Topic: Dont buy miners from lketc.com Locked out SSH root to user, Stealing your hashes (Read 10868 times)

Try Login: pi
Pass: innosilicon

Best regards
d57heinz

Any updated RaspberryPi image for LKETC 30Mh LTC miner?

http://titanminer.com/?page_id=345 << this one here ain't good even with their pool and so the UI can't access cgminer via API.
With no SSH access .. it's unusable .. as the miner does not start (even on the preset settings on LKETC accounts).

I can confirm that - Do NOT buy from LKETC (Nancy) - they STEAL coins ! See my experience with LKETC (Nancy) here.

I think the propper route for this would be a public posting of this fine chinese ip address and everyone can get out ye ol' lazers again. Make them wish they never messed with the wireshark crowd

either way, keep us updated.
I might have some work for this fellow if you guys are successful..

You can't retreive the password, its stored as a hash, but it is relatively elementary to change it.  

edit: even for us small fry that are incapable of jedi mind tricks

I'd be pretty impressed if someone can reverse engineer the image and get the password.
To be honest I do care either way as I do not need it... just would be impressed.. is all

good luck and let us know how you get on.

You should get a bit more evidence before putting out a huge accusation that they are stealing your hashes as you claim.

I think, this is the one.

I can try to upload mine, but you need it ASAP

I am in The Netherlands at the moment, I can't make an image of the latest firmware of the Dragon miners that are password protected.
Can someone upload an image that is password protected?
I need it ASAP, I found a Dutch sotware engineer who can reverse engineer it.
I will tip him if he finds the password and stuff that don't belong in that image.

i didnt ask for your help and even if i did you wouldnt have been able to especially since we spoke to their biggest official resellers who requested the ssh password for themselves and lketc still wouldnt release up the pass so some small fry on a forums not going to get it either unless you know some jedi mind tricks.

You racist piece of shit! lost all my interest right there. I could have helped if you were being scammed but now i hope you are

lol both butterfly labs and hashfast have both been proven to be scam hardware suppliers so get off your high horse please, while the Chinese might be sneaky at least we get our products rather than waiting around for months and months while the owners go out and buy ferrari's with our money



We found the machines are sending back encrypted packets back to a Chinese IP address, the packets are encrypted so we are not sure weather its sending back hashes or somethig more sinister.

We have re-wrote the lketc dragon miner software our self and found the units to be hashing 10% more, so likely stealing hashes from our power.

i will release more proof and our clean dragon miner software after more tests.

Never ever buy any products from China, buy US made poducts instead.
It is your own GREED,  that you made the decision to buy from Chinese.
Don't buy Bjorn Borg underwear from China, it will made your Dick grow smaller.

Could you please be a bit more specific? I'll like to make sure my units aren't infected.

paranoia indeed

 

So finally i was right about my paranoia in some way, confirmed Chinese ship hardware pre installed with spyware

Got it, thanks!

I have pictures of the psu compared to the correct ones but cant uplaod atm as im at the airport, the 650w psu say 650watt on the mobo of the psu i can see mine through the fan grill, also check your power consumption all ours are running above 1200watt which isnt as advertised

Man, it is gonna be some kind of deja-vu thingy It seems, whatever happens to you, happens to me too:) Just today got failover twice on one of my dragons, the PSU will shut itself down completely. Will not start again, until cooled properly. I think I need to replace the PSU, until it is too late:) Can you tell me how to check, if I got the same 650W inside a 1000 case?

Thanks again!

Thanks man no worries for the help


UPDATE

We had a few psu burn out, so we took them to a repair shop in the area, when the technician opened up the unit, he found that the power supply is in fact a 650watt power supply in a 1050watt casing, even more we have been checking the power draw on a standard not over clocked system to be 1260 average highest reading 1380watt.

So the chinese strike again with fake power supplies and tech that doesnt perform as advertised.

Stay clear of LKetc

well this problem came to me also and with help of cryptoceelo finally i have fixed it. so i just wrote a tutorial to help peoples regarding this with special thanks to cryptoceelo who came up with this issue infront of world and helped me a lot to learn something new.

Yes unfortunate you have to still be extremely careful with what are perceived to be legit companies

Any way fuck lketc and their clandestine ways, they are not the biggest issue now heat is

Thanks for letting us know. These days we can't trust any company, sadly.

changing a html file and the index root wont cause any issue, we run these with the web server off for additional security.

Im only here building the farm, but prague is beautiful

Then you do not need to post it, if it is the same, do not want to mess with a working system

P.S. I live in US, but I have got my BA from VSFS Prague, lived and studied there for 6 years. Miss it so much;)

Good point you just made linux is open source by closing it off they are breaking the licensing agreement. then again the chinese dont give a fuck about copyright -> http://en.wikipedia.org/wiki/Wonderland_Amusement_Park_(Beijing)

My situation was, that miners will not connect to the pools I input. Wanted to SSH, to ping the server from the PI. Default password was not working, so I have contacted my reseller, which has denied me with the access. I was in an impression, that the reseller is the one, who does not want me to have the SSH access, so I quited talking to him, and found the original English dragon 4 blade boot image here https://bitcointalksearch.org/topic/m.6378219 and flashed the SD cards with it. And it worked straight away.

After that I have noticed, that cryptoceelo has the same problem with his 100 dragons, and that he can not get the access directly form the LKETC. That said, I am pretty much confident, that my reseller did not have the access either, so he just refused me, without going into the details and explaining, why he does not have the credentials.

Regarding messing with vitals, I think Raspberry PI boot is an open source project, isn't it? Or even if not, when you buy a Linux or Windows distributive, it comes with root level access right Same when you buy a hardware, with preinstalled firmware. Normal companies will give you the access, if you know where to ask:) If not, there is always a way to gain it.

Cheers

HAHA velmi dobrý, ale moje čeština je špatná, im z Anglie


It's exactly the same as the version i posted in the mega link, but the interface translated to UK, and the default index file in lightppd config changed from index.html to default.html so that the cron script doesnt constatly write over your changes. I guess the cron script copies original files from somewhere to web folder, but like i said i couldn't find out where from.

You dont need root to setup the system it can be done from the interface, which is fine managing a few machines, we are running a 100 for a test with the plan of running hell alot more, to make this easier, i developed a web program called 'smart Farm' that automated deployment and setup of the miners, as well as allowing you to remotely manage them and access all cgminer statistics, which required SSH and access to CGminer API to open listen. The iso shipped did not have cgminer API open so could not be turned on unless you had root. It also made it impossible to debug any issues. i understand they might not want you to mess around with settings but at the end of the day the chinese really dont care if you bork your system because then you just have to buy a new one from them or pay them to fix it all they care about is da moonies

i understand what root is for as I am very familiar with *nix
but do you need root to setup/use the system ?
sometimes manufactoruers dont want you messing with the vitals ?

I am not sticking up for them or defending!! I am just asking a question.

sounds like you have been fucked around and I would not of been happy either if I was you!

Thanks a lot! Can you tell me, whats the advantage of yours?

P.S. Dekuji za pomoc. Preji pekny zbytek dne.

I have the same iso at home where i translated the index.html from chinc to english and removed all the branding from the company, but even that iso has a cron script that constantly replaces the webroot with original branded files, even then i couldnt work out where that is being copied from. try it by editing the index and you will see it change back to the original, i had to change the default index file in lightppd lol (try it yourself and see) but that iso is at home and im currently in czech



i will post my english version with updated lighthttpd when i am home for you


Defiantly avoid especially since the yellow belled snakes wont even explain why.

Like i said i left the farm mining on our machines to return in the morning to find them mining on theirs


They are the factory so i guess it is their default their Default shitnami iso

Think your confused dearest Lisa, the iso is used on the miners and is a linux distro, it doesnt matter if you use mac or windowzzz

To paraphrase jim Layhey

Thanks, but got that one Have anything fresher?

Here is the English version : https://www.dropbox.com/s/yz02suc4j24ium4/dragonboot-4BLADE-ENG.7z

But it can only be used to Windows, not Mac.

Thanks.

Wow, another company on the avoid list.

Aren't you able to reset it to factory defaults somehow? Also this is really negative feedback for them, not allowing someone who bought something access to it? That's insane.

Jesus that's terrible I will not be buying any units from them, I wonder if the closed off OS has you balanced mining on one of there pools.

Is this one a fresher boot image? Does it have English UI?

Thanks!

will up-date you when i get back to the farm and it's humming away like a mofo

1 card left

FUCK YOU LKETC I LOVE SLEEP DEPRIVATION ANYWAY ITS WHAT THE WEEKENDS FOR

The last days must have been intense. Good to see you're somewhat done with the trouble.

i know right, i feel for their resellers who will get customers complaining to them about this, and they look stupid because they do not know.

Any way i have literally been up since creating this post glad to say i have 4 cards left to flash

What the actual fuck. Good thing you brough this up. I can't see why a company like them would do this. It would only result to negative reputation.

问候 Lisa

while Lisa only has one post (time of writing) is highly trustworthy here, she is more involved with bitcoin than people may think

Hehehe........ Lisa here   

lketc still do not offer me the password of the SSH.   

But I found a link related to the SD card in other forums.

https://dl.dropboxusercontent.com/u/92967009/dragon_image.7z

I hope this can help those bitcoin miner users who want the original SSH to fix the SD card problem.

Please click "refresh the log" first, then "real time monitor".
 
At the error page, please change 0 into 1, and click auto refresh, and wait for a few minutes. I will be ok.

Excited to talk with you here !!!

 

Thanks its good to know it wasn't targeted at out order in particular or any foul play in-between them and us (paranoia again).

I'm sure your guy just did not have the info, i skip the reseller now and go direct to them for support so when they responded in the Skype message above it was secret, instantly i knew it was lketc foul play in hand.

Yes they are stupid the 100 rigs is a lot, but a fraction of whats to come so they have only chopped off their nose to spite there face.

yes dd was going slow, running at bs=32 is better, but I'm now using apple pi-baker and its writing them under 9mins so take note anyone who needs to flash there sd and is on mac.

i have no experience with spondoolies, but from now will only get miners from people we can see and speak to in person,

Interesting...

I had the same problem, miners would not start at all after changing the pool info and I was locked out from SSH. I thought it was the reseller, who changed the SSH password intentionally, cause he was refusing to give me the access. But now I feel, it could be the conspiracy theory Maybe the guy just simply did not have that info?

Anyway, they can have us for idiots, no problem, it won't make us idiots at the end. What does not kill you, makes you wiser, right?

Sorry for your 100 rigs, setting up just 2, took me more then 4 hours. I can imagine how pissed off you are, just let it go. Do not buy from them anymore. Personally, I am planing to stick with spondoolies for a while. They look so honest, I can't help myself

Im highly surprised it hasnt, i guess most people dont care as long as there ok, while been involved in the BTC community i have done my best to be a upstanding citizen, never ripped anyone off or even left them feeling hard done by even if it meant putting my hand in my own pocket, yet i guess good things just dont come to good people so i feel like joining the dark side, it seem only selfish basterds (such as M.kerpeles) get all the riches in this game


Thanks i was hoping the squinty eyed lketcs would respond but i guess they wont

update


i got hold of some card readers so now buring three cards burning through my air book for the past several hours at a ridiculous 1422520/secs only done a gb per card and the img is 7gb this wont be done in a night.

any advice on quicker ways to do this appreciated including BTC tips

FUCK YOU LKETC SQUINTY EYED PRICKS


ps
sorry for the swearing, but feel my pain btc world

much love <3's

Agreed this needs a bump for sure..

I've had to write to 5 pi machines before and I got bored after the second one, I can't image writing to 100.

Wow that's some nice investigation work. Thanks for bringing this to people's attention. Why doesn't this thread generate more interest?

Want proof? ask me and the 5 guys who had to unscrew 100miners today after been racked, now 50 SD cards between two people and staying up all night flashing them 1 SD card at a time, that takes what 30mins/45mins each, you do the math im up all night, and how much money lost in non mining time?

75* miners unscrewed for sd cards to be removed -> http://imgur.com/2jbnw9B

100 * miners on rack not green light because theres no SD card to boot and miner -> http://imgur.com/2jbnw9B,VGFslyd,ZtbwnrT#1

50 * SD cards (my home work tonight) -> http://imgur.com/2jbnw9B,VGFslyd,ZtbwnrT#2 (ironically my 'lucky' strikes pack of 20 got burned through within hours now on my 3rd pack today)

1 * conversation with lketc.miners -> http://imgur.com/O2eL4Ok - Notice how the contact request is pending? yes i got deleted from there skype after requesting the ssh password.

1 * convo with a lketc reseller stating there managment were refused SSH (and one of the only Chinese people i genuinely like and trust apart from jack from lightingASIC) -> http://imgur.com/CKvbKXY

Also look at my bitcointalk history at how i have tried to protect there customers from a bunch of scammers impersonating them, in several posts. and this is how im thanked

i also spoke to several high profile resellers of theres in china who's head of department rang lketc and they refused to even give it to them.

I've long thought that we are stupid blindly putting Chinese hardware in our homes without thoroughly auditing what is installed you never know what could be sniffing your network traffic and relaying that back to china or a literal trojan horse, introducing something on your network that you belive is good, but later later fucks you in the ass, but put this down to maybe a bit of paranoia, laughed it off and continued my zoot. but im right theres a reason why when i retuned to the farm this morning to find the 25miners we set up last night mining fine to be mining on lketc default details again. or simply paying the chinese to build a botnet against us in our own homes!

This company are a bunch of con artist with a pretty face who smile while they fuck you in the ass.

here is the default ISO before the scumbags locked out the SSH

https://mega.co.nz/#!tc4nzZTQ!IgkpktyE-Ad9XIfQpxXJlF4CEQ-1SKp_BpT1X9mV6mk

SSH access is default rasp pi ssh details and feel free to security audit it, theres nothing in there (i can see/ put in there) that will cause risk to you or any other computers on your network.

Once i have these cards flashed and the farm running, i will exploit one of these locked SSD cards and see what other shit they are shipping out to peoples networks.

until then

BUY NOTHING FROM LKETC.COM

the only reason they would not release the SSH password is because they have something to hide simple.

If the above is true this post needs a bump. What the fuck.

I would highly recommend to everyone not to buy one single bitcoin miner from Lketc.com

We are in the process of setting up 100 machines we just bought from them, i have spent the last 2 weeks while waiting for their ridiculous slow shipping to recieve the miners, in that time i built a management interface to easily manage all miners from a web UI.

This management system needs to use ssh as part of the control mechnaism, using a dragon miner i had a few months i based the system on that, we just setup the farm and in process of setting up the machines but we can not ssh into the raspberry pis

the default ssh password should be

user:pi@host
password:raspberry

they have now changed this and there skype support guy said they will not tell it to me because its a secret. I think this is disgraceful i own this computer outright therefore should have full root access to the system.

i do not want some slinty eyed chinese person having full ssh control over my farm and £100sK pounds worth of equipment.

Luckily i have an old ISO which has the old SSH setting but it is incredibly time consuming to burn 100 new iso.

I would not trust this company at all who will not give you root access to the server or to see what is hidden on the OS.

AVOID THIS COMPANY UNTILL THEY SORT THIS OUT