While I agree that it makes sense for pool maintainers to implement some kind of anti-botnet protection, what's stopping botnet operators from just setting up their own pool?
Nothing, but their profitability is limited by their ability to attract hash power, which in turn might be limited by their policies. |
|
|
|
|
Some disconnected but hopefully useful thoughts here for thoughtful pool operators.
- When a single account connects and hashes for more than 10 minutes with more than 50 IP addresses, disconnect and ban that account and IP for a day
- When a single account connects and hashes for more than 10 minutes from >10 IP addresses with CPU-level hashrates, as above
- When a set of accounts/workers connect meeting above criteria and with identical payout addresses, disconnect and ban for a day
Why?
1: I think anyone running a mining cluster or even a set of mining clusters is not going to exceed the first criterion. At the very least, they are going to have split things across multiple IPs (for various reasons, including risk-avoidance) and across multiple accounts (for accounting purposes)
2: I think it's reasonable to assume that large influxes of CPU-level hashrates to single accounts are indicative of botnet activity. (This includes, for example, the case of the person at the Australian Broadcasting Company recently featured as running miners on spare cycles across the enterprise).
3: Aggregate of the above.
Meta-why?
I trust Tycho. I trust Slush. I trust Luke-jr, etc. I don't trust random people who show up with X gazillion H/s across thousands of IP addresses. Neither should you.
Pool manipulation is a potentially big issue with the size of the network today, especially when coupled with the effects we have seen when DDoS attacks against pools have been more or less successful.
Peace,
Mike
|
|
|
|
You could always join Team Ausp, the team that leaves all the others in the dust. If you're up to the test, come mine with the best.
...at least until I take my toys back to the more established/predictable pools  |
|
|
|
|
I'm offering 23BTC provided that Grue, Quant or or Jack agree to play intermediary for 1%. Shipping via the slow boat to Bratislava, Slovakia included in my offer.
|
|
|
|
Hey, Cablesaurus! I'm thinking... make this product sized so that people in standard ATX 19" cases can squeeze 3x proper gfx cards on a mobo with 1x PCIe x16 and 2x PCIe x1. This would mean working very hard to minimize the required lower clearance between connector and card. From the images you're putting out currently, what you've got works nicely with a 5U chassis.... WHICH IS NOT ACCEPTABLE Any chance of an extremely slim left-angle board that would allow the adapted card to plug into an adapter crammed between a PCI and a PCIe slot? |
|
|
|
If eBay is evil, what does that make the Federal Reserve? Evil cubed. |
|
|
|
Your captcha is useless and annoying. There are better ways to prevent oracle attacks.
If anyone is interested in breaking this style of captcha, the basic technique is: intensity histogram, contrast, despeckle, horizontal histogram, cut letters/find hulls, unrotate and rescale, build grid, lookup in database. Building the database in advance is the hardest part, and it is really only hard if the site under protection isn't worth getting into.
Captchas were great 10 years ago, when not everyone knew how to break them. By now, they have to be nearly unreadable to be effective. Within a few years, I suspect that getting a correct answer for a difficult captcha will be taken as evidence against the humanness of the interpreter.
Well, that's one way to do it. Much easier is paying a kid in China $0.01 to do it for you. |
|
|
|
|
eBay doesn't want to participate in the new economy. Fuck them. They will be left behind, wondering where they went wrong.
|
|
|
|
I just registered an unknown number of sockpuppet accounts in order to skew the results of this poll.
It's still a ratio of 1:10, which is what it's been this entire time... I call fake. You think my strategy is to use my sock army to enter poll votes immediately? You fool! Watch... watch, and see... |
|
|
|
|
I just registered an unknown number of sockpuppet accounts in order to skew the results of this poll.
|
|
|
|
Rug monitor:  |
|
|
|
|
The first rule of using Silk Road is that you don't talk about using Silk Road....
|
|
|
|
Bitcoin developers, please, please, please do create encrypted wallet functionality, so that I can run bitcoin on my malware infested windows computer while enjoying false sense of security.
+1  |
|
|
|
Good thinking, xc. It's been exciting lately to see BTC exchanges opening up for Thai baht, Chilean pesos and Indian rupees. Those early movers both stand to make a fortune, and help to grow and provide liquidity to the ecosystem. I see Bitcoin as a key component of the agorist revolution. As I wrote on Facebook a couple of days ago: The best of today's tech empowers individuals, not governments. The Silk Road drug marketplace will not be shut down by court order. It will probably never be located, its principals never identified. And it will have competitors... in other markets, too.
Bitcoin is something long dreamt of. It is not perfect, but it needn't be. All it must do is out-compete state money. And it will. And states will fall. Since you cited New Libertarian Manifesto, a link to my reading of the work is called for: http://www.nostate.com/2111/new-libertarian-manifesto-audio-mp3-podcast/ |
|
|
|
|
Hooray! Earth is saved! (Now we can destroy it!)
|
|
|
|
I've heard it said that enough coins flow in and out of MtGox and MyBitcoin that they can effectively act as manual tumblers by nature. I don't know how true this is however.
This is actually true except for the part about both MtGox and MyBitcoin keeping detailed logs about what goes where, and both being subject to the will of LEO's to some degree simply due to the fact that both are public companies with known owners. The bit about logging at MtGox and MyBitcoin is true, but this may be of little concern to people interested in the topic of this thread. The reporting and accounting requirements these services are subject to are based entirely around their handling of government currencies. For example, on my MtGox account right now I can withdraw a maximum of $1000 per day and $10,000 per month. To do more than that I need to show state ID. Meanwhile, I can use the MtGox API to talk to an account founded on a throwaway email address and get access to the BTC pool there. No government money transactions, no reporting or audit requirement... yet. |
|
|
|
best of luck with your venture
Thanks! |
|
|
|
http://app.bitlaundry.com/I've had the site down for most of a week, because I discovered a couple of *potential* holes that needed plugging. Back up and running, now, with the most important hole-plugging done, so launder away! (BTW, if you just want a single-hop transaction bounce: http://www.bitcoinlaundry.com/ (yeah, it's similar))
|
|
|
|
|
Show Posts
