Author

Topic: Eligius: 0% Fee BTC, 105% PPS NMC, No registration, CPPSRB - page 204. (Read 1061449 times)

sr. member
Activity: 1316
Merit: 254
Sugars.zone | DatingFi - Earn for Posting
Give it access to private key in chunks of 64k at a time... He just asking for them until he get it all and put it back together... I was syncing my wallet to send BTC to cold storage... It is firewalled computer used only for this so I guess all this doesn't help at all with this bug.

https://www.us-cert.gov/ncas/alerts/TA14-098A
I really trying hard to get this, but I can't. Was your wallet not encrypted ?
Surely if it was this would not be possible,even with this flaw ?

Sorry for your loss  Sad
hero member
Activity: 826
Merit: 1000
Give it access to private key in chunks of 64k at a time... He just asking for them until he get it all and put it back together... I was syncing my wallet to send BTC to cold storage... It is firewalled computer used only for this so I guess all this doesn't help at all with this bug.

https://www.us-cert.gov/ncas/alerts/TA14-098A
sr. member
Activity: 252
Merit: 250

tl;dr  - There are are 3 likely suspects...



KNC, ghash or BTCGuild

I doubt it's Discus Fish since many of the people who would leave Eligius for calmer waters would not pick a Chinese centric pool


If it is not the above three, then it is something personal and/or jealously as the driving factor

I too have wondered who it would be and if it is not a private person or activist group that Whizz or Luke have pissed off then I suspect big business to be at the heart of it.

My suspicion would fall on the companies providing protection from this type of attack as many have the infrastructure to generate such an attack, as it is the only way that they can re-generate in volume the attacks that they protect against. It can soon be turned into the old protection racket:

   Shop window gets busted
   Racket says we can protect you from that
   You say no
   Shop window gets busted
   You say yes
   Shop window no longer gets busted
hero member
Activity: 1246
Merit: 501
I've not been following this news much, but how could anyone empty your Bitcoin-qt wallet if it's not open to the world?  How does this OpenSSL bug let a hacker do this? 
legendary
Activity: 1223
Merit: 1006
I would like just to move payment for this address since it is hi risk that it will be stolen too...

Doing so is not possible by design.  

The CPPSRB setup is designed so that even if an attacker were to somehow gain access to the CPPSRB software, manipulating payouts or redirecting funds would be extremely difficult.  The balances are calculated from the full share log, and to move a balance, the share log would have to be altered.  Since altering the share log isn't really possible, moving a balance to another address is also equally impossible.

This is really for everyone's security.  It is up to the users to secure their payout addresses.  It is up to the pool to pay them.  If the pool/myself were able to intervene and change who gets paid then there would be security risks and other risks associated with those practices that I'm not willing to bear.

Basically, not even I have the ability to move a balance.

-wk
hero member
Activity: 826
Merit: 1000
I would like just to move payment for this address since it is hi risk that it will be stolen too...
legendary
Activity: 1223
Merit: 1006
wizkid057 send you PM... My keys were hacked with 0.9.0 OpenSSL bug need to change the address.

There is no way to change existing data.  You need to start mining on a new address.  Data from the old address can't be moved.
hero member
Activity: 826
Merit: 1000
wizkid057 send you PM... My keys were hacked with 0.9.0 OpenSSL bug need to change the address.
legendary
Activity: 1223
Merit: 1006
Wiz -- maybe the ddos attacks are nothing more than a distraction?  To keep you from noticing something much more sinister going on?

M

Thought about that, although I've double checked everything I can and haven't found anything crazy.

do you ever track how much work you issue out to miners compared to the accepted shares per hour or per minute?   does that change much or spike?



Miners generate their own work with stratum and GBT, so there is no real way to get useful data from this
sr. member
Activity: 462
Merit: 250
Wiz -- maybe the ddos attacks are nothing more than a distraction?  To keep you from noticing something much more sinister going on?

M

Thought about that, although I've double checked everything I can and haven't found anything crazy.

do you ever track how much work you issue out to miners compared to the accepted shares per hour or per minute?   does that change much or spike?

legendary
Activity: 1223
Merit: 1006
Wiz -- maybe the ddos attacks are nothing more than a distraction?  To keep you from noticing something much more sinister going on?

M

Thought about that, although I've double checked everything I can and haven't found anything crazy.
sr. member
Activity: 462
Merit: 250
Wiz -- maybe the ddos attacks are nothing more than a distraction?  To keep you from noticing something much more sinister going on?

M


^^^^^

legendary
Activity: 1540
Merit: 1001
Wiz -- maybe the ddos attacks are nothing more than a distraction?  To keep you from noticing something much more sinister going on?

M
sr. member
Activity: 543
Merit: 250
Orjinal üyelik ToRiKaN banlanalı asır ol
cool, sorry I guess I just took awhile to show fully on the block list.
legendary
Activity: 1223
Merit: 1006
was that block that we just worked 8 hours on orphaned?

Nope. We confirmed it with another right after it.
sr. member
Activity: 543
Merit: 250
Orjinal üyelik ToRiKaN banlanalı asır ol
was that block that we just worked 8 hours on orphaned?


Never mind it showed up, but blockchain is showing us as having mined the last two, not just one.
full member
Activity: 154
Merit: 100
Grate so my private key is compromised and I'm in line for payment in this block. I increased my payment threshold but it has no effect...

So another 0,1BTC that might be gone...

Maybe generate a new address and start mining on that one ASAP?

M
Already done that... The moment I seen that happen I start moving my miners. And start treating that computer as hacked... The problem is that I have some founds still coming on that address from this pool. Much less damage if the payout queue wouldn't be so long for last payout... I have setup my payment at 0,04 and got 1,6 BTC out...

Since the payout queue is based on age... I'm guessing you generated that 1.6 btc pretty quickly.  Maybe use multiple addresses to slow down the growth, per address?

M
Before diff change 6 to 7 days... A lot of failsafe... Now probably 8 to 10... with normal luck...

Just an idea but, to stop the thieves getting that last 0.1 you could go in and change the donation % to 100%.
If you're lucky and they don't spot it and change it back then at least the pool would benefit instead of those scum bags.
hero member
Activity: 826
Merit: 1000
Grate so my private key is compromised and I'm in line for payment in this block. I increased my payment threshold but it has no effect...

So another 0,1BTC that might be gone...

Maybe generate a new address and start mining on that one ASAP?

M
Already done that... The moment I seen that happen I start moving my miners. And start treating that computer as hacked... The problem is that I have some founds still coming on that address from this pool. Much less damage if the payout queue wouldn't be so long for last payout... I have setup my payment at 0,04 and got 1,6 BTC out...

Since the payout queue is based on age... I'm guessing you generated that 1.6 btc pretty quickly.  Maybe use multiple addresses to slow down the growth, per address?

M
Before diff change 6 to 7 days... A lot of failsafe... Now probably 8 to 10 6... with normal luck...
legendary
Activity: 1540
Merit: 1001
Grate so my private key is compromised and I'm in line for payment in this block. I increased my payment threshold but it has no effect...

So another 0,1BTC that might be gone...

Maybe generate a new address and start mining on that one ASAP?

M
Already done that... The moment I seen that happen I start moving my miners. And start treating that computer as hacked... The problem is that I have some founds still coming on that address from this pool. Much less damage if the payout queue wouldn't be so long for last payout... I have setup my payment at 0,04 and got 1,6 BTC out...

Since the payout queue is based on age... I'm guessing you generated that 1.6 btc pretty quickly.  Maybe use multiple addresses to slow down the growth, per address?

M
hero member
Activity: 826
Merit: 1000
Grate so my private key is compromised and I'm in line for payment in this block. I increased my payment threshold but it has no effect...

So another 0,1BTC that might be gone...

Maybe generate a new address and start mining on that one ASAP?

M
Already done that... The moment I seen that happen I start moving my miners. And start treating that computer as hacked... The problem is that I have some founds still coming on that address from this pool. Much less damage if the payout queue wouldn't be so long for last payout... I have setup my payment at 0,04 and got 1,6 BTC out...
Jump to: