Pool Owners, I am tired | Bitcointalksearch.org

fcmatt

legendary

Activity: 2072

Merit: 1001

Quote from: nearmiss on June 20, 2013, 10:53:29 AM

Quote from: fcmatt on June 20, 2013, 10:51:37 AM

thanks for the info all. looks like it is pretty easy to fix. I do not see a public fix for greedi's fork tho which could save me some time.

I just changed it to set a flag in the db, which a cron then picks up and processes (essentially doing exactly what auto-payout is). Assuming your site updates are within a reasonable time, the end user experiences no real difference. They get their coins in $siteUpdateInterval amount of time.

Just one option though, I am sure there are plenty of ways to fix it.

your idea was a good one. I posted a fix in this thread: https://bitcointalksearch.org/topic/m.2533156

only complaint i have heard so far is some people want a txid immediately. i countered that mmcfe did not give it in the first place.

nearmiss

sr. member

Activity: 448

Merit: 250

Quote from: fcmatt on June 20, 2013, 10:51:37 AM

thanks for the info all. looks like it is pretty easy to fix. I do not see a public fix for greedi's fork tho which could save me some time.

I just changed it to set a flag in the db, which a cron then picks up and processes (essentially doing exactly what auto-payout is). Assuming your site updates are within a reasonable time, the end user experiences no real difference. They get their coins in $siteUpdateInterval amount of time.

Just one option though, I am sure there are plenty of ways to fix it.

fcmatt

legendary

Activity: 2072

Merit: 1001

thanks for the info all. looks like it is pretty easy to fix. I do not see a public fix for greedi's fork tho which could save me some time.

nearmiss

sr. member

Activity: 448

Merit: 250

Quote from: thep33t on June 20, 2013, 10:47:27 AM

Quote from: nearmiss on June 20, 2013, 10:37:09 AM

don't think so, but my stuff was pretty heavily customized anyways. The bug itself is in payout.php, fwiw. thesilverwolf pool op has some posts somewhere with more details, as I believe his SBC pool was hit with it early on.

no, it is not. Payout.php deals with autopayouts, not manual.

Yes your right, I meant accountdetails.php actually. ( I moved my stuff to payouts.php as part of the cron, as a solution, hence the mis-step)

thep33t

full member

Activity: 126

Merit: 100

Quote from: nearmiss on June 20, 2013, 10:37:09 AM

don't think so, but my stuff was pretty heavily customized anyways. The bug itself is in payout.php, fwiw. thesilverwolf pool op has some posts somewhere with more details, as I believe his SBC pool was hit with it early on.

no, it is not. Payout.php deals with autopayouts, not manual.

nearmiss

sr. member

Activity: 448

Merit: 250

people are scripting posts to the payout form in quick succession, before the script has a chance to actually process/update the balance in the db. So they get like 5-6 withdraws in before the balance is 0. Mine a few more coins and repeat.

Search your ledger table for a transType of Debit_MP (I think it is) to view manual payouts. If you see a whole bunch within seconds all going to 1 address, all for the same amount....he's exploiting this bug.

fcmatt

legendary

Activity: 2072

Merit: 1001

Quote from: nearmiss on June 20, 2013, 10:37:09 AM

don't think so, but my stuff was pretty heavily customized anyways. The bug itself is in payout.php, fwiw. thesilverwolf pool op has some posts somewhere with more details, as I believe his SBC pool was hit with it early on.

Yea i am googling it.

Either people are trying to do many manual payouts in less then a second or there is a race condition between manual and auto
payouts via the scripts. I am using greedi's fork.

nearmiss

sr. member

Activity: 448

Merit: 250

don't think so, but my stuff was pretty heavily customized anyways. The bug itself is in payout.php, fwiw. thesilverwolf pool op has some posts somewhere with more details, as I believe his SBC pool was hit with it early on.

fcmatt

legendary

Activity: 2072

Merit: 1001

Quote from: nearmiss on June 20, 2013, 10:24:52 AM

Quote from: fcmatt on June 20, 2013, 10:22:01 AM

Quote from: barwizi on June 20, 2013, 10:16:32 AM

Just tried to cash out from 6 of the pools i hold coins, wtf Huh

all of them have manual cash out disabled. Is this a new scam or their way of trying to squeeze a bit more hash power from me?

manual cash out being disabled usually means they are short of funds in the wallet.
why? i dunno.

i never had to disable my pools manual payout. i wonder why they have to.

Likely due to the mmfce bugs that allowed people to steal coins via manual cash-out. I know I've cleaned up the problem on all my pools except one (simply because I haven't wanted to touch my DGC pool yet).

If my dgc pool happens to be on your list, let me know

(upgrade coming within the next 3 days).

FWIW, you can generally just set an auto-threshold of anything below your current balance, and it'd send out your entire balance on next site update.

What fork were you using? This one? https://github.com/TheSerapher/php-mmcfe-ng

daggerismo

full member

Activity: 224

Merit: 100

Quote from: barwizi on June 20, 2013, 10:16:32 AM

Just tried to cash out from 6 of the pools i hold coins, wtf Huh

all of them have manual cash out disabled. Is this a new scam or their way of trying to squeeze a bit more hash power from me?

just set an auto-payout ammount and you will receive your coins once you have reached that ammount, actually a got many coins on pools with no manual payout enabled and with auto-payouts and dint have a problem yet

nearmiss

sr. member

Activity: 448

Merit: 250

Quote from: fcmatt on June 20, 2013, 10:22:01 AM

Quote from: barwizi on June 20, 2013, 10:16:32 AM

Just tried to cash out from 6 of the pools i hold coins, wtf Huh

all of them have manual cash out disabled. Is this a new scam or their way of trying to squeeze a bit more hash power from me?

manual cash out being disabled usually means they are short of funds in the wallet.
why? i dunno.

i never had to disable my pools manual payout. i wonder why they have to.

Likely due to the mmfce bugs that allowed people to steal coins via manual cash-out. I know I've cleaned up the problem on all my pools except one (simply because I haven't wanted to touch my DGC pool yet).

If my dgc pool happens to be on your list, let me know

(upgrade coming within the next 3 days).

FWIW, you can generally just set an auto-threshold of anything below your current balance, and it'd send out your entire balance on next site update.

fcmatt

legendary

Activity: 2072

Merit: 1001

Quote from: barwizi on June 20, 2013, 10:16:32 AM

Just tried to cash out from 6 of the pools i hold coins, wtf Huh

all of them have manual cash out disabled. Is this a new scam or their way of trying to squeeze a bit more hash power from me?

manual cash out being disabled usually means they are short of funds in the wallet.
why? i dunno.

i never had to disable my pools manual payout. i wonder why they have to.

barwizi

legendary

Activity: 882

Merit: 1000

Just tried to cash out from 6 of the pools i hold coins, wtf Huh

all of them have manual cash out disabled. Is this a new scam or their way of trying to squeeze a bit more hash power from me?

Topic: Pool Owners, I am tired (Read 895 times)