Quote from: georgem on April 04, 2014, 02:36:01 PM

@wizkid:

any update about NMC merge mining?

Quote from: wizkid057 on March 30, 2014, 05:06:04 PM

Quote from: anth0ny on March 30, 2014, 04:54:15 PM

Quote from: DustyRah on March 30, 2014, 04:53:14 PM

For some reason the side Namecoin mining appears to have stopped about a month or so ago...has merged Namecoin mining been disabled?

Last I heard they got hacked (or, at least, noticed suspicious activity) and temporarily shut down NMC.

There was a bug in some old stats code that allowed some SQL injection to the web stats (fixed here) and someone used it to mess up the web server side copy of the My Eligius data. The pool servers were in no way affected by any of this. The web server, by definition, is considered insecure and not able to affect pool operations. Everything pulled from the webserver (signatures for options) is re-verified on other servers. So, even if an attacker were actually able to compromise the web server (which they didn't) it wouldn't have any real effect.

The NMC payout code runs on another server, pulls this data, reverifies the signatures, and then pays out the proper amount of NMC. The issue was that my code for re-verifying the signatures was broken and I didn't realize, so, one set of payouts got messed up and used corrupt data. I fixed the stats bug, fixed any broken options from the previous day's backup, and am in the process of completely rewriting and testing the NMC payout code.

My time has been extremely limited. Combine that with battling constant DDoS attacks against the pool for nearly a week now and I hope you can understand why this isn't quite complete yet. I am working on it, haven't forgotten about it, and it will get done. Also, when I do make the next NMC payout it will include backpay from the last valid payout (Mar 8th I believe off the top of my head) to the next valid payout. The pool is still mining NMC for you guys and everyone will be paid their NMC.

No offense to anyone, but I have been ignoring most questions about whats going on about NMC (via PM, email, IRC, etc) just because answering the same question 1000x is a waste of time I should be using to actually work on the problem.

Stay tuned. I'm hoping to have it done today, but no promises.

-wk