Author

Topic: Eligius: 0% Fee BTC, 105% PPS NMC, No registration, CPPSRB - page 247. (Read 1061452 times)

member
Activity: 92
Merit: 10


So it looks like today's manual NMC payout went to a thief.

My NMC address was changed too.

sr. member
Activity: 462
Merit: 250
Lux e tenebris
My minimum payouts were altered to .2

sure i'm sure. wasn't me
newbie
Activity: 52
Merit: 0
^ + 1

Yep. I'm off the pool until this is resolved. Shucks.
Why?

Since the issue is only with NMC why stop mining BTC.  With the 1TH's that I have here on this pool the NMC payouts are just a few extra dollars each time.


My minimum payouts were altered to .2
You sure about that.  The only thing on my account that was changed was the NMC address.

Agreed, I'm staying.  While an attacker could try to screw with us and donate 100% of BTC earnings to the pool, we know those people, and I'm sure they'd remedy that in good faith.  If they just raised the payout threshold, no biggie, I'm not spending right now, anyway.

Losing NMC sucks, but it's such a small, token amount (for me, anyway) that I'm not sweating that.

End sum:  I'm sure this has Wiz's attention, hopefully he can rectify it soon.  Eligius might want to consider leveraging those of us in the pool that do this kind of stuff for a living and put together a code review team or something.
sr. member
Activity: 447
Merit: 250
^ + 1

Yep. I'm off the pool until this is resolved. Shucks.
Why?

Since the issue is only with NMC why stop mining BTC.  With the 1TH's that I have here on this pool the NMC payouts are just a few extra dollars each time.


My minimum payouts were altered to .2
You sure about that.  The only thing on my account that was changed was the NMC address.
sr. member
Activity: 462
Merit: 250
Lux e tenebris
My minimum payouts were altered to .2
newbie
Activity: 52
Merit: 0
FWIW, I took a look at the core pool server and didn't find anything to suggest it has been compromised, at least.
So Bitcoin should be fine.

I'm sure you're right.  Odds are you're dealing with a portal issue, either a SQL injection or cross-site scripting attack on the portal itself.  Data in the database was munged for the NMC address, and the source data wasn't verified against the signatures...  which would imply that someone deviously inclined could possibly modify donation percentages, etc.

No personal benefit to doing so for an attacker, of course, but at this point I don't think you can trust any of the configurable options as-is.
legendary
Activity: 2576
Merit: 1186
FWIW, I took a look at the core pool server and didn't find anything to suggest it has been compromised, at least.
So Bitcoin should be fine.
newbie
Activity: 52
Merit: 0
All of the NMC payouts from Eligius have been manual, not mined straight to the wallet, so the same level of protection isn't afforded to NMC as it is BTC.

Wiz:  I'd be happy to get weekly payments of NMC if you would just verify every payout address with every payment.  Verifying them only upon submission to the site isn't going to hack it if the site itself gets hacked.
hero member
Activity: 784
Merit: 501
Hope wizkid owns the address...

Namecoin Address N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F

Received   count: 1   sum: 2,191.15350088 NMC   first: 2014-03-13 16:14:29 UTC   last: 2014-03-13 16:14:29 UTC

http://bitinfocharts.com/namecoin/address/N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F
sr. member
Activity: 434
Merit: 250
How often are NMC payments made? I'm not sure I've ever gotten one. Smiley

usually daily

how long have you merged mined NMC?

I've not used the pool long. And before that only briefly when not mining alt coins. No biggy, and it's only a single Antminer. I'll just change it back when I get home tonight. I pay directly to an exchange since I don't run a namecoin wallet.
newbie
Activity: 52
Merit: 0
Mine changed too...  WTH?

Ain't that the damnedest thing.  Given that our options are supposed to be verified by cryptographic signature it would seem that it's not being verified per payment, probably only upon submission, so if the site gets hacked, we're screwed.  Bad form, that.
hero member
Activity: 574
Merit: 500
1.21 GIGA WATTS
How often are NMC payments made? I'm not sure I've ever gotten one. Smiley

usually daily

how long have you merged mined NMC?
full member
Activity: 220
Merit: 100
Mine changed too...  WTH?
sr. member
Activity: 434
Merit: 250
How often are NMC payments made? I'm not sure I've ever gotten one. Smiley

Edit: I passed on the situation via support ticket and IRC. I figure that's more useful than just complaining here. Wink
hero member
Activity: 574
Merit: 500
1.21 GIGA WATTS
ALL NMC addresses changed to N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F  Huh Huh Huh
I just checked after seeing these posts and mine was changed to above address also.

fixed it now,
but how did it change? and will it mysteriously change again?

edit. last NMC payout to my address was on 9th March (Australian time) just over 4 days ago
sr. member
Activity: 447
Merit: 250
Same here.  I changed mine back also as it had the shown address.  I have had two BTC payputs since my last received NMC payment.

Here is the info that I could find for N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F, looks like a good payout just recently.

LOL, I spent to long researching and was beat to the post with the info.
sr. member
Activity: 434
Merit: 250
My NMC payout address is also set to N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F atm.

Edit: I'm not sure when/how/if NMC payments are made, but I've never actually received one that I know of. Figured it was just a rare thing and didn't worry about it.
sr. member
Activity: 504
Merit: 250
http://192.241.222.65/address/N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F

Manual Change worked. But that address was there.
good payout  Grin around 11BTC
hero member
Activity: 547
Merit: 531
First bits: 12good
ALL NMC addresses changed to N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F  Huh Huh Huh

+1234e78264783624


Yo, wtf. All NMC address in configs have been changed to this.. wtf is going on?

I manually change mine to a new NMC address just in case, I assume we all have to do it.

A word from wizkid057 will be nice.
hero member
Activity: 547
Merit: 531
First bits: 12good
ALL NMC addresses changed to N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F  Huh Huh Huh
Jump to: