Announcement

Collapse
No announcement yet.

We're Not Going Anywhere

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • We're Not Going Anywhere

    It seems there are more rumors about the Dunes flying around these days than about who killed JFK. We have remained quiet up until this point for a variety of reasons, each of which will be addressed below. This article is not written to shock or alarm any customer, but to remind them of what goes on at every sportsbook, and the constant vigilence needed to maintain security as in any online industry. We have remained quiet up to this point, agonizing over how to approach each issue, increase security, be honest with the public, and keep everyone duly informed without hurting ourselves or our customers, and the industry. Our decision to be brutally honest will hopefully serve to keep the public's confidence in us and to bring together a usually divided industry on an issue pivotal to the future of us all.

    1. Many questions have been raised recently regarding our stability and financial position. Rumors are running rampant and while some are based in fact, most are so off base that we can't even fathom how or why they began. To put it bluntly: We are NOT going anywhere. We are NOT broke. We ARE paying our customers.

    This industry thrives on egos and jealousy. This is probably the biggest obstacle that stands in the way of true acceptance and legitimacy. While the books hold a certain respect for one another, don't think that they don't summon the band and get out the pom poms when they hear one SMIDGEN of a rumor that someone is going out of business or someone didn't get paid.

    Having said that, let me say that our payouts have, at times, been slower than they were last summer and early fall. The reasons behind this (other than JR's stinginess) can be found in issue number TWO.

    2. We have been hacked three times since October, and there is no telling how many other books have been affected by this and how much damage has been done. Sit down…the description of how we discovered this is rather unbelievable:

    We have had a Russian customer (whom we will not name at this time) just about since we opened our doors. In the beginning he was a very good customer. He used his credit card, but provided the necessary forms and documentation with no problems. He won some money, we credited back his cards and sent him a few Western Unions and a bank wire. For a few months we heard nothing from him. In September, he loaded up his account with 5 figures worth of credit card charges and started firing away. We were not concerned (although perhaps we should have been), because this customer had been so good in the past. He lost, and kept losing time and time again. At any rate, on October 23, 2000, he ran up $60,000 on 22 credit cards. This obviously sent up a red flag; we stopped his account immediately, and contacted him for the documentation we were fairly sure he would not be able to produce. We went back and forth on whether to just credit the cards back when on November 13, 2000 MasterCard International informed us all that we could no longer issue credits to MasterCard. Coincidentally enough, all 22 credit cards were MasterCard. We knew we would probably be seeing these on our chargeback lists, but there was nothing we could do.

    About a week before Thanksgiving, I received a chat request from our "live chat with an operator" feature. It was our Russian friend. He asked why his account was stopped, I informed him of the credit card fraud, and how damaging this was and he then proceeded to inform us that we had a security hole. Of course I was defensive and skeptical…until he produced my network login and password. He then proceeded to produce everyone else's logons and passwords to not only our network, but to our Esports Software as well. After calling Jim and JR, the other two principal managers in the office, to my computer and showing them this……the Russian sends me a URL. I click on it and am shown a copy of the directory structure of our hard drive. Not one person said a word for at least a full minute. After picking our chins up off the floor we moved the conversation to the ICQ chat program for more privacy. Over the next five hours, of very careful discussions with this guy, we were told that ALL sportsbooks were easy targets for such fraud. He demonstrated this by going through the list of sportsbooks found on the OSGA and producing copies of their hard drives and daily Internet-processed credit card reports. Customer names, addresses, credit card numbers and expiration dates were all easily accessible to any computer hacker who chose to look for such a hole. We were absolutely speechless. We had NO idea what to do with this information. Of course it should be immediately released to the public, but would this cause a "run on the bank" so to speak and shake every customer's confidence in an offshore industry that already walked a tightrope when it came to credibility? We knew that by speaking up we could hurt everyone and by keeping quiet we would also hurt everyone. We decided to keep quiet until we came to a decision with which everyone was comfortable. We also consulted with security experts, Esports, programmers and software experts.

    As rumors about our stability, intentions and future started to explode, we became more unsure of who to turn to and how to fix this situation. On December 15, 2000 we removed our online credit card processing to prevent the hackers from retrieving customer credit card information. We would only process over the telephone and ONLY after receiving all necessary documentation to protect ourselves. This of course angered and confused many customers. What everyone must realize is that just as customers often don't trust us, we are now forced not to trust the customer. A few rotten apples have ruined the entire bushel so to speak.

    As of right now, we are still in limbo, and still trying to sort out this out. The effects of the credit card fraud are still rolling in. Just to give everyone an idea of how badly WE were hit our chargebacks went from $0 in August, to $2600 in September, $16,000 in October, $50,000 in November, and $51,000 for December. It's not often a book throws ANY of their financial information out there; however, in this case, I feel it helps illustrate the severity of the situation. Now did this kill us financially? NO. It certainly didn't make us happy, and it is money we would rather have in our pockets, but it did not hurt our ability to pay our customers. What it did hurt was our confidence in our sportsbook software, and the security of taking wagers over the Internet.

    We have no proof that any damage beyond the theft of credit card numbers has taken place. We also are not sure that there is not more damage. As was discussed on one of the forums, we had a customer hit THREE 7 team parlays, three DAYS in a row over the Internet in October. Ranging from $600 to $850 a parlay and paying 70-1 odds. He, of course, requested a payout, and we were, of course, skeptical, but after a week of going over and over the account, we had no choice but to pay. Did this kill us financially? NO. We welcome another book to come forward and tell us all of a similar situation. The odds of this happening legitimately are astronomical.

    What this all boils down to is this: we are simply NOT going to pay customers the same day a request is made until we are certain that our system is secure, and the transactions in each customers account are valid. Right or wrong and big or small, we have to take a HARD look at every request going out the door and listen to the tape of every play over the phone and check every session a customer had on the Internet to be as comfortable as possible when we send the check, Western Union, wire or credit back out the door. Even though $100 isn't much to us (as many customers would point out)….a thousand people requesting $100 is. It starts to add up.

    We are the newcomer on the block. We burst on to the scene and grew rapidly. We compete with books that are much larger than us and who have been around for years. Is this happening to them? It is hard to tell because the number and amount of transactions that flow through their computers every day is much larger than ours….and it would be easier to camouflage any clandestine activities. The managers here at Dunes (including myself) may not have taken the correct route by not announcing these occurrences earlier. We were fearful that "coming out of the closet" would sign our death warrant either in the form of a public outcry, or in angering the Russian customer so that he would do further damage to us or others. Well there you go…..now you have one reason for the increase in time it takes us to pay our customer. Now on to issue number THREE.

    3. Dunes is undergoing a complete reorganization. NO ONE PANIC. This is NOT a sale, takeover, Chapter 11 filing (or anything else scary and horrible you can come up with). All of us here laugh when we hear that we're going out of business. The joke in the office is "we're not that lucky". A few of the principals involved in the company have decided that the post-up business isn't as much fun as they thought. They are no longer enamored of handling customer problems or the day to day trials and tribulations of close to 80 employees. On approximately January 15, 2001 the Dunes will be under a new management structure, and will have a different focus. Please take note that I said "structure", not personnel. We will be shifting our player focus to the Internet, and will be replacing a large majority of our equipment even though what we have is only a year old. Looking back we realized that a lot of mistakes were made and that things could have been done much more efficiently. Our banking situation will be positively affected by all of these changes. We are moving to a new bank account offshore that is more stable, flexible and appropriate for an Internet gaming company. We were unsure about making an announcement of this nature….just wanting the transition to progress seamlessly. Of course we then woke up and realized what industry we were working in and decided to just lay it all out on the table for better or worse.

    In summary, I would like to thank everyone for reading this novel of a press release and would like to leave everyone with the following highlights:

    1. Yes, we have been experiencing problems---just not of a financial nature.
    2. We are working feverishly to overcome each and every one of these issues I have discussed, and with a little patience and help from everyone, we will only be stronger in the long run.
    3. We are NOT going anywhere, and only grow stronger by the day. Everyone of us at Dunes loves this industry and the people in it! Each and every one of our customers will always be paid in full, even if I have to sell my extensive shoe collection to help do so.

    Sincerely, and with best wishes from everyone at Dunes for a Healthy, Happy and Prosperous New Year,

    Samantha

  • #2
    Samantha,
    Good post and good luck. I know of another book on another island that had a Russian that infiltrated their system. This guy went after the casino games though.
    Rich
    Rich Rosenthal

    Comment


    • #3
      The Systems you guys are using can be entered by a hacker with ease! The hacker you are talking about can change the time on YOUR computors and place bets AFTER they have finished and then return the Time on YOUR computor to the correct time. Without you EVER knowing about it!

      I found out how to do it myself and could have done this same thing to any book using these systems! And I don't know ANYTHING about computors. I do know that ANYBODY can enter ANY system's computor program if they can figure out where to enter it! These computor Programs are FLAT OUT WEAK! They are TOO easy to enter!

      The people that wrote these programs will tell you themselves, There's NO PROTECTION against this sort of thing. There just isn't!

      I have wondered when this sort of thing was going to happen. There's not a whole lot of money someone can take without the Books knowing about it, I think that's why it hasn't happened.

      If someone is going to hack into someones system, They are going to do it somewhere where they can make a BIG SCORE. That's why I think the Books have been left alone.

      But someone from a poor Country....... It just might be worth it.

      Look if Hackers can hack into the U.S. Goverments systems... They would have to be able to hack into these Rinky-Dink computor Programs these Off-shores are using. It's only logical.................

      I have 1 word of advice to all Sports Book Owners..... Don't trust YOUR computor program unless YOU wrote it and know how it works!

      Print out your figures every day and keep a close eye on them! Print out OR just check your bets on the game when they start so NOBODY can add OR erase bets.

      This might just be the start of the problems......................

      Comment


      • #4
        I can't believe there hasn't been more responses to this. If this story is true (somehow I don't think it is the whole truth), this is incredible!!!

        Every sportsbook that allows online betting, should have a full-time computer software security specialist. There are ways to setup your domain/network/database so that these intrusions can not happen!!!

        This isn't just a case of the front end software having holes or being weak. I doubt that Dunes had anyone "watching the store". If they did have a specialist, he is either incompetent or a thief.

        Comment


        • #5
          I was stunned to hear this story. Hopefully it will be a wakeup call to the rest of the online sportsbook industry.

          Comment


          • #6
            Everyone should read this story on security. Although it is fiction, it is scary;
            http://securityportal.com/cover/coverstory20001127.html

            Comment


            • #7
              Fatboy, one of the problems is that so many of these guys want to get into the business so badly, they just buy one of these pre packaged software deals, and off they go.

              The problem with that, of course, is that they don't have a clue how it works. Only the people who wrote it do.

              I think it was "doggiestyle" who said that a major book was hacked during baseball season, in a sitituation similar to this.

              I also think there are probably some books out there right now that have been hacked, and they don't even know it.

              Comment


              • #8
                Those Russians are a crafty bunch.....if I remember correctly, they're the ones that hacked creditcards.com not too long ago and stole all of their merchant's records--with credit card #'s. The suggestion that sportsbooks should have a full time IS security guy is a good one, and is something that would make me as a player a lot more interested in dealing with a book. I don't know if sportsbooks are more or less succeptible to hacking than any other e-commerce biz, but certainly the potential of getting paid out in cash will attract more hack attempts.

                The chargeback situation at Dunes is unfortunate, but all too familiar to service oriented businesses. The reality is that in most chargeback situations the customer is holding all of the cards (no pun intended). Even with proper documentation, you can't assume that a chargeback will be resolved in the merchants favor. Clearly this will be a bigger problem with businesses that deal in what are considered vices--online porn has a huge problem with chargebacks and it's not much of a surprise that a sports book would either. Even legit businesses aren't immune--my parents run a residential cleaning service that employs about 50 people. My dad says that they'll get people who'll get their house cleaned and then try to dispute the charge when it arrives. Some months they'll have $1,000 or more in chargebacks--not really a big amount in terms of their revenue but pretty amazing considering that they've got signed contracts for all the work, etc. Even with clear proof that the customer contracted for the work and that it was performed, my dad says that he's happy if 50% of disputes are resolved in his favor.

                THE PROPHET
                Affordable, successful and honest handicapping of all major sports and most minor sports.

                www.netprophetsports.com

                Comment


                • #9
                  While it sounds like the Dunes story may need nothing more than a good car chase scene and a whirlwind superficial romance with a gratuitous sex scene from being a movie of the week, improbable it’s NOT.
                  WANT A HACKER, FIND YOURSELF A ROOSKIE

                  Russia is a favorable environment for hackers. For one, the country’s combination of over-educated and underemployed specialists is a recipe for computer hackers. Russia’s hacker community was infused with professionals following a financial crash in 1998 that left many computer programmers and businessmen financially destroyed and out of work. http://www.fas.org/irp/news/2000/05/000526-cyber1.htm

                  MORE--------

                  CITIBANK ATTACKED BY RUSSIAN HACKER: In 1994, a Russian successfully penetrated the systems of Citibank and allegedly stole $10 million. Citibank subsequently admitted to a loss of less than $1 million. (The Business Journal of Charlotte, 10/13/98) http://www.shockwavewriters.com/Articles/GLK/interR.htm

                  MORE--------

                  Leshka Zakharoff, the Russian hacker who has discovered several ways to break into computers using sendmail? Instead of keeping these secrets to himself, instead of using them to be a computer criminal, he publicized them to the Bugtraq email list so systems administrators could fix their systems. http://www.netsecurity.about.com/com...y/aa052598.htm

                  MORE--------

                  Russian Hacker Spies for US http://www.asiagateway.com/tod/062800a.shtml
                  The Russian domestic security service (FSB) -- the successor to the KGB-- announced they arrested a man who allegedly spied for the US by hacking into Russian security service computers.

                  The FSB , who accused him of working for the American intelligence agency, the CIA, said that the US was to penetrate information systems used by the FSB to obtain regular operative and other information.

                  The 24-year-old Lithuanian of Russian origin, Paul Ilinen, is a computer whiz who worked for the Lithuanian tax inspectorate and entered the ex-Soviet state security service when he was a student, reported ORT public television.

                  The FSB, who set him free today (Wednesday), refused to comment on the case. The Russian news agency, Interfax, said Ilinen would be deported and barred from returning to Russia.

                  Although the Cold War is over, Russia and the US have both accused each other of spying over the past year. Clinton visited Moscow at the beginning of this month and met Russian President Vladimir Putin, himself a former member of the KGB.
                  They hailed their meetings as the start of a new era of relations between the two former enemies.

                  The two men said they held constructive talks, but disagreed strongly on a proposed US defense system, and correspondents said there was little evidence of personal warmth between them.

                  MORE-------

                  Wed, 12 Jan 2000 10:19:52 GMT
                  Will Knight http://www.zdnet.co.uk/news/2000/1/ns-12576.html

                  Every e-commerce site's nightmare as hacker gets nasty with credit card details
                  A malevolent computer hacker claims to have pulled off the greatest information technology heist in history after temporarily posting credit-card numbers stolen from a large US e-commerce firm.
                  American online CD-retailer CD Universe, admitted that "a portion of its customer data" had been stolen and that an attempt had been made to blackmail the firm over the return of the information.

                  eUniverse -- parent of CD Universe -- admitted it was contacted by a malicious hacker last week who claimed to have stolen thousands of credit card numbers. The hacker demanded thousands of dollars not to go public according to eUniverse. After calling the blackmailer's bluff, eUniverse discovered hundreds of card numbers had been posted to an anonymous Web site.
                  According to some reports, these numbers were used to make fraudulent transactions over $1000.

                  A press release from eUniverse states: "The company learned on Saturday January 7, 2000 that customer data was posted on the Internet and immediately notified the FBI which caused the site to be shut down the same day."

                  The hacker, Maxus, reportedly put his exploits down to the credit-card software protecting the CD Universe Web site, ICVerify, created by US-based CyberCash.
                  Computer security expert David Litchfield of security firm Cerberus believes this may well be more than a wild boast. "It is extremely likely," Litchfield told ZDNet. "The trouble with software companies these days is that getting stuff out quickly is all important and so security suffers. He posted credit card numbers and the company seems to have admitted that he got hold of them some how. He could only have exploited a hole somewhere."

                  In a statement, however, CyberCash denied that its software could have been compromised. "ICVerify is a PC-based payment system, not a web-enabled product and is not being used by cdUniverse on its Web site. Therefore the credit card information cited in recent coverage could not have come from ICVerfiy."

                  Richard Tyson-Davis of the Association of Credit Payment Services confirmed that British consumers at least are protected from this sort of occurrence. He says, "The consumer credit act of 1974 says that people have to pay £50, but in practise the banks don't ask for this." Tyson-Davis says that the new breed of Internet banks who offer special protection from Internet fraud, "don't have anything that anyone else doesn't have."

                  According to Tyson-Davis, when fraud has been committed without the presence of a card itself, is retailers and not banks who will be put out of pocket by this type of fraud. He adds, "It's the poor old retailer that stands to loose most in this sort of situation. 10% of all credit-card fraud in 1998 was carried out when the card was not present, and retailers picked up the bill for all of this."

                  Chairman of eUniverse Brad Greenspan has also issued a statement explaining why his company decided not to pay the hacker's ransom demands: "Refusing to bow to this new breed of cyber-criminals, we have taken a stand against a new form of online blackmail on behalf of all legitimate e-commerce retailers. We take great pains to safeguard the privacy of our customers' information and will take all necessary action to limit any loss or inconvenience to customers which may occur as a result of this unusual occurrence."

                  The hunt is now on for the computer hacker behind this extraordinary heist.


                  MORE------

                  Fri, 22 Dec 2000 09:35:30 GMT
                  Greg Sandoval, CNET News.com
                  Credit card scam is under investigation http://www.zdnet.co.uk/news/2000/50/ns-19887.html

                  Mysterious charges to the credit card accounts of dozens of online shoppers may be linked to the online theft of more than 55,000 credit card numbers last week, an FBI official said Thursday.

                  People have flooded the Internet message board FatWallet.com with complaints of unauthorised charges ranging from $10 to $18 from a company called Global Telecom, based in Moscow.

                  "Because they are such small amounts, a lot of people may not notice the charges," said Kim Sebring, who told CNET News.com that her card was charged. "These guys are going to get away with a lot of money."
                  No one on the message boards had heard of Global Telecom, much less bought anything from it.

                  The FBI is aware of the complaints and is looking into the matter.
                  "These unauthorised credit card charges could be related to the current investigation into the hacking at Creditcards.com," FBI spokeswoman Laura Bosley said.

                  A representative at Creditcards.com said Thursday that the company was unaware of the Global Telecom allegations and did not know if it was related to its problem.
                  Creditcards.com said a suspected hacker stole the 55,000 credit card numbers and attempted to extort money from the company. The FBI is investigating the allegations.

                  Comment

                  Working...
                  X