Inetbet acting funny

[Casinomeister]

Just a side note: the reason why this wasn't responded to over the weekend was that many managerial staff - to include Casinomeister do not work on weekends. But I see iNetbet did jump in yesterday - which is appreciated.

I've removed the URLs from the screenshot just for safety's sake. But besides that, there is no way that someone without the proper access codes could have accessed their network. Sure, the URL may have been sent by mistake, but it is useless to anyone who is not on the system. I have been informed that Sodax's account was closed for other reasons - not for this.

I think we are chasing "red herrings" here.

Sprichwort?

[Mike031]

HaHaHa,

you write everytime we are not on topic

you write this because you can't hear more what you wrote by yourself, also if Pina know who written it.

What have you not understand on my words "let's go back to topic"?

is it really so heavy to understand?

[vinylweatherman]

Those screenshots show that the hyperlink did indeed point to WITHIN the admin area, and not just to the login page. However, they also show that the security sensed that the link was from an unauthorised source and disabled access.
Was this the case initially though, did the original link contain the actual login that allowed access to admin datasheets, whether "view only" or not.
If it can be proven that this was initially the case, then InetBet have mislead the forum as to the true nature of this breach. Their view is that there was never a serious issue, as what is shown in those screenshots was always the case when an unauthorised person attempted to use the hyperlink.

If this was a hyperlink that was coded to bypass the login it would have a form similar to "https:\\<IP>\<hash>\<page>?user=???????, password=?????,<possibly other parameters>.

This actually looks very likely given the "session has expired" error message. This would be triggered since Sodax never had a valid admin session at the time, just the hyperlink. This would confuse the security system into thinking the session had "expired". The "not authorised to view" message would similarly be triggered by attempts to access a secure page without a valid session being detected.
This is deep enough into the system that a skilled hacker would have a pretty good chance of breaking through that last barrier.

We still have opposing views:-

InetBet - Sodax never got past the security at any time, and any "datasheet" was related to their own account, not information pertaining to other players or the admin system.

Sodax - A little confusing, can't seem to decide whether they really DID get right in, or whether the problem was the avalanche of warning and error messages triggered by the website, making Sodax fear that something very serious had happened, hence a security breach.
The first screenshot message is a warning issued by Windows that warns Sodax that it is HIS OWN SYSTEM that could be under threat of attack if he proceeds, not that the remote system is about to be breached.
The second is the InetBet system correctly blocking access and throwing the session back to the login page (third screenshot).

Either there never was a security problem, or it has been quietly fixed and hushed up so as not to unduly panic players of ANY RTG powered site.
Even so, that random 20 letter "hash" STILL gives access to that login page, surely it would have been prudent to change this also, even if it was not thought to be a serious threat now.

[swampwitch]

Yes! I have finally gotten rep points taken from me. It's a proud day here in Swampland.

[vinylweatherman]

I have summarised the change of course this thread has taken & sent it to Bryan to mull over.
Others may or may not have done similarly, but this discussion has raised serious issues, and some inside information is needed to get to the bottom of this.

[jetset]

Yes! I have finally gotten rep points taken from me. It's a proud day here in Swampland.

Why were they taken, Swamp?

[swampwitch]

For this short, perhaps terse comment...

"Access Denied" then.
No breach.
Right?

If it makes friend Sodax feel even a tiny bit better about things, it was most certainly worth it.

Besides, considering some of the crap I have spewed in the past, I was due.

[mysticjoz]

I disapproved mysticjoz latest post
And i added following text:

"Please specify! If i will give a direct link, everyone can manipulate their database, and see version numbers! Yes they finally made a update. My screenshots vs current page. And if you have something against me, use PM or email. Thanks"

So if i will give all information, what inetbet gave (by mistake).
Well, damn it, i know that someone can destroy or/steal their database.
Where is over 240.000 players (datasheet/users)!

Sodax I was trying to help and see whatever got you locked out.. I do not want and have no use for this "link" to thier secure area.
Don't read between the lines and think "I don't like you" as a matter of fact I think the reverse is true.. or CM would not have deleted a comment to me by you. Good luck.

[mysticjoz]

Yes! I have finally gotten rep points taken from me. It's a proud day here in Swampland.

Wow, You too!! Guess Sodax doesn't really want Unbiased opinions.!!

Well CM.. I personally think someone with this huge of an issue should not be allowed to knock down rep points off every person at the forum who does not say .."gee your right" after all this forum is players helping players and everyone is entitled to thier opinions.. the Rep points are not to be abused. Espeically if you are asking for facts!

Sodax, your knocking rep points off everyone who does not "take your side" is outright immature and I for one could care less about the rep points.!

that in itself screams "FOUL" from the rooftops!
Good luck to ya!

[Mike031]

@Sodax, only one question: What's wrong with you dirty bastard!?

Why did you steal from all users here Rep Points?

What have i done to you, that you steal also one point from me?

Are you okay, or is your brain now totally damaged?

Now i understand totally, that iNetBet have locked your account, because if i would have also a Casino, i would never accept such a palyer, like you!

And you want to get help from anyone here? I think you're a little bit stupid and you live your own life in a fairytale!