So I contacted the the ISP provider and they confirmed me that I was hacked by WiFi although I’m not sure how since the SSID was hidden.
Hiding an SSID is NOT a security feature. It just keeps the casual person from seeing your network easily. Clients still need to know the SSID and that information is passed in the clear over the air. So anyone sniffing for WiFi can easily see your SSID even though it is hidden. I seriously doubt that a hacker in China was connecting via your WiFi. Make sure your using, at least, WPA2 with a very good and complex key. Disable uPNP and Bonjour and reboot it. If your using a Ubiquity router make sure you disable Ubi Discovery. Os2Sam, I wanted to ask you. How can I check my network for the level of security? What type of software do I need to load up to be able to try to hack my own network even when the SSID is hidden? I thought that it makes it pretty safe when I hide the SSID  What other modern safety measures people take these days to protect their network? Thanks! |
|
|
|
I’m not sure if it’s the same problem I was having because I could not find the IP address that he mentioned in his post but sounded like a simular problem. Thanks for the information! |
|
|
|
So I contacted the the ISP provider and they confirmed me that I was hacked by WiFi although I’m not sure how since the SSID was hidden.
Hiding an SSID is NOT a security feature. It just keeps the casual person from seeing your network easily. Clients still need to know the SSID and that information is passed in the clear over the air. So anyone sniffing for WiFi can easily see your SSID even though it is hidden. I seriously doubt that a hacker in China was connecting via your WiFi. Make sure your using, at least, WPA2 with a very good and complex key. Disable uPNP and Bonjour and reboot it. If your using a Ubiquity router make sure you disable Ubi Discovery. By the time frame that these attacks were done I’m pretty sure that It was done in another time zone. Is there any other way how they could have hacked my modem, by not actually physically being in the radius of its reach? Or that is the only way someone could have hacked it? Because if that’s the case then I even have a local, love to hack people’s wifi suspect around here! And ok, I will try to find and disable what you have told me. After the reset so far no intrusions have been made this night and the log is clean. Also Bitmain have answered to me and send me instructions on how to flash the controllers with their newest firmware by the means of an SD card and then they told me to upload some antivirus which they have send me as well. I’m praying that this will work for me, will start to work on all of the hacked miners today! Thanks for the output! |
|
|
|
|
Biffa and Artemis3 and all of you guys, thank you again for taking your time trying to help me this problem!!! Just want you to know that I really appreciate it!
I’m sure anyone can become an easy target like me and this is just wrong to do that to people! Especially if they ruin the hardware!
If I won’t be able to fix these machines in the next few days, I will go ahead and buy at least 10 of the 17TH machines that bitmain has in stock so I can partly compensate for the damage done by this hacker, and have my TH somewhat higher than now.
All I can say for sure is that he isn’t getting anything from the miners that he has hacked anymore and that makes me feel a little better!
Mine on Comrades!
|
|
|
|
Its more likely that the attack is coming from one of the computers on your internal network rather than from outside.
Unless you have forwarded ports to access your miners from outside your network, or worse, your miners have public IP addresses, the most likely cause of the hack is a compromised windows computer on your network.
I was thinking about that bro and it probably was the case because I have the whole family connected to the same network and everyone is browsing different sites and places which are probably aren’t safe, and I can’t control all of them. I have my modem setup pretty safe and the WiFi isn’t even visible and it doesn’t have any ports open as far as I know and isn’t controlled from the outside but I did have a not very secured 5G Netgear router hooked up to it which I disconnected and hopefully now I’ll be safe. So far no more machines have been hacked. And gladly it is just my home network where I just got several miners working and not my actual farm!!! And no, nobody uses windows in my house, it’s all phones and tablets. Thanks. Mine on! I can smell that block already!!!  Your network is definitely compromised. What about the miners? Did you set up (different) passwords on each? With 2018 or earlier firmware you had to set up both web and ssh passwords, not too sure about 2019 where you are not supposed to log in with ssh, but an earlier version (May?) has an exploit in the web server that re enables ssh access... Also, rather than losing controllers, try the recovery procedure from (micro)SD, and if that doesn't cure it try booting BraiinsOS from the sd card and see if they work that way its better to sacrifice a cheap (small) sd card than a controller (if S9s until the i model). Perhaps you could isolate your miners from your family network, you could have them on different network segments (both physically or logically). Ideally the miners would have their own router firewall, i would setup a white list that only lets them connect to the intended pool (and maybe Bitmain, i think the things phone home iirc before they start hashing), and having a local caching dns server is wise (dnscrypt-proxy does wonders). A proper firewall is generally choosing what is allowed and what is not, ports and sites. Usually something like single button "medium" setting is nearly useless, especially for things whoever designed the firewall didn't think of (such as Bitmain asic miners getting malware). While i commend you for not using Windows, be aware that both Android and iOS/OSX are not perfectly safe, Apple may be a little better but don't blind trust them, especially when your device gets too old and is put out of support. You are essentially doing a sysadmin work in your home like you would in a company... Thanks a lot for the information you provided! I really appreciate it! And yes I’ve had one of the worst days in BTC mining this morning when I woke up I found out that the hacker was able to ruin 14 more S9’s!!!!! 14 machines gone in a minute! Apparently he works somewhere in China in the day time when it is night here and I wake up to a surprise! Today’s surprise was SHOCKING! I have already contacted Bitmain for an advice on what to do and if there is a way that I can repair the controllers by uploading a newer firmware because these machines were from 2017-2018. So I will be waiting for their reply as soon as they start their workday. At first he hacked 3 so I just disconnected the router connected to my modem thinking that it was causing the problem, since the SSID wasn’t hidden unlike my modem SSID. But when I realized that 14 more are mining for him this morning I started to dig in the log of the modem itself and found about 22 of these Dos Smurf attacks!!! From February second to today’s morning! 2020-02-04 09:00:49 [Error][Alarm-Log] AlarmID:303500,AlarmLevel:Error,DoS attack. Type: smurf. Source IP address: 192.168.1.102. Destination IP address: 192.168.1.255. Source MAC address: So I contacted the the ISP provider and they confirmed me that I was hacked by WiFi although I’m not sure how since the SSID was hidden. Remotely they have reset everything and I’ve changed all of the passwords. Even on the miners themselves! But I did that yesterday and apparently that didn’t help. Also the modem had a specific check box for preventing these Dos smurf attacks but apparently that didn’t work. I’m closely monitoring the network tonight to see if there will be any more attacks on my modem, because now I just have a few miners running  Maybe someone had clicked a wrong link from one of the devices who knows. And I did noticed that the only ones that he wasn’t able to hack (so far) are the last ones that I got so they must have had a newer firmware protecting them from being hacked like that. All my hope is on Bitmain now and that they answer soon and maybe be able to find a solution for me. Start them with a preloaded firmware on a sd card or just try to upload it through my network on them, I really don’t know but I am afraid to even turn the power on the ones that have been compromised now, thinking that if it was hacked then maybe he can hack my whole new reseted network again and I will loose the rest of the miners? Do you think it is safe to connect one of them to my fresh network or I shouldn’t even try? Or what do you think? If the Bitmain won’t be able to help me with a firmware upgrade then I really don’t care what I have to load on a Sd card and where it will mine as long as they just don’t sit around like furniture. Now 17-18 have been ruined!   Please let me know your thoughts guys I’d really appreciate if someone with the knowledge be able to give an advice |
|
|
|
Good evening fellow miners! Just wanted to let you know that I’ve had another S9 hacked today and the controller is ruined and I ran out of the replacement controllers Firewall is set to medium, if I set it to higher level then the miners don’t connect. Not sure what else I can do to stop this guy from stealing my coins and braking my hardware. If anyone is interested here is the address that this bastard puts instead of my pool settings and his wallet address. 35TVW8JXxnrPviwyZoRbtNfs2RD1vXNRu1 stratum+tcp://sha256.hk.nicehash.com:3334#xnsub The controllers can not be hard reset, the address can not be changed. BEWARE AND KEEP YOU NETWORK SAFE¡ Good night and mine on! The block is coming soon!  Its more likely that the attack is coming from one of the computers on your internal network rather than from outside. Unless you have forwarded ports to access your miners from outside your network, or worse, your miners have public IP addresses, the most likely cause of the hack is a compromised windows computer on your network. I was thinking about that bro and it probably was the case because I have the whole family connected to the same network and everyone is browsing different sites and places which are probably aren’t safe, and I can’t control all of them. I have my modem setup pretty safe and the WiFi isn’t even visible and it doesn’t have any ports open as far as I know and isn’t controlled from the outside but I did have a not very secured 5G Netgear router hooked up to it which I disconnected and hopefully now I’ll be safe. So far no more machines have been hacked. And gladly it is just my home network where I just got several miners working and not my actual farm!!! And no, nobody uses windows in my house, it’s all phones and tablets. Thanks. Mine on! I can smell that block already!!! |
|
|
|
Good evening fellow miners! Just wanted to let you know that I’ve had another S9 hacked today and the controller is ruined and I ran out of the replacement controllers Firewall is set to medium, if I set it to higher level then the miners don’t connect. Not sure what else I can do to stop this guy from stealing my coins and braking my hardware. If anyone is interested here is the address that this bastard puts instead of my pool settings and his wallet address. 35TVW8JXxnrPviwyZoRbtNfs2RD1vXNRu1 stratum+tcp://sha256.hk.nicehash.com:3334#xnsub The controllers can not be hard reset, the address can not be changed. BEWARE AND KEEP YOU NETWORK SAFE¡ Good night and mine on! The block is coming soon! |
|
|
|
There are various hacks to miners to make them mine to other places.
If the miner is directly connected to the internet, and not behind a firewall, then pretty much anyone can get into it and change what it is running or set a script to change the pool being mined to.
If it is behind a firewall, then anyone else who has access to that miner can change it, but in general, of course, not anyone out on the net.
With the prevalence of hack firmware doing similar things already to charge fees, and people trying to hack into miners to override lack of ssh access, it's become pretty common knowledge how to hack into a miner if it is accessible on the internet.
Make sure it's behind a firewall and no one on the 'net can directly access it, and make sure there isn't anyone else behind the firewall, or a windows computer behind the firewall since they often get hacked/viruses to allow people to hack into your network.
... and lastly ... if it is mining somewhere else, then any miner that has the CrapHash extranonce code can be made to mine to anything at any time by the pool/proxy that is sending you work - though you'll not be able to see that anywhere since nothing logs that change - the CrapHash extranonce code hides all that information.
Thanks for all of the useful information Kano! I’ve purchased a SonicWall router looking device especially for this type of stuff not to happen but since I’m lacking a great deal of networking knowledge, I just put it aside and was too lazy to even try to set it up, thinking it will be too complicated. I guess I better try and install it on my network after all! Because I’ve already thrown out 2 controllers which became just useless after I’ve noticed the mining addresses changed on them!  Like I’ve mentioned before even the reset buttons stopped working! And those miners were never disassembled nor ever had changed in them, they were just like they came from Bitmain. I’ll check my router now to see what is the settings on the firewall, because I don’t even remember what it was. I think there were like 3 options for the firewall from light mode to the toughest one which wouldn’t let anything through I guess but like I said I’m pretty clueless when it comes to networking, just too many protocols for my old brain  Thanks again Kano!  Just checked my modem and the settings of the firewall is on medium, I’m not sure if I should change it to high now. |
|
|
|
There are various hacks to miners to make them mine to other places.
If the miner is directly connected to the internet, and not behind a firewall, then pretty much anyone can get into it and change what it is running or set a script to change the pool being mined to.
If it is behind a firewall, then anyone else who has access to that miner can change it, but in general, of course, not anyone out on the net.
With the prevalence of hack firmware doing similar things already to charge fees, and people trying to hack into miners to override lack of ssh access, it's become pretty common knowledge how to hack into a miner if it is accessible on the internet.
Make sure it's behind a firewall and no one on the 'net can directly access it, and make sure there isn't anyone else behind the firewall, or a windows computer behind the firewall since they often get hacked/viruses to allow people to hack into your network.
... and lastly ... if it is mining somewhere else, then any miner that has the CrapHash extranonce code can be made to mine to anything at any time by the pool/proxy that is sending you work - though you'll not be able to see that anywhere since nothing logs that change - the CrapHash extranonce code hides all that information.
Thanks for all of the useful information Kano! I’ve purchased a SonicWall router looking device especially for this type of stuff not to happen but since I’m lacking a great deal of networking knowledge, I just put it aside and was too lazy to even try to set it up, thinking it will be too complicated. I guess I better try and install it on my network after all! Because I’ve already thrown out 2 controllers which became just useless after I’ve noticed the mining addresses changed on them! Like I’ve mentioned before even the reset buttons stopped working! And those miners were never disassembled nor ever had changed in them, they were just like they came from Bitmain. I’ll check my router now to see what is the settings on the firewall, because I don’t even remember what it was. I think there were like 3 options for the firewall from light mode to the toughest one which wouldn’t let anything through I guess but like I said I’m pretty clueless when it comes to networking, just too many protocols for my old brain Thanks again Kano! |
|
|
|
Hey guys I’ve encountered a very strange problem in 2 of my s9 models in the past few weeks or so. All of the sudden they stopped connecting to the pool so I went and looked at them and everything was fine the green light was blinking the hashing boards were working just fine. So I went ahead and connected to them through the IP addresses just to find out that they are now mining for some HK.nicehash Pool and some BTC address!!! At the same time in the configuration page all of my pools were still there! I tried to reset the controllers but the buttons didn’t do anything! So I had to swipe 2 controllers because of that problem, there was no other way to fix it. Has anyone ever encountered the same type of problem? Is it possible to hack someone’s miner and just change the mining addresses? I took a screenshot but not sure how to load it for you to see. Let me know if you guys have any information regarding this type of problem Thanks! |
|
|
|
I've done an update to KDB and put it live (already) With this update, I've changed the pool's N in PPLNS to 3 Days rather than 5Nd as it was before. So, the next block we find, it will ONLY reward all shares in the 3 Days prior to the block. For new miners or miners considering joining, this means that it will take 3 days for your shares to 'ramp up' to full reward as opposed to the 5Nd value that was around 148 days on the last block we found. This also means that if you leave the pool i.e. no longer mining, after 3 days your shares will have 'ramped down'. Applying the two above if you have an outage, after 3 days you will have 'ramped down' but also you can then 'ramp back up' within 3 days after you reconnect your miners. The 'expected' result is still the same as before, however, since the pool is currently small, and the average block time is quite a bit more than 3 days, the variance, due to this change, of your rewards while 'ramping up' or 'ramping down' is much higher. What this basically means is: that during that 'ramp' (up or down) the expected chance of a reward is 1 in X/3 where X is the average expected days per block based on the current pool hash rate - which is currently about 5 weeks. Hopefully this will attact more miners, and help us get that average block time much more regular! Come visit Discord with the link on the Home Page if you have any questions. About time you’ve done it Kano! That’s very good news! |
|
|
|
I have some bitmain coupons let me know if you want them.
Bro, what kind of coupons you have? I got them from him, it was a $41 and a $153 but they expire at end of January and will only let me apply them to spot orders which right now is limited to the S9's of which these both only will credit about $10 to the order - was hoping to use them on a T17, at least to use the 153 on a T17 and maybe the 41 on a S9 but that 10% of order thing just kills the coupons. I see. Yeah usually they don’t let you spend them on what’s really needed. |
|
|
|
I'm in the US, but all except the R4 were sent to the Ice Mines of Hoth in the Great White North. So no Trump tax for me!
I have no idea where that is but can I send some to you and then come and pick them up from Texas? Or is it a long drive and I better just pay the Trump? |
|
|
|
Woo Hoo! Finally got my S17 up on the Pool and I can now state my hashrate in PHs... More than 1/8th PHs!! Oh the speed!!  Mine ON!  Are you in the U.S? If yes, how much tax you had to pay in total if not a secret?  |
|
|
|
Woo Hoo! Finally got my S17 up on the Pool and I can now state my hashrate in PHs... More than 1/8th PHs!! Oh the speed!! Mine ON! Nice! Although if you’re talking about having more than 125 TH I believe you’re still in TH Bro |
|
|
|
I have some bitmain coupons let me know if you want them.
Bro, what kind of coupons you have? |
|
|
|
Here are some possibilities (1 or more possible): 1) The Price vs Diff vs Reward is too low for most miners, many drop out, diff drops to correct that 2) Price goes up (eventually) due to the reduction in the supply of generated BTC or other market reasons 3) Transaction fees will (of course) become twice the % of the block reward if they don't change i.e. if there was an average of 0.5 BTC in txn fees per block, that's 4% of 12.5 but 8% of 6.25 This % of course doubles each halving, which is why PPS pools started paying FPPS, but they still charge more (and some of them don't have enough BTC to stop going bankrupt) What will happen? NFI But we'll find out in about 5 months or so. Don't forget, this will be the 3rd halving, we've survived the previous ones, this is not new. Thanks for your output! |
|
|
|
Yes, Happy new Year’s to all guys and happy mining, if Lord wants we will have great luck this year! Mine on! Kano, that reminds me about the halving that is supposed to take place in May I believe. Wanted to know, what are your thoughts on that? You think that the BTC will grow in price substantially? Because if it doesn’t I don’t see how any miner would be able to stay afloat (not to mention those who has free electricity), since we will be getting only 6 btc instead of 12 after that, correct? Thanks! |
|
|
|
Well, of course they are rewards because if they have been payments then we wouldn’t have had this conversation in the first place, since these rewards were never paid out.
he has been working on the accounting system that will pay dust - he has explained that when it rolls out soon it will first pay those that are still mining (I believe this is because it can roll the dust payments up and combine them with a current block reward) then the next group would be those that are no longer active miners - I think this might be the group you are in. I know this is a long time in coming but ultimately this ends up being just a few cents to maybe a couple of dollars. I do not think anyone has a substantial amount of unpaid "dust" You mean couple of cents or couple of dollars now but in a year or two it might be couple of hundred or even thousand dollars I personally have rewards in 2018 which go up to 0.00007 per block which is about 50 cents. But that is just me and that is just one block out of like 130 that I got dust for but never actually got it. |
|
|
|
...
So my question is if you are planning on paying out those dust payments to me and other people that were getting little hashrate and getting some dust payments in their rewards page or not?
...
...
Yep, I've completed a new (internal) report that will tell me everything I need to know about every account's balance, also, of course, including the new Payments and the Reward Adjustments data.
So now just gotta complete a separate (non-block) payout from that data.
...
And yes, Dust is Rewards, not Payments. Well, of course they are rewards because if they have been payments then we wouldn’t have had this conversation in the first place, since these rewards were never paid out. |
|
|
|
|
Show Posts
