[0Th]Ozcoin Pooled Mining |DGM 1%|Stratum+VarDiff port 80|NEW CN mining| - page 30.

John (John K.)

legendary

Activity: 1288

Merit: 1227

Away on an extended break

Quote from: zebedee on April 22, 2013, 06:46:38 AM

Quote from: zebedee on April 22, 2013, 06:31:50 AM

Quote from: dogisland on April 22, 2013, 06:06:34 AM

At 8am yesterday morning the funds were intercepted when the user made a payment.

https://blockchain.info/address/1DsFCAZaxhJ9YGw5X8NCW9VkSMDZMyXzMF

Um, how does that work? I thought strongcoin didn't control any private keys? How can the funds be "intercepted"?

Regardless I'm glad graet has gotten a fraction of his money back.

I can only assume you pulled on him the same trick he pulled on Ozcoin - hacking the JS you delivered to his browser? Just desserts I guess.

This might be OT, but will this happen to regular users if strong coin is compromised? I just came to this thread after seeing this thread : https://bitcointalksearch.org/topic/strongcoincom-owner-stole-user-money-are-my-bitcoins-safe-online-184610

Graet

vip

Activity: 980

Merit: 1001

Thanks guys

planning on a good nights sleep, then working out just where the finances are at and talk to people that have loaned me coins to help out - the next phase in the recovery process

eustratum mining node should be back up within the next 12 hours

rupy

hero member

Activity: 725

Merit: 503

Good job!

kaerf

hero member

Activity: 631

Merit: 500

very impressive recovery to have paid back your miners so quickly after such an incident.

ccbiker

newbie

Activity: 16

Merit: 0

Quote from: Graet on April 23, 2013, 12:06:46 AM

Payouts have run ALL users over threshold paid up to date
we have a lot of 0 confirm payouts, if you have an email but no payout this will be the reason, patience and the Bitcoin network will get to them

With that I will breathe a big sigh of relief and move away from the keyboard for a couple of hours
Best wishes
Graeme

I'm impressed to see you stick with this, Graeme... mad props!

And thanks to dogisland for getting him a majority of the hacked funds returned.

chunglam

donator

Activity: 229

Merit: 106

Just point one miner to your pool and set the donation 100% to support your pool. Hope you can going through this difficult time.

Graet

vip

Activity: 980

Merit: 1001

Payouts have run ALL users over threshold paid up to date
we have a lot of 0 confirm payouts, if you have an email but no payout this will be the reason, patience and the Bitcoin network will get to them

With that I will breathe a big sigh of relief and move away from the keyboard for a couple of hours
Best wishes
Graeme

sharky112065

sr. member

Activity: 383

Merit: 250

Graet: NVM I guess lastpass put in my email address for the login id on that first password reset. Some sites I log into use the email address so I just figured it was correct. Blakesmith helped me.

I feel so dumb now Sad

Bitsaurus

hero member

Activity: 873

Merit: 1007

Congrats on at least getting some of the funds back. Hopefully you'll be able to recover all the funds and make this a distant memory.

Blaksmith

full member

Activity: 189

Merit: 100

Quote from: haveagr8day on April 22, 2013, 10:13:45 PM

Graet,

Congratulations on getting some of your coins back. One thing that I noticed on the website since it relaunched is that the POT Stats are missing. Have they just not been added back in yet or am I missing something?

Thanks.

Known cosmetic only bug, that was getting worked on when the site was hacked.. we will be getting back to it after we make sure it is all working the way it was before the hacking.

Blak

SlaveInDebt

hero member

Activity: 699

Merit: 500

Your Minion

Coming back home Cheesy

haveagr8day

member

Activity: 112

Merit: 10

Graet,

Congratulations on getting some of your coins back. One thing that I noticed on the website since it relaunched is that the POT Stats are missing. Have they just not been added back in yet or am I missing something?

Thanks.

Graet

vip

Activity: 980

Merit: 1001

We are about to enable payouts to run
the 'stolen" balances have been restored to a PPS column in the database (due to how DGM scores are added in database this was the best way we feel.)

This will cause an offset in "total earnings" due to the system seeing the "payout" twice.

I will be topping up the wallet slowly, it will take some hours to run through everyone - the script runs every 1/2 hour

cheers
Graeme

Graet

vip

Activity: 980

Merit: 1001

I am only aware of one person with the password reset problem, we missed him in IRC when he mentioned it
roomservice posted a page or 2 ago the way passwords are hashed and stored. I always recommend using unique passwords and changing them from time to time regardless.

Re the donations, yes it could cause an awkward situation but I am/will be happy to reimburse anyone that donated in good faith thinking no coins would be returned (TBH I thought they were all gone and nearly fell off my chair with surprise when I found there was a chance to get even some coins back) at this stage 568.94BTC of 923 has been recovered leaving 354.06 still lost.

Payouts have not run yet until I am sure that miners will be paid for the payout run that went to the hacker and not miners. it is easier to be sure before we run payouts than try to fix it after.

Re: lots of things, I don't have answers to *everything* yet -some that I do, it is not yet an appropriate time to disclose - my main focus for the last few days has been to get Ozcoin back online and paying out as it should - most of you will be aware this goal is not yet achieved.

Thanks
Graeme

kano

legendary

Activity: 4634

Merit: 1851

Linux since 1997 RedHat 4

Quote from: crazyates on April 22, 2013, 12:31:35 PM

Quote from: kano on April 22, 2013, 11:40:13 AM

Quote from: ?? on ??

Could I be sent the alias of the person that you think is connected to the hacking?

Thanks

Did you bother to read the post you quoted?

Quote from: polrpaul on April 22, 2013, 12:21:06 PM

Quote from: ?? on ??

Could I be sent the alias of the person that you think is connected to the hacking?

Thanks

Lulz, newb.

Toil has a vested interest in finding out who this person is, as they tried to frame him for the theft. I agree with not releasing the info to the public, but those who need to know should be made aware.

https://bitcointalksearch.org/user/toil-103188

Sorry, you are missing two things.

1) Exactly what dogisland said which is of course correct, meaning that he SHOULD not pass those details on to ANYONE without the law requiring him to - think of it this way: can anyone make up some likely story and thus ask dogisland for details of his user base?

2) Why on earth you you give out information to someone who is a member of a group of people who do such things already?
If he isn't directly involved (which there is no proof either way yet) he is certainly indirectly involved by being part of a group of people who commit these sort of crimes.

As I said early on in the discussion: "What goes around comes around"

sharky112065

sr. member

Activity: 383

Merit: 250

So, I posted that a password reset was needed a few posts back. The problem is worse than that.

If you reset your password and use the login link on that page, it allows you to set a new password, but then whey you tell it to save, the password is not being saved on the server.

If you log out and back in again, it will not log you in.

Raize

donator

Activity: 1419

Merit: 1015

There's still a significant amount missing, and there may still be a few things to follow up on if this car purchase was a legit purchase (finding the seller, finding where they were sending to, recovering any remaining funds, etc).

Perhaps at the end of this whole ordeal there will be an update with recognition for those that donated as well as some sort of reimbursement if necessary. A few days (if not weeks) will probably be needed to sort this thing out. I'd recommend giving them some time. It was an unfortunate event that's still not really over yet as the full lost amount has yet to be recovered.

MajorMiner

full member

Activity: 147

Merit: 196

Out of curiosity, does this mean Graeth will return all the "sympathy" BTC from donations?

slider1978

full member

Activity: 180

Merit: 100

Logged on to see that my balance is no longer what it was before the site went down. Pre-downtime I had .46xxx BTC and now it's .00xxx. I had not requested a payout and the .46 was well below my payout threshold.

crazyates

legendary

Activity: 952

Merit: 1000

Quote from: kano on April 22, 2013, 11:40:13 AM

Quote from: ?? on ??

Could I be sent the alias of the person that you think is connected to the hacking?

Thanks

Did you bother to read the post you quoted?

Quote from: polrpaul on April 22, 2013, 12:21:06 PM

Quote from: ?? on ??

Could I be sent the alias of the person that you think is connected to the hacking?

Thanks

Lulz, newb.

Toil has a vested interest in finding out who this person is, as they tried to frame him for the theft. I agree with not releasing the info to the public, but those who need to know should be made aware.

https://bitcointalksearch.org/user/toil-103188

Topic: [0Th]Ozcoin Pooled Mining |DGM 1%|Stratum+VarDiff port 80|NEW CN mining| - page 30. (Read 398185 times)