pull down to refresh

You run this on the server, right?
How can you prove that you are running this file and not something like

function getRandomIntInclusive(min, max) {
  if (Math.random() > 0.9) return 16;
  return crypto.randomInt(min, max+1);
}

I can't but you can check the hash and salt

reply

Well, that doesn't really help much, right? You just give me a hash of 16+salt and then I can confirm that I indeed got 16.

reply

Yes, you can, if you think that 16 is coming more times them usual, try your luck....

reply
100 sats \ 11 replies \ @nout 15 Jan

And where exactly do you return the number+salt ahead of the bet?
In the responses I only see the last number, but I have not found any response that would actually return this field?

reply

You can go to menu->Spins

reply
100 sats \ 9 replies \ @nout 15 Jan

Oh I see, ok.

The reason why I'm giving you quite hard time is that "provably fair" is a big claim. There are probably ways to do that with e.g. STARKs or DLCs, but all that is fairly new cryptography and all quite complex. I don't think you are doing it.

reply

It's still not ok. Limiting visibility of the hash to the first 7 characters is "provably fair theatre". Very easy to create collisions at only 7 chars. Waiting for them to show the full hash.

reply
0 sats \ 7 replies \ @nout 1 Feb
"provably fair theatre"

I mean the current setup is already "provably fair theatre" no matter if you show the full hash or not.