Carbon Poker Security Fault This Evening

Sean Pilgrim

Sean Pilgrim

Legend
Silver Level
Joined
Mar 31, 2009
Total posts
2,620
Chips
0
Admin's please sticky as this is a major security screw up with Carbon.

Carbon Poker's servers went down while I was seated at a PLO game. I left the client trying to reconnect in the background while I was trying to reach support. The Carbon client reconnected to the server but the problem was that I was connected as someone else something like "johnnboy" it opened up his in progress $5 DoN.

I then tried to login to the carbon poker player admin with my credentials and it again logged me in with yet again someone else's account when I used MY login information. Someone with $20.10 in their Carbon Poker account.

I have changed my passwords and deleted all my CC information from Carbon Poker because that was scary enough for me.

Below is the chat transcript from Live Assistance Help:
info: Please wait for a site operator to respond. You are currently customer 12 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 12 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 11 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 10 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 8 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 6 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 6 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 5 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 4 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 4 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 3 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 3 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 2 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 1 in queue.
info: All operators are currently assisting others. Thanks for your patience. An operator will be with you shortly.
You are currently customer 1 in queue.
info: Hello, my name is Erick Jones. I'll be assisting you today.
info: ** Please do not share your credit card information, security code or CVV during this chat **
Sean Pilgrim: Hello
Erick Jones: Hello Sean
Erick Jones: We're aware of the problems with our service and we're currently working on a resolution. It should be back up soon. We're very sorry for the inconvenience.
Erick Jones:
Erick Jones: Please contact us once it is back to normal for details and questions, disconnection policy applies
Erick Jones: Disconnection Policy
Erick Jones: Is there anything else I can assist you with?
Sean Pilgrim: No...
Sean Pilgrim: the security
Sean Pilgrim: loophole
Sean Pilgrim: when the server came back on i connected as someone else
Sean Pilgrim: johnnboy
Sean Pilgrim: i tried to login to the player admin and I entered my information and was logged in with someone elses name
Erick Jones: We are already working on it
Sean Pilgrim: I had access to all their personal information and credit cards and everything
Sean Pilgrim: wehich means this could have happened to me too
Sean Pilgrim: what happened that caused this security problem?
Sean Pilgrim: Hello?
Erick Jones: We do not have this details
Sean Pilgrim: But you are admitting that this happened though
Erick Jones: Please contact us once it is back to normal
Sean Pilgrim: What if you have tons of players who lost money because someone was able to login as them and use their money and dump it?
Sean Pilgrim: Will you acknowledge this issue I am describing as accurate?
info: Your chat transcript will be sent to sean@4leet.com at the end of your chat.
Sean Pilgrim: Yes?
Erick Jones: Unfortunately I don't have any details at this moment, one more time and as stated above please contact us once it is back to normal for details and questions
 
Sean Pilgrim

Sean Pilgrim

Legend
Silver Level
Joined
Mar 31, 2009
Total posts
2,620
Chips
0
Also tried to capture the screen with Open Broadcaster Software but it saved in .flv format. If anyone can convert it for me you can see what I saw... the file is 77MB's
 
jaymfc

jaymfc

R.I.P DJ & Buck
Loyaler
Joined
May 3, 2007
Total posts
16,034
Awards
91
Chips
1,238
so he was there at the DoN ? you could see his cards ? that's really funny for something that's not funny at all . but... so if I call them and tell them some fool just lost those last 10 or 12 games , not me , maybe they'll believe me . lol kidding of course but scary that someone could do it to you . :eek: so you going for a cashout ?
 
Sean Pilgrim

Sean Pilgrim

Legend
Silver Level
Joined
Mar 31, 2009
Total posts
2,620
Chips
0
No, it logged me in as this johnnboy player. I had access to his funds and was able to play the DoN that he was reg'd in.

When I tried to login to my player admin it again logged me in as yet another person. Their saved CC info was available.

Regardless it scared me enough that I requested a payout for all my Carbon funds, changed my password and deleted all saved deposit information.
 
K

KcMoMoney

Rising Star
Bronze Level
Joined
Oct 31, 2014
Total posts
12
Chips
0
Damn, I was thinking about starting to play on Carbon. May have to re-think as to where I want to play now..
 
D

donkcentralFF

Visionary
Silver Level
Joined
Oct 25, 2014
Total posts
539
Chips
0
That is nuts... Glad I have retired from Carbon!
 
Top