B3W Group to Fix Security Flaw in Online Poker Software
B3W Group, based out of Malta, has announced it plans this week to fix a vulnerability recently discovered by two security experts. The company produces turnkey online casino and poker solutions.
B3W's software updates itself over an insecure HTTP connection. Updated files are stored without digital signatures, and ".exe" files are not verified before installation. They also found issues with how B3W's software stores passwords on a person's computer.
The industry standard for distributing new poker clients is through content delivery networks, B3W's Strategic Director AJ Thompson wrote. B3W uses a CDN from Fileburst. Thompson, who has well over 15 years industry expertise, also noted that the software has yet to be hacked into over the course of its 12 years operating online.
Acknowledging the security flaw, Thompson wrote: "We have therefore decided to move all client updating to our own data centers over SSL [Secure Sockets Layer] using a signed certificate trusted by the poker client code.”
Late last year the company signed an agreement with NYX Interactive AB to launch NYX OGS games within its casino gaming suite.
- Aaron Goldstein, Gambling911.com
