Cake Poker manager apologises for security breach

07/28/2010

Lee Jones, the Cake Poker Network cardroom manager, has 'fessed up to the embarrassing disclosures by Poker Table Ratings Tuesday (see previous InfoPowa report) that the security encryption on the network was not all that it should be.

The PTR sleuths have in the meantime produced video evidence of their ability to successfully steal hole cards as these were dealt, along with passwords and user names from multiple Cake Network skins.

Posting on the respected poker forum 2plus2, where a lengthy thread is running, Jones wrote:

"Sure, when the issue came up in May, I asked our software management team. They told me that we were more secure than Cereus [another network whose security flaws were exposed by PTR]. When this all came to light a few hours ago and they got down into the actual code, it turned out they were wrong (as one of the senior managers just admitted to me).

"Somewhere along the software ladder, there was an error of omission, commission, stupidity, documentation or some combination thereof. I'm not happy about it and neither is the manager to whom I spoke.

"Furthermore, I definitely have to accept some blame here. I could have (and wished I had) pushed further on the response I got, talked to some development people about it (they're in-house), etc.

"I'm going to post an official response shortly, but believe me, I feel crappy about having said in May that we had stronger encryption than Cereus did when we didn't. The lesson I've learned is to ask more harder questions when these sorts of things come up.

"I owe the entire Cake poker community an apology: I am very, very sorry."