WPEX Next Improvements Thread October 2006

[oreopimp]

[ QUOTE ]
[ QUOTE ]
Go to www.holdemreview.com and downjoad the WPX mod, HUUUUUUUUUUGE differance.

[/ QUOTE ]

[/ QUOTE ]

wow, thats amazing.

[Alobar]

[ QUOTE ]
[ QUOTE ]
-Would like a https: on the WSEX page. I have security misgivings about the standard http:, but when I type in the s at the end, I get a "timed out" message after signing in.

[/ QUOTE ]

Whoa, didn't realize this. (And I double-checked that it's the login frame and not just the main page that's unprotected.) This is ridiculously unforgivable and must be fixed at once. A site with financial transactions and the password is sent in the clear?

Seriously, this is a HUGE breach of trust. I really didn't have much of a problem with most of the functionality quibbles, but this is a million times more likely to drive my poker/sportsbook business elsewhere.

Seriously. Wow.

[/ QUOTE ]

yeah, I emailed them about this, and they basically told me I was dumb.

As a result I dont make wagers on their sportsbook anymore. Which is sad really cuz id be happily betting several hundred of my couple thousand of rakeback, every week. Instead now im just another leech on the system making demands and not giving anything back.

[Benjamin]

[ QUOTE ]
[ QUOTE ]
-Would like a https: on the WSEX page. I have security misgivings about the standard http:, but when I type in the s at the end, I get a "timed out" message after signing in.

[/ QUOTE ]

Whoa, didn't realize this. (And I double-checked that it's the login frame and not just the main page that's unprotected.) This is ridiculously unforgivable and must be fixed at once. A site with financial transactions and the password is sent in the clear?

[/ QUOTE ]

I agree 100% that if passwords are sent in the clear by the WPEX or WSEX homepage, then this is an IMMENSE security lapse. Can anyone confirm?

I had wondered about this, but assumed that there must be security under the hood somewhere. I don't know enough about what's possible to say what's going on.

WSEX GM, care to comment? I think you'll find a consensus that providing a proveably secure login to your web pages is a very top priority, if they are not already coded that way somehow.

B.

[MicroBob]

just to update/confirm the disconnect complaints:

I played about 2k hands there yesterday and had a number of discons and delays.

This definitely is not fixed.

It may be somewhat improved, but everyone still notices it I believe.


If the WPEX software tech team hasn't been able to solve it by now then perhaps WPEX could approach some of the super-smart computer-types from 2+2 to help them figure it out.


When AbsolutePoker was having even worse software lag they contacted me and offered to pay me just to help walk them through exactly what was going on with my computer.
They contacted me simply because I was in enough of the threads on 2+2 about the issue.

The problem with that was that I don't know very much about computers so I really wasn't much help. But a number of 2+2'ers seem to be really sharp and I suspect they might even know better what's going on at WPEX then the tech-team there does.

I'm not trying to go out of my way to knock the tech-team at WPEX. But it's been quite awhile and it's still a problem and I can't imagine what it would hurt to try to brainstorm with some others who are on the site all the freaking time and might be able to lead you to a better solution.

[Alobar]

[ QUOTE ]
[ QUOTE ]
[ QUOTE ]
-Would like a https: on the WSEX page. I have security misgivings about the standard http:, but when I type in the s at the end, I get a "timed out" message after signing in.

[/ QUOTE ]

Whoa, didn't realize this. (And I double-checked that it's the login frame and not just the main page that's unprotected.) This is ridiculously unforgivable and must be fixed at once. A site with financial transactions and the password is sent in the clear?

[/ QUOTE ]

I agree 100% that if passwords are sent in the clear by the WPEX or WSEX homepage, then this is an IMMENSE security lapse. Can anyone confirm?

I had wondered about this, but assumed that there must be security under the hood somewhere. I don't know enough about what's possible to say what's going on.

WSEX GM, care to comment? I think you'll find a consensus that providing a proveably secure login to your web pages is a very top priority, if they are not already coded that way somehow.

B.

[/ QUOTE ]

I wish I still had the email, but I was told explicitely that the sportsbook login in unsecure. paraphrasing it was something like

"the main login page is unsecure, but all the cashiers are secure"

I tried explaining how it was retarded and i wasnt going to be logging into their sportsbook, but it fell on deaf ears. I had flashbacks of dealing with party support and I just dropped the issue.

[Alobar]

[ QUOTE ]
just to update/confirm the disconnect complaints:

I played about 2k hands there yesterday and had a number of discons and delays.

This definitely is not fixed.

It may be somewhat improved, but everyone still notices it I believe.



[/ QUOTE ]

same. I posted in another thread that I was excited because they had at least fixed the way they deal with them. I had seen a number of people "Disconect" and the chat window announce it and give them more time to reconnect, which I thought was awesome.

However I have yet to see that since, and I've been disconnected several times today and have been given no additional time, nor seen anyone else given any...so Im not quite sure what I witnessed yesterday. Maybe they were actual real disconnects and thats handled correctly as opposed to the crappy software disconnects. Dunno.

[Benjamin]

[ QUOTE ]
I wish I still had the email, but I was told explicitely that the sportsbook login in unsecure. paraphrasing it was something like

"the main login page is unsecure, but all the cashiers are secure"

I tried explaining how it was retarded and i wasnt going to be logging into their sportsbook, but it fell on deaf ears. I had flashbacks of dealing with party support and I just dropped the issue.

[/ QUOTE ]

OK, wow. WSEX GM, this is a CRITICAL security flaw! I will absolutely not be logging into the sports book to place my occasional sports bets any more until this is fixed.

I encourage everyone to send an email to WPEX and WSEX customer support demanding that the initial log-in on both web pages be encrypted using industry standard or better strong encryption.

Benjamin

PS, I'm going to PM the WSEX GM with this message/thread to make sure he's seen it.

[Benjamin]

[ QUOTE ]
I encourage everyone to send an email to WPEX and WSEX customer support demanding that the initial log-in on both web pages be encrypted using industry standard or better strong encryption.


[/ QUOTE ]
Email addresses:

support@worldpx.com ; info@wsex.com ; tech@wsex.com ; accounts@wsex.com

My email:

[ QUOTE ]
Hello,

I'm writing as a loyal WPEX and WSEX customer, but I am shocked and dismayed, and I will not be using your sportsbook anymore until this security flaw is fixed.

I just learned that on both the WPEX and WSEX web pages, when I log in, my username and password are sent unencrypted from my computer to yours. This obviously could allow anyone snooping my internet traffic to gain full access to my account, and to steal my funds.

THIS IS ABSOLUTELY UNACCEPTABLE!!!!

You will not see any more sports bets from me until this is fixed, and I will strongly warn everyone I know not to use your webpages. I hope you will fix it as soon as possible.

Thank you,
Benjamin

[/ QUOTE ]

[WSEX GM]

WSEX secures all financial transactions through HTTPS. We do not force HTTPS for sign on to the wsex.com website. There is little motivation for people to compromise a customer account because of our tight security at the deposit and withdrawal layer.

We have been doing it this way for 10 years and have not had any issues.

But, I will press our programmers to set up a secure log on for WSEX if it makes people more comfortable. (Spare me your jokes please, it's a completely different team that handles the sportsbook programming and the reputation and reliability of our sportsbook software is beyond reproach.)

Fred Balfour
General Manager
WSEX.com

PS- 6-Max should be here November 6th.

PPS- "Aces never lose" today from noon to noon tomorrow.

[barongreenback]

This may be irrelevant now but 5max is better than 6max and I can't see why people have such an aversion to it. Just familiarity maybe.

IMHO stable functioning software and improving traffic are clearly way ahead of the pack as issues go.

Since we're doing this though I'll put another vote for PLO sometime in the future. Designated shorthanded PLO tables are pretty hard to find at many limits and could present a niche opportunity (could attract some gamblers too).

James