Quote from: Cosbor on May 19, 2018, 08:46:20 PM

Are your scripts safe from disastrous flaws outlined in this article (about mining rigs anyone can find on Shodan)?

https://medium.com/@s3yfullah/hacking-cryptocurrency-miners-with-osint-techniques-677bbb3e0157

Thank you for the link to the security article.

From the article: "The critical point is that miners need username and password to log in."

I recommend the following:
- Do not expose your antminer to the internet. Always place it behind a firewall. In this way your miner will not be discovered by Shodan.
- Always change the default user name and password for your miner (remember to change both web access and ssh access)
- Monitor your mining payout address so if someone changes your pool and worker address you will notice.

Having said that, the scripts in this thread have been replaced by Full Cycle Mining (I am the author of both). I do not yet recommend any of the programming be exposed to the internet because someone could easily switch pools or reset all your miners. The best rule for security right now is to always access miners using vpn.