4 ms·

Does this mean that only one person reviewed the code or that he was able to hide the predictable algorithm so well it passed review?

• dariusj18 5y ago
  Sounds more like he was able to install software on the same computer to use the same RNG as the lottery. In essence not doing anything to the original code, but using known information about it to get similar enough results.
  • lolinder 5y ago
    He did alter the code. See this comment for details: https://news.ycombinator.com/item?id=30188266 https://news.ycombinator.com/item?id=30188266
    • dariusj18 5y ago
      Oh, yeah, that should have been caught.
• chris11 5y ago
  This article goes into a lot more detail. It looks like it was just two lines of code. But apparently the codebase actually had backdoors already present. His employer, MSLA doesn't come out looking good. After winning a few lotteries Eddie actually reported the security hole and suggested a fix. It was ignored. https://www.desmoinesregister.com/story/news/investigations/2018/03/15/how-gaming-geek-checkered-past-pulled-off-biggest-lottery-scam-u-s-history/397657002/ https://www.desmoinesregister.com/story/news/investigations/...