oh la la! we randomly opened up a USB the other day and found it had those purdy beveled edges, and the certification stamps on them.. looks very nice! now that I see there is even more variety in colors than I had previously thought, I actually want to collect them all!  |
|
|
|
|
Thanks for the update!
Friedcat for president!
|
|
|
|
|
I guess this explains why BitInstant has sort of stopped providing their services?
|
|
|
|
Banned, thanks.
RoboCoder = banned..? |
|
|
|
CoinURL is getting marked by (my) google chrome as trying to inject malware. Would be clever no? Inject some zeroday into all the people browsing bitcoin sites, dig for their wallet.dat files, no?
I'm pretty sure it was more of a case of a user putting up links on CoinURL to a page with a javascript miner or something that wasn't a very big risk at all, and because of that link Google flagged both the coinurl.com and cur.lv domain names. Removed the link and eventually Google released their grip on us. What a nightmare. It was actually like 20 different pages, all were on our site for quite awhile and I supposed Google "updated their definition" on that particular script, and it flagged a bunch of random stuff that our users had linked to. All of the pages they linked to saying they contained "malware" were BLOGSPOT.COM pages. BLOGSPOT IS A GOOGLE WEBSITE. So Google was complaining that we were linking to malware, when in fact we were linking to GOOGLE.. How does Google.com/Blogspot.com not get flagged for this BS? I have no idea. Maybe it's because we are a competitor and they want to discourage our users before we get too large. If Google complains about 1 or 2 links that are bad, and tells me to remove a link, why don't they just flag that 1 link instead of our millions of links, flagging our entire domain which affects 1000's of websites. And yes we are under constant development. I have two staffers and our developer is top notch. He has converted almost the entirety of the underlying structure of the website, streamlining it so we can survive and grow exponentially. |
|
|
|
So by default, the system will REMOVE your pool configuration and mine for the minepeon donation pools, and keep checking every hour to reset it back. Minepeon took $5 from me, lesson learned. But I need to post this here to let you guys know. I'm fairly certain the command rm /opt/minepeon/etc/cron.d/hourly/donate Will solve this problem. If you look on his Wiki Page for MinePeon he makes no mention of this behavior or how to disable it. I don't think that this is the case. I've been mining with MinePeon without experiencing any of such behavior. Furthermore MineForeman seems like a decent Guy. Please contact MineForeman and ask him to explain. I'm just realizing now that there is a web interface. I figured it was just a linux box with cgminer on it, so configuring cgminer and then letting it sit is not the way to do it. You need to use his web interface.. looking into it, he has it set to take your config down and put his config back up 15 minutes per day by default. If you have just configured cgminer itself and not his web interface witchery, it will take your config down and put his back up, and then 15 minutes later put his other one back up, again containing donation details but intended to put your web-interface-configured pools. So I guess his intention was to only take 15 minutes a day but it just undid what I did by default behavior. |
|
|
|
I have something to add to this. Minepeon, the dirty donation OS! I got some USBs yesterday, set up my hubs, got everything ready, plugged them all in, I see the pi happily booting, and then suddenly I see they are getting accepted shares. I get my IP, SSH in, and sure enough he's got it to start mining towards his "donation" accounts by default. Fair enough, right? Why waste any clock cycles? Give the guy a few cents. So I change the pools in cgminer to point at my own pools. Save, exit screen, and watch the hashrate increase at my own pool. I then go to bed. I wake up in the morning and it's back to donating again. How could this be? I scan the system for the word "donate" and I find a file in cron.d/hourly which contains this: #!/usr/bin/php
<?php
include('miner.inc.php');
include('timezone.inc.php');
$donation = file_get_contents("/opt/minepeon/etc/donation");
$hour = date('H');
$configfile = "/opt/minepeon/etc/miner.conf";
$dontatefile = "/opt/minepeon/etc/miner.conf.donate";
$tempfile = "/opt/minepeon/etc/miner.conf.tmp";
echo $donation . $hour;
if ($donation > 0 and $hour == 00) {
copy($configfile, $tempfile);
copy($dontatefile, $configfile);
cgminer("restart", "");
sleep(5);
copy($tempfile, $configfile);
sleep($donation * 60);
cgminer("quit", "");
}
// stratum.ozco.in:3333 minepeon.donate donate
// stratum.btcguild.com:3333 MinePeon_Donate MinePeon_Donate
// pool.50btc.com:8332 Donate
So by default, the system will REMOVE your pool configuration and mine for the minepeon donation pools, and keep checking every hour to reset it back. Minepeon took $5 from me, lesson learned. But I need to post this here to let you guys know. I'm fairly certain the command rm /opt/minepeon/etc/cron.d/hourly/donate Will solve this problem. If you look on his Wiki Page for MinePeon he makes no mention of this behavior or how to disable it. |
|
|
|
I just went to a random bitcoin site a little bit ago, from a mac, and I got the scary message:
If you proceed, this site may harm your mac. And it was a page unrelated to coinurl, but probably some coinurl add embedded in the site, and thus the warning ? I remember coinurl was mentioned in the warning.
Why can't all the embedded adds be only simple adds that can not contain malware. Just to be on the safe side, I chose not to visit that particular site, as I don't have much experience with Mac, and I don't want to have an infection on a machine that's not even mine, but belong to someone else in the household.
Seems like quite a devastating experience for a high number of users and also for the admin of coinurl, and also for all sites carrying their adds that have their users experience this pop up screen as well..
The banner ads themselves will not contain the malware. There was an unrelated link that was shared on the interstitial ads that pointed at a page that Google claims to be malware. They flag the whole domain. We can't even replace the content of our ads when it's like this to help the situation, just have to wait a few hours.. Argh. I expect this to be solved in 1 more hour! |
|
|
|
Looks like it's just chrome now. Mozilla has cleared things up, yet chrome is still spewing out malware warnings all over my Litecoin block explorer because of my coinurl ad http://explorer.litecoin.netI am using firefox still getting warning. That's strange. I visited CoinURL just a minute ago on Firefox and it was fine. Now all of a sudden it's telling me it's a reported attack page as soon as I tried to log in. Okay I got it now. When that Firefox notification pops up, it's a "Google Advisory notice" So when google reviews us, it will go away. rrrrrghhhh!!!! |
|
|
|
we are aware of this and there was 1 bad link out of the millions of links on our site. we are waiting on google to review our site again, should only take a couple of hours. to prevent this in the future we are going to move all interstitial ads to the cur.lv domain somehow. discussion: https://bitcointalk.org/index.php?topic=262277.0 |
|
|
|
Weird, I just went through firefox and I didn't get a warning?
Looks like you ignored it once, I am getting warning page. I just tried from 4 different systems, including one that was a fresh install that had never had firefox opened before and it loaded the page without warning! Looks like it's just chrome now. Mozilla has cleared things up, yet chrome is still spewing out malware warnings all over my Litecoin block explorer because of my coinurl ad http://explorer.litecoin.netWill be solved soon! I think we will move all intersitital ads to the cur.lv domain so if this were to happen, it only affects the intersitials and not the banners at all! That seems like one solid step we can take. |
|
|
|
Weird, I just went through firefox and I didn't get a warning?
Looks like you ignored it once, I am getting warning page. I just tried from 4 different systems, including one that was a fresh install that had never had firefox opened before and it loaded the page without warning! |
|
|
|
It has been removed, the domain is under review again by Google, this will be sorted out by the end of the day.
You should also contact Mozilla.  Weird, I just went through firefox and I didn't get a warning? |
|
|
|
yeah, google is fast on this kind of things it seems... had to remove the banners from my sites, until this is fixed
They said a couple of hours for review so hopefully this is sorted out sooner than later! |
|
|
|
|
*facepalm* omg I didn't realize how this is actually a brick wall of notification on EVERY site with a CoinURL ad... oooooh dear I'm glad we've done everything we can on our end and waiting for Google now.
I'm going to do a promotion to make this up to you guys.
|
|
|
|
yes, i also removed the CoinURL slot... now running on only 2 a-ads slots...
Sorry guys! I was approving ads last night and someone must have hidden malware on a page (or added it afterwards). It has been removed, the domain is under review again by Google, this will be sorted out by the end of the day. Please don't abandon ship, this is bound to happen when we have millions (!!) of links being shortened and ads going through, it's just the nature of the beast. mc_lovin seems abandoned CoinURL  There is more attention towards CoinURL than ever before. I just hired another full time staffer to help out. Far from abandoned! |
|
|
|
EPiSKiNG, wouldn't it have been wise to blur out the session information in your address bar? I mean if the session becomes invalid after IP change or X number of minutes you're good but this is the ancient banking system, that might be a security flaw to share that info |
|
|
|
|
weren't the new blades on sale today? July 10th?
|
|
|
|
|
Show Posts
