UB scandal figure Travis Makar reappears on Twitter, talks about UB again, incriminates Mansour Matloubi

[haleylh]

As I promised to Druff last night, I'd post this when my first round of research was completed. Travis Makar directly released the names of four more accounts used by Russ Hamilton in his cheating:

BEER2GO
DIAM123
ILENDU
GOGRACY

I put in about 15 hours on this yesterday and was able to use information in those photos to derive the screennames of seven other Hamilton UB cheating accounts:

BRANSON
STRAYCAT1980
DANAS
TUNICADOG
VEGASRUN
WINDSORWIN
GREEKTOWN

Still other accounts remain to be identified. I'm working on it, but have to drive several hundred miles later today. A little bit more on the above in my latest blog entry.

[Dan Druff]

As I promised to Druff last night, I'd post this when my first round of research was completed. Travis Makar directly released the names of four more accounts used by Russ Hamilton in his cheating:

BEER2GO
DIAM123
ILENDU
GOGRACY

I put in about 15 hours on this yesterday and was able to use information in those photos to derive the screennames of seven other Hamilton UB cheating accounts:

BRANSON
STRAYCAT1980
DANAS
TUNICADOG
VEGASRUN
WINDSORWIN
GREEKTOWN

Still other accounts remain to be identified. I'm working on it, but have to drive several hundred miles later today. A little bit more on the above in my latest blog entry.

Excellent work, Haley!

I suggest everyone read her blog linked above.

It leads to the conclusion that Russ had several accounts in real-life friends' names, who presumably were complicit in exchange for other favors. This was probably done for cashout purposes (my assumption, not Hayley's, though perhaps she thinks the same ).

[Dan Druff]

These were posted at Donkdown today:











The above were said to be from Russ Hamilton's temporary cell phone. I will try to call Greg Pierson on this week's radio. Good change the number has changed, though. The one labeled "Z" is said to be Zolta Rosza. "Norm" is said to be female. It is not clear who Sandy Law is.


These screen shots were from the installation of GodMode:

[Dan Druff]

Here is a binder with UB information listed, again from Donkdown:

[Dan Druff]

Here are some passwords to AOL accounts that have to do with UB. I think these are the ones that were already tried and still work!

[Belly Buster]

0.0 useful info in those install logs - except it looks like god mode is just a tweak on the standard UB client installer.

[XR71WhiteFish]

So, earlier today, Travis released the infamous "zip file" attachments to the "Travis emails" to various people intended to guide them in how to set up their UB client software to be able to view holecards.

The most significant in my opinion was the infamous "GM.zip" file of just a few hundred bites, which was attached to the original Travis email released in a redacted manner back in 2011.

Assuming this file is legitimate , the contents are one windows registry file, the contents of which are:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\UltimateBet\UltimateBet \Settings]
"Debugging4Dollars"=dword:00000001
"SuperAllah7462"=dword:00000001
"XR71Whitefish"=dword:00000001





For those who have been following this story over the last 2 years, I posted a detailed "theory of operation" of how I felt the UB client could be configured to "cheat" (display everyone's hole cards). I proposed that the contents of this attachment would have likely been the "SuperAllah" registry keys which I originally discovered and published shortly after the original Travis DD interview.

I have at least partially now confirmed my suspicions on how the cheating functionality in the client worked (again, assuming the zip file is legitimate, and I don't see any reason why it isn't).

The only piece yet to be confirmed by a UB programmer/insider is my theory that you did in fact need to also use the "auditmonster1" login to see hole cards, although I almost wonder now if perhaps the Debugging4Dollars key alongside one of the others was all you needed? Good grief, if that was the case, we will NEVER know how many cheaters were out there, as this was something anyone with software development / reverse engineering expertise could have figured out at the time..

[Belly Buster]

The god mode attachments are likely to be exceptionally boring. The file is only 327 bytes. I assume they only zipped it up to password protect it.

It will be something like

[HKEY_LOCAL_MACHINE\SOFTWARE\ULTIMATEBET]
"EnableGodMode"="1"

The more interesting revelation would be the source code to the server and client software.

Wasn't far off!

[Belly Buster]

So, earlier today, Travis released the infamous "zip file" attachments to the "Travis emails" to various people intended to guide them in how to set up their UB client software to be able to view holecards.

The most significant in my opinion was the infamous "GM.zip" file of just a few hundred bites, which was attached to the original Travis email released in a redacted manner back in 2011.

Assuming this file is legitimate , the contents are one windows registry file, the contents of which are:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\UltimateBet\UltimateBet \Settings]
"Debugging4Dollars"=dword:00000001
"SuperAllah7462"=dword:00000001
"XR71Whitefish"=dword:00000001





For those who have been following this story over the last 2 years, I posted a detailed "theory of operation" of how I felt the UB client could be configured to "cheat" (display everyone's hole cards). I proposed that the contents of this attachment would have likely been the "SuperAllah" registry keys which I originally discovered and published shortly after the original Travis DD interview.

I have at least partially now confirmed my suspicions on how the cheating functionality in the client worked (again, assuming the zip file is legitimate, and I don't see any reason why it isn't).

The only piece yet to be confirmed by a UB programmer/insider is my theory that you did in fact need to also use the "auditmonster1" login to see hole cards, although I almost wonder now if perhaps the Debugging4Dollars key alongside one of the others was all you needed? Good grief, if that was the case, we will NEVER know how many cheaters were out there, as this was something anyone with software development / reverse engineering expertise could have figured out at the time..

Sadly without the server software to go with the client, this is probably the one thing we may never know, unless someone (Travis) can absolutely confirm it.

It's not inconceivable that anyone could disassemble the ub client software, spot those strange registry keys, update their registry and have their own superuser client good to go.

[BeerAndPoker]

I downloaded them files off DD as well and they are useless to the typical user.

[Belly Buster]

Sadly without the server software to go with the client, this is probably the one thing we may never know, unless someone (Travis) can absolutely confirm it.

It's not inconceivable that anyone could disassemble the ub client software, spot those strange registry keys, update their registry and have their own superuser client good to go.

So the programmer (Jack Bates) who phoned into radio has confirmed that the registry keys had to work in combination with a specific account - I guess that makes sense but this is UB we're talking about.

He seemed pretty pissed off with Scott Bell (ElevenGrover) but sounds like he has provided Haley with a bunch of info which is good.

I think he got his wires crossed on the RAID stuff. I think Druff asked the right questions (how can a RAID failure lose certain hand histories and not others) but he didn't really have an answer on this.

The RAID issue is 100% UB horseshit.

[BeerAndPoker]

New UB Emails posted over on DD.

[haleylh]

Jack explained the RAID stuff to me at length. The truth of it is equal parts funny and pathetic. He was long since gone by the time the cheating started, but his explanation of the RAID storage device problem was that yes, it could have happened more or less as UB described it, but it wouldn't have excused UB's culpability in any event.

Assuming that that storage device did indeed fail and that it also was the primary storage device, it doesn't mean that the there weren't backups created and stored elsewhere, and that UB didn't choose the lesser of two evils -- choosing to be seen as grossly incompetent as opposed to destroying evidence in an ongoing coverup.

I remember one of the funny things Jack telling me about UB's early days was that when they'd have a system crash and the site would go down in the early days, it wasn't at all unusual for them to phone up at wee hours to Kahnawake where nobody but the night watchman would be around. They'd have the night watchman pop the modem out of the rack, shove it back in, then let them know when the lights started blinking again. Then the site would start to work again.

I feel bad for Jack, I really do. Scott Bell went as far as to publicly and falsely accuse Bates of participating in a blackmail scheme merely to try to extract background information from Bates. The purported blackmail scheme never existed, but Bell has never cared about the damage he'd cause by spreading such falsehoods.

[BeerAndPoker]

Micon posted some hand histories Travis sent him over on DD front page.

[BUBBLES]

Micon posted some hand histories Travis sent him over on DD front page.

http://t.co/rLD8XFF2

[Belly Buster]

I might try and do some analysis on these HHs but there are cleverer nerds than me on 2+2 that will probably do this.

Shit like this is pretty sick.

- Hand #42332120-3139 at Ann Arbor (No Limit Hold'em) 05/29/07 07:16:28 AM
- Started at 29/May/07 07:16:28 05/29/07 07:16:28 AM
- NioNio is at seat 1 with $32636. 05/29/07 07:16:28 AM
- CloseUrEyes is at seat 2 with $11248. 05/29/07 07:16:28 AM
- The button is moved to seat 1. 05/29/07 07:16:28 AM
- The button is at seat 1. 05/29/07 07:16:28 AM
- 05/29/07 07:16:28 AM
- NioNio posts the small blind of $50. 05/29/07 07:16:28 AM
- CloseUrEyes posts the big blind of $100. 05/29/07 07:16:28 AM
- NioNio, at seat 1, is in this hand. 05/29/07 07:16:28 AM
- CloseUrEyes, at seat 2, is in this hand. 05/29/07 07:16:28 AM
- 05/29/07 07:16:28 AM
Kd CloseUrEyes is dealt: 05/29/07 07:16:28 AM
2h NioNio is dealt: 05/29/07 07:16:28 AM
As CloseUrEyes is dealt: 05/29/07 07:16:28 AM
2s NioNio is dealt: 05/29/07 07:16:28 AM
- 05/29/07 07:16:28 AM
- Pre-flop: 05/29/07 07:16:28 AM
- NioNio raises to $300. 05/29/07 07:16:32 AM
- CloseUrEyes re-raises to $1000. 05/29/07 07:16:34 AM
- NioNio calls. 05/29/07 07:16:40 AM
- 05/29/07 07:16:40 AM
3h flop card: 3h 05/29/07 07:16:40 AM
3c flop card: 3c 05/29/07 07:16:40 AM
8s flop card: 8s 05/29/07 07:16:40 AM
- Flop (board: 3h 3c 8s): 05/29/07 07:16:40 AM
- CloseUrEyes checks. 05/29/07 07:16:50 AM
- NioNio bets $2000. 05/29/07 07:16:52 AM
- CloseUrEyes raises to $8000. 05/29/07 07:16:56 AM
- NioNio calls. 05/29/07 07:17:00 AM
- 05/29/07 07:17:00 AM
Qh turn card: Qh 05/29/07 07:17:00 AM
- Turn (board: 3h 3c 8s Qh): 05/29/07 07:17:00 AM
- CloseUrEyes checks. 05/29/07 07:17:05 AM
- NioNio checks. 05/29/07 07:17:06 AM
- 05/29/07 07:17:06 AM
Qd river card: Qd 05/29/07 07:17:06 AM
- River (board: 3h 3c 8s Qh Qd): 05/29/07 07:17:06 AM
- CloseUrEyes checks. 05/29/07 07:17:10 AM
- NioNio bets $18000. 05/29/07 07:17:14 AM
- CloseUrEyes folds. 05/29/07 07:17:22 AM
- NioNio is returned $18000 (uncalled). 05/29/07 07:17:22 AM
- 05/29/07 07:17:22 AM
- 05/29/07 07:17:24 AM
- Hand #42332120-3139 Summary: 05/29/07 07:17:24 AM
- $1 is raked from a pot of $18000. 05/29/07 07:17:24 AM
- $1 is raked from a pot of $18000. 05/29/07 07:17:24 AM
- NioNio wins $17999. 05/29/07 07:17:24 AM
- Hand 42332120-3139 ends. 05/29/07 07:17:24 AM

[Dan Druff]

Travis e-mailed me these histories, I just haven't taken a look at them yet.

[Belly Buster]

More stuff apperared over at DD. This is from Phil Hellmuth's account pretty LOL and unlikely he cheated, he donked $4k off in 15 minutes then had to go cap in hand to the missus for a $800 reload (oldest log is at the bottom)

9481362 800.00 Transfer From PhilHellswife 2006-MAR-07 09:15:04 PM customer req
7655134 0.00 Customer #10664 leaves table 30091968 (Holden) with $0 2006-MAR-06 11:30:09 PM game server
7655131 1.00 Auto-bonus redemption (based on 10 pts) from table #30091968 2006-MAR-06 11:30:09 PM game server
7638582 -1913.00 Customer #10664 rebuys at table 30091968 (Holden) for $1913 2006-MAR-06 11:21:42 PM game server
7621055 -2000.00 Customer #10664 sits down at table 30091968 (Holden) with $2000 2006-MAR-06 11:13:06 PM game server