Bitcoin Forum
October 09, 2024, 03:04:21 AM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 [2]
21  Alternate cryptocurrencies / Mining (Altcoins) / Re: Possible Hack - Mining Farm on: March 15, 2018, 02:01:53 PM
I'm using the exact same set up with EdgeRouter X. I do use a robust VPN password (more than 20 characters) but not sure if that matters in this situation.

Upon further investigation I allowed Awesome Miner to reconfigure API access to the machines that I reinstalled firmware and changed the root password (keep in mind these 3 miners have been running flawlessly for 24 hours). As soon as I allowed the program access, the miner reconfigured to stratum+tcp://c11.mine.ahashpool.com3573

It's my opinion that the security vulnerability lies in Awesome Miner. I'm going to reach out to the company today. I will post if there are any developments.

Please keep us appraised of what you find, I am quite interested.

You have a password to your VPN?

Certificates dude. Certificates.

Thank you for your input.. very helpful. I've made sure to go back and edit my previous reply to note I made a mistake.
22  Alternate cryptocurrencies / Mining (Altcoins) / Re: Possible Hack - Mining Farm on: March 14, 2018, 01:55:22 PM
I'm using the exact same set up with EdgeRouter X. I do use a robust VPN password certificates (more than 20 characters) but not sure if that matters in this situation.

Upon further investigation I allowed Awesome Miner to reconfigure API access to the machines that I reinstalled firmware and changed the root password (keep in mind these 3 miners have been running flawlessly for 24 hours). As soon as I allowed the program access, the miner reconfigured to stratum+tcp://c11.mine.ahashpool.com3573

It's my opinion that the security vulnerability lies in Awesome Miner. I'm going to reach out to the company today. I will post if there are any developments.
23  Alternate cryptocurrencies / Mining (Altcoins) / Re: Possible Hack - Mining Farm on: March 13, 2018, 07:27:27 PM
Do you use the web interface to Awesome Miner?  If so, change the port and reset all passwords to very long tough passwords.  Do you have multiple accounts in Awesome Miner?

Do you use the cloud service with Awesome Miner?  Change the passwords there as well.

Now, the remote site... what kind of firewall do you have there protecting your machines from the internet?  What ports do you have opened or forwarded?

I do not use the web interface. I only have 1 acct with awesome miner. I do not use cloud service. I do have a firewall in place. No open ports or forwarded ports.

Further diagnosing. I reinstalled firmware on miners and changed the password to those 2 miners and this seems to have fixed the issue. Will update if anything changes. I now am fairly certain the vulnerability was through Awesome Miner as that program had full API access.
24  Alternate cryptocurrencies / Mining (Altcoins) / Possible Hack - Mining Farm on: March 13, 2018, 02:07:00 AM
Hi guys, I'm a little concerned some of my ASICs were compromised over the last few days. Here are the details..

I currently run close to 100 ASICs, 71 of which are housed under 1 roof/1 IP. I use Awesome Miner through VPN to gain access to my machines. About 3 days ago I noticed a D3 out. I restarted the machine remotely, still nothing. D3s are absolute garbage machines and so I thought it was a machine issue and it just needed a hard reboot (unplugging - sounds strange but again, garbage). The next day I had 2 more go out, and today 10 more. I started looking into the problem more closely and noticed that my pool configs were changed on all of my L3s and D3s but thankfully not on my S9s. The strange part here is that the pool that the settings were changed to was a BTC pool so the machines just weren't hashing. Another strange thing is that the machines were not immediately rebooted to change the settings so the pool configs didn't take effect until Awesome Miner rebooted them for one of my rules I had set in place. The pool that the machines were changed to is:

stratum+tcp://c11.mine.ahashpool.com:3573
Worker is left blank
Password: c=BTC

The good thing is that a firmware upgrade will allow me to change the pool settings back to my configuration. The unfortunate part is that even after the firmware upgrade, the machine will eventually revert back to stratum+tcp://c11.mine.ahashpool.com:3573 if a reboot is needed

Admittedly my miners were set to default passwords but my security at my offsite location was, imo, great.

Has anyone else experienced this? Could this be an AwesomeMiner security issue? I want to note that I love AwesomeMiner. It makes my life so much easier but this seems like the more likely scenario if this was indeed a hack.

How can I get control of my miners?

Thanks,
25  Economy / Services / Re: List of hosting services for mining on: February 22, 2018, 10:18:48 PM
Hi, found this through the forum search. My company is opening a new 2 mW facility in north Alabama and currently taking pre-orders for mid-March delivery. Please PM me for availability and prices.

David
26  Economy / Digital goods / Re: Genesis Bitcoin Mining Contract - For Sale on: January 30, 2018, 12:34:18 AM
Hi, I have not sold it. If you're interested PM me. Thanks
27  Economy / Digital goods / Genesis Bitcoin Mining Contract - For Sale on: November 29, 2017, 02:11:49 PM
Hi, I'm interested in physical mining with S9's and looking to get out of my Genesis contract. I purchased 96Th/s in May of 2017. I purchased the contract for 5.58 BTC. So far I have been returned 3.8235 BTC. I estimate (excel calculator based on past results) my break even to be sometime around April 1st, 2018. I'm looking to sell it for breakeven so I would take 1.75 BTC for the account. If you are interested I can show you my math by sending you the excel spreadsheet. This contract is unlimited. The only time it stops is when Bitcoin is no longer profitable to mine. I encourage you to take a look at cryptocompare calculator. The fee for this contract is roughly $28/day. Yesterday I netted $160 which is a direct deposit every day in my bitcoin wallet.

Fiat paid for contract: $13,000
Fiat Received to date: $42,058

Pages: « 1 [2]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!