Quote from: efudd on June 08, 2019, 09:27:35 AM

EDIT: there is another malware that uses the API to add/replace your pools on the fly. It seems to run from an infected computer on the network... I have not been able to capture it in the wild, however, so I dont have a lot of extra information on it.

Not sure what you think is happening, but that's not possible on any current Bitmain original firmware.

The settings are:

Code:

"api-groups" : "A:stats:pools:devs:summary:version",
"api-allow" : "A:0/0,W:*",

Which means no one can do any API commands other than those listed - which are all REPORT commands, no ability to CHANGE anything.
The API pool change options are in the README I wrote of course - but they are not listed there in the API setting options in the miner.
(N.B. the W:* is an error and is ignored ...)

I guess the problem is people using hack firmware from MANY sources here on the forum.
You should only use original firmware supplied by the manufacturer.

If you are using a firmware that screws with the API settings and someone hacks your miner API because of that, I'd suggest you go after the firmware supplier

Of course if Whatsminer gear has that problem also in the original firmware, then go after them

I've no idea what they set the default to.

P.S. I designed and wrote the API used in miners.