Post
Topic
Board Hardware
Re: Official FutureBit Apollo BTC Software/Image and Support thread
by
jstefanop
on 25/02/2022, 17:50:18 UTC
update on my end.    i thought i had it figured out.   but i woke up this morning and was wrong.....   so i reflashed, setup a totally different vlan than it was on, added it on a totally different wifi network instead of the same ether connection it was on before, setup the pool and password on startup, clicked on settings and users and changed the main password to one that is different from default and different than my dashboard login, fired it up, working great, temps around 45 and 62, ran great for 5-8 hours, woke up, changed back to slushpool and topminer01.........(i have tried using multiple pools, keeps reverting back to topminer01 on slushpool)    is there something i'm missing?  is there a different system password that someone could be accessing to get into it and change everything?  i'm at a loss at this point.....   

Where did you buy it?

from futurebit.  one full node and 3 standard units. 

OK just wanted to rule out third party tampering before you got it.

What pool are you using? Have you tried other pools?

yep i've used multiple.  i am not currently using slushpool however.  its so strange, i go through all these steps.  it runs fine on the pool i set, then at random it will go back to this topminero1 workername on slushpool as others have seen.  with reflashing and all that and setting the default pool to something totally different, i just can't understand how it keeps changing without some sort of a compromise or something.  like i said, after yesterday, it had a new network, new ip, isoloated from anything else in my network, all the passwords on the unit that i know of changed, unless there's more i don't know about or some kind of a virus or bug or something....

OK

The config file that the miner uses to populate the pool login details is called "miner_config" and is located in: /opt/apolloapi/backend/apollo-miner/

If you SSH into the miner you can cd to that directory and view it with "cat miner_config" command

So I would first, SSH in while the miner is set how you like it, then check that file to make sure it has saved the settings.

Then if it switches back to slushpool and the other account, check again and see if the file has changed.

You can also see the log for the miner in that directory called miner.events


First thing you need to change is the default root password. Please remember that the root password is public, so if someone gains access to your network and scans it and finds "futurebit-btc" its pretty easy for them to do a google search and figure out how to log in and take over your unit. This applies to almost any miner / open source firmware or devices on your network.

You can change the default password in the OS settings using a monitor:

Power Button on Upper right hand corner -> Settings -> Users -> Change password

OR

SSH into your device  (futurebit/futurebit123) and type password update command

Code:
passwd

Ideally you should do this right after a fresh SD card install before you connect the device to your network with a monitor keyboard and mouse, that way if you have another compromised system on your network it does not have a chance to auto log in and hijack your Apollo.

This is just temporary though and you need to find the root cause of how they are accessing your network in the first place, which is probably another compromised system/device on your network.