Backdooring the Lottery and Other Security Tales in Gaming over the Past 25 Years

Presented at DEF CON 25 (2017), July 30, 2017, 11 a.m. (45 minutes)

In this talk Gus and Evan will discuss the recent Hot Lotto fraud scandal and how one MUSL employee, Eddie Tipton, was able to rig several state lotteries and win $17 million (or perhaps more). Gus' firm is actively supporting the prosecution in this case. Evan was responsible for identifying and analyzing how Eddie was able to rig the RNG. Details on the rigged RNG and other details from the case will be presented publicly for the first time during this talk. For historical context other related attacks including the Ron Harris and hacking keno in the 1990's and a recent incident involving a Russian hacking syndicate's exploitation of slot machines will also be discussed.

Presenters:

  • Evan Teitelman - Engineer, SeNet International
    Bio coming soon.
  • Gus Fritschie - CTO, SeNet International
    Gus Fritschie has been involved in information security since 2000. About 5 years ago (after his previous DEF CON presentation on iGaming security) he transitioned a significant portion of his practice into the gaming sector. Since then he has established himself and SeNet as the IT security leader in in gaming. He has supported a number of clients across the gaming spectrum from iGaming operators, land-based casinos, gaming manufacturer, lotteries, tribal gaming, and daily fantasy sports. In his free time he is a recreationally poker player (both online and B&M). @gfritschie @senetsecurity

Links: