Everyone, please check your miner is actually connected to Eligius.
It seems there are some MITM attacks going on to redirect Eligius miners to another pool
Do you know which pool, or at least an IP address? It'd be interesting to try and tie the pool-in-the-middle to a reused generation address.
Redirected clients show "Connected to 46.28.205.80..." in the miner.
This seems to be a scrypt "Worldcoin" mining server, and it seems likely they are just automatically MITM'ing
any stratum connections they can inject into, regardless of the destination pool.
I'm just wondering how a MITM attack is possible.
Stratum uses a TCP connection (not UDP), so the source must of course say where it came from.
Thus the only option I can see is that there is a network provider on the network who is hacking packets going through them.
I'd be VERY surprised if that was the case - unless the network provider themselves has been hacked - and that would be major news.
My guess would actually be that the Eligius server itself has been hacked
(or it's connected to a shoddy network)
You seem to have a very naive view of the internet.
TCP may be harder to MITM than UDP, but it's far from difficult.
There have been ongoing attempts to BGP redirect Eligius and other pool IPs (these only successful against scamcoin pools to date, AFAIK) for months now.
A little TCP MITM is nothing in comparison...
Security on the internet at large is almost non-existent.
This is why protocols like SSL/TLS etc exist.
