B3W Group to Release Software Security Fix

Published April 22, 2013 by OCR Editor

B3W Group to Release Software Security Fix

The B3W group, which develops a wide range of poker skins, will be releasing a software update this week to fix numerous security issues.

The B3W group announced that it will implement a software update this week to fix security issues discovered by an external vulnerability research consultancy, ReVuln, which like the B3W group is based in Malta.

The B3W group develops a wide range of poker related software, including software used for online poker rooms. The company develops poker room skins for variations of poker such as Texas Holdem, Omaha and Stud.

The ReVuln's report focused on poker software which is installed by downloading onto your computer. Because the client is downloaded onto a user's computer, it opens up the possibility for potential attackers to get a good look at the poker software.

ReVuln's Luigi Auriemma and Donato Ferrante found numerous vulnerabilities in the way that B3W's software updates itself over an insecure HTTP connection. The important updated files are stored without digital signatures, and ".exe" files are not verified before download, which means that if replaced by a hacker, users would be downloading a piece of software that could track or damage their computers.

ReVuln also found issues with how user's passwords are saved locally in the poker software.

The industry standard for delivering software updates is through a content delivery network (CDN). B3W uses a CDN but if it changes to using a HTTPS connection, the digitally signed signature would not match B3W's software. Fortunately B3W has found a solution to this issue and will be making the necessary changes this week. According to AJ Thompson, B3W's director of strategy, "The changes will eliminate three issues outlined by ReVuln, including those around executing an unverified file, a directory transversal issue, and a stack-based buffer overflow."

See also

B3W Group

Microgaming Group Releases More Games

RealTime Gaming Releases New Version 6.1

Unibet Group Becomes Kindred Group, Enters Deal with Realistic Games

Blockchain Projects Security to be Discussed in Next Week's Bitcoin Marathon Webinar

Yes! I want to know about exclusive bonuses, promotions, and news.