[yli]

[ QUOTE ]

* He hacked into main server (where cards are dealt,
evaluators, rngs are)
- unlikely - he would have seen community cards also


[/ QUOTE ]

Not if the cards are randomly selected after each betting round.

[ QUOTE ]

* He hacked web server (with SQL injection, XSS, etc... or
is web designer with access to this server)
- most likely - all he had to do is add a backdoor in AP's
software and replace it with one on the server. He needs
to do this only when AP is upgrading and only for one
upgrade. Later upgrades doesn't need to be backdoored
anymore since your computer stays compromised from first
upgrade. Of course he can put trojan in next upgrade if
he wants to infect new players.


[/ QUOTE ]

Wouldn't it be trivial to find out if the software sent data to a 3rd party between betting rounds?