UPDATE v1135added miner dstm-v0.5.7
I also send internal message to every SimpleMining user to check their deposits.
I found some bug in php code.
When deposit is beeing added to account balance, my system check external API to check what is current crypto exchange rate to $$$.
Sometimes this api returns 0$ and becasue of that bug sometimes (like 2% cases) the transfer isnt accually aded to account balance.
Even if you have in history good transfer value in Dollars still sometimes happened that this wasnt added to your balance.
This is becasue i am receiving few IPN statuses form coinpayments gateway.
Anyway i am completly honest i want you guys to check your balance and tell me if you will see that some of your deposits wasnt added to your balance !
If you suspect that you are one of those 2% users then just send me email to
[email protected] and i will check your account if something isnt right.
Anyway i am sorry for that issue. We already fixed it yesterday. We are using different external API this time and even if it will return error or 0$ then we are trying also second API as a backup.
I really want to be 100% honest and transparent with Fee that i am taking.
So if you suspect that something is misscalculated - then just send me email and tell me what is wrong
BTW.
Also second important information.
I discovered 2 interesting things during holidays.
1. The SSH credentials to rig: miner/miner and root/miner1324 is well known to whole internet by now.
There are bots in internet that are connecting to EVERY SINGLE IP address and trying to use those credentials to log in to ssh.
I saw that and in update v1134 i implemented some checkup to see which rigs are beeing accessed and "hacked" and i found that few rigs are for real hacked.
Dont worry guys, it is possible only to hack rig if you will forward 22 port of your rig to your external ip address.
And i checked those few cases and most of then had 22 port forwarded directly to rig and the rest fo them had public ip's assigned directly to rig
So my recommendation is : DONT FORWARD 22 port to your rig and DONT ASSIGN PUBLIC IP directly to your rig !
The same problem has ETHOS where credentials are well known to users and whole internet.
So the bots are checking all internet and tryng to use those credentials
There were 30 rigs in my OS that had this issue and i sent email to every user that i saw had this problem.
If you really want to forward 22 port to your rig, please remember to change password on your miner and root account.
2. From 24 December i see that someone from Brasil is trying to brute force to random accounts.
This is one of the IP's
https://www.abuseipdb.com/check/201.83.28.220But honestly, this "bothet" is using like 2000-10000 IP's or even more to "test" login credentials in my system.
I debugged data he sends to my servers and it is very clear that he is using some leaked accounts and paswords databases.
Most of those accounts he is trying to access i dont even have in database. So good luck with that
Thats why i advice to use custom password that was never used anywhere else
Guys it is better to use lastpass or dashlane or keepass to keep your passwords random for every page AND remember only one master password.
Anyway because of that problem i will be implementing captcha again...
This time i wont use google captcha becasue some of You had problem with this one i will figure out something better.
I also have already prepared 2FA system based on google authenticator/authy2 so it will be implemented sonn in january after more tests.
Also when i alreadywrote so much text .... i just wanted to share my next goals.
We are working on telegram notifications in case of rig beeing offline - thats the most wanted feature.
The January will be totally sacrificed for perfecting SRRv2, new firmware and Extension Boards.
There will be also many orders so i am expecting big delays in shipping to You guys.
After we will cool down from those orders we will start making some new targets for 2018 year.
I am thinking abount voting pool for new features to keep track what you guys REALLY NEED and what is most important to You.
I dont have much feedback from you so it is sometimes hard to tell what should i do next ....
And then also we will be doing some REST API to bring simplemining to next level
Anyway i am really happy that "MOST" of you are satisfied using simplemining and i hope i wont let anyone down
In next year i will also be trying to expand our team to produce new features faster.
I am really happy that i can GIVE something good to You guys and i am really happy about that.
Thx and i wish you HAPPY NEW YEAR