details as currency is a very bad thing.

      I choose not to register for news - period. I just think that my personal details should never be used for currency. and their monetary pull from their non-online operations is plenty. I dont have to register to purchase a newspaper. I dont have to register to purchase any other information in the world - but all of a sudden because its online - its ok for my personal details to be used as a matter of currency? thats rediculous. you should hold yourself at a higher level of worth than that.

    38. Re:No registration by 1984 · · Score: 2

      I do (typically) hold myself in a higher regard than that. I don't like the use of personal details as currency, because they're non-generic. Cash (and equivalents) are generic: you give someone universally exchangable "value" for their product or service. Once the cash transfers, you're done. Personal details on the other hand are always "you", no matter how long and perverse a journey they make beyond that first transaction. You keep paying, as it were. I won't put words into your mouth, but I think that's what you're saying?

      I don't like that at all. I'd rather pay a subscription fee.

      But really, it's our reponsibility not to reward terms of service we dislike by not using that service. It's not "unfair" that sites like the NYT ask for registration -- it's their choice. If you dislike the registration burden more than you like NYT news, walk away. Same as anything else.

      This is a divergent point from pointing out that everything isn't going to be free always, and wondering when some people might come to realise that. Neither "Everything free always" or "someone else always pays for it" represent a stable framework.

    39. Re:No registration by _ph1ux_ · · Score: 2

      I definitely dislike the registration process, but I do not think that all things should be free.

      I do, however, fell and expect that NEWS should be free - because that is how we have been made to expect NEWS, by the model that has been in place. The thing is that we do pay for news when its in a printed form, like a newspaper. You have probably noticed - or maybe you havent, that newspapers are very very cheap. 35 cents - for the most part. The reason is that in order to ensure that a large number of people buy the newspaper - they sell it very cheap. Then they charge large sums for advertising spece (because they reach a wide audience).... but for the user this news source is subsidized - by the advertisers. So - it is definitely not free. You have to give a small amount yourself, and you get a big fat newspaper in return - with lots of ads and hopefully lots of good news.

      Now the main point here is that the paper version of the news costs the user very little - fractions of a dollar, and is completely anonymous. This means thatthe advertising has to be much more broad because of the anonymous factor of the readership.

      The online version is still partially subsidized by advertising relationships - but its much less efficient due to the fact that the online readership is smaller. However - here we have the opportunity to eliminate the anonimity of the readers. This gives a much greater potential for return on investment for the advertisers - and makes a whole new possible pricing model for the sale of advertising space based on targets.

    40. Re:No registration by 1984 · · Score: 2

      I'm not failing to understand the differences between paper and online advertising -- I watched the .com boom from inside a magazine publisher that sprouted a large online presence (starting with a "Z"... short guess) and things were exactly as you describe in the magazine business, too.

      My point is that "they" will offer whatever looks like it might make or save money right now. It's up to us to say "no thanks" by voting with our feet. Not to be outraged that they have the audacity to try to turn things to their advantage in the first place.

      (And yes, I think news should be free, too.)

      Craig.

    41. Re:No registration by Anonymous Coward · · Score: 0

      Waa waa, 30 secs for a registration for a free access to current articles on the world's *best* newspaper (right after The Onion and American's Bulletin Press). Waa waa. Cry me a river.

      Actually, you're lucky the content of the site is free. *You* personally don't deserve it. I bet you're thinking a boycott is in order because of this gross abuse? How about a petition on EPIC or EFF about this?

      For those tired of filling fields and password boxes, try http://www.roboform.com. Win32 platform. Did I mention it's free? Oh wait, you have to download, install it. Stop the press.

      Gd whiners. Everywhere.

    42. Re:No registration by enkidu55 · · Score: 1

      I'm not quite sure I understand how giving out personal details is considered payment for anything. The majority of people gaining access to the site are not giving out any personal information what so ever. I truly believe that the point that was being made above was not that everything should be free. Only that the tactics that more and more sites are using to glean personal information from people is getting to be a pain. Databases of personal information on people are worth big bucks to marketing companies that are constantly trying to come up with the next tele-tubby or pet rock or whatever you want to call it.

      Personally, I think they ought to give some fifteen year olds a crack at running things. They can't screw it up any worse than it already is. Might do us all some good.

      (BTW. Which one of us is considered to be using the proper version of English? You or me? :)

  7. Not too smart. by Desmoden · · Score: 3, Insightful


    I will never understand how people come up with good, well thought out crime plans, and then totally screw up the execution by rushing things or bring too much attention to the project. Just dumb.

    1. Re:Not too smart. by WatertonMan · · Score: 1

      Well most do come up with well thought out plans and don't screw it up. At least I'd bet that's what happens. It's just that the ones who get caught are always the idiots. I mean if they weren't idiots they'd have little chance of being caught! Anyone remember Office Space and their scheme to get a few thousand dollars and they end up "accidentally" getting something like $300,000.

    2. Re:Not too smart. by Teppy · · Score: 1

      Well, you're not gonna be able to read about the ones who played it cool, are you?

    3. Re:Not too smart. by ugglan · · Score: 1


      Because the good, well thought out criminal plans that are not screwed up by sloppy execution are also the ones that they get away with and therefore the ones you never ever will hear about?

    4. Re:Not too smart. by Zutroy+Of+Earth · · Score: 1

      Actually, if the people that come up with these good evil-genius type plans don't screw up the execution, then you'll never hear about them! :)

    5. Re:Not too smart. by Pfhreakaz0id · · Score: 2

      this was my thought exactly. I think the reason the "dumb crook" stories are spread around so joyfully is that we WANT to belive that all criminals are stupid. I don't believe it. Even among homicide, the most henious, most investigated crime, there are a lot that go unsolved.

    6. Re:Not too smart. by jazman_777 · · Score: 4, Funny
      I will never understand how people come up with good, well thought out crime plans, and then totally screw up the execution by rushing things or bring too much attention to the project. Just dumb.

      Well, the brilliant plan to milk billions from the Federal Reserve Bank in Denver is still going strong, undiscovered.

      --
      Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
  8. Question by Anonymous Coward · · Score: 0

    Would this guy have been praised as a hero if he'd gotten away with it?

    1. Re:Question by Eu4ria · · Score: 1

      No he would not because if he had gotten away with it nobody would have known

    2. Re:Question by ackthpt · · Score: 1
      Would this guy have been praised as a hero if he'd gotten away with it?

      Only if he'd lept from a plane with it, in Washington State...

      ...

      ...and landed on Steve Balmer.

      --

      A feeling of having made the same mistake before: Deja Foobar
  9. Suurreee.... by Anonymous Coward · · Score: 0

    if people win, it means they cheat.
    if cd sales are down, it means piracy.
    if something is wrong, blame someone else.

    maybe we should BLAME CANADA! for EVERYTHING!

  10. So? by Lawbeefaroni · · Score: 4, Insightful

    Buttloads of $ vs. determined individual: vulnerability.

    Someone will always find a way to steal and no matter how good your security, when you have the human element on the inside, you are vulnerable. That's why auditing to detect theft is as important as securing against it.

    --
    "When it rains, it pours." --Morton's Salt
  11. This wouldn't have happened when the mob ran it! by webperf · · Score: 5, Funny

    see what happens when you legalize it??? all these crooks get in and screw it over.

  12. No way! by zuggy · · Score: 5, Funny

    Nah, it can't be vulnerable. Online betting is trustworthy. Why, as soon as I get my bonus back from the Nigerian Petroleum Company, I'm going online to bet on the ponies!

    1. Re:No way! by Spoke · · Score: 1

      This scheme had nothing to do with online betting. It had to do with the operators running the software which handles the money, odds and wagers behind the scenes at the vast majority of racetracks across the country.

      There online horse racing available, but these systems simply tie a web interface into the Autotote system. The Autotote software is where the real vulnerability lies, not the online horse racing sites.

    2. Re:No way! by tswinzig · · Score: 2

      Nah, it can't be vulnerable. Online betting is trustworthy. Why, as soon as I get my bonus back from the Nigerian Petroleum Company, I'm going online to bet on the ponies!

      This isn't "online betting." Autotote is the electronic system used to place bets all across the country. You could be at an OTB (off-track-betting) center placing a bet on a race getting ready to run at Saratoga in a few seconds.

      And it's not like people normally get screwed out of their winnings. This guy is getting put on hold because of suspicious circumstances. It has nothing to do with how he placed the bet or betting "online."

      --

      "And like that ... he's gone."
    3. Re:No way! by Spamhead · · Score: 1


      Nigerian petroleum bonus? Why does that sound so familiar to me?

      --
      Everybody Wang-Chung tonight!
    4. Re:No way! by legojenn · · Score: 1

      Hmm, I'll trade you three of your Nigerian Petroleum Bonuses for four of my South Afrikan Trust Bonuses.

      --
      I make a reasonable middle-class wage by going to work and not spamming blogs with scams.
  13. What they did... by f97tosc · · Score: 2

    Some posts seem to be some confused about what they did. The scheme was simply to change one guy's (electronically registered) bettings after the race was over, with the help of an insider.

    Tor

  14. I used to write betting software by yamla · · Score: 5, Interesting

    Until a little over a year ago, I was employed at a company that wrote gambling software for sports betting houses. It is big business, let me tell you. :) If anyone has any questions, fire away and I'll answer them.

    I never put any backdoor code into anything I submitted but it would have been very easy to do so. We had well over 300,000 lines of code and very little of it was audited. The only problem would have been getting the backdoor in without other programmers noticing as everyone was responsible for different areas. Still, I know it could have been done, I can picture exactly what it would have taken to do so.

    Would it have been noticed? Possibly eventually, though I have my doubts. Apparently, there was a bug in our code for one of the complex bet types. It ended up _always_ overpaying a specific complex winning bet type by $1. That is, it always rounded up to the next dollar instead of down and this bug went undetected for YEARS.

    All the code was written in VB and we worked crazy amounts of overtime ALL the time. Additionally, the 'business experts' could never get their act in gear and agree to how things should work. I ended up resigning my position.

    --

    Oceania has always been at war with Eastasia.
    1. Re:I used to write betting software by Anonymous Coward · · Score: 0
      All the code was written in VB Ah-ha! VB? Surely a Microsoft programming language would catch any backdoors automatically. I'm glad I can trust my security to Microsoft so that I don't have to worry about potential thieves such as you!
    2. Re:I used to write betting software by WatertonMan · · Score: 5, Interesting
      Actually wasn't there a huge scandal in Las Vegas a few years ago where someone hacked a lot of the slot machines to screw with the odds? If I recall it actually was one of the distributors of the slot machines. So it wasn't some obscure employee but some people fairly high up in the company. But it is the same idea.

      I'm sure that had the company tried to screw over one of the bigger casinos that they'd have been caught. (And depending upon the casino probably taken care of independently from the police) However so long as regular people are getting screwed, they don't care.

      Same thing with gas stations. Once again I remember a scheme that extra charged gas slightly using computers. Nothing but a few cents on every fillup. But it added up. Once again more the company themselves. But how hard would it have been for an employee to do it?

      The only thing that keeps these schemes for working for individual employees is the cost/danger ratio. These schemes are only worth the risk if you make a fair amount of money. But to make a fair amount of money you have to get that check from the company which is then noticable by the company auditors. If the "checks" or "expense" is spread out over thousands of people, the auditors are far less likely to discover it. But by the same measure you are far less likely to be able to make use of the money.

    3. Re:I used to write betting software by Anonymous Coward · · Score: 0

      Actually, it was a programmer, not an exec...

    4. Re:I used to write betting software by yamla · · Score: 2

      Hey, don't blame me. VB was a very bad choice, in my opinion, for this. The user interface was too complex and we had far too many lines of code. The decision to use VB was made very early on, before the scope of the project was realised. The architecture seriously suffered as a result, the code was almost entirely interdependent. Oh well, I got the hell out of there. :)

      --

      Oceania has always been at war with Eastasia.
    5. Re:I used to write betting software by tongue · · Score: 2

      Its my experience that when a bunch of knuckleheads get together and decide on the Next Big Thing, they prototype it in VB, then hire a bunch of people to work on it and the prototype ends up being the final version.

      the company i'm with now works exactly the same way. i should have resigned years ago, but stuck it out. now we've finally got an owner who knows what the hell is going on, so my stock options might be the last remaining ones out of the 20th century to be worth more than toilet paper.

    6. Re:I used to write betting software by smileyy · · Score: 4, Interesting

      I recall seeing a story about a programmer who reversed engineered the pseudo-random number generator used in Keno games. The impression I got was that it was a clean-room solution, and yet he was arrested for fraud anyway. Needless to say, I disagreed with the notion that his act was illegal (assuming it was clean room).

      --
      pooptruck
    7. Re:I used to write betting software by AntiFreeze · · Score: 2

      Heh. I somewhat remember a diatribe about this from Office Space when they attempt to do the same thing to their company's banking software.

      --

      ---
      "Of course, that's just my opinion. I could be wrong." --Dennis Miller

    8. Re:I used to write betting software by Reality+Master+101 · · Score: 5, Interesting

      A long time ago I used to write software for computerized gambling games, such as draw poker. One of the features of the software was being able to dial in a certain payback percentage. The way it worked was that when it drew the final hand (after the cards were held), it would decide on a random basis to redraw the hand if it was a winner. If it was paying out too much, it would gradually redraw the hand more often until it was back to the right payback.

      Anyway, one of the problems we had was that our payout amount field was only 4 digits for a maximum of 9999 coins. The problem was that you had the option to play up to 50 coins at a time, and the highest payout odds were 500 to 1. So management had me make the machine NEVER pay out the big winner if you bet 20 coins or more to avoid the problem.

      The latter was probably illegal, but this company was pretty shady. I didn't work there for very long, and they went bankrupt not long after.

      I still look at the machines in Vegas with suspicion, though. :)

      --
      Sometimes it's best to just let stupid people be stupid.
    9. Re:I used to write betting software by Anonymous Coward · · Score: 1, Informative

      Hopefully this gets read so here goes.

      The scandal you are thinking of did occur in Vegas years ago. The person in question was a programmer for a gaming machine company. What he did was write code for a video poker machine such that when a certain combination of betting occured, it would payout its highest amount.

      This person then told a friend about this setup. The friend then went to the machine in question and did what was required. He of course won.

      The problem came when, instead of simply taking the winnings and leaving, he had it sent to his room. Problem was, the room was not in his name but rather than name of the programmer.

      The LV Gaming Commission investigated and found out what was going on. Both men were arrested and charged and found guilty.

      There was another instance of the Keno being rigged but my memory is not as clear on that one other than the combination of numbers had never come up prior to this winning ticket. Ever. In the entire history of Vegas gambling.

      Warning bells went off and an investigation ensued and the culprits were found and prosecuted.

    10. Re:I used to write betting software by Graff · · Score: 2
      I somewhat remember a diatribe about this from Office Space
      And I remember a similar plot used in Superman III, where Richard Pryor's character steals the partial cents from his employer. I think that they even mention Superman III in the movie Office Space.

    11. Re:I used to write betting software by Anonymous Coward · · Score: 0

      Not only do they specifically mention SuperMan 3 they mention the guy's the got busted doing it in the 70's

    12. Re:I used to write betting software by lukesd · · Score: 1

      Yeah, and then a bunch of hackers tried it in the '70s.

    13. Re:I used to write betting software by Anonymous Coward · · Score: 0

      and I remember the same thing in the movie "Hackers", not to be confused with the movie "Takedown" ;-)

      Actually, I remember a real life scheme at the First National Bank of Chicago in the early 1970s or late '60s

    14. Re:I used to write betting software by ckedge · · Score: 1

      What, you want to force them to put radioactive smoke-detector like sources and radiation meters inside the machines to obtain true randomness?

    15. Re:I used to write betting software by smallstepforman · · Score: 2

      Buddy, these days every line of code is audited by a Government agency, and if they find a backdoor or payout tweaking, you can kiss your licence goodbye (manufacturer), and they would not get a licence for the next 15 years in that jurastiction. Other jurastictions take note of these incidents, and audit the devision in their jurastiction. Since every manufacturer knows this, they have enourmous compliance departments whose sole job is to ensure the legality of the software.

      The government agencies these days also supply the random number generator to all manufacturers, and if the source code was displayed on the slot machines to every patron, and you had a BeoWolf cluster of G4's, it would take you 10^8 years to figure out the next RNG outcome, assuming you can hit the spin button with an accuracy of 250 micro seconds, which is when the RNG is reseeded.

      --
      Revolution = Evolution
    16. Re:I used to write betting software by russiste · · Score: 3, Informative

      You've got a great memory - that was 6 years ago. :-)

      Here's the story from "The Risks Digest" ("Forum on Risks to the Public in Computers and Related Systems").

      Basicly, they caught the guy, and then released him and even gave him the money back with interest.

      The "source" of the problem? A missing clock that was supposed to seed the random number generator. Thus, upon rebooting (every morning I suppose), the same number sequence would be generated as the seed would be the same...

      Greg

      --
      Loopsh of fury.
    17. Re:I used to write betting software by Anonymous Coward · · Score: 0

      Or thermal noise, or something seeded by timings between cosmic rays . . . or anything not deterministic. Thermal noise is probably best because otherwise Guido and Lupo with the ion source are going to clean up.

    18. Re:I used to write betting software by Anonymous Coward · · Score: 0

      So all I need is 8.76*10^11 of those Beowulf clusters and it'll only take me an hour... Hm, how many G4's are there in each you say?

    19. Re:I used to write betting software by ProfMoriarty · · Score: 2
      Interesting story ...

      but the best line in the whole story has to be:

      Police are continuing their investigation to find out if the clock was missing when the game was delivered or whether it has been stolen.

      Now is it me, or would it be a bit difficult to steal a clock from a slot machine?

      --
      Karma? Karma? I don't need no stinkin' karma.
    20. Re:I used to write betting software by Cryptnotic · · Score: 2

      No, the casinos don't want that. They don't want it to be completely random, because eventually in that randomness, there would be a string of payouts long enough to bankrupt the casino (unlikely in a slot machine, it might not happen for 1000 years, but it is still theoretically true). With pseudo-random number generators, they can analyze the output and make sure that strings of events like that do not happen. Anyway, you do not even want true randomness. You want an even distribution of numbers and you want it to be absolutely unpredictable to the players.

      --
      My other first post is car post.
    21. Re:I used to write betting software by russiste · · Score: 1

      [I wanted to write in the following into my first post on the subject (in this same thread), but thought it wouldn't interest anyone... anyway, here it goes] :-)

      I agree that a "clock" would be hard to steal from an embedded system - actually, I'm curious if a related discussion in the "Assemblé Nationale" (Québec's (the province (which Montreal is located in)) National Assembly where our Ministers (in the UK sense)) discuss issues) at that moment may be the key to answer your question - how can a (software? embedded?) clock be stolen?

      The juicy (French only) link in question is this one (search for "Keno") where the opposition asks (back in April 1994) the Finance Minister if he is aware that three computer chips were stolen. The chips are then later referred to as EPROM, thus probably containing the "Keno program" itself. 5 days later (you can find the 3 references at the Debates to the "Keno incident" by using this google link), the theft of three chips was confirmed by the "Sûreté du Québec" (the provincial police).

      What's more, the faulty Keno machine was later sent to the Las Vegas company that manufactured it (this is all related in this debate), but their report wasn't made available to the Québec government.

      So there you have it... no real answers, only more questions. :-)

      Greg

      --
      Loopsh of fury.
    22. Re:I used to write betting software by karlm · · Score: 2
      Which PRNG? Somone replied to one of my other posts, saying something about m68k assembly and squaring of a 128-bit number. I took this to mean a quadratic residue generator.

      Blum-Blum-Shub would be vulnerable with only a 128-bit modulus. So it seems that either his company didn't know what they were doing, or he was mistaken about the PRNG. (The person claimed to work on other parts of the code, but to have known about the PRNG.)

      --
      Copyright Violation:"theft, piracy"::Anti-Trust Violation:"thermonuclear price terrorism"<-Overly dramatic language.
    23. Re:I used to write betting software by Servo · · Score: 2

      Myself and a coworker witnessed a McDonald's employee overcharging people in the drive thru.

      She would ring up their order, and tell them it costs $1 more than what it actually did. She wouldn't give a receipt, so you rarely really noticed. She would pocket the extra buck, and we estimated that she was probably making an extra $100 a day doing this.

      We complained to the manager several times, but she never got fired. Who knows what was really going on.

      Incidently, this was AFTER the time when all other McDonald's had switched to the "viewboard" so you could see your order and your total before you got to the window.

      --
      A slip of the foot you may soon recover, but a slip of the tongue you may never get over. -Benjamin Franklin
    24. Re:I used to write betting software by packeteer · · Score: 2

      How often do you check to see that you REALLY got $20.00 of gas. Do you measure it out down the the fluid ounce. Probably not. If The tank ifs full or you have spent enough money you pay and go on your way. What if they put half a cup less in your tank? It would be a free $0.10 x the billions of fillups a year.

      --
      unzip; strip; touch; finger; mount; fsck; more; yes; unmount; sleep
  15. Re:I don't mind by perlyking · · Score: 2

    What if a hacker steals from someones children?

    We are all someones child after all :)

    --
    no sig.
  16. Maybe they slipped a decimal place by Thud457 · · Score: 1
    --

    the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

  17. Re:I don't mind by Anonymous Coward · · Score: 0

    wont somebody please think of the children.

  18. Stealing from common criminals? by Spoke · · Score: 2, Insightful

    You obviously know nothing about the horse racing industry. While there may be some shady characters out there, most people in the scene are just your average blokes who are hoping to win a couple bets while at the racetrack. Those are the guys who eventually end up losing because of people who cheat the system.

    1. Re:Stealing from common criminals? by suicidal · · Score: 1

      No, they lose because they bet on the wrong horse, or horses. They lose becuase they chose to throw their money away.

  19. Re:I don't mind by Anonymous Coward · · Score: 0
    yes i heard that betting on horses is the number one cause of underage hunger worldwide

    face it, you're a reactionary fascist blinded by propoganda

  20. Picking 4 Horses by richlb · · Score: 3, Interesting

    If it turns out to be cheating, it just goes to show what happens when you want too much too soon. You know, just winning $1,000 or $10,000 probably wouldn't have raised an eyebrow.

    And, I wonder how often this bet hits? Technically, the bet was really picking the winner or 4 straight races, plus betting on every horse in next 2. I won a trifecta once that paid a cool grand. To think, if I'd only tried for one more......

    If they're guilty, they're idiots.

    1. Re:Picking 4 Horses by paulc0001 · · Score: 1

      But you can't modify the Trifecta and get away with it because it's sent to the host track immediately.

      To understand how to get away with modifying the bet, you have to understand a bit about the underlying ITSP protocol (I do this for a living, btw). Regular single-race bets (win, exacta, trifecta, etc) are sent from the hubs to the host more-or-less when they are struck. So the host knows immediately what combination of horses you have bet on. If you change it after the race then the pool will be all wrong (wrong amount of money on at least two combinations).

      But with a Pick-N, only the value of the bet is sent straight away. The actual combinations you've bet on are only sent (as part of a "scan") immediately after the second-to-last race. So with a Pick-6, you could change the selections (by modifying the database) after race 4, with plenty of time left before the backed combinations are sent to the host.

      So yes, it's probably less noticeable to go for pools where the payoff is lower, but for technical reasons it can't be done. You need a pool run over at least three races.

  21. This is not the way to go. by Prince_Ali · · Score: 4, Informative

    A lot of people make a lot of money on internet gambling sites without breaking a single law. The people who play online poker suck so bad compared to professional poker players that it is like printing money for anyone who plays the game seriously. I suck which is why I don't play, but a lot of people are willing to give up there hard earned money to a redneck who has played poker since before he could write.
    It may not get you $3M, but they won't have to work anymore, and they don't get put in FPMA prison.

    1. Re:This is not the way to go. by DNS-and-BIND · · Score: 2

      Yeah, but "professional" poker players are dweebs and geeks on a scale to make Everquest players look like well-adjusted humans. At least they talk to one another and have fun, instead of a few words before eating a greasy comp "meal" at Binion's snack bar before heading to the tables for an 8-hour shift cooperating with their cronies to throw jackpots.

      --
      Shutting down free speech with violence isn't fighting fascism. It IS fascism!
    2. Re:This is not the way to go. by Kintanon · · Score: 2

      Example: Me and my little brother are two such rednecks (well, sorta) my little bro currently makes about the same amount of money weekly playing online poker tournaments as he does at his job.
      If I ever get the free time to go back to playing I'll probably do at least as well. Last time I played I turned 20$ into 140$ in 5 days. So it's not hard.

      Kintanon

      --
      Check out JoshJitsu.info for Brazilian Ji
  22. Not really hacking; still a problem... by Anonymous+Custard · · Score: 5, Interesting

    This is, just as the article said, a misuse of power, rather than a skillful hack. If I remember, isn't hacking usually prosecuted over the fact that the person obtained illegal access by knowingly circumventing security measures? He was given clearance as part of his job; he misused his security clearance, he didn't gain unauthorized access.

    In any case, I'm surprised that ANYONE has the access to modify bets. Shouldn't that info be encrypted or protected or something, kind of like how your Bank's customer service rep can't look up your pin, but can only reset it to a new pin?

    1. Re:Not really hacking; still a problem... by tswinzig · · Score: 2

      In any case, I'm surprised that ANYONE has the access to modify bets. Shouldn't that info be encrypted or protected or something

      Yeah, but then how would the employees be able to go in and create winning tickets after the fact?

      I mean, that's a perk for working at autotote, like stock options.

      --

      "And like that ... he's gone."
    2. Re:Not really hacking; still a problem... by aiken_d · · Score: 3, Interesting

      Yes, but the database *coders* for your bank could easily reset your pin, or code an app such that when the teller goes to reset it, it always gets set to some value that they'd know.

      This wasn't a case of a front-end person, working the phone banks, manipulating data. If it was indeed a hack/theft, it was someone with access to the code and/or database itself. Encryption doesn't do you much good, there.

      Cheers
      -b

      --
      If I wanted a sig I would have filled in that stupid box.
    3. Re:Not really hacking; still a problem... by Erasmus+Darwin · · Score: 2
      "If it was indeed a hack/theft, it was someone with access to the code and/or database itself. Encryption doesn't do you much good, there."

      There are some ways in which it could help. For example, imagine a two machine setup where machine1 accepts bets and cryptographically signs them (including a timestamp) using a private key known only by machine1. Machine1 then passes the bet off to machine2 for a second timestap/signature and longer storage.

      Under this system, an attacker would have to subvert both machines in order to place a retroactive bet. If the attacker only subverts machine1, then the machine2 timestamp won't be correct for a bet supposedly placed in the past. If the attacker only subverts machine2, then the stored machine1 signature will be wrong.

      Of course to make the system viable, you have to implement policies to make it difficult for a single person to get access to both machines. If someone's responsible for uploading the final betting data to the track, for example, they'd only get access to machine2.

      It's not a panacea, and it also doesn't help that they're holding the bets until 4 of the races are done, but it does increase the difficulty of subverting the system if it's properly implemented.

    4. Re:Not really hacking; still a problem... by Captain_Stupendous · · Score: 1

      As you say, this is not "legally" hacking. Legally, it's probably covered under the much more comprehensive wire-fraud laws. Only a matter of time, though, before someone on Slashdot says "This wouldn't have happened if they'd been using Linux".

      --


      I am alone, yet I also surf the universal backwash of undifferentiated Being, which is LOVE.
    5. Re:Not really hacking; still a problem... by aiken_d · · Score: 1

      A good point, but of course, there's the question of where the code resides that checks the timestamps / cyrptographically signed data. If it's on machine 1 or 2, it's back to single point of faulure. And, if it's on Machine 3, you now have a system where compromise of any 2 of 3 systems is catastrophic, which is ugly because it leads to finger pointing ("No, it must have been altered on system 2!" / "No, it was code on system, 3"!).

      Of course, in situations like this the signed data would probably be looked at by human eyes, but that's not practical for every bet, and as many people have said, the only reason this person got caught seems to be that they got really greedy. Me, I'll take $10k/month for the rest of my life rather than $3mil now.

      Cheers
      -b

      --
      If I wanted a sig I would have filled in that stupid box.
  23. Another one by wiredog · · Score: 2
    From the Sports Section of the Washington Post.

    Well, they do want some registration stuff, but nothing identifiable to you.

  24. they'll do anything not to pay by Anonymous Coward · · Score: 1, Insightful

    See that, someone wins a tough bet with a huge payout and they immediately call foul play so they dont have to pay.

    Gee i *bet* online casinos work the same way...

    1. Re:they'll do anything not to pay by Anonymous Coward · · Score: 1, Insightful

      I like how 90% of the comments here are about how he cheated yet the article only says the bet is under investigation. It is still possible there was no cheating involved at all.

    2. Re:they'll do anything not to pay by FunkSoulBrother · · Score: 1

      There are reputable online sportsbooks and horse betting places. Some of which are reputable because the owner has earned trust, and some because they are regulated by the Australian and British governments.

      As for casinos as in cards and slots, yeah, you'd have to be an idiot to try that online.

  25. Sorry I had to... by Anonymous Coward · · Score: 1, Funny

    Is it a new business model?

    1. Have a randomly bad day in the gambling biz.
    2. Blame it on some sap and refuse to pay up.
    3. PROFIT!!!

    1. Re:Sorry I had to... by andynyc · · Score: 2, Informative

      This does not affect the profit or loss of the racetracks and pari-mutual organizations ONE CENT. The pool for the pick 6 wager was $4,569,515... and the track is obligated to pay that amount back, less a "hold" percenatge (that the revenue for the track).

      If this guy's winning tickets are disqualified, it will only increase the amount paid back to those who legitimately won. I'm guessing because I don't know the exact hold percenatge, but there were probably 8 or 9 winning tickets, each paying out $428,392. 6 of them belonged to the man in question. If his tix are disqualified, it will only mean that the $2.5 million that they were worth will be disrtibuted among the valid winners.

      Under no circumstances will the racetrack make or lose any extra money as a result of what happens. If there were no other winners, the pool would either be carried over, or paid to the consolation winners (5 of 6). Most tracks employ the carry-over (to the necxt day), but this is the Breeder's Cup, which is a special, nationwide, once-a-year event, so the rules may be different.

  26. VLT Backdoors? by Rikardon · · Score: 5, Interesting

    Here in Alberta, Canada we have VLTs (Video Lottery Terminals) that let you play a number of different card games and other assorted forms of gambling on a touch-screen terminal. They're a HUGE profit center for the pubs and bars that host them, and for the provincial government. If I were a VLT programmer of questionable moral character, it would be awfully tempting to code a backdoor triggered by some easter egg-type series of screen touches that would let me score a couple hundred dollars at each terminal.

    Anybody ever heard of anything like this happening in real life? As an earlier poster said, if you kept your take down to a couple thousand a week, I think it would be pretty unlikely you'd get caught.

    1. Re:VLT Backdoors? by Anonymous Coward · · Score: 1, Interesting

      a computer bingo programmer did that.

      he jumped off the golden gate bridge.

      he was actually smart, small bets etc. but a security guard noticed "eratic gambling" which is pretty believable, thsoe guys will pick up on the smallest things that are out of the ordinary.

    2. Re:VLT Backdoors? by scottmartinnet · · Score: 3, Interesting

      IIRC, someone did this with video poker in Vegas. A certain series of bet amounts (number of coins inserted) triggered a sure royal flush. They were smart, spread out the wins, and weren't caught for a long time.

      There have been a lot of very smart scams that were caught. It makes you wonder how many extremely smart scams were never caught. I remember watching a show about that stuff, and there was a security consultant with this quote: "A casino is the only place in the world where you can steal millions of dollars and if you do it right, no one ever notices that it's missing."

    3. Re:VLT Backdoors? by BarryJacobsen · · Score: 2, Funny

      His death cry as he fell: "Beeeeeeeeeeee Foooooooouuuuuurrrrrteeeeeeeeeeennnn" *splat*

    4. Re:VLT Backdoors? by Anonymous Coward · · Score: 0
      The Kansas Lottery had a problem very similar to this horse racing issue. A lottery employee (computer op manager type) was modifying non-winning tickets and turning them into winners, then having friends cash them in (at low dollar ammounts). After some searching I found this article from the Lawrence Journal-World.

      As an employee of a neighboring state lottery, I can see how this could be done, especially if it became a situation where the "computer guy" was one of the few people who understood all the technical issues involved. However, I also know how many layers of processes, reviews and procedures are undertaken, and these sorts of things are pretty easy to spot when you're looking for them.

    5. Re:VLT Backdoors? by jeremyacole · · Score: 1
      I can see it now...

      /* If it's me, give a small win. - jcole @ 2002-11-01
      */
      if(condition=TRUE) {
      winner++;
      }

      It was company policy to comment everything. ;)
    6. Re:VLT Backdoors? by Anonymous Coward · · Score: 0

      I know a guy who got his hands on part of a roll of the VLT payout slip paper, and programmed a C64 and old serial dot matrix printer to make fake payout slips.

      Of course he got nailed, but not the until the 6th time he collected (at the same bar, a place where he was a regular).

      If he had been a bit more smart, he might have gotten away with it until they changed the system.
      The current system prints a barcode, which is read by the cashier's terminal (networked to the VLTs), and verifies that it is a valid pay slip.

    7. Re:VLT Backdoors? by Anonymous Coward · · Score: 0

      Unlikely if teh company building them is at least a little serious.
      Uses peer reviews, extensive testing.
      Independent QA reviews.
      And limits the things a programmer has access to in the machine.

    8. Re:VLT Backdoors? by Anonymous Coward · · Score: 0

      I do know of an instance where a demonstration mode of play would seed the machine's random number generator so that the demonstration appeared the same each time. However, one or more members of the public noticed that if the demostration was interrupted by a real game, the result was the same as would have appeared next in the demostration. Obviously the trick was to interrupt the demonstration prior to a winning play and so guarantee a win. Eventually auditors noticed that the average payout on that particular game was higher than it should have been, not much higher, but over a week or two it should have been almost exactly right. The bug was fixed soon afterwards.

  27. Re:I don't mind by eam · · Score: 1

    I have to believe you're kidding (Think about the children. THE CHILDREN!!!!).

    However, I wanted to point out that if it turns out to be a scam, the $3M is going to be redistributed to other winners (like people who only hit on 5 races). If this was theft, it was theft from other folk who made bets.

  28. Exactly! by Spoke · · Score: 1

    If I could consistently (more than 50%) pick the winner of any race I'd be a wealthy man!

    To pick 4 winners in a row, either damn lucky or I took a peek into the future!

    1. Re:Exactly! by Moloch666 · · Score: 1

      Just don't let the grown up highschool bully borrow your time machine and give a sports almanac to himself in the past.

      --
      Understanding is a three-edged sword. -- Kosh Naranek
  29. Can't secure gambling, eh? by epcraig · · Score: 2, Insightful

    They want us to vote online?

    --
    Ed Craig "Who cares what you think?" George W. Bush, 4th of July 2001
  30. Another computerized wagering event coming up: by burgburgburg · · Score: 3, Funny
    Tuesday's elections

    Fortunately, all of those systems are closed, so I'm sure that security was motto number 1.

    Of course, motto number 2 was "Ignore motto number 1".

    1. Re:Another computerized wagering event coming up: by DavidTC · · Score: 1

      Confusingly, motto number 3 was "Ignore motto number 4", and motto number 4 was "There is no motto number 2".

      --
      If corporations are people, aren't stockholders guilty of slavery?
  31. Voting's next by MacAndrew · · Score: 1

    Speaking of gambling, won't it be great when elections are turned over to computers. People honestly think things like online voting will deliver them from human vices like cheating in or just disrupting elections, by hackers or insiders.

    Beware!

  32. Nitpick / Details by LookSharp · · Score: 2, Insightful

    resulted in a series of six bets

    Was was reading this yesterday, it's actually interesting. It wasn't six bets, it was one bet on six consecutive races (called a Pick 6, apparently). The ticket cost over a grand just to purchase.

    Apparently, the winning ticket including the first 4 race winners, followed by picking every horse in the field for the 5th and 6th races. This was suspicious because the betting management company allows the bets to be submitted during simulcasting through the end of the 4th race to prevent system congestion, according to the article.

    The theory is that the employee submitted a fixed bet at the end of the 4th race. The ticketholder himself, apparently unrelated to the employee who is under investigation for fraud, claims that he is innocent, and is telling the company to put up some evidence or give him his 3 mils.

    I dunno about you, but I do detect a strong odor of fish. On the other hand, if the lottery hit for this guy and he is legit, more power to him.

    1. Re:Nitpick / Details by Kintanon · · Score: 2

      One thing I don't understand, is shouldn't there be some record of what his actual bet was? A paper ticket stub, something? Is the ONLY place the bet is recorded inside this one singular computer system? Is there no information redundency here?
      I mean, I know if I was placing a bet that might win me 3 million bucks I would want a paper receipt that had my name on it as well as my bet so that I could point at it and say, "Luck mutherfucker, your piece of paper says I win, so gimme my fucking money!"

      Kintanon

      --
      Check out JoshJitsu.info for Brazilian Ji
  33. Just wait... by Hans+Lehmann · · Score: 2, Insightful
    OK, maybe there were some glitches with electronic betting. No big deal, it's only gambling on horses.
    Fortunately, such a thing could never happen with electronic voting machines.

    Right?

    --
    09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
  34. Things you don't do by El_Smack · · Score: 5, Funny


    Tug on Superman's cape.
    Spit into the wind.
    Rip off the NY mafia to the tune of $3,000,000.

    --


    There are 01 kinds of cars in the world. The General Lee, and everything else.
    1. Re:Things you don't do by suicidal · · Score: 1

      Scientific Games has turned over Harn's identity and other evidence to the New York State Police and New York State Racing and Wagering Board officials, who are continuing to investigate. The FBI also has become active in the probe, the New York Times reports.

      "The board routinely involves other organizations in its investigations and will involve law enforcement if it feels appropriate,..."


      Yeah, they have their own "organizations" to investigate when someone rips them off....Sucks to be him right now!

    2. Re:Things you don't do by JWSmythe · · Score: 1

      In the good ol' days, Vinny and the boys would have just had a talk with him. They woulda taken the cash back, roughed him up a little, and dropped him off a bridge in 'Jersey for a little swim with the fishes.. (cement shoes not optional).

      Oh the good ol' day.. :)

      --
      Serious? Seriousness is well above my pay grade.
  35. Re:This wouldn't have happened when the mob ran it by ShawnDoc · · Score: 4, Funny

    The same thing happenes when the mob runs things. Its just instead of it making it into the paper as a "hacker" story, it would wind up in the paper as "Headless Body Found in East River".

  36. Obligatory Karma Whoring...The NYT Article. by jacobcaz · · Score: 2, Informative

    Worker Dismissed as Inquiry Widens Into Big Racing Bet

    By JOE DRAPE

    As the authorities investigated whether an exotic bet worth $3 million on last Saturday's Breeders' Cup horse races was rigged, the company that processed the wager said yesterday that it had fired a "rogue software engineer" who exploited a weakness in its system.

    The company, Scientific Games Corporation of New York, said it had turned over the employee's name and evidence of potential wrongdoing to the state police and state wagering officials.

    The employee attended Drexel University in Philadelphia with the winner of the bet, racing officials and a state investigator said.

    The head of the company, Lorne Weil, said the worker had the access and know-how to breach the system run by the company's subsidiary Autotote, which processes 65 percent of racing wagers in North America.

    Industry and law enforcement officials said that the F.B.I. had joined the police and the New York State Racing and Wagering Board in the inquiry of the wager, known as a pick six, which requires bettors to pick winners in six straight races. Payoff on the bet, made through the Catskill Off-Track Betting hub by telephone from Baltimore, has been held up.

    Investigators are also looking into whether there have been questionable payoffs at other tracks. "This goes beyond one afternoon and the East Coast," said an investigator, speaking on condition of anonymity.

    Though Mr. Weil tried to calm investors in his conference call yesterday, his disclosures pointed up the vulnerability of the $14.5 billion-a-year betting industry for which consumer confidence is crucial.

    As racing has become more reliant on off-track and telephone betting, it is also depending more on a network of computers that link tracks and off-track sites. If the systems are proved flawed, or susceptible to manipulation, it could scare off bettors worried about the integrity of the process.

    "There needs to be total review of the system so everyone can feel good and see that these things are not widespread," said Bill Nader, a New York Racing Association vice president. "Without integrity in the way a wager is processed, we don't have a sport."

    The case in question involves the pick six bet on the last six races of the Breeders' Cup, horse racing's season-ending championship. The entire winning pool was held by Derrick Davis, a 29-year-old Maryland man who made the bets by phone.

    Investigators are looking into whether the computer system was manipulated so that a bet made after several races had been run would appear to have been made beforehand.

    Though Mr. Weil did not name the dismissed employee, the state investigator and racing officials identified him as Chris Harn, 29, who worked in Autotote's offices in Newark, Del.

    Mr. Davis owns a Baltimore-based computer networking business, Utopian Networks Inc., but said yesterday that he was a knowledgeable bettor whose winning tickets were legitimate. "I didn't do anything wrong here," he said, refusing to elaborate and referring questions to his Baltimore lawyer, Steven A. Allen. Mr. Allen said his client was cooperating with the authorities and had nothing to hide.

    "He is caught in the middle of a maelstrom," Mr. Allen said. "As far as he's concerned, he made a legitimate bet. The race was run, and he won, and he should have received his payoff. And that should have been the end of it. Now, instead, there's an investigation, people are making a variety of wild accusations, and his reputation is being sullied for no good reason."

    Thomas Davis, Derrick's father, said his son grew up in Baltimore and attended engineering school in Pennsylvania, but would not be more specific. "I just think it's like the equivalent of his hitting the lottery," the father said. "I know in the bottom of my heart that it's a legitimate bet."

    Stacy Clifford, a spokeswoman for the state wagering board, would not comment on the personnel involved in the investigation or its progress.

    "The board routinely involves other organizations in its investigations and will involve law enforcement if it feels appropriate," she said. "They fired this person in connection with what happened Saturday, and since we're investigating what happened Saturday, we're certainly looking into it."

    What started the investigation last Sunday was the configuration of the winning tickets and that they belonged to one bettor, Mr. Davis, who called his bets in by phone to the Catskill OTB hub, one of five regional corporations that, with New York City OTB, handle off-track bets in New York.

    The winning tickets featured "singles," or races with only one horse selected, in the first four legs of the ticket, and then every horse in the final two races. On a $2 ticket, those combinations and strategy cost $192.

    Mr. Davis bet a $12 pick-six ticket, or played that exact combination six separate times, costing him $1,152. It was a highly unusual strategy for betting the pick six -- horseplayers like to cover as many combinations as possible -- and the configuration raised suspicions of New York Racing Association officials, who alerted Breeders' Cup Ltd. and the state wagering board.

    Mr. Davis had opened the Catskill OTB account within two weeks of the Breeders' Cup, had deposited money on five occasions -- four increments of $500 and one of $250 -- but had not made a bet until that pick six, according to investigative sources.

    The six winning tickets were each worth $428,392. In addition, by including every horse in the last two races, the bettor collected 108 of the 186 consolation payoffs for hitting five of six winners; each consolation ticket was worth $4,606.20.

    After an initial review on Monday, officials for Autotote and Catskill OTB said the tickets were recorded about 20 minutes before the first leg and appeared legitimate. But after further review, Mr. Weil said, the company determined that the fired employee had taken advantage of a weakness in the processing of bets.

    While the tickets were logged and totaled at satellite sites such as Catskill OTB, they were not transferred to the host site, Arlington Park outside Chicago, until after the fifth race when the exact bets were verified. In this state of limbo, Mr. Weil said, the employee, who had the password to the data system, was able to alter the ticket after the results of the first four races of the pick six were known.

    When Scientific Games announced the firing, trading in its stock was suspended on Nasdaq for more than 20 minutes. The stock closed at $7.62, down 57 cents. Mr. Weil maintained he was confident Autotote's systems were impenetrable to outside hackers.

    "I think people see this for what it is -- a rogue individual bound and determined to exploit the only weak link we see in the system so far," he said.

    1. Re:Obligatory Karma Whoring...The NYT Article. by aengblom · · Score: 2

      Obligatory request to MOD THIS DOWN!

      NY Times only asks that you spend 30 seconds of your life to make a login. They don't spam you and they won't sell your e-mail. Support the media when they create something you're actually interested in. CLICK ON IT... or just go to the Google link. Or DON'T READ IT!

      An interesting question: Why can't Slashdot get a partner link like Google has.

      Feel free, to mod ME down with the above post.

      --


      So close and yet so far from the world's perfect ID number
  37. Geee by Junta · · Score: 1

    What were the odds of that?

    .
    .
    .

    Ok, really bad, I know....

    --
    XML is like violence. If it doesn't solve the problem, use more.
  38. This is pretty funny... by Loki_1929 · · Score: 2

    I have several friends who work for Autotote (as well as some who work for Amtote) and they're all laughing their asses off over this whole thing; especially the media coverage.

    --
    -- "Government is the great fiction through which everybody endeavors to live at the expense of everybody else."
    1. Re:This is pretty funny... by Anonymous Coward · · Score: 0

      i love the early comments from the idiot that runs catskills otb (the site that runs the phone betting operation the guy used):

      Catskill OTB does not share their concern. Donald Groth, its chairman, told the Daily Racing Form: "I know why you're suspicious, but that's not my job. I'm familiar enough with the customer that I believe this was legitimate. . . . There is nothing to indicate that this was anything more than a very good day for our customer."

      It came out later that the customer had only been a customer for two weeks and had not used the account before the questionable wagers.

    2. Re:This is pretty funny... by david+duncan+scott · · Score: 2
      Hey, hurray for AmTote! I worked for them (well, technically for World Wide Wagering Systems, but we programed the systems for them and worked in the same building & stuff) back in the age of steam, around '83. Gotta' say, this wouldn't have happened on my watch, but then, I was doing the ontrack stuff, and it wouldn't even have occurred to us to hold a bet until after the race was run -- it went into the back-end immediately, performance and congestion be damned, for exactly this reason. Back then, men were men, and TIM's were TIM's, and Truth and Justice were Truth and Justice.

      Any chance they can get OTB back, now that AutoTote has covered themselves with shit?

      --

      This next song is very sad. Please clap along. -- Robin Zander

  39. Partial cents by Anonymous Coward · · Score: 0

    There simply must be a partial cents scam available for this application

  40. Anyone who's tried this hates it... by Embedded+Geek · · Score: 5, Insightful
    I work for a major supplier of in flight entertainment systems and we are always getting pressure from customers (especially on the Pacific Rim) to implement in flight gaming (i.e. electronic poker or slots). While some of our competitors have dipped a toe into this, we have pretty much steered clear to date.

    The fact is that implementing a gaming system is a nightmare, be it on the ground or in the air. IMHO, quite a bit more difficult than point of sale or banking systems. In addition to being secure, it's gotta be completely fail safe (so if a passenger's terminal goes down seconds after a jackpot he won't loose his winnings and take it out on the cabin crew). Also, it's going to be transaction heavy - hundreds of smaller, individual bets over a gambling session as opposed to, say, a higher end credit card transaction every minute at a department store cash register. If you add in the fact that gambling is a potentially addictive activity that piques the interest of organized crime, you have a recipe for any disaffected insider to slip in hacks and back doors.

    On the whole, I'm not surprised that someone corrupted a gambling system. I'm just surprised that this doesn't make the newspaper more often.

    --

    "Prepare for the worst - hope for the best."

    1. Re:Anyone who's tried this hates it... by DNS-and-BIND · · Score: 1, Troll

      Yaknow, it's really racist of you to mention that dig about the Pacific Rim demanding gambling. Go to western Arkansas, there you'll see weak-ass idiots who love to gamble. Asians are noble.

      --
      Shutting down free speech with violence isn't fighting fascism. It IS fascism!
    2. Re:Anyone who's tried this hates it... by Embedded+Geek · · Score: 5, Insightful
      ...it's really racist of you to mention that dig about the Pacific Rim demanding gambling.

      (*SIGH*)

      No racism intended - it's just a fact that Pacific Rim airlines have been primary movers in in flight gaming. Gambling is more accepted there than in the West, with less stigma attached. No Asian businessman expects to get dirty looks from another passenger if he drops a bundle of his own money on blackjack, but I bet you (yes, lame pun intended) that you'd see a lot of that on any US, Canadian, or European carrier (exception: I know Swissair has at least tried gaming. 'Don't know if it's still going strong). And when you think of it, they've got a point - what business is it of anyone how someone looses their cash?

      Also, the U.S. flight attendants' unions fight airborne gaming tooth and nail. As my cousin, an attendant for Delta told me "So now they'll expect us to deal with a guy who's both drunk *and* has lost $500?!"

      Again, this is just a simple observation of cultural differences. The fact is that most of our Asian customers (the arilines) don't understand why we regulate gaimng so strongly in the U.S. Once we pitch the technical (and regulatory) challnanges, though, they usually decide to request different features in lieu of gaming.

      --

      "Prepare for the worst - hope for the best."

    3. Re:Anyone who's tried this hates it... by AUsBandit · · Score: 1

      I can see why you wouldn't want to let them lose too much in flight. They might go nuts and try to open the airlock door and kill themselves.

    4. Re:Anyone who's tried this hates it... by Anonymous Coward · · Score: 0
      weak-ass idiots who love to gamble. Asians are noble.

      It's not noble to talk like this. You seem to be the racist here. I'm impressed by the fact that Embedded Geek didn't call you on this. I'd be pretty pissed if it was me you had defamed so unfairly.

      Don't bother responding for me. I have no intention of reading it.

    5. Re:Anyone who's tried this hates it... by DNS-and-BIND · · Score: 1, Flamebait

      Look, have you taken any university-level courses on race relations? If you haven't, stay the hell out of the conversation. It makes zero difference if it's true or not. If it defames people of color in any way, it's racist, end of story.

      --
      Shutting down free speech with violence isn't fighting fascism. It IS fascism!
    6. Re:Anyone who's tried this hates it... by Anonymous Coward · · Score: 0

      Your comment reminds me of Jesse Ventura (MN's idiotic governor) on talk shows.. someone debates him about his stance on anything related to the military, and as he's getting his intellectual butt handed to him (and can't think of anything logical to say), he just says "well.. have you ever served?!?.." That's the lamest cop out in the book. So I take it you've taken a course in race-relations..? So what!?! That should just mean that you'll have better arguments then the statement: "It makes zero difference if it's true or not." That's simply ludicrous.

    7. Re:Anyone who's tried this hates it... by DEBEDb · · Score: 2

      I think the parent was making a sarcastic
      comment about race-relations courses... Lighten
      up...

      --

      Considered harmful.
    8. Re:Anyone who's tried this hates it... by Anonymous Coward · · Score: 0

      wait wait, what if it fames 'people of color'? Is it racist?

    9. Re:Anyone who's tried this hates it... by Treylis · · Score: 1

      Actually, check his posting history. He's really that stupid.

  41. Software is insecure by adb · · Score: 4, Informative

    Also, the ocean is wet, and there is porn on the internet.

    Just so you know.

  42. Mod Parent Up! by yelligsc · · Score: 0, Offtopic

    Come on, you know you want to do it!

    Good point and all.

    Scott.

  43. What's next? by oiuyt · · Score: 2, Funny
    Next we'll find out that people cheat on things that DON'T pay like SETI@HOME stats....


    -B

  44. Vulnerable, Period by gradji · · Score: 5, Insightful

    I'm trying to figure out why people think computerized betting is any more vulnerable to fraud than the non-computerized variety.

    The Breeder's Cup incident was an inside job! There have been numerous Casino incidents where employees have tried to scam their employers. A security system is only as good as the people with whom the system is entrusted. This is true for physical security as well as computer security.

    Lastly, criminals are not, inherently, stupid. It only seems like that as the stupid ones are the ones that usually get caught. Borrowing from Kaiser Sousay (Kevin Spacey) in Usual Suspects : the greatest trick a master criminal has ever pulled is convincing the world that a crime has not been committed.

    --

    1. Re:Vulnerable, Period by binaryDigit · · Score: 2

      Borrowing from Kaiser Sousay (XXXXX XXXXXX) in Usual Suspects

      Doh, and thanks for spoiling the movie for anyone who might not have seen it.

    2. Re:Vulnerable, Period by DrSbaitso · · Score: 1
      Next thing he'll be say some foolishness like Anakin Skywalker is Darth Vader!

      ...what you say? His FATHER? NOOOOO!!

      --
      beware the jabberwock, my son! the jaws that bite, the claws that catch!
    3. Re:Vulnerable, Period by Anonymous Coward · · Score: 0

      The line is actually "The greates trick the devil ever pulled was convincing the world he didn't exist."

      And Kevin Spacey actually played Verbal Kent in that movie.

  45. Wake up with a horse's head next to him.... by wowbagger · · Score: 2

    This guy had better be very careful in the next few years, no matter what happens in court - the sort of folks who are involved in gambling are not known for taking such matters lying down.

    He may very well wake up one morning with a horse's head in his bed.

    Or more probably, wake up to that particular clammy feeling one gets from freshly mixed cement around one's body....

    1. Re:Wake up with a horse's head next to him.... by Whatever+Fits · · Score: 1

      Actually it is not as clammy as you might think for the chemicals used in the cement will actually eat your flesh away. I had a coworker once who climbed inside a broken transit mixer to try and shovel out the concrete before it hardened. His legs were so burned that he was off of work for several weeks.

      --
      My name fits again.
  46. Drexel CS Student? by mblumber · · Score: 1

    I currently go to Drexel.

    Drexel recently merged their CS major with the engineering school. I didn't know what to think. For all of you who don't know, Drexel university is a very business oriented school. It seems then that the desire for money simply becomes more and more.

    --
    Anyone who posts about bad moderation are themselves off-topic and should be moderated accordingly.
    1. Re:Drexel CS Student? by DNS-and-BIND · · Score: 2
      As with Tyco and Arthur Andersen...the only crime is they were caught.

      Drexel rules! I hope to work for a Drexel MBA at some point in my career.

      --
      Shutting down free speech with violence isn't fighting fascism. It IS fascism!
    2. Re:Drexel CS Student? by Anonymous Coward · · Score: 0

      CS is fluff. Engineering is work. You know those top 10 students in your CS class? They will be the bottom 10 in an EE class. Get ready for a culture shock.

    3. Re:Drexel CS Student? by jeffy124 · · Score: 1

      i too go to drexel. i didnt notice this story until it was top story of today's triangle. acc'ding to the story there, all 3 people involved never graduated.

      business oriented? to a degree, maybe. engineering in general is how i would describe us.

      --
      The One Rule Of Chess You'll Ever Need: Don't play someone who carries a kit in their bookbag.
  47. From the horse's mouth by Rareul · · Score: 1

    If you register (no verification), you can hear the Scientific Games CEO do damage control: Conference Call

    ?sp

    1. Re:From the horse's mouth by uncoveror · · Score: 3, Informative

      Scientific Games also does lotteries. Here is how they are rigged. Only the gangsters running the rackets make money from gambling.

      --
      The Uncoveror: It's the real news.
    2. Re:From the horse's mouth by Anonymous+Cow+herd · · Score: 1

      From the link: The lottery is not only a tax on people who don't understand math; it is an unfair and unjust tax. Didn't we have the American Revolution over taxes like that?

      Uhhh, firstly, until the government requires that you buy lottery tickets, it's not really a tax, it's just you being stupid and shoveling money out of the window. Secondly, large-scale operations such as state lotteries have no need to "rig" their drawings... most people who think these deals are rigged are just don't understand probability math. *shrug*

      --
      Ita erat quando hic adveni.
  48. Hmm...Next week's headline? by voice+of+unreason · · Score: 3, Funny

    In other news, shortly after being dismissed the former employee had an unfortunate accident resulting in the breaking of both his kneecaps.

  49. Much stronger disincentive tho by unicorn · · Score: 2

    I bet the average geek would think a lot harder about crossing Vinnie, and risking death, than just risking a little jail time.

    --
    "Politicians are interested in people. Not that this is always a virtue. Fleas are interested in dogs." P.J. O'Rourke
  50. I have friends who work (and worked) there... by kelleher · · Score: 5, Interesting

    Two relavent bits of info:
    1) They fired the QA department due to cutbacks over a year ago.
    2) There is no "Production Control" group. The same people who develop the apps support them (with little to no oversight). They have never had a way of preventing this type of fix.

  51. In related news... by Anonymous Coward · · Score: 0

    the employee was found floating in the East River.

  52. Re:This wouldn't have happened when the mob ran it by CaffeineAddict2001 · · Score: 2

    One time I found santa lying dead in the living room. I asked my dad why santa was dead and he said: "Son... Sometimes.. Santa gotta get whacked."

  53. He needn't worry about the authorities... by bshroyer · · Score: 3, Funny

    It's organized crime that's going to get him. Revenge.

    I see evidence that this guy is pretty lame - he's dumb enough to screw up a good scam his first time out by shooting for the moon. We can't assume that a novice is the first person to find this scam, but AutoTote indicates he's the first to be caught.

    I'll wager dollars to doughnuts that he's just closed the loop on a lucrative betting system being utilized by any number of "organized" gamblers, and will be hearing from a guy named Vito in the near future.

    --
    The cure for cancer is coming: Reovirus
    1. Re:He needn't worry about the authorities... by Waab · · Score: 1

      I find it somewhat offensive that you're suggesting the guy involved in the scam will be getting a visit from someone of Italian descent.

      He could just as easily be visited by a representative of the Russian mob or even the Yakuza. Considering how the scam was executed, the poor fellow might even find himself at the business end of a vicious /.ing.

  54. Why it was so suspicious by donutello · · Score: 2

    It was not a matter of just getting one lucky bet right.

    In the Pick-6 scheme, you get a jumbo prize if you pick all 6 winners correctly.

    What this guy did was buy a number of bets - each for $12 (that's probably all he had available). In each of the bets, the winners of the first 4 races were the same and he chose every possible combination for the winners of the last 2 races. Sounds like he knew who was winning the first 4 races and bet on every possible outcome for the last 2.

    --
    Mmmm.. Donuts
  55. "Wasn't that dumb"?? by Multiple+Sanchez · · Score: 2

    It was a relatively expensive and complicated bet based on the cumulative outcome of six separate races... and he placed the exact same bet six times.

    Once you've done that, putting a flashing marquee on your front lawn that reads "cheating the OTB out of millions of dollars is my very smart, infallible plan" is officially redundant.

    1. Re:"Wasn't that dumb"?? by ergo98 · · Score: 1

      Perhaps I'm misinterpreting, but it was my belief that they were saying that he won by winning 6 separate, probably successive, races. Most tracks have that sort of super payout, because of course the odds are successively worse and worse.

      Why would he buy six of the same winning ticket? He could have just bet 6 times as much.

    2. Re:"Wasn't that dumb"?? by Multiple+Sanchez · · Score: 5, Informative
      The winning tickets featured "singles," or races with only one horse selected, in the first four legs of the ticket, and then every horse in the final two races. On a $2 ticket, those combinations and strategy cost $192.

      Mr. Davis bet a $12 pick-six ticket, or played that exact combination six separate times, costing him $1,152. It was a highly unusual strategy for betting the pick six -- horseplayers like to cover as many combinations as possible -- and the configuration raised suspicions of New York Racing Association officials, who alerted Breeders' Cup Ltd. and the state wagering board.

      Mr. Davis had opened the Catskill OTB account within two weeks of the Breeders' Cup, had deposited money on five occasions -- four increments of $500 and one of $250 -- but had not made a bet until that pick six, according to investigative sources.

      The six winning tickets were each worth $428,392. In addition, by including every horse in the last two races, the bettor collected 108 of the 186 consolation payoffs for hitting five of six winners; each consolation ticket was worth $4,606.20.
      snip.

      It's still confusing no matter how many times I read it, but it sounds like he made six identical bets, when the point of the pick-six ticket is to place several different bets on one ticket. Anyone who can clarify this a bit more, please do.
    3. Re:"Wasn't that dumb"?? by aenea · · Score: 1

      The way I read it is this:

      He placed a pick six bet, which is a bet on what horse is going to win in six different races. For the first four races he picked one horse in each race. On the final two races he picked every horse. If his first four picks were correct he was effectively guaranteed a winning ticket.

      He then placed that same bet six different times. The allegation is that the bet was placed after the first four races were already won and the ticket was altered with the names of the winning horses.

    4. Re:"Wasn't that dumb"?? by aenea · · Score: 1

      Sorry, the allegation is that the ticket was altered after the first four races were run, not that it was purchased after the first four races were run.

  56. Bad design... by airrage · · Score: 2

    So from the article we can deduce there is a disconnect between the actual placing of the bet to the actual determination of a payoff. What they need is a chain-of-evidence system, so that bet's are placed (stored securely), once the race is closed for betting, the records should be posted to a new server (stored securely), then finally at payoff, the two records should be verified to have have been tampered with. Of course, this Engineer could have known both databases, but in this case you could insure no one person has rights to both databases. Of course a conspiracy of two is possible. My final problem with this is what about a one-way hash on these things: hasn't Kumar in India ever read about database encryption, why should an Engineer be allowed to see the plain-text record anyway? Otherwise you set HORSE_NBR = 5 (High Chapperal).

    --
    "This isn't a study in computer science, its a study in human behavior"
  57. picking the first four by neoThoth · · Score: 1

    What I can't figure out is how he would know all 4 of the winners in the first four. Everyone has just glanced over this detail. Saying "he knew the outcome ahead of time" is absurd! Unless the computer they had access to contained a script (this horse wins in the first...) and horse racing is as fake as WWE I'm still left in shock. Now if the guy had someone modify the bets AFTER the races that's another thing all together.

    1. Re:picking the first four by Waab · · Score: 1

      I believe that's exactly what the article is implying. The man called in and placed his bet prior to the first race. His friend on the inside then altered the ticket just after the fourth race.

      Maybe I need to read the article again, though. I'm pretty sure the only vulnerability in the system they discussed was the ability of someon to change the timestamp on a ticket, so something's not adding up. The initial bet could not have been made after the first race was run, but the article doesn't mention being able to change the horses a person bet on, only when the bet was placed.

    2. Re:picking the first four by Anonymous Coward · · Score: 0

      Well then, he possibly bet after watching the first four races and then had the timestamp on his ticket changed to a time before those racers took place.

  58. High-risk, high reward by f97tosc · · Score: 2

    I am sure you are perfectly right in that it is a royal pain in the butt to get an inflight gambling sytstem to work properly.

    That being said, I am sure it is just a matter of time before it is commonplace. The payoff is just too high, and the airlines are just too hard pressed to let go of a profit opportunity like this.

    Tor

  59. Go and handicapping similar. by buswolley · · Score: 2, Interesting

    handicapping is a lot like the game of Go. Its all about pattern recognition. What the patterns translate to.Computers have a hell of a time being good at it.

    --

    A Good Troll is better than a Bad Human.

  60. Similar case with bingo by HeroicAutobot · · Score: 2, Interesting
    This reminds me of a similar story about a programmer for GameTech rigged their bingo machines to let him cheat.

    Is there some development methodology or practice a company can implement to protect itself from "rogue" programmers like this? The NSA / CIA / FBI / Pentagon must have software that they want to guarantee is uncompromised. How do they do it?

    --
    I'm looking for a HEPA media filter for my TV. I'm alergic to reality shows.
  61. What's really dumb is ... by Greedo · · Score: 2
    ... the way the betting system worked, according to this article:

    An investigation this week by the Daily Racing Form revealed that while the amount of a Pick Six bet is transmitted immediately to a central computer, the horses selected are not often transmitted until after four of the six races have been run. Skeptics believe there is a window of opportunity here to change the selections after the winners are known.

    Charge the company that programmed the betting system too, why don't you!
    --
    Tuus crepidae innexilis sunt.
  62. Keyser Soze by Anonymous Coward · · Score: 1, Funny

    How about mangling that line a little bit more, felchboy?

    "The greatest trick the devil ever pulled was convincing the world he didn't exist." 'Didn't exist'. Not 'didn't do stuff'.

    And get the fucking name right. It's Keyser Soze.

    1. Re:Keyser Soze by david+duncan+scott · · Score: 2

      I see your Keyser Soze, and I raise you C. S. Lewis.

      --

      This next song is very sad. Please clap along. -- Robin Zander

  63. I always mess up those mundane details... by _anomaly_ · · Score: 1

    Well, this isn't exactly a mundane detail, MICHAEL!@#!

    --
    "I have no special gift, I am only passionately curious." - Albert Einstein
  64. Password Hack? by Anonymous Coward · · Score: 0
    Choice quotes on the subject from the Washington Post article on this. [Note: "A. Lorne Weil, chairman and chief executive of New York-based Scientific Games Corp., the parent company of Autotote."]

    "The programmer "had a password into the system and the ability to do what he did. He could have altered the ticket internally," Weil said, ...,

    and

    "The vulnerability in the system still exists, Weil acknowledged, but he said that his company will be watching future races closely until a fix can be found."

    So did someone with a lame password have his access hacked to the tune of 3+ MegaDollars?

  65. someone one? by Mantorp · · Score: 1

    win one one?

    1. Re:someone one? by Mantorp · · Score: 1

      someone else 1 2

    2. Re:someone one? by ergo98 · · Score: 1

      I apologize: I thought ahead of the speed that I typed. It can happen when you're in a teleconference at the same time.

      Having said that, I find people who feel it necessary to point out obvious mistypes/word transpositions fascinating, and perhaps mentally handicapped (I'm not trying to be mean or ostracize. Just a fascinating study). When I read most of the mutated text here on Slashdot, what actually makes it to my "reading cortex" is a demangled text: teh becomes the, etc. I suspect that it's the mildly mentally handicapped that are really thrown off by such errors as they struggle to read from word to word.

      I think there should be a study regarding this.

    3. Re:someone one? by Mantorp · · Score: 1

      ouch. Or should I make that autsch to fit your korteks bedder?

    4. Re:someone one? by good-n-nappy · · Score: 1

      Well, according to the Guide to Flaming, the psychology behind the spelling/grammar flame is:

      A posting ostentatiously correcting a previous article's spelling as a way of casting scorn on the author, instead of actually responding to that point.

      I think this makes sense because, as the guide (and my experience) points out:

      Spelling flames often contain spelling errors.

      I think this argues for some other pathology rather than a simple need to improve comprehension. I think it is also often the flamer's desire to post something that is "correct" when they don't have anything to say about the actual topic. At least, that's why I'm posting about flaming rather than gambling ;)

      --
      Never underestimate the power of fiber.
    5. Re:someone one? by Mantorp · · Score: 1

      OK, I'll stop.

    6. Re:someone one? by good-n-nappy · · Score: 1

      That wasn't meant to be directed at you. It was more just a general observation. I almost always notice spelling mistakes and feel a strong urge to correct them. I have the same problem when I try to write a paper. I have a hard time writing rough drafts because I get caught up in the details. In hindsight though, the times when I've actually posted a spelling flame were when I didn't have anything else to say.

      --
      Never underestimate the power of fiber.
    7. Re:someone one? by gfim · · Score: 1

      It's an extract from an ancient (but very relevant) poem:

      One-one was a racehorse
      Two-two was one too
      One-one won one race
      Two-Two won one too!


      Wow - that was hard to type!

      Graham

      --
      Graham
  66. The conversation of the thieves by Anonymous Coward · · Score: 0

    Samir: Is, is there a way to just give the money back?

    Peter: What? We just hand them a check with the exact amount they're missing? I, I think they'd figure that out.

    Samir: Well, we have to do something.

    Michael: May-maybe we launder the money.

    Peter: That's a great idea. Ok, how do we do that?

    Michael: I don't know, I don't know. I don't even know what it means. It's something I think, I think coke dealers do.

    Peter: Ok. Do we know any coke dealers?

    Michael: My, my cousin's a cokehead...... We're in deep shit.

    Samir: Yes. We are in very, very deep shit.

    1. Re:The conversation of the thieves by thilmony · · Score: 1

      thumbs up their asses... thumbs up their asses!

      --
      YES, there is a McDonald's in Hanoi Square.
  67. Re:Deez Nutz... by Anonymous Coward · · Score: 0

    Sure, although it's strange you want me to trim your sack and not just the hairs. But oh well!

    *thwack!*

    Here's your balls, sir.

  68. And Nelson points and says... by zipwow · · Score: 1

    "ha-ha!"

    -Zipwow

    --
    I don't know which is more depressing, that 2/3 didn't care enough to vote, or that 1/2 of those that did are crazy.
  69. Shut up! by Anonymous Coward · · Score: 0

    I love my country! You are just jealous of The Land Of Liberty And Freedom! You are probably an arabic!

  70. As long as we're picking nits... by Anonymous Coward · · Score: 0

    Actually, it [b]was[/b] six bets--six Pick 6 bets, each bet with the same set of Picks for the first six races (the first four races picked one horse, and picked the field for the last two races).

  71. six bets by Waab · · Score: 1

    I believe when the mention the series of six bets they're refering to the fact that he placed a single $12 bet, which is equivalent to 6 (six) $2 bets ($2 being the minimum you can bet on a ticket).

  72. FORGET THE NY TIMES by Anonymous Coward · · Score: 0

    There are too many sources of information in the world to necessitate the use of a password/login provider. If the NY Times wants our attention, they should open up their info to anyone, not just those willing to sign up for their spam.

    1. Re:FORGET THE NY TIMES by MattCohn.com · · Score: 1

      Yah, I'm sure that yo@mama.com is getting millions of accounts worth of NYTimes spam...

  73. I ALWAYS DO THAT by Bluesman · · Score: 1

    I always mess up some mundane detail!!

    --
    If moderation could change anything, it would be illegal.
    1. Re:I ALWAYS DO THAT by Anonymous Coward · · Score: 0

      This isn't a mundane detail MICHAEL!

  74. Not vulnerable, exactly... by Captain_Stupendous · · Score: 1

    I wouldn't say it was vulnerable to attack. If you read the article, it says this was an employee of the company that developed the software, (alledgedly) using his password to get into the system and mess around. This makes the system "vulnerable" in the same way that your servers are "vulnerable" to attack by the network administrator.

    --


    I am alone, yet I also surf the universal backwash of undifferentiated Being, which is LOVE.
    1. Re:Not vulnerable, exactly... by CeZa · · Score: 0

      Vulnerable is vulnerable. If banks can be robbed by inside employees should it not be considered a risk/a vulnerability?

  75. (-1, Offtopic) by tapin · · Score: 1
    The movie is seven years old.

    By the way, "Rosebud" was Citizen Kane's sled.

    And that girl in "The Crying Game" is really a guy.

    For people who haven't seen the movie yet, the attribution wouldn't mean anything -- until you pointed it out, and now it might stick. Oh well.

    (And the grandparent's spelling of "Keyser Soze" is the worst I've ever seen. King Sousa? I don't remember the part where Kobayashi was a tuba player in a high school marching band...)

    1. Re:(-1, Offtopic) by binaryDigit · · Score: 2

      Right but "Rosebud" and "Crying Game" because of the movies they are have their "secrets" pretty much known to everyone. I still run across a lot of people who have never heard of the "Usual Suspects", so giving that away has a lot more meaning than those examples that you gave. Almost like me giving away the "secret" to "The Ninth Configuration" vs "The Sixth Sense".

      Plus, yes, the attribution at the time of reading wouldn't mean anything to those reading it. But as soon as they started watching the movie they'd immediately would make the connection, especially since KS is such a big star now (unless of course their short term memory is like mine, in which case they'd probably forget they read it, what movie are we talking about again?)

    2. Re:(-1, Offtopic) by macdaddy357 · · Score: 2

      This one will really blow your mind. Darth Vader is Luke Skywalker's Father!

      --
      How ya like dat?
  76. NASA Space Shuttle - software engineering process by Steve+Hamlin · · Score: 1

    Is there some development methodology or practice a company can implement to protect itself from "rogue" programmers like this? The NSA / CIA / FBI / Pentagon must have software that they want to guarantee is uncompromised. How do they do it?

    Yes, there is. Here is a story about the software engineers (these people actually deserve the title) who design the inflight systems for the Space Shuttles.

    The product is the process , moreso than the actual code. It is a fascinating read.

  77. Coming from the industry... by Anonymous Coward · · Score: 0

    I can say that the events as described (the pattern of deposits with no gaming followed by a BIG win) smells very stronly of fraud.

    Yes, it's possible that it's innocent, and the guy deserves his 3 million bucks....

    But if you've ever seen how people defraud online wagering systems, there is a definite pattern they follow that normal punters simply do not do.

    People often seem to think that becuase you found a glitch in the software to make it pay, you deserve the money; on the contrary, an online system being tricked into doing something contrary to the posted rules is no differetn than your bank accidentally posting extra money to your account; you don't get to keep the cash.

  78. I guess you watch a lot of Television? by Anonymous Coward · · Score: 0

    Because your perception of the gambling business seems to ring true to what you see in the movies, and not what happens in reality.

    IT's not all organized crime; many gambling operations make very high profits, and dealing with fraud is a cost of doing business, not a major deal. It is doubtful anyone would kill the guy; he is no threat.

  79. Why computerized gambling is safe non-computeri. by gurps_npc · · Score: 1

    Computerized gambling works as follows: A human invents a game and then publishes documentaion describing what he did. The inventor has 100% over all factors Regular gambling works as follows: Find a supposedly unpredicatable (or at least unreliably predicatable) event. Develop and and publish rules for betting on it. Ways to cheat on Regular gambling: Find a method of predicting the event. Trick the system so as to change your bet or change/disguise the event after the game is over. Ways to cheat at computerized gambling: Everything above Plus: lie about what you documented. and most importantly, the human in real life is SELECTING the unpredicatable event as opposed to CREATING it. By definition, he has control over about 5% compared to 100% Chances are the Casinos are not also manufacturing: the Cards used in poker let alone the die in the ink used on the cards, or the wax used, or the back design. They SELECT from what is available, instead of making to their own order. This forces them to give up a lot of the control.

    --
    excitingthingstodo.blogspot.com
  80. Except . . . by Anonymous Coward · · Score: 0
    We are all someones child after all

    What about the sentient Bank of America ATM ?

  81. What a scam by sbillard · · Score: 0
    This was done on a pick-6 wager. The first four selections were altered after the race had been run, the 5th and 6th races were "all" "all" - playing the entire field in each of the last two races. Thus a "winning" ticket.

    We all know the payouts are based on the pool (kitty) divided up by the number of winning tickets (roughly). Since there are far fewer winning pick-6 tickets now that this has been exposed, what happens to the $3 million that should be divided among the legitimate winners?

    Someone is getting rich off of this. And it isn't the Amtote hacker(s).

  82. answer by xintegerx · · Score: 1

    As I understand, they are live before, but of course don't change afterward, unless the bet is still open.. Is the bet still open?

    I've seen a betting site, a chess one for Kramnik
    versus Deep Fritz. They had odds listed for each person to view before they could place their bets. This is a web site, so it's not unusual for there to be live updates. Most people betting on Fritz? Okay, so if I bet the same $1 dollar on Kramnik and win, my take would be larger than if I won with $1 dollar on Fritz (as I understand.) I can see how live updates could work, allowing gamblers to 'set' their risk.

    However, do they have live odds updates on location in race tracks? Remembering old movies, I thought no... but now with the internet accessible everywhere, it must be easily possible if it's possible online (same exact thing.)

    Does anybody know if it's true that odds are live on real race tracks (betting on location), and how did they use to do it before the internet (like in Rocky 1 - 17 and earlier boxing movies?)

    1. Re:answer by Evil-G · · Score: 2, Interesting

      On race tracks... I don't know if this still goes on, but have you ever seen a man stood on a box waving his arms about like a mad seal at a race course? They are signalling the odds of different horses in some kind of sign language.

      I believe the name is tic-tac man... aha, ive found a link which explains it a bit better here

  83. "user interface too complex" by xintegerx · · Score: 1

    VB was a very bad choice, in my opinion, for this.

    and

    The user interface was too complex and we had far too many lines of code.

    Excuse me, but languages don't make bad interfaces, people do. Languages don't force you to write far too many lines of code, people do.
    They key with visual basic is to treat the interface part of the application SEPARATE from the code. Keep the actual code in modules... Much code, many modules (just like C++ or Java). Or if you want, use classes (just like C++ or Java), except remember that classes in VB before VB.NET couldn't do the fancy pancy. You should probably pretty much have just ONE LINE in your Form_Load()s, Button_Click(), etc.--a Call User_Did_This() to a sub in the appropriate module. Let the right functions do the tricks, and you won't have "far too many lines of code." (Of course, it is very tempting in ALL languages to mix and match things between modules to make them "fit", thus making modular subs not entirely modular.;)
    As for interfaces, it's not VB that's the problem. Search for "interface" in slashdot's topics, they have done many a-Ask Slashdot for creating GUI's.

    But anyway, if you write in Visual Basic like it's a real language, you'll get real stuff. If you write in Visual Basic like a Business Major might--don't comment, don't plan ahead, don't have a design plan, don't be modular, don't stick to your design plan once you do have it, you get the picture ;)--then it will fail. Treat VB like a hyperdevelopment process for prototyping (as in, jumbled code just to see a button display a MsgBox "IT WORKS!"), and it will fail.
    Instead, remember programming is more than word-processing, there's a design plan and problem solving involved, and you will hopefully succeed....

    That is, until Microsoft Gouls and Goblins change the COMPLETE LANGUAGE SPECIFICATION for the next (current) version of VB (VB.NET), and your code isn't compatible anymore! Look who's laughing, now! :) You want to convert old code to VB.NET spec? Much a re-write, and the conversion tool is only available in Visual STUDIO.NET Professional and above (even though it's for VB), and won't change all MUHAHAHA! ;) HAPPY HALLOWEEEN!

    1. Re:"user interface too complex" by Anonymous Coward · · Score: 0

      Alright, yah.

      Uh, please mod up, as this is I think the one person on Slashdot that wouldn't go instinctivly 'VB?!?! EWWWWWW!'

      VB is actually a very powerfull and expandable programing language, if people learn how to use it. There are lots of shitty VB programs, and lots of world-class complicated programs. I am working at a company in California that works entirly in Visual BASIC for a very complex program. I'm new, but the senior programers are wonders at this. They could do anything.

    2. Re:"user interface too complex" by xintegerx · · Score: 1

      Thanks for supporting me (although supporting me under 'Anonymous Coward' sort of lowers credibility. :) ) The truth is, even many Microsoft lovers bash VB, let alone Linux-zealots. :)

  84. that's scary by xintegerx · · Score: 1

    Here is an interesting spark for a topic on 'Ask Slashdot?'

    Computer Science is one of the most popular fields of study and research nationally.

    That's scary! I know that at a pretty good CS school like Umass Amherst, only about 30 or 60 students receive a Bachelors Degree in CS a year! And that MANY students choose CS and MOST change their major after the first year. But if there are so many students majoring, is CS devalued now? Is the pay worse, the jobs less, too much work for pay? If you or someone you know started as CS and switched, why did you switch, to what did you switch, and what is your stage in your life right now, having taken the path to switch?

  85. From Texas by PingXao · · Score: 2

    True story: A guy I work with in NY is from Texas. He had a meeting with someone from the database group last week, and when he came back, he was telling us about the things "That Russian guy" told him. Well, the DB group doesn't have any Russians in it, so we asked him who he was talking about. His answer: "You know, the Russian guy with the beard. Vito." Once you've been to Texas things like this don't really surprise you anymore.

  86. Two different systems by Goonie · · Score: 2
    In Australia, there are two different odds systems for racing (thoroughbred, trots, greyhound):

    One, which is the one you get by default if you bet with the off-track betting agencies, is the one described where the odds change *after* you have placed the bet. The agency takes their cut, and the rest is distributed to people who placed winning bets in proportion to the amount they bet. An Australian developed an early analog computer, the totalizer, to automate this process in the 1920s(?), thus continuing Australia's long history of being a world leader in gambling technology ;)

    Bookmakers at the track instead offer fixed-odds betting - any individual bet is at known odds, though they can and do adjust them nearly continuously.

    As to your question as to how bookmakers offering fixed-odds bets know how to judge the odds, they follow the patterns of bets very closely (nowdays often with the aid of computers) and keep track of information about the horses they are offering bets on. However, bookmakers can and do lose money on a race. Some very rich men (notably a guy called Kerry Packer) make a habit of screwing bookmakers each year at Melbourne Cup day.

    --

    Any sufficiently advanced technology is indistinguishable from a rigged demo
    --Andy Finkel (J. Klass?)
    1. Re:Two different systems by jmp · · Score: 1

      The Aussie was Sir George Julius. The first automatic totalizator system was installed in New Zealand in 1913.

      A very thorough history of totalizator technology can be found at Brian Conlon's Totalizator History site.

      --
      jmp
  87. This is *not* big news. by invispace · · Score: 1

    Something the articles don't mention is that the autotote system is ancient. The software runs on old Vax systems. The way autotote is installed is by duplicating a hard drive and putting it into a "new" vax.

    There are so many of those boxes floating around the country that this must happen all the time. As most people probably know banks are scammed on a daily basis, but they don't report it to papers because it would cause public relations problem. The stolen money is funneled off into operating costs in quarterly reports. With a decent amount of social engineering one could probably rip one out of any of the off-track facilities in the country. Because of the nature of the business, which is shady in the first place, gambling does not usually attract, on the lower levels, the brightest and most capable people. On the highest level it is always a matter of fighting against the laws, whether it be slot machines, online gambling or horseracing.

    Take for example the state lotteries. It's gambling, pure and simple, except casino's must guarantee a certain percentage of payouts.

    In California:

    This weeks lottery is worth $17 million. If you choose the cash payout, you divide $17 million in half to make $8.5 million.

    So now you have an $8.5 million prize awarded to you by the state, correct? No. Because that $8.5 million payout is income according to the state you've put yourself into a tax bracket that is nearly 50% in income tax. So divide that $8.5 million by 2 again. You now have roughly $4.25 million. But wait.. there's more. Take the income that you made for the rest of that year. Say you make $90K per annum, you've just raised your tax on that income as well. Now you owe bak taxes on all the other income you've made that year.

    I'm not saying I wouldn't like to win the lottery. If you look at the details, it's more than obvious it's the dealers game no matter what you do. $3 million is merely a drop in the bucket for these companies. The only difference is that the press got a hold of a police report this time.

    --
    -- -- A truly great man never puts away the simplicity of a child
  88. Clever but her is how I would do it by BCTECH · · Score: 1

    I worked for this end of the horse racing industry for a number of years. We contracted with both Amtote and Autotote.

    It was a matter of time before someone pulled something like this. There were times when people were forging the barcodes on winning tickets with just a pencil and eraser.

    Often people throw away winning tickets by accident or never return to the track to cash it in. These uncashed tickets are called "outs". Outs are required to be turned over to the state after 180 days. The amount of time may vary from state to state.

    At any one time racetracks around the world are holding hundreds of thousands of dollars in "outs". I often thought that it would be a perfect heist to reprint some of the bigger winning tickets and cash them in. It would have to be an inside job though as you would need the serial numbers of the winning tickets in the outs database. The tickets themselves are not hard to forge and even if poor, they could be cashed in at automated tote machines.

    Not advocating anyone go and do this. Just some thoughts from someone that was on the inside of that industry.

    On the other hand there was no such press and no one was ever arrested when ~$350,000 in cash walked out of the Los Alamitos money room one night. So the perfect crime is usually low tech.

  89. whoops by JimFromJersey · · Score: 1

    I thought they meant Nasdaq got hacked.

    --
    between the greater and lesser infinities sleep the dreams undreamt
  90. Registering isn't paying for it. by Inoshiro · · Score: 2

    Not in any useful matter.

    --
    --
    Internet Explorer (n): Another bug -- that is, a feature that can't be turned off -- in Windows.
  91. misread it again by banka · · Score: 0

    did anyone see the headline as
    "Computerized Beating System Proves Vulnerable"??

    that would indeed be one crappy beating system..

  92. I used to work AmTote, not AutoTote. by buss_error · · Score: 2
    I worked for AmTote for a number of years, so herefor I know of which I speak.

    It's common practice to transfer the matrix of a pick 6 after the 5th race is official. The is because of the size of the matrix otherwise.

    My question is "where was the state supervisor during this?"

    I'll refrain from saying more here, but beleive me, there is a whole lot more to this story than's been said, and a lot of things that will tell the tale if anyone looks.

    I can tell you that during my time with AmTote, the tote operator couldn't change bets at all, only place a bet (just like everyone else did, at a ticket machine), or he could cancel them. And big muddy footprints all over when he did. I don't know that this is still the case, but I would think so.

    In all honesty, I have an axe to grid with AutoTote, because of something one of their operators did to me during a race. Doesn't matter now, I guess.

    --
    Necessity is the plea for every infringement of human freedom. It is the argument of tyrants; it is the creed of slaves.
  93. online voting? touchscreen machines are bad enough by rynthetyn · · Score: 1

    I'm from Florida, where it's already been proven we can't run elections. So, what do the geniuses do? They go to touchscreen voting machines with closed source software--now, we can have rigged elections, and no way to check up on it because of copyright laws. ooh great, I'm proud to be a Floridian.

    --
    Eagles may soar, but weasles don't get sucked into jet engines...
  94. Gambling monkeys by Anonymous Coward · · Score: 0
    I worked for a firm that was effectively a glorified booky. They had no concept of security or how to manage computer systems.

    They were handling huge amounts of money and making BIG profits, but:

    1. Business critical systems were controlled through Excel spreadsheets on dealers' desktops
    2. A lot of their business logic was implemented in Visual Foxpro, in a totally unmodular and unmaintainable way.
    3. They didn't have a full disaster recovery plan in place for a period of years.
    4. They paid big money to a bunch of cowboy developers who failed to deliver for years, and eventually implemented a "chat" system that was worse than vanilla IRC.
    5. They took bets on the internet. I suspected they might be trusting the prices the client sent (via a Java applet) without checking them. I repeatedly explained the risks of this to the IT manager, but he couldn't understand and took no action.

    They were a large, respectable company and are still around, to my surprise. Someone could easily steal from them by messing with their IT systems, because the technical people were assmonkeys.

    However, some of the 'business' people were very smart, and would have noticed suspicious bets. That's what happened in the Autotote case too, it seems.

  95. Last Post! by alpg · · Score: 1

    If he once again pushes up his sleeves in order to compute for 3 days
    and 3 nights in a row, he will spend a quarter of an hour before to
    think which principles of computation shall be most appropriate.
    -- Voltaire, "Diatribe du docteur Akakia"

    - this post brought to you by the Automated Last Post Generator...