Would it somehow be possible to trick/hack/fake out the PoCminer so it takes the scoop from the same location every time?
Like, let's say you have a 4tb drive, and you create a script that rewrites enough of that 4tb that when PoCminer takes a new scoop from it, it thinks that 4tb is 1/4096th of a 16.38pb (4096 x 4tb) plot that doesn't really exist beyond the 4tb from which the scoop keeps being taken?
What exactly is the reason this can't happen, plot sizes can't be spoofed, etc.?
Thanks in advance for helping me understand the technical minutiae.
i dont really understand your question, but mining is just you pick a number, any number, just send it to your wallet or pool, i will give you an example how to mining burst by hand
click this : http://burst-pool.cryptoport.io/burst?requestType=submitNonce&accountId=8344153632840493834&nonce=12345678
8344153632840493834 is my account id of BURST-WCSC-JNCD-ZB53-955M9 it was reward assigned to burst-pool.cryptoport.io
12345678 is nonce number you picked, its just any number...
once you submitted that, you got share, as simple as that, try change the nonce number you will get another deadline, then keep searching another nonce till you get deadline below 240, so you actually dont need any harddrive or cpu or plot or anything
That's fascinating. So in theory, you could create a pool that picked random nonce numbers as fast as possible, hashed them with your account ID and spam-submitted them to the network?
all nonces are legitimate nonce, there are no invalid nonce, and actually you can create a miner, this miner will picked random nonce number as fast as possible send those all nonces to my pool, then my pool will be dead.
uh... mm... do you have any idea?
I have no idea. I'm trying to learn why the system isn't vulnerable to a potential fake nonce-spam-attack of this nature. I wouldn't want to bring down a pool--yours or anyone else's-- but I would want to call attention to a vulnerability so the dev and capable members of the community could address it.
the system is vulnerable to spam attack, and we ban miners IP who did spamming nonce
I have 3 PC (2 on one external IP). When miners ask getTiningInfo all comes, for example, "targetDeadline": 222111000, then sends the first nonce, he receives a new value "targetDeadline": 333. At this time, the remaining miners believe that "targetDeadline": 222111000 and send spam-nonce to the pool ...
on my pool, you will see that when you submit nonce, it reply with "result", "deadline" and your account "targetDeadline" (which is your account best deadline for current block)
currently there are no miner that use that "targetDeadline" field, actually its use is when you have multiple miner using same account, so when your remaining miner want to submit nonce it should check how much is the account minimum deadline is to prevent sending higher deadline to pool. ( but ofcourse you need send at least one nonce submission to know how much is current targetDeadline is for your account )
I added the verification "targetDeadline" field in miner.
@ 1 block ~10 spam-nonces