Arbusers

Hi there !

I'm arbing a long time now but I'm not using some bookmakers because of the missing encryption on their website... I checked a lot of sites and I realized, that many of them dont't have a https website available. If anyone don't know what https is, check this:
en.wikipedia.org/wiki/HTTP_Secure

That means that everyone in your network (or maybe even "after" your network) can see your password and all other information (man in the middle attack
en.wikipedia.org/wiki/Man-in-the-middle_attack)....
So my question is, if you ever thought about that or if it doesn't matter for you..

I have some examples for unencrypted sites below.... The one with ( * ) means, that https is not the standard website, so you have to type in https before the address. All others don't have any https website available.

- 10bet and 12 bet ( * )
- BetVictor
- SBO (Login is encrypted but after that no https available --> Session Hijacking is possible !!!!!!!
en.wikipedia.org/wiki/Session_Hijacking)
- Canbet ( * )
- Coral
- 5dimes
- Dafabet
- Youwin
.....

I didn't mentioned all bookmakers which don't have https as default website, because nearly 50% of all bookmakers have http as default and thats really really bad....

If you know other bookmakers without encryption on their site or if I have wrong information in my post, please tell me (and the others )

Have a good new Year!

bookies use some of the most unsecure software coders could write. it's like they have monkeys working for them.

honestly, when you change a password, or reset, and you get a NEW one or even worse, OLD one in an unencrypted email, you know they are amateurs. they're not even hashing passwords before saving. even every 1st grade IT students knows that.

this begs the question, would hacking arbers be profitable ?



nah, i wouldn't do that. but honestly, i was a little disgusted by some of the software bookies use. especially affiliate software, that netrefer is just plain awful.

I was once chatting with a 5Dimes support agent and he asked for my password in order to continue. I said I wouldn't tell him my password and that he should verify my id by other means (address, telephone, birth date, etc). He insisted so I told him he is not supposed to know my password.... Then he told me my password :-). It's really annoying to realize how the most elemental safety rules are disregarded.

Session Hijack is possible in the most webpages around the world, you can sit in a Starbucks and steal Facebook sessions in a very easy way; a student can do that...

But what would you do if you steal a session in a Bookie... bet the money?? You won't be able to withdraw to your account, and if you can you will give a nice trace to your home...

Hacking bookies is not a great idea... maybe you should better look the way to raise your credit in a bookie... that is a better idea...

ppintaluba wrote: I was once chatting with a 5Dimes support agent and he asked for my password in order to continue. I said I wouldn't tell him my password and that he should verify my id by other means (address, telephone, birth date, etc). He insisted so I told him he is not supposed to know my password.... Then he told me my password :-). It's really annoying to realize how the most elemental safety rules are disregarded.

betdsi also do this...... i told them the same thing but she said i have your password in front of me 

caraPan wrote: Session Hijack is possible in the most webpages around the world, you can sit in a Starbucks and steal Facebook sessions in a very easy way; a student can do that...

But what would you do if you steal a session in a Bookie... bet the money?? You won't be able to withdraw to your account, and if you can you will give a nice trace to your home...

Hacking bookies is not a great idea... maybe you should better look the way to raise your credit in a bookie... that is a better idea...

Facebook has https, it's not possible (not that easy as you described) 

caraPan wrote: Session Hijack is possible in the most webpages around the world, you can sit in a Starbucks and steal Facebook sessions in a very easy way; a student can do that...

But what would you do if you steal a session in a Bookie... bet the money?? You won't be able to withdraw to your account, and if you can you will give a nice trace to your home...

Hacking bookies is not a great idea... maybe you should better look the way to raise your credit in a bookie... that is a better idea...

Chip dump

007dave007 wrote:

caraPan wrote: Session Hijack is possible in the most webpages around the world, you can sit in a Starbucks and steal Facebook sessions in a very easy way; a student can do that...

But what would you do if you steal a session in a Bookie... bet the money?? You won't be able to withdraw to your account, and if you can you will give a nice trace to your home...

Hacking bookies is not a great idea... maybe you should better look the way to raise your credit in a bookie... that is a better idea...

Facebook has https, it's not possible (not that easy as you described)

not as easy, it is easier. I can show you whenever you want. You get the cookie, you are in dude.

Chip dump
...

very easy to follow the money, you will finish jailed.

There are more ways to get the money out of a stolen betting account,i won't  say them because maybe people with mischievous intentions are reading.
caraPan you are forgetting one thing people that do this aren't that smart they don't think about consequence,they just want your money.
So better keep accounts safe.

ArberPro wrote: There are more ways to get the money out of a stolen betting account,i won't  say them because maybe people with mischievous intentions are reading.
caraPan you are forgetting one thing people that do this aren't that smart they don't think about consequence,they just want your money.
So better keep accounts safe.

Hi. Could you please give some tips about security? I mean about a good antivirus, etc. And how to keep accounts secure?
Thanks!

rapsternapster wrote:

ArberPro wrote: There are more ways to get the money out of a stolen betting account,i won't  say them because maybe people with mischievous intentions are reading.
caraPan you are forgetting one thing people that do this aren't that smart they don't think about consequence,they just want your money.
So better keep accounts safe.

Hi. Could you please give some tips about security? I mean about a good antivirus, etc. And how to keep accounts secure?
Thanks!

you cannot keep your account safe with a good antivirus or some other software.. The problem is the implementation of the website on the site of the bookmaker. You cannot do anything against it because unless you don't have an end to end encryption between your pc and the webserver your login data is not safe! Thats the thing...

Anitvirus only protects you against maleware (keyloggers) but this is not the main problem

Just realised today that even BETDAQ has no https available.... thats so bad....

caraPan wrote:

007dave007 wrote:

caraPan wrote: Session Hijack is possible in the most webpages around the world, you can sit in a Starbucks and steal Facebook sessions in a very easy way; a student can do that...

But what would you do if you steal a session in a Bookie... bet the money?? You won't be able to withdraw to your account, and if you can you will give a nice trace to your home...

Hacking bookies is not a great idea... maybe you should better look the way to raise your credit in a bookie... that is a better idea...

Facebook has https, it's not possible (not that easy as you described)

not as easy, it is easier. I can show you whenever you want. You get the cookie, you are in dude.

Thats nonsense dude! That doesn't work with encrypted connections thats the whole sense of encryption, that you cannot read the data in between!

Keep accounts safe :
Don't use the same email for betting as that for facebook,other stuff ,create a new one,don't use the same password at a bookie ,e-mail,or skrill.
IIf you have skrill you could try get the token for extra security.
I think most accounts are stolen thru phishing so always use the url bar or google to enter the site not via email.For viruses i don't trust any antivirus software i have a personal computer for movies/games etc and other computers wich i use them stricly for arbing.

Perfect! Thanks!