Author

Topic: [ANN] 42 | Time to Revive 42 Coin - Everyone get in here!!! - page 103. (Read 357186 times)

member
Activity: 83
Merit: 10
Earlier this evening, amid complaints of fraudulent withdrawals from many of our miners, we at Hackshard launched a full investigation into our databases, websites, and other software with the goal of identifying and eliminating the faulty code, hardware, or security. We discovered no fault in the cronjobs, databases, stratum servers, wallets, or any of the other various components of the Hackshard mining pools. While this did confirm that the Hackshard infrastructure was not at fault, our findings hinted at something perhaps even more worrisome. We found that several dozen miners had recently withdrawn to a single address: the same address as that which many of those claiming fraud had presented to us as having stolen their coins. Given the extreme unlikelihood of so many miners being host to the same keylogging virus, and given the complete lack of evidence that our own pools have been infiltrated by malicious agents, we have concluded that the issue could only have arisen from miners using identical login credentials with multiple pools. If this is the case, with a significant portion of our miners having been victims, we further conclude that only one with access to the database of a rather large pool could have been the thief. As such, we request that all miners who have been affected by this theft respond immediately with a full list of pools which they have recently used so that we may attempt to identify the malignant pool. We further request that all pool owners search their outgoing transactions for multiple usernames withdrawing to a few addresses.

We strongly urge everyone to use separate credentials on each and every pool he or she uses and to enable automatic payments.

I'll do a list here, as a starting point. I've only been mining for 3/4 weeks, so this is a COMPLETE (pretty sure) list of the pools I've joined. If too many people do it in this forum, it could get messy quickly. Most recent first, some I've haven't re-visited since I created the accounts:

42.pooljunkie.cl  <- logins attempted
42.happyminers.net  <- logins attempted
42.xtrapool.com
42.cryptopools.com

btb.pnwminer.com
noir.minepool.net
nrb.cryptoculture.net
nvc.khore.org
cage.cryptohashery.com
phs.minar.cc
pool.phsblocks.com
mempool.digsys,bg
meme.ub3rl33t.com
mem.botpool.net
emd.cryptocomp.com
coin-base.info
emd.coinium.org
smalltimeminer.com
bitcoop.tk
netcoin.prominer.org
sbc.cryptoculture.net
sbc.nordicminers.eu
miningpool.co
earth.scryptmining.com
galaxypool.chriskoeber.com
galaxypool.zapto.org
doge.scryptpools.com
kedcoin.com
dmd.minar.cc
dmdpool.net
multipool.us
wemineltc.com

sr. member
Activity: 420
Merit: 250
just type randomly in windows notepad some numbers and letters, then write them down in a real notepad (physical) with the website address, username and the password you just made up and have the notebook next to your computer.

done.

Whoops I spilt some coffee on my notepad.

Now what? lol
hero member
Activity: 798
Merit: 500
The Mac client quits unexpectedly as soon as I focus (click) on the window.... any one else has same issue?

Don't have that problem here on my end, running on 10.9 Mavericks.
What OS X version are you on? What is your Console.app error output?

PM me and I'll help you fix it.
sr. member
Activity: 504
Merit: 254
The Mac client quits unexpectedly as soon as I focus (click) on the window.... any one else has same issue?
sr. member
Activity: 308
Merit: 250
just type randomly in windows notepad some numbers and letters, then write them down in a real notepad (physical) with the website address, username and the password you just made up and have the notebook next to your computer.

done.
full member
Activity: 168
Merit: 100
Use a complex password - not from the dictionary, not your cat's middle name, not your mom's maiden name. 

A pretty easy way of doing this, that I was taught, is to use quotes or lyrics you know. Just take the first letter of every word, throw in some numbers that don't have a personal connection to you (decimals from Pi or e for example) and you end up with a password that is easy to remember, yet hard to guess.

Example: We are all in the gutter, but some of us are looking at the stars - Oscar Wilde
Ends up being: WaaitgBsoual@ts653589

Quote + easily exchangable symbol + 3.141592653589 = New password


Much easier to use Keepass, Lastpass etc random password generators+password vaults to keep passes save Smiley and no need to remember anything except master password! Smiley
sr. member
Activity: 504
Merit: 250
Hello everyone,

i added a new Pool


Please join my Pool. NO FEEE this month!!! i want to create the biggest 42 Pool
http://42.coinpool.de

if you need support. Send me a PN oder a Mail info (at) coinpool.de

thanks for mining.
newbie
Activity: 13
Merit: 0
Use a complex password - not from the dictionary, not your cat's middle name, not your mom's maiden name. 

A pretty easy way of doing this, that I was taught, is to use quotes or lyrics you know. Just take the first letter of every word, throw in some numbers that don't have a personal connection to you (decimals from Pi or e for example) and you end up with a password that is easy to remember, yet hard to guess.

Example: We are all in the gutter, but some of us are looking at the stars - Oscar Wilde
Ends up being: WaaitgBsoual@ts653589

Quote + easily exchangable symbol + 3.141592653589 = New password

hero member
Activity: 572
Merit: 500
dedicatedpool all the way but does anyone know about cryptopools?

I remember that they said we could login but even since then I have been locked with no response.

Are they as bad as pooljunkie ended up being for us first nighters?


If you just need your account unlock, PM me your username.  If you need PIN/password reset, PM ahmed_bodi.

Go to http://42C.cryptopools.com to withdraw your coins.

And if we want to steal your coins, we wouldn't have spent all day yesterday getting the site back online.


-tb-


I didn't want to do this outside of PM message but I'm not getting anywhere with you guys?

I have PM'd you twice, you then ask me to contact ahmed_bodi, I sent him 2 PM's as well and nothing has been done for the last 2 days?

Care to explain?
newbie
Activity: 19
Merit: 0
Earlier this evening, amid complaints of fraudulent withdrawals from many of our miners, we at Hackshard launched a full investigation into our databases, websites, and other software with the goal of identifying and eliminating the faulty code, hardware, or security. We discovered no fault in the cronjobs, databases, stratum servers, wallets, or any of the other various components of the Hackshard mining pools. While this did confirm that the Hackshard infrastructure was not at fault, our findings hinted at something perhaps even more worrisome. We found that several dozen miners had recently withdrawn to a single address: the same address as that which many of those claiming fraud had presented to us as having stolen their coins. Given the extreme unlikelihood of so many miners being host to the same keylogging virus, and given the complete lack of evidence that our own pools have been infiltrated by malicious agents, we have concluded that the issue could only have arisen from miners using identical login credentials with multiple pools. If this is the case, with a significant portion of our miners having been victims, we further conclude that only one with access to the database of a rather large pool could have been the thief. As such, we request that all miners who have been affected by this theft respond immediately with a full list of pools which they have recently used so that we may attempt to identify the malignant pool. We further request that all pool owners search their outgoing transactions for multiple usernames withdrawing to a few addresses.

We strongly urge everyone to use separate credentials on each and every pool he or she uses and to enable automatic payments.

All,

My career is in information security.  I am not affiliated with, nor have I mined at Hackshard's pool, but what this gentleman (or lady) states does make sense.  I urge you all to do as Hackshard recommends.  Many other people here on this forum have given the same or similar advice:

Use different login credentials for each pool you visit - even for different coins.
Use a complex password - not from the dictionary, not your cat's middle name, not your mom's maiden name. 
AGAIN, Do NOT reuse passwords accross different systems.  Make your passwords are different for your mining accounts, your bank, your email etc. etc.  I know it's a pain in the ass, but it is doable.  Remember, the current recommendation is to write them down and put them in your (physical) wallet or purse.  It is a lot easier to lose your passwords on your computer than to have a thief break into your home and steal your wallet.  And, if your wallet is stolen, you will know about it and take action for your credit cards, driver license etc as well as your passwords. If a hacker steals your on-line password that is on your computer, you may not find out about it until he/she does a lot of damage.

Good luck and lets keep mining clean.

d

newbie
Activity: 14
Merit: 0
That's basically what it comes down to.  We had over 150 accounts on our pools hacked as well.   Those who were smart enough to use separate passwords just had their accounts locked.

You can't force people to use different pins and passwords unfortunately, you can only educate them and let them make their own decisions.

Also judging by the number of people who use gmail accounts as well, I'm assuming that the problem goes farther than just hacking on a pool. People will have their egmail accounts hacked as well and possible banking information stolen, paypal funds stolen, and the list goes on.

I can't stress enough how important password security is.  And how important it is not to just run and sign up to the latest 0% pool out there.  Think about it.

http://dedicatedpool.com
Ryan, dedicatedpool.com support/admin
[email protected] / IRC on freenode #dedicatedpool
http://dedicatedpool.com/images/l.png
sr. member
Activity: 406
Merit: 250
Earlier this evening, amid complaints of fraudulent withdrawals from many of our miners, we at Hackshard launched a full investigation into our databases, websites, and other software with the goal of identifying and eliminating the faulty code, hardware, or security. We discovered no fault in the cronjobs, databases, stratum servers, wallets, or any of the other various components of the Hackshard mining pools. While this did confirm that the Hackshard infrastructure was not at fault, our findings hinted at something perhaps even more worrisome. We found that several dozen miners had recently withdrawn to a single address: the same address as that which many of those claiming fraud had presented to us as having stolen their coins. Given the extreme unlikelihood of so many miners being host to the same keylogging virus, and given the complete lack of evidence that our own pools have been infiltrated by malicious agents, we have concluded that the issue could only have arisen from miners using identical login credentials with multiple pools. If this is the case, with a significant portion of our miners having been victims, we further conclude that only one with access to the database of a rather large pool could have been the thief. As such, we request that all miners who have been affected by this theft respond immediately with a full list of pools which they have recently used so that we may attempt to identify the malignant pool. We further request that all pool owners search their outgoing transactions for multiple usernames withdrawing to a few addresses.

We strongly urge everyone to use separate credentials on each and every pool he or she uses and to enable automatic payments.
hero member
Activity: 540
Merit: 500
This thread had finally become pool obsessed. Grin
newbie
Activity: 14
Merit: 0
Actually, the most honest and trustworthy mining site on the planet is CryptoPools...   Grin


-tb-

Wink

legendary
Activity: 1694
Merit: 1054
Point. Click. Blockchain
Actually, the most honest and trustworthy mining site on the planet is CryptoPools...   Grin


-tb-
newbie
Activity: 14
Merit: 0
It is awesome of the two pool Ops running the only two legit pools outside P2Pool to be sharing the above info... spot on.

If you are not going to use P2Pool to keep from having to deal with an actual pool, these two Ops are proactively proving they care. Use them or P2Pool.

So I'm curious where your getting off saying these are the only legit pools? Just cause I have less hash and have only found 1 block at my pool does that mean I am less legit? I think not it just means people are less hesitant to try some of us smaller ones because of all the scams that have been going around. I have over 48 hours of server uptime with no issues. I have had at least 1 miner on this pool for the entire uptime period.


http://42.argakiig.us has a nice stable pool with low pool hash rate meaning lower hasher still get a piece of the coin when it drops. Feel free to check this out or any other pools I run. I strive for transparency in regards to transactions with my pools so if you have a questions feel free to pm me or join me on freenode irc at #argakiig

It's just FUD.  You can't say anything is legit and be serious without including the most honest and trustworthy mining site on the Internet, dedicatedpool.com.

The select statement is a very nice offering from DTWO.  Thank you for that and the mining community thanks you.




http://dedicatedpool.com
Ryan, dedicatedpool.com support/admin
[email protected] / IRC on freenode #dedicatedpool
http://dedicatedpool.com/images/l.png
sr. member
Activity: 658
Merit: 257
★Bitvest.io★ Play Plinko or Invest!
It is awesome of the two pool Ops running the only two legit pools outside P2Pool to be sharing the above info... spot on.

If you are not going to use P2Pool to keep from having to deal with an actual pool, these two Ops are proactively proving they care. Use them or P2Pool.

So I'm curious where your getting off saying these are the only legit pools? Just cause I have less hash and have only found 1 block at my pool does that mean I am less legit? I think not it just means people are less hesitant to try some of us smaller ones because of all the scams that have been going around. I have over 48 hours of server uptime with no issues. I have had at least 1 miner on this pool for the entire uptime period.


http://42.argakiig.us has a nice stable pool with low pool hash rate meaning lower hasher still get a piece of the coin when it drops. Feel free to check this out or any other pools I run. I strive for transparency in regards to transactions with my pools so if you have a questions feel free to pm me or join me on freenode irc at #argakiig
hero member
Activity: 770
Merit: 500
No panic sells guys, they are interestet to bring 42 to the bottom.
Why? they wanna buy your shares which would be soon alot more
worth than actually!
hero member
Activity: 630
Merit: 500
It is awesome of the two pool Ops running the only two legit pools outside P2Pool to be sharing the above info... spot on.

If you are not going to use P2Pool to keep from having to deal with an actual pool, these two Ops are proactively proving they care. Use them or P2Pool.
full member
Activity: 154
Merit: 100
About how long to transactions take to send people 42? Is it only 42 seconds?
Jump to: