A few days ago, the video “I Cheated At Poker By Hacking A Casino Card Shuffling Machine,” appeared on the WIRED YouTube channel. It reveals how the WIRED team was able to take full control of a DeckMate 2 card shuffler, with the help of security expert Joseph Tartaro (not to be confused with John Turturro – we all know that Joey Knish beats the game fair and square!).
While it’s unsettling, since the DeckMate shuffler is probably used at a cardroom near you, the exposé is ultimately a good thing for the poker world. Here’s a breakdown of the hack and, at least in my humble opinion, why you probably don’t need to worry.
This is a Sophisticated, Next-Level Heist
Forget false shuffles or marked cards. This is a hack that required months of reverse engineering and a deep understanding of the machine’s security. The shuffler, designed to ensure randomness, actually reads every card with an internal camera for security purposes. The cheater intended simply to hijack the data from that camera and know the exact order of the 52 cards.
The most brilliant part, in my book, was how they got around the cut. Obviously, when the cards come out of the DeckMate, the dealer cuts them before dealing. But of course this doesn’t change the deck order, just which card gets dealt first. The cheating app the team developed got around this by having the cheater’s partner enter their two hole cards. With this small piece of information, the app could calculate where the cut was made and precisely predict every player’s cards for the rest of the hand.
In order to inject the program into the shuffler, the hackers exploited two key flaws: they found a way to bypass the shuffler’s software integrity check (the hash) and used an easily accessible USB port (often exposed beneath the table) to plug in a tiny, custom-made computer that installed the malicious code.
This is a very sophisticated hack. These guys are pros; don’t think anybody can do this. The resources and expertise required to pull off such a feat are immense, putting it far outside the realm of casual cheating. That’s good news right there.
It’s Probably Good They Exposed The Vulnerability So It Can Be Fixed
While the hack itself is alarming, its exposure is critical. The WIRED video and the potential reputational risk forced the manufacturer to take action. A spokesperson later confirmed they have since “patched those security flaws in virtually every shuffler.”
Whether or not the patches are fully effective (the security researchers remain skeptical since the machines don’t auto-update), the fact that this vulnerability is now widely known means the manufacturer is on notice and the flaws are being addressed. This makes the equipment safer for everyone who plays in a regulated casino environment.
Before You Start Hating on Auto-Shufflers, Remember That You Have to Pick Your Poison
Automated shufflers were introduced to combat low-tech cheating. Skilled card mechanics (unethical dealers who use sleight of hand) could be cheating you, and I’ve seen plenty of dealers who frankly suck at shuffling (they aren’t cheating, but you aren’t getting a very good shuffle). So you’re basically swapping mechanical/human risk for high-tech digital vulnerability.
The DeckMate may be hackable, but it also provides a high-quality, fast, and verifiably random shuffle that’s immune to human sloppiness. In a licensed casino, the machine is typically monitored, logged, and maintained. The consensus in the video is that in a regulated casino, you shouldn’t be too scared.
You’re Probably Not Getting Cheated at Low Stakes Games
Don’t give up on poker just yet. If you choose to gamble anywhere, there’s a small inherent risk that you’re going to get cheated. Because money attracts cheaters.
Before you worry about the DeckMate, remember that if you’re playing in sketchy home games with people you barely know, you’re already taking bigger risks (marked cards, collusion, getting robbed, etc).
The final and most reassuring point is one of simple economics.
If I were a professional card mechanic or a guy who’s going to spend the time and effort to hack the Deckmate, I’m not using my skills at $1/$2! This kind of elaborate, highly technical scheme carries enormous risk (jail time) and requires significant investment (time, custom hardware).
The hackers would only be interested in high-stakes tables, where a successful session could yield hundreds of thousands or even millions of dollars. You probably aren’t getting cheated at low stakes games. Since most of you reading this are probably low stakes players, you’re probably okay.
So rest easy. Poker, as you know it, will go on.
Like this article? Check out Michael Mizrachi’s Main Event Masterpiece by Steve Blay.
