Search content
Sort by

Showing 11 of 11 results by dazzling2865
Post
Topic
Board Pools
Re: [5500 TH] BTC Guild - Pays TxFees+Orphan+NMC, Stratum, Private Servers
by
dazzling2865
on 03/03/2014, 17:32:49 UTC

I gain nothing by inventing a story like this. The fact is a BTCG member hacked my miner and I can't see how given the cgminer conf is intact. So I was hoping for a bit of help, like it's probably been done using X, Y, Z method and here's how to help avoid that. I posted in this forum as I think BTCG has some responsibility to stop it's members behaving in this way.

SSH to the miner, screen to the cgminer instance, change pool details, don't save config.  That's how.

BTC Guild has zero responsibility.  It's your responsibility to secure your equipment, not BTC Guilds.  Roll Eyes

Thank you. That is helpful. All passwords changed and api-allow in cgminer now locked down to our PHP based web monitors server IP address. I named and shamed the BTCG user/worker and surprised that BTCG would not look at their account to see if this is widescale fraud.

Is there any way to allow 2 different IP address to access CG Miner? I want to run CGremote locally on LAN and PHP web based script remotely so that's 2 completely different IP addresses.
API-allow takes a comma separated list. If php and cgremote both need write access:

--API-allow W:xxx.xxx.xxx.xxx,yyy.yyy.yyy.yyy

Great. I do have 127.0.0.1 which I think if for the miners GUI to work i.e. to see itself followed by the remote IP but seems CGminer objects to 3 IPs? i.e. --API-allow W:127.0.0.1,yyy.yyy.yyy.yyy, zzz.zzz.zzz.zzz. Is there a limit of 2 IPs?

Cheers for the help.
Post
Topic
Board Pools
Re: [5500 TH] BTC Guild - Pays TxFees+Orphan+NMC, Stratum, Private Servers
by
dazzling2865
on 03/03/2014, 17:01:14 UTC

I gain nothing by inventing a story like this. The fact is a BTCG member hacked my miner and I can't see how given the cgminer conf is intact. So I was hoping for a bit of help, like it's probably been done using X, Y, Z method and here's how to help avoid that. I posted in this forum as I think BTCG has some responsibility to stop it's members behaving in this way.

SSH to the miner, screen to the cgminer instance, change pool details, don't save config.  That's how.

BTC Guild has zero responsibility.  It's your responsibility to secure your equipment, not BTC Guilds.  Roll Eyes

Thank you. That is helpful. All passwords changed and api-allow in cgminer now locked down to our PHP based web monitors server IP address. I named and shamed the BTCG user/worker and surprised that BTCG would not look at their account to see if this is widescale fraud.

Is there any way to allow 2 different IP address to access CG Miner? I want to run CGremote locally on LAN and PHP web based script remotely so that's 2 completely different IP addresses.
Post
Topic
Board Pools
Re: [5500 TH] BTC Guild - Pays TxFees+Orphan+NMC, Stratum, Private Servers
by
dazzling2865
on 03/03/2014, 16:23:09 UTC
I'm not certain he's pointing the finger solely at BTC Guild, and if he has a way to document that someone on the Guild is doing something like redirecting what equates to funds within the Guild, maybe it can be traced. Though I think it would be very difficult. Even if the funds generated were a wash, the question could be whether the offenders user account was freezable, or not.  Could other people have also been victimized? Yes, he could simply create new accounts and try again but would have to do so without the ill gotten funds generated so far. Is it possible to share a potential threat IP address within the inner circles of the Pool Operators? Could a security lesson be shared among users to help prevent security breaches? If the matter appears legitimate, can/would the Guild really do anything? Huh

It's still a matter of my word vs your word.  I could say your account has my funds, and your account should be frozen.  How could I prove it, and you prove otherwise?

I'm curious how his Ant was hacked.  It shouldn't be accessible externally.  If it is, he needs to tighten up his security a bit.

M

I gain nothing by inventing a story like this. The fact is a BTCG member hacked my miner and I can't see how given the cgminer conf is intact. So I was hoping for a bit of help, like it's probably been done using X, Y, Z method and here's how to help avoid that. I posted in this forum as I think BTCG has some responsibility to stop it's members behaving in this way.

Um, I disagree.  I don't see how BTCG is responsible for a user's actions.  I'm sure if there was definitive proof something could be done to the account, but there's certainly nothing BTCG can do to prevent malicious activity by one of the users.  That's like saying someone stole my car, but I managed to get it back, and Ford needs needs to do something about it.

Your ant shouldn't be reachable by anyone except those on your internal network.  If it's reachable externally, then you open yourself up to hack attempts.

M

Laughable!
Post
Topic
Board Pools
Re: [5500 TH] BTC Guild - Pays TxFees+Orphan+NMC, Stratum, Private Servers
by
dazzling2865
on 03/03/2014, 15:21:14 UTC
I'm not certain he's pointing the finger solely at BTC Guild, and if he has a way to document that someone on the Guild is doing something like redirecting what equates to funds within the Guild, maybe it can be traced. Though I think it would be very difficult. Even if the funds generated were a wash, the question could be whether the offenders user account was freezable, or not.  Could other people have also been victimized? Yes, he could simply create new accounts and try again but would have to do so without the ill gotten funds generated so far. Is it possible to share a potential threat IP address within the inner circles of the Pool Operators? Could a security lesson be shared among users to help prevent security breaches? If the matter appears legitimate, can/would the Guild really do anything? Huh

It's still a matter of my word vs your word.  I could say your account has my funds, and your account should be frozen.  How could I prove it, and you prove otherwise?

I'm curious how his Ant was hacked.  It shouldn't be accessible externally.  If it is, he needs to tighten up his security a bit.

M

I gain nothing by inventing a story like this. The fact is a BTCG member hacked my miner and I can't see how given the cgminer conf is intact. So I was hoping for a bit of help, like it's probably been done using X, Y, Z method and here's how to help avoid that. I posted in this forum as I think BTCG has some responsibility to stop it's members behaving in this way.
Post
Topic
Board Pools
Re: [5500 TH] BTC Guild - Pays TxFees+Orphan+NMC, Stratum, Private Servers
by
dazzling2865
on 03/03/2014, 15:09:03 UTC
Can someone help. I am furious. BTCG user/worker benutzer_1 has hacked my antminer and changed a script file somewhere to redirect to his worker. What will BTC Guild do about this? Short of changing my SSH password which I have now done what else can I do?

UPDATE: Config file for cgminer did not show his pool/worker (priority 0) and a reboot has deleted killed his worker. Now very confused.

Thanks

I'm sorry you appear to have been hacked.  But I don't see how BTCG can help?

I could say my worker was hacked and I should get credit for someone else's work too.  My point is, how can you prove it?

M

Well, I was hoping for some advice as to how to avoid this given that CGminer config had not been modified. Also I will be keeping firewall logs from my router from now on and any further attempts from this user I will forward these to the users ISP with reference to his BTG worker name.
Post
Topic
Board Pools
Re: [5500 TH] BTC Guild - Pays TxFees+Orphan+NMC, Stratum, Private Servers
by
dazzling2865
on 03/03/2014, 13:29:40 UTC
Can someone help. I am furious. BTCG user/worker benutzer_1 has hacked my antminer and changed a script file somewhere to redirect to his worker. What will BTC Guild do about this? Short of changing my SSH password which I have now done what else can I do?

UPDATE: Config file for cgminer did not show his pool/worker (priority 0) and a reboot has deleted killed his worker. Now very confused.

Thanks
Post
Topic
Board Speculation
Re: Upcoming MtGox Movement
by
dazzling2865
on 20/02/2014, 09:50:08 UTC
It's really taking them a long time.

Tick tock, tick tock. Time goes by so slowly!

I see a massive spike in volume on their website ticker/graph. No expert but does that mean a massive sell of BTC by MTgox/it's customers in last hour or so?
Post
Topic
Board Pools
Re: [450 TH] Slush's Pool (mining.bitcoin.cz); TX FEES + VarDiff
by
dazzling2865
on 06/02/2014, 12:13:17 UTC
I just wrote an app that will monitor the slush api and tells you when the pool finds a block.
It can optionally send push notifications to iOS/android via https://pushover.net

https://github.com/professoruss/blockfound

Let me know if you have any feedback or can find a cheaper push app (pushover is $4.99)

output looks like this:
Found new block!! Elapsed: 11:52:20 Hashrate: 879340.212GH/s


I like this idea, well done. Have installed pushover but having read the Readme, not sure how I install you api into it? Any help with?

Thanks
Post
Topic
Board Hardware
Re: [Setup & Troubleshoot] Bitmain AntMiner S1 180GH/S miner
by
dazzling2865
on 31/01/2014, 10:10:43 UTC
I have one unit I thought the fan was bad on as well. I'm not sure if the damage is in the fan itself or the board, but for whatever reason the PWM doesn't seem to work. Taking a small flat head screwdriver and pushing down the locking pin on the blue wire of the fan connector allows you to pull it out, which will cause the fan to run at full speed. That solved my issue.

Great. Thanks. Both now OC to 400MHZ and running at 40 degrees. Let's hope the fans last a while!

I wish Bitmain would publish a way to SSH into the S1 (as we do for OC) and set a target temperature so I can set to say 45 but I'm guessing this might me more crudely done with the hardware.
Post
Topic
Board Hardware
Re: [Antminer S1 open for sale again] The first round after the Chinese New Year
by
dazzling2865
on 31/01/2014, 00:52:38 UTC

**
Anyone who just purchased their miners at 1.9 btc want to trade (or donate) their .02 per miner coupon please contact me ASAP.


What does this mean, especially the reference to the coupon. I am guessing that Bitmaintech offers no price protection for people like me who paid 1.9BTC only 1 week ago!?
Post
Topic
Board Hardware
Re: [Setup & Troubleshoot] Bitmain AntMiner S1 180GH/S miner
by
dazzling2865
on 29/01/2014, 16:11:42 UTC
My miners running too hot for my liking at 48-50 and wondering if a PWM fan as exhaust on the other end of the heatsink would help? Not sure if the connector on the other blade will control a PWM fan?

Anybody know how to force the fans already on these S1 to run at full speed? Not concerned about the noise and even at full speed suspect the fans will outlive the rest of the hardware.