Hacker News new | ask | show | jobs
by toki5 4272 days ago
There's a fairly large difference between advantage players and what these guys did.

You have to keep in mind the spirit of the machines. Video poker machines are meant to play poker. If you can somehow find an edge in poker itself that gives you an advantageous position, I'd be for it. Exploiting the software that runs the game, however, isn't fair.

The punishment was blown monstrously out of proportion, but yes, I still think what they did was wrong (and certainly against the law!).

5 comments

He was changing the bet amounts after the victory. Imagine playing for pesos, and then upon victory tricking the software into playing for Euros.

If he had outsmarted or even figured out a way to control the random number generator through button presses, I'd be all for him. But this is more like finding an ATM that has a bug to not record withdrawals of exactly $420 and then emptying the machine.

It's shouldn't be lost that the casinos love to let players think they have an advantage, even they don't. The old joke is that casinos have a word for people who have a system to beat the house: "Welcome!"

This stuff is really interesting.

Imagine if you're playing, say, blackjack with a human dealer. After you win a hand but before you collect your winnings, you ask the dealer, "Say, would you mind if I retroactively increase my bet and collect the winnings on that?" The dealer replies, "Sure thing," and pays you accordingly.

I imagine we'd all agree that there's no harm in asking, and that the dealer's compliance is his own problem and a problem for his employer but not your problem. Why does this suddenly change when you're talking to a computer instead of a human? I'm not saying it doesn't change, but I can't entirely figure out why we approach these two scenarios so differently.

For your ATM comparison, it's not uncommon for excessively-clever bank customers to jokingly ask the teller for a million bucks, often in response to a question like, "Is there anything else I can do for you today?" Suppose you found a particularly dim teller who decided to actually hand over a million bucks when you asked. We'd blame the teller and the bank for agreeing to such a thing, not the person who asked, right? Yet when it's an ATM instead of a teller, we blame the person asking.

The gaming laws do not give the dealer the right to change the rules of the game once they have been set by the house and registered with the gaming control board.

If the dealer decides to deviate from the rules, the dealer has committed a crime. The player could also be an accomplice if he was in cohorts with the dealer.

Now in the case of the buggy slot machine, the software has been checked to NOT perform this action. If it does, it's obviously deviating from the rules as well and needs to be shut down. To avoid making the player an accomplice, the "malfunction voids all pays" rule comes into play. If the player knowingly made the slot deviate from the rules, then that falls under the definition of cheating.

> The gaming laws do not give the dealer the right to change the rules of the game once they have been set by the house and registered with the gaming control board.

I don't know about that. Don Johnson, the blackjack player who won more than $15M at the casinos, did so by having them change the rules. He made enough little changes that the odds swung into his favor, and he took the casinos to the cleaners. All valid and legal. From the wiki: He negotiated several changes to standard casino blackjack in order to gain a mathematical edge

https://en.wikipedia.org/wiki/Don_Johnson_%28gambler%29

The Nevada gaming laws, as I understand it, allow for payout probabilities across a time threshold. E.g. Over a 24hr period this machine pays out 95 cents on the dollar. This gives the casino the ability to make a machine pay out $1.05 dollars to $1 early in the night, then change to worse odds as players become convinced its a hot machine.

So, one could argue the 'hack' was no different than this. The probability of paying out was set to 500 to 1 for 1 hand. This is legal for the casino to do, but you turn the tables and a guy goes to jail?

Regardless, this is just more evidence that the 'house always wins' (even when it looses).

The "time threshold" is the lifetime of the machine. Not minutes, hours, or days.

Slots are fixed to a given payout percentage and then locked in with the gaming board. Traditionally this means a copy of the program is checksummed and stored offsite with the gaming commission. The officials have the right to open that machine at any time and verify that the program matches what is on record.

Casinos cannot dynamically change this payout percentage on the fly. That's a violation of the law. A casino is required to have a certain average payout across all machines, but that does not mean a particular machine needs to obey that percentage. In fact, the penny slots will be set way lower and the high-denomination slots will be set much higher. The average will hit the target.

The "hack" is theft, plain and simple. Putting aside the ability to re-award jackpots, the player found a way to change denomination of credits post-play. This is the equivalent of winning at a table game and then swapping your $1 chips for $100 chips when the dealer is not looking.

My source to the dynamic payout ability is a past co-worker that did work in the casinos back office computer system (think big iron computing). He entertained me with stories of how the casinos manipulated the environment to manipulate you into giving them more of your money. So, I may have misunderstood some of the details. But, am curious where your certainty comes from to see who's closer to the truth here.

Regardless, when a machine pays out in a way that is against the house, my take is that these guys deserve every cent they earned. The gamblers did nothing that the casinos don't do everyday. That is, use the rules of the game to their advantage (ie. manipulate you to make a decision against your own best interest). In this case the rules of the game were broken in an extremely subtle way.

Surely it's the equivalent of winning at a table game and then convincing the dealer to swap your $1 chips for $100 chips for you.
Computers are not possessed of free will. You don't really ask them for things. You either compel them to take an action or you don't. Knowingly exploiting a glitch in a computer is like asking somebody for their wallet with a gun to their temple — despite the fact that the exchange could be described as a request and agreement to that request, you have made it impossible for the recipient to decline under the circumstances, so we classify it as something else.
I'm not convinced that free will is even a coherent concept, let alone something that humans possess.
Then a lot of the law will probably seem a little odd to you, because it is pretty solidly on one side of that debate. I'm not qualified to prove this one way or the other, but if you want to understand the law, you have to go in with the assumption that the average human being is in deliberate control of their actions under normal circumstances.

(AFAIK it is pretty hard to come up with a system of law that doesn't start with this assumption without it being either completely ineffectual or very oppressive. Whether or not free will exists, it's at least a very handy abstraction for distinguishing good actors from bad ones.)

Much of the law does seem odd to me, although I don't think that's why.

As far as I can tell, the law is based on a collection of ideas we collectively identify as "justice". In no particular order: that punishment can reform a person so they no longer commit criminal acts, that the threat of punishment can cause a person to refrain from committing criminal acts, and that punishment as revenge is just a good thing.

None of this has anything to do with "free will", whatever it is.

I think a good example of people who exploit bugs in people to get rich are con artists, and what they do is usually considered illegal. Sure, there are various reasons why what they do feels wrong, they may have to lie and misrepresent things, they may con people (the elderly, etc.) for which the law has specific protections (France has "abus de faiblesse" -- abuse of weakness -- for exploitation of physically or psychologically vulnerable people), they may use threats... But I would be surprised if there was no instance of a con artist being successfully prosecuted for something which basically amounted to getting a responsible person to give them money through a certain sequence of legal inputs.

I am not personally sure that I believe this to be a good thing -- the flipside of laws that protect people against themselves is that they may make them less responsible, so care is needed. But I think it is not the case that exploiting bugs in people to get money would be systematically legal.

I do think there is a difference (at least in degree, maybe in nature) between computer and human victims: for computers, we feel justified in estimating that people should know that they are dealing with them, and second-guess what they are supposed to do, so that you are blamed if it can be shown that you "knowingly" make them deviate. (Laws have this interesting way of talking about unverifiable states of mind of people, but there can be clues. Did the gamblers who exploited the bug call it a "bug"? If yes, this suggests that they realized it was unintentional, so you may argue whether it is still fair or not that they exploit it, but you can't compare their situation to someone who would hit the bug in good faith.)

With respect to this difference, I think the law is also designed to account for the pragmatical fact that everyone has entrusted their lives and businesses to the dumb computers, without having the technical skill to be responsible for what they do, so some protection is afforded computers they malfunction and/or if they have been incompetently manufactured or programmed. I often wonder whether this is a good thing. (When you consider that people are responsible for computers they own or operate, you often get interesting moral consequences.)

>I think a good example of people who exploit bugs in people to get rich are con artists, and what they do is usually considered illegal.

Many of the richest people around got that way by exploiting some "bug", but no one considers them to have done anything illegal. They find a loophole in banking laws and become a billionaire, or you manipulate people psychologically into buying your products (modern marketing). We call these "business" so it's not illegal to exploit these "bugs".

To me, the difference is in the free will. The computer doesn't have a choice; the dealer does.
Suppose we postulate that exploiting a security flaw is wrong, and money obtained by doing so should be forfeit.

The entire business of casinos is exploiting a security flaw in the human mind. By hypothesis, the casinos' money should be forfeit, so they have no moral grounds for trying to get it back from the people who found a way to take some of it.

Conversely, if we backtrack and cancel our postulate, then there is no basis for a claim against a gambler who exploits the software.

be for it. Exploiting the software that runs the game, however, isn't fair.

That is clearly nonsense tho', and that's easy to prove. If you are playing poker with a person, then that is all about exploiting the flaws in that person, this ones timid, that one's reckless, this one has a facial tic, that one drinks too much and so on.

With poker in particular, I'd call being able to predict the machine's hand due to a bug in the software to be a fair outcome.

After all, reading other people's tells is what makes poker poker. Why is it suddenly a "bug" if a machine has one?

From what I understand, they weren't predicting future hands. They were switching to the main menu and back repeatedly to cash out on the same hand over and over again. They weren't playing the exact same game over and over again, they were cashing out repeatedly from the same win screen.
Poker has very little to do with reading other people's tells. If a player relies on reading another in order to play his game, the first player is probably not going to do too well.
They're not playing poker though. "Double Up" is not a feature of poker. It's a feature of this very specific and state-approved game.