Quote from: EmoHP on December 29, 2017, 02:28:03 PM

Quote from: bible_pay on December 29, 2017, 01:56:37 PM

Just when the pool was catching up with its deficit (I was about to lower the fee down to .04 from .05) as it was within -400,000 deficit range (for Slovakia thats how much was Lost since inception not counting the faucet that I spent 150K on), someone has hacked the pool last night. There is no trace of entry on the box, or a request for the withdraw in the logs, but this means the pool is not going to be cheap again for a while. If you prefer to solo mine due to the fees, I understand, go for it. Im not out to make a profit.

Anyway, if anyone wants to try to trace the hacker, here is the info for some of the withdraws in the middle of the night around 02:02am CST US time:

https://biblepay-explorer.org/address/BA6wJpAbA4WCNK9X1UwgnweCSCXCGYPZ71

Id prefer to work in slack on the finer details. Alex when you wake up please ping me.

That's not good. If we can help somehow?... Maybe all of us must agree for a higher tax for a while.

I'm a developer, not a server admin. But if you had a security issue:
1. Possible Bug in the pool
2. Somebody hacked the pass, he withdraw and then cleared the logs (if possible from web)
3. Server's host noticed the activity and opportunity to steal Sad

It's very important to fix any possible hole in the security and regularly withdraw the pool's fee.

I can offer some hosts and storage, even a second pool, but I have a dynamic IP. Also no UPS, and backup network as I'm a freelancer, not an IT company. I offer that as I noticed last 7-8 days the pool was not too responsive. Maybe I'm wrong but I think it's overloaded.

Hi my friend,

Isn't it possible to use IP tables in linux to only allow access to owner if he uses static IP or maybe even through owned cheap vps with openvpn? that way we can avoid hacks?