The Death of Poker Media?
Jonas Odman, VP of Bodog Network and Anonymous Tables
Zynga Ready for Real Money Gaming or Trying to Hide Failures?I haven’t really checked back recently since writing my posts on unsafe poker rooms that fail to encrypt your personal information but Brian over at MattahFahtu did take the time to check ‘em out and it looks like they’ve finally gotten around to correcting the problem.
I guess what really cooks my goose on this is that someone made a conscious decision to do this. This isn’t a case where you have two distinct pieces of software for .Net and .Com. Here was a piece of software that encrypted your password if you had a real money account and left your password completely exposed if you hadn’t made a deposit yet. In other words, you had code that looked something like this:
if(realmoney) {
encrypt_and_store();
} else {
just_store();
}
What possible purpose would there be in not encrypting the password? You had to go out of your way not to do it! In fact, if you later deposited funds, the software would presumably have to go and encrypt your password so not only did you have to go out of your way to write the unencrypted password but you had to write even more code that went and encrypted the password once a deposit was made.
Given the above, I’m going to guess this wasn’t just some rouge programmer who got lazy*. Instead, I’ve got to believe that some product manager spec’d it that way. For what goal I have no idea.
* There is one scenario where an incompetent programmer might have done this. It would be if that was his flag for whether an account was real or play money. There are at least 100 easier ways to flag that information but it is possible that is what the unencrypted value was being used for.
Related Posts
-
Unsafe Poker Rooms Part Deux
-
Unsafe Poker Rooms
-
Poker Rooms and Encryption
-
So What Happened To The Poker Rooms This Week?
Updates Emailed to You Hot Off the Press |
 |
Hi, my name is Bill Rini and this is my poker blog. I've been blogging about poker and the poker industry since around 2003-ish. Like most people I started out playing poker as entertainment in home games whenever we wanted to sit around and smoke cigars, drink beer, and eat pizza, and needed a good excuse. I started playing online shortly after the first online card rooms opened and it wasn't long before I was playing 20, 30, or even 40 hours a week or more. One day I received a phone call about a program manager position at Tiltware which was the company that consulted to Full Tilt Poker on software development and marketing. After Tiltware I spent about 2.5 years working at Party Poker where I was the poker room manager.
{ 1 comment… read it below or add one }
I’d guess the reasoning was that it would be worthwhile to be able to look up the passwords for play money players if they forgot them, instead of forcing a password reset.