MANDATORY PASSWORD CHANGE FOR POOL.BIBLEPAY.ORG:


All, as a safety precaution I want to clear all old passwords from the pool and move them to sha256 (this means in laymans terms, if anyone steals your password record, they will only get the hash).

I have upgraded the server to use SHA256, therefore all old passwords are now invalid.

Please, reset your passwords now.



EDIT: They were encrypted before with triple-des, but not stored as a sha hash.

Lets look at this toward the end of the day, I have a high priority thing we need to do right now, its all there dont worry, we will look at that in a few hours.

EDIT:  On SSL, Yes, if you want to be secure just log in through : https://pool.biblepay.org.

The only one without a cert is pool2.

Looks like we need to buy a cert for pool2.  This particular attack was either a server log attack or something very sinister (not man in the middle), but Ill certainly buy the cert as soon as we are caught up again.

The pool is open to mining and open to all operations except withdrawing.  The only thing on the pool not open is withdrawing.

And to clarify, Im working on upgrading the password requirements today before we re-open [the withdrawals].



EDIT:  To save yourselves some pain, please make sure your e-mail address is verified in Account Info | Verify email.  Later today passwords are going to be required to be changed, just in case, but dont change your password yet.  Save the good one for later after our hash algorithm is updated.

All your withdrawals are in the transactions.  The list shows the last 512 records.

The server is not finished being upgraded, I will update everyone when withdraws open again.

Looks like we just had a dry spell, pool automatically checks for prior solved blocks, I see we solved the normal amount in the last two hours now.

Yeah, will be working on auto-withdraw asap, in one transaction per X frequency, across Y miners.

Ill comment on that proposal later; we have one more "potential" solution for the exchange and we should know within 23 more days whats going on with that...

That was just a fluke, I had the database locked down, please try the reset password now.

Your balance is still correct: 1959, everything looks OK. 


Anyone with a negative balance showing, just download the CSV to verify your balance by clicking Transaction History | Printer icon.

The negatives will be gone tomorrow.

Just walked in, let me check...

Wow, got a message from a dentist that wants to accept biblepay.  At least one positive thing happened today!  Alright.

I see no user under your handle either.

I see no user under your handle name.

Yes.

I'm a little overloaded right now, but here is a quick update:

Im running a database maintenance script, and had to consolidate your balances owed into one more succinct record (in contrast to thousands of "mining_credit" records), this caused the server to think your balances are immature.

All you have to do is subtract the two numbers and you will see the total owed is still the same as before the script was started.


Ill take a look at putting it back to the way it was by tomorrow, but either way it will work itself out within 24 hours.

Next, I have an idea how we can prevent the pool from being a hacking target.

In the Python pool, they require a valid receiving address in order to mine.
I think what we will do in the future is forcefully send your rewards out every time a block is solved - to your address on file.

Give me a couple weeks to look into that feature, it may take a while to get that completely working, but I think that feature will button down the pool.

The 18% fee is just temporary.  Hopefully you realize this is in order to keep the pool running.

Your balance is 47K.  Why are you trying to withdraw 800K?
Click the download CSV button to see the history.

Should be up now...

Yeah, I am using Vultr?  Are they known to steal the passwords from crypto configs or config files?  If so maybe I should switch hosts.

Either way its going to be so locked down tonight nothings coming out of the box but encrypted traffic, but please fill me in on vultr...

Please post your username in the pool?

Lets simplify the issue first.  Could you post your getmininginfo HPS after running for 10 mins on both the laptop and the 24 core, and ensure both are using the same thread count?  Lets take the Pool out of the equation here.  And before posting, try the 32 bit and the 64 bit version on the 24 core and post a row for each one.