A college friend works for my state's gaming commission. During a 'drinking talk' about digital signatures, she told me an interesting part of her job; not just going through the slot machines and validating the payout settings, but also checking the EEProms MD5 Hash* to make sure that it was in a list of 'approved' code hashes.
* - This was 15 years ago, I -really- hope they use something better nowadays.
> checking the EEProms MD5 Hash* to make sure that it was in a list of 'approved' code hashes.
> This was 15 years ago, I -really- hope they use something better nowadays.
I dunno. If the hash is generated and displayed by the hardware on a separate LCD display (or a serial you attach) and maybe a bit of non-flashable code, that seems pretty good to me, especially that it's regularly spot checked in person. Something like that is far harder to fake and fool real people with successfully for an extended period, IMO.
The machine will not allow a win no matter what until a set number of losses has happened. The default shipped setting is to not allow a win until there has been 700 losses. Some other vendor in Arizona is noted as having been sued because he ran his games at a required 2200 losses to allow a payout.
Actual gambling devices are much more regulated and have much better payout odds most likely (depending on what's winnable), but more importantly are actually random.
These games are not chance, and they aren't skill, they're a scam that market themselves as a game of skill.