Topic: Eligius: 0% Fee BTC, 105% PPS NMC, No registration, CPPSRB - page 247. (Read 1061569 times)
So it looks like today's manual NMC payout went to a thief.
My NMC address was changed too.
My minimum payouts were altered to .2
sure i'm sure. wasn't me
^ + 1
Yep. I'm off the pool until this is resolved. Shucks.
Why?Yep. I'm off the pool until this is resolved. Shucks.
Since the issue is only with NMC why stop mining BTC. With the 1TH's that I have here on this pool the NMC payouts are just a few extra dollars each time.
My minimum payouts were altered to .2
You sure about that. The only thing on my account that was changed was the NMC address. Agreed, I'm staying. While an attacker could try to screw with us and donate 100% of BTC earnings to the pool, we know those people, and I'm sure they'd remedy that in good faith. If they just raised the payout threshold, no biggie, I'm not spending right now, anyway.
Losing NMC sucks, but it's such a small, token amount (for me, anyway) that I'm not sweating that.
End sum: I'm sure this has Wiz's attention, hopefully he can rectify it soon. Eligius might want to consider leveraging those of us in the pool that do this kind of stuff for a living and put together a code review team or something.
^ + 1
Yep. I'm off the pool until this is resolved. Shucks.
Why?Yep. I'm off the pool until this is resolved. Shucks.
Since the issue is only with NMC why stop mining BTC. With the 1TH's that I have here on this pool the NMC payouts are just a few extra dollars each time.
My minimum payouts were altered to .2
You sure about that. The only thing on my account that was changed was the NMC address.
My minimum payouts were altered to .2
FWIW, I took a look at the core pool server and didn't find anything to suggest it has been compromised, at least.
So Bitcoin should be fine.
So Bitcoin should be fine.
I'm sure you're right. Odds are you're dealing with a portal issue, either a SQL injection or cross-site scripting attack on the portal itself. Data in the database was munged for the NMC address, and the source data wasn't verified against the signatures... which would imply that someone deviously inclined could possibly modify donation percentages, etc.
No personal benefit to doing so for an attacker, of course, but at this point I don't think you can trust any of the configurable options as-is.
FWIW, I took a look at the core pool server and didn't find anything to suggest it has been compromised, at least.
So Bitcoin should be fine.
So Bitcoin should be fine.
All of the NMC payouts from Eligius have been manual, not mined straight to the wallet, so the same level of protection isn't afforded to NMC as it is BTC.
Wiz: I'd be happy to get weekly payments of NMC if you would just verify every payout address with every payment. Verifying them only upon submission to the site isn't going to hack it if the site itself gets hacked.
Wiz: I'd be happy to get weekly payments of NMC if you would just verify every payout address with every payment. Verifying them only upon submission to the site isn't going to hack it if the site itself gets hacked.
Hope wizkid owns the address...
Namecoin Address N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F
Received count: 1 sum: 2,191.15350088 NMC first: 2014-03-13 16:14:29 UTC last: 2014-03-13 16:14:29 UTC
http://bitinfocharts.com/namecoin/address/N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F
Namecoin Address N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F
Received count: 1 sum: 2,191.15350088 NMC first: 2014-03-13 16:14:29 UTC last: 2014-03-13 16:14:29 UTC
http://bitinfocharts.com/namecoin/address/N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F
How often are NMC payments made? I'm not sure I've ever gotten one. 
usually daily
how long have you merged mined NMC?
I've not used the pool long. And before that only briefly when not mining alt coins. No biggy, and it's only a single Antminer. I'll just change it back when I get home tonight. I pay directly to an exchange since I don't run a namecoin wallet.
Mine changed too... WTH?
Ain't that the damnedest thing. Given that our options are supposed to be verified by cryptographic signature it would seem that it's not being verified per payment, probably only upon submission, so if the site gets hacked, we're screwed. Bad form, that.
How often are NMC payments made? I'm not sure I've ever gotten one.
usually daily
how long have you merged mined NMC?
Mine changed too... WTH?
How often are NMC payments made? I'm not sure I've ever gotten one.
Edit: I passed on the situation via support ticket and IRC. I figure that's more useful than just complaining here.
Edit: I passed on the situation via support ticket and IRC. I figure that's more useful than just complaining here.
ALL NMC addresses changed to N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F 
I just checked after seeing these posts and mine was changed to above address also. fixed it now,
but how did it change? and will it mysteriously change again?
edit. last NMC payout to my address was on 9th March (Australian time) just over 4 days ago
Same here. I changed mine back also as it had the shown address. I have had two BTC payputs since my last received NMC payment.
Here is the info that I could find for N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F, looks like a good payout just recently.
LOL, I spent to long researching and was beat to the post with the info.
Here is the info that I could find for N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F, looks like a good payout just recently.
LOL, I spent to long researching and was beat to the post with the info.
My NMC payout address is also set to N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F atm.
Edit: I'm not sure when/how/if NMC payments are made, but I've never actually received one that I know of. Figured it was just a rare thing and didn't worry about it.
Edit: I'm not sure when/how/if NMC payments are made, but I've never actually received one that I know of. Figured it was just a rare thing and didn't worry about it.
http://192.241.222.65/address/N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F
Manual Change worked. But that address was there.
good payout
around 11BTC
Manual Change worked. But that address was there.
good payout
around 11BTC 
ALL NMC addresses changed to N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F
+1234e78264783624
Yo, wtf. All NMC address in configs have been changed to this.. wtf is going on?
I manually change mine to a new NMC address just in case, I assume we all have to do it.
A word from wizkid057 will be nice.
ALL NMC addresses changed to N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F
Jump to: