new more damning absolute evidence

[imabigdeal]

[ QUOTE ]
Holy [censored], I think I found him and I'm like 99% sure this is not a coincidence. Skip to the bolded text if you don't care about the details.

I put all of the IP/email address lines in the following type of SQL table:

CREATE TABLE `ipinfo` (
`table` int(3) NOT NULL,
`date` datetime NOT NULL,
`action` varchar(10) NOT NULL,
`email` varchar(80) NOT NULL,
`userid` int(15) NOT NULL,
`ip` varchar(25) NOT NULL,
`port` int(8) NOT NULL
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

Then I ran the following query:

SELECT *
FROM `ipinfo`
GROUP BY `email`
ORDER BY `ip` ASC

It returned 267 rows.

Then in the IP range starting with 200, there are two guys with identical IPs. snagglepuss alerted me to these two guys earlier. But here's the evidence on one of the guys:

1. This guy "enters" table 13 at 2007-09-12 21:02:14, which is 2 minutes and 14 seconds after the tourney started.
2. Table 13 is the table which POTRIPPER was playing on
3. He never leaves the table, which means he was observing the table until at least 11:20 PM EST (at least, that's how I understand this)
4. His IP address is based in Costa Rica.
5. This is the most damning. He is user id 363 at AP. That means he was created in the system very very early on. Most of these user ids are in the 6 or 7 figures.

I think this tells me that there was some sort of inside job going on.

I will withhold his IP and email for the time being.

[/ QUOTE ]

uh, dude, you are like [censored] awesome. nice work man

[NoMeansYes_]

woooow

[N 82 50 24]

I have to give snagglepuss credit for finding this guy first and being suspicious (b/c of the table 13 + ip info). Granted I would have found him anyway with the queries I was running, but he did find him first and point the guy out to me on AIM.

Also, I am currently looking at all of the instances of people entering and exiting table 13. There are 102 lines. While it is not unique that this guy was watching the table for about 2.5 hours, it is rare. Most of the info looks something like this (this is NOT the guy I was talking about, it is just a random person I picked):

13 9/12/2007 21:29 Enter
13 9/12/2007 21:51 Leave
13 9/12/2007 22:43 Enter
13 9/12/2007 22:44 Leave

That is one individual. He watches for 22 minutes, then checks back for a minute a little while later. That is much much more typical, there are only a few people who open the table and never leave it.

It's really too bad this file cuts off, I'm sure we'd see this guy move with POTRIPPER if it went that far.

[adanthar]

Who wants to bet tons and tons of money that Potripper is just a random account and User #363 is the hole cam superaccount?

[N 82 50 24]

[ QUOTE ]
Who wants to bet tons and tons of money that Potripper is just a random account and User #363 is the hole cam superaccount?

[/ QUOTE ]
That's what I've been saying from the beginning. I have posts from weeks ago where I said it was an inside person relaying info from some account that could observe hole cards. (Not like I was the only one or anything, just saying that I've thought for awhile this was the most likely scenario)

[adanthar]

[ QUOTE ]
[ QUOTE ]
Who wants to bet tons and tons of money that Potripper is just a random account and User #363 is the hole cam superaccount?

[/ QUOTE ]
That's what I've been saying from the beginning. I have posts from weeks ago where I said it was an inside person relaying info from some account that could observe hole cards.

[/ QUOTE ]

hey, I posted a whole AIM convo with Adam [censored] Junglen about it first, ok [img]/images/graemlins/tongue.gif[/img]

and now we get to see AP not respond to this for a year or so

[Ship Ship McGipp]

this is some [censored] up [censored], but tbh i'm kind of surprised this hadn't been done before. the sites are making so much money they're retarded, but i can see an individual programmer who is not getting paid a lot or something pulling an inside job.

either way, just seems like some off site without much security could be hacked into since there are some pretty hardcore hackers out there.

[dragonystic]

N82, does this old account show up observing any other tables aside from POTRIPPERs?

[teddyFBI]

So do you have his name, or just his email?
Is the IP address from which this rogue observer closely related to Absolute's IP address? e.g. could we figure out whether he was observing from Absolute Poker's offices/IP, or simply from elsewhere in Costa Rica?

[N 82 50 24]

[ QUOTE ]
N82, does this old account show up observing any other tables aside from POTRIPPERs?

[/ QUOTE ]
No, he was only watching one table and he never left it.

There was another guy on the IP too though. First, this guy's user id is in the 2.2 million range, so he's a more recent user. Also, his observing record is the following:

9 896749443 2007-09-12 23:09:54
9 896749443 2007-09-12 23:10:12

So he was only on table 9 and he was there for like 18 seconds. Kinda weird.

It's possible that this second guy is POTRIPPER and he clicked on another table by accident or something.