安全与隐私elie.net
揭露高端扑克作弊设备
Exposing high-end poker cheating devices
2016 — 2019，它一次次回到首页
黑点是上首页（≥ 50 分）的那次投稿，空心点是没冲上去的投稿，点越大分数越高。
导读
这篇博文是安全研究者对高端扑克作弊设备的拆解与分析，展示了红外标记牌、隐蔽摄像头、扑克分析仪和蓝牙耳机如何配合读取牌序并传递信息。文章还涉及设备固件加固、取证困难以及赌场环境中的实际可行性。
为什么经久不衰：它把硬件拆解、安全攻防和真实赌场作弊链条讲得具体，既是技术揭秘也是反作弊参考，因而多年后仍值得读。
HN 评论精选
这类红外标记牌、隐蔽摄像头加分析仪的作弊系统早在2014年就被赌场行业记录，并配有反制手段。
赌场行业在2014年就已经知道这类东西了。有文章描述：中国出现可怕的技术，结合红外标记牌、隐蔽摄像头和电脑分析仪；特殊牌组的长边有隐形红外标记，每张牌身份不同。作弊者与发牌员串通换牌，坐在对面，把伪装成手机的隐蔽摄像头对准牌堆边缘，在洗牌后、发牌前拍下像条形码一样的红外图像；口袋里的“扑克分析仪”不到一秒识别出发牌顺序，再通过蓝牙小耳机用电脑语音报出桌上各手牌的排名。文章也提到监控摄像头等反制措施。
Animats查看英文原文
The casino industry knew all about this in 2014.[1] "Right now there is some scary technology coming out of China that incorporates IR marked cards, concealed cameras and computer analyzers. Combined to create a high-tech card marking system, I must say that this device could do for cheats what silicon did for the cosmetic surgery business. The devices are being marketed as poker analyzers." "The technology works like this. The long edge of every card in the deck is marked with an invisible IR marking. Each mark identifies an individual card. In collusion with a poker dealer, the special marked deck is swapped into play. The player sits opposite the dealer on the table. He positions a concealed camera on the table (usually disguised as a cell phone). The camera has an IR lens that is used to transmit an image of the edge of the deck of cards to a small computer located in a smart phone (the poker analyzer) in his pocket. The image is transmitted during the period after the dealer has shuffled the cards and the deck is resting in front of the dealer before cards are dealt to the players. The IR snapshot of the cards looks like a barcode. The poker analyzer identifies every card in the order that they will be dealt to the players in less than a second. A computer-generated voice message is sent to the player via a Bluetooth mini earpiece communicating the rankings of all the hands on the table." And the countermeasures: "Most surveillance cameras, in their natural state, actually have infrared viewing capabilities. The problem is the picture is not so good, so manufacturers add a cut filter over the CCD chip to block out infrared light. ... A number of major surveillance camera systems provide end users the ability to remotely change the IR status of the camera via the operator’s keyboard. This allows the operator who suspects someone is marking cards at a table to use a PTZ camera assigned to the table to switch to IR mode so the cards can be checked live on the game. If you currently don’t have this feature, speak to your manufacturer." [1] http://ggbmagazine.com/issue/vol-13-no-2-february-2014/article/surveillance-report-on-your-mark
Shannon 和 Thorp 早在1961年就用鞋内按钮加耳机做出了击败轮盘的穿戴式计算机，说明技术赌具历史悠久。
一段有趣的计算机史轶事：Claude Shannon 与 Ed Thorp 在1961年共同发明了第一台可穿戴计算机，用来在拉斯维加斯击败轮盘。用户用鞋里的按钮记录小球的速度和位置，设备用轨道衰减算法推断可能落点，再通过有线耳机发出声音信号告诉用户下注位置（并不精确，用户押8个号码仍有正期望值）。这个故事在论文里有详细讲述。本世纪同类设备用激光更准确读取球位置，有团队用它在伦敦赌场净赚100万英镑。Thorp还参与了电影《21》中展示的21点系统，后来经营对冲基金。
drited查看英文原文
An interesting bit of computer history trivia is that Claude Shannon co-invented the first wearable computer with Ed Thorp to beat roulette in Vegas in 1961. It used a button in the shoe as an input device for the user to record the speed and location of the ball which was used to infer the likely ending location using orbital decay algorithms. An auditory signal was then sent by wire to an earpiece to let the user know where to place bets (it wasn't pinpoint accurate - the user would bet on 8 numbers which still gave him a positive expected value). The story around that is really fun, recounted in this paper: https://www.cs.virginia.edu/~evans/thorp.pdf Versions of the same device from this century use lasers to get a more accurate read on the ball's location, with one group using the system to net £1m from London's Casinos: http://news.bbc.co.uk/2/hi/uk_news/4069629.stm Thorp was also involved in developing the Blackjack system that was showcased in the film 21 and later ran a hedge fund, details on which were recounted in his interview for this book https://www.amazon.com/Hedge-Fund-Market-Wizards-Winning/dp/1118273044. Very interesting guy.
正规赌场禁手机、控牌组，这类设备更可能用于监管较松的后台牌局，风险极高。
我已经很久没去过允许把手机放在赌桌上的赌场了，亚洲尤其如此。不仅如此，正规赌场的大多数牌组都受到严格管控。这更多是针对后台私人牌局（仍然有利可图），但在那种地方被抓到作弊，你会很快后悔。
ctvo查看英文原文
I haven't been to a casino that allows a phone on the table in ages, especially in Asia. Not only that, but most decks are tightly controlled in reputable casinos. This is more for backroom games (which are still lucrative), but get caught cheating in those and you'll regret it quickly.
推荐两本系统讲赌博骗术的书，并强调多数作弊简单廉价，不必依赖高端设备。
对这方面感兴趣的人应该读 Darwin Ortiz 的《Gambling Scams》和 Simon Lovell 的《How to Cheat at Everything》。还有一集《Real Hustle》挺有意思，他们成功混进一场高额牌局并赢了几位著名职业扑克选手。这些书详细讲了各种游戏的作弊手法，不只是扑克，也让我更坚定永远不赌钱。被骗太容易了，而且骗子根本不需要高端设备；很多方法非常简单、非常便宜（如果不算被抓后的医疗、法律或丧葬账单）且非常有效。
pmoriarty查看英文原文
Anyone interested in this would do well to read Gambling Scams[1] by Darwin Ortiz and How to Cheat at Everything[2] by Simon Lovell. There's also an interesting Real Hustle episode where they manage to cheat their way in to winning a high stakes game against some famous professional poker players.[3] The books mentioned above talk in detail about cheating methods in all sorts of games, not just poker, and have solidified my own determination to never gamble for money. It's way too easy to be cheated -- and the cheaters don't need any high end devices to do it either. Plenty of methods are very simple, very cheap (if you don't count the medical, legal, or funeral bills if you get caught), and very effective. [1] - https://www.amazon.com/Gambling-Scams-Detect-Protect-Yourself/dp/0818405295/ [2] - https://www.amazon.com/How-Cheat-Everything-Simon-Lovell/dp/1560259736/ [3] - https://www.youtube.com/watch?v=63jgfmgqkO0
历次讨论
同类还值得读
非法素数
Illegal prime
维基百科条目，介绍“非法素数”：某些素数之所以被称为“非法”，是因为它们经特定编码后，恰好对应一段被法律禁止传播的数据——最著名的是 DVD 解密程序 DeCSS 的代码，有人把…
安全与隐私上首页 5 次 · 2010–2021en.wikipedia.org编辑精选关于 /dev/urandom 的常见误区
Myths about /dev/urandom
（Thomas Hühn 撰写，2014 年首发并持续更新）逐条反驳关于 /dev/urandom 的常见误解：它与 /dev/random 使用的是同一个 CSPRNG，一旦完…
安全与隐私上首页 5 次 · 2014–20202uo.de编辑精选AES 高级加密标准火柴人图解
A Stick Figure Guide to the Advanced Encryption Standard (AES)
一篇用火柴人漫画形式讲解 AES（高级加密标准）算法的经典科普文章。
安全与隐私上首页 5 次 · 2009–2022moserware.com编辑精选指纹是用户名，不是密码
Fingerprints are Usernames, not Passwords
作者（eCryptfs 维护者、Ubuntu 安全工程师）认为指纹等生物特征是公开、不可更改的标识，应视作用户名而非密码，不能当作秘密凭据用于认证。
安全与隐私上首页 4 次 · 2013–2017blog.dustinkirkland.comHTTPS 连接的最初几毫秒（2009）
The First Few Milliseconds of an HTTPS Connection (2009)
逐毫秒拆解一次 HTTPS 连接建立时发生了什么，重点讲 TLS 握手、证书验证、RSA 签名与密钥协商等机制，面向不熟悉该领域的读者。
安全与隐私上首页 4 次 · 2009–2020moserware.com编辑精选