Quote from: jmorignot on February 01, 2018, 05:07:34 AM

Quote from: tipztek on January 31, 2018, 10:00:10 PM

Quote from: letrevian on January 31, 2018, 04:28:53 PM

Quote from: letrevian on January 29, 2018, 10:24:23 PM

Any comments on Bminer contacting 104.31.68.221:443/104.31.69.221:443 regularly?

Quoting myself so perhaps this gets a response from the developer.

Well, I'm not the dev but pretty sure I have your answer.

nslookup bminer.me
Name: bminer.me
Address: 104.31.68.221
Name: bminer.me
Address: 104.31.69.221

Also, my connection sucks so sometimes I get the following, purportedly because I lose connection to the internets all the time):
Checking updates
Failed to read from the network: Get https://api.bminer.me/v1/init/zec/520: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
Checking updates

Navigating to that link gives us the following content:
stratum+ssl://t1YmvsEuSkADkoYBqtwRt3aJ31GvZzF45fL.w@zec-eu1.nanopool.org:6633/
-----BEGIN CERTIFICATE-----
MIID/DCCAuagAwIBAgIID+rOSdTGfGcwCwYJKoZIhvcNAQELMIGLMQswCQYDVQQG
EwJVUzEZMBcGA1UEChMQQ2xvdWRGbGFyZSwgSW5jLjE0MDIGA1UECxMrQ2xvdWRG
bGFyZSBPcmlnaW4gU1NMIENlcnRpZmljYXRlIEF1dGhvcml0eTEWMBQGA1UEBxMN
U2FuIEZyYW5jaXNjbzETMBEGA1UECBMKQ2FsaWZvcm5pYTAeFw0xNDExMTMyMDM4
NTBaFw0xOTExMTQwMTQzNTBaMIGLMQswCQYDVQQGEwJVUzEZMBcGA1UEChMQQ2xv
dWRGbGFyZSwgSW5jLjE0MDIGA1UECxMrQ2xvdWRGbGFyZSBPcmlnaW4gU1NMIENl
cnRpZmljYXRlIEF1dGhvcml0eTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzETMBEG
A1UECBMKQ2FsaWZvcm5pYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMBIlWf1KEKR5hbB75OYrAcUXobpD/AxvSYRXr91mbRu+lqE7YbyyRUShQh15lem
ef+umeEtPZoLFLhcLyczJxOhI+siLGDQm/a/UDkWvAXYa5DZ+pHU5ct5nZ8pGzqJ
p8G1Hy5RMVYDXZT9F6EaHjMG0OOffH6Ih25TtgfyyrjXycwDH0u6GXt+G/rywcqz
/9W4Aki3XNQMUHNQAtBLEEIYHMkyTYJxuL2tXO6ID5cCsoWw8meHufTeZW2DyUpl
yP3AHt4149RQSyWZMJ6AyntL9d8Xhfpxd9rJkh9Kge2iV9rQTFuE1rRT5s7OSJcK
xUsklgHcGHYMcNfNMilNHb8CAwEAAaNmMGQwDgYDVR0PAQH/BAQDAgAGMBIGA1Ud
EwEB/wQIMAYBAf8CAQIwHQYDVR0OBBYEFCToU1ddfDRAh6nrlNu64RZ4/CmkMB8G
A1UdIwQYMBaAFCToU1ddfDRAh6nrlNu64RZ4/CmkMAsGCSqGSIb3DQEBCwOCAQEA
cQDBVAoRrhhsGegsSFsv1w8v27zzHKaJNv6ffLGIRvXK8VKKK0gKXh2zQtN9SnaD
gYNe7Pr4C3I8ooYKRJJWLsmEHdGdnYYmj0OJfGrfQf6MLIc/11bQhLepZTxdhFYh
QGgDl6gRmb8aDwk7Q92BPvek5nMzaWlP82ixavvYI+okoSY8pwdcVKobx6rWzMWz
ZEC9M6H3F0dDYE23XcCFIdgNSAmmGyXPBstOe0aAJXwJTxOEPn36VWr0PKIQJy5Y
4o1wpMpqCOIwWc8J9REV/REzN6Z1LXImdUgXIXOwrz56gKUJzPejtBQyIGj0mveX
Fu6q54beR89jDc+oABmOgg==
-----END CERTIFICATE-----

So I can only suspect it connects to that IP regularly to update the software and relay the connection string for the dev fee in case he wants to change it.

It could also be used for some nefarious purpose like transferring all your files and private keys to his server, who knows. That's the risk with closed source.

If you check on nanopool the address it's sending the "2%" dev fee, it generates 144,594SOL/s!!!! If it was only 2%, it would mean 7,229,700 sols total...which is a LOT of people using bminer, looks very fishy.
It's about 1000$ per day of revenue, nice to be a developer

EWBF: https://zcash.flypool.org/miners/t1fJuHWrfcWnYMYyP9VAF96vRnvND2NziMG

DSTM: https://zcash.flypool.org/miners/t1NEpmfunewy9z5TogCvAhCuS3J8VWXoJNv

Claymore is making millions per month.