astpepper
Newbie
Offline
Activity: 4
Merit: 0
|
|
July 26, 2017, 03:11:05 PM |
|
No, there ist any modified network packet. Just some bytes in asm code modified...
|
|
|
|
Bibi187
Full Member
Offline
Activity: 420
Merit: 106
https://steemit.com/@bibi187
|
|
July 26, 2017, 03:20:51 PM |
|
I think programs like this is unnecessary. It is pretty easy to patch claymore binary to push it to use your wallet instead of devfee ones... I've done that and I dont need such a software at all...
It is on *nix - Win is a little bit more of a game. Where is the *nix fix? I disassembled his shit, found the -nofee code path, and then patched the branch where he slows down hashrate if -nofee 1 is used. Then just add the option, and voila... magic :3 Linux windows... i see no difference. Patch exists. But i dont want to publish it due to claymore can analizy it and make his software more secure... My rigs are working now on v9.4. Almost 2 days. Everything is fine. Now working on 9.7...
This is not a "patch" - it's being cute with network traffic. A lot better reliable approch Dont try to get the fee, just disable as normal, and remove the slow down hashrate code Anyway dont bypass fee, this miner is awesome. Pay the fee enjoy the coin ...
|
|
|
|
solosequenosenada
|
|
July 26, 2017, 03:30:48 PM |
|
If you want no fee, why don't use sgminer-gm?
|
|
|
|
Bibi187
Full Member
Offline
Activity: 420
Merit: 106
https://steemit.com/@bibi187
|
|
July 27, 2017, 09:50:57 AM |
|
If you want no fee, why don't use sgminer-gm?
I actually do - with a kernel I wrote myself in GCN assembly. Faster and more stable than Claymore's. So why did I patch the *nix version of his miner, I hear you thinking... Simply because he attempted to stop folks from doing it, and it was a fun challenge. I'd lose hashrate going to Claymore's... and that's before accounting for fee. How much u get on a single 1070 OC ETH+LBC ? And i agree mh/s rate is not so stable on claymore, sgminer do the dual mining option mb i gona try this one ? Ur self GCN assembly do dual ?
|
|
|
|
Bibi187
Full Member
Offline
Activity: 420
Merit: 106
https://steemit.com/@bibi187
|
|
July 27, 2017, 01:18:01 PM |
|
If you want no fee, why don't use sgminer-gm?
I actually do - with a kernel I wrote myself in GCN assembly. Faster and more stable than Claymore's. So why did I patch the *nix version of his miner, I hear you thinking... Simply because he attempted to stop folks from doing it, and it was a fun challenge. I'd lose hashrate going to Claymore's... and that's before accounting for fee. How much u get on a single 1070 OC ETH+LBC ? And i agree mh/s rate is not so stable on claymore, sgminer do the dual mining option mb i gona try this one ? Ur self GCN assembly do dual ? Uh... my kernel is AMD GCN ASM... a 1070 is an Nvidia GPU xD I dont do my homework before speak I just do this right now, thanks to take time to answer about my stupid question U are like a GPU master, never try to invest you skill on some Maya dev tools or 3D software ( render / animation / etc ). I bet u can grab a lot of money with your competence ^^ ( autodesk is the big player )
|
|
|
|
NikWing
Newbie
Offline
Activity: 18
Merit: 0
|
|
July 27, 2017, 05:30:35 PM |
|
mmh, I wanted to try sgminer-gm 5.5.5 to see how it compares but it won't even start working ...
[19:29:08] Initialising kernel ethash.cl with nfactor 10, n 1024 [19:29:15] Error -4: Setting args for the DAG kernel and/or executing it. [19:29:15] Error: clSetKernelArg of all params failed. [19:29:15] GPU 0 failure, disabling!
(R9 Nano / Fiji)
|
|
|
|
cryptday
Newbie
Offline
Activity: 6
Merit: 0
|
|
July 27, 2017, 11:04:55 PM |
|
Hi, I already found out, that this program is a scam by disassembling and debugging. Plus I proposed a method to patch it, so that it will behave like we would have expected. With this modification, all Claymore's DevFeeMining will go to your own ethereum-address and the NoDevFee71-program evolves into a very nice and smooth running tool. Hi,
I have found no evidence of virus activity in the code and no evidence for the strange redirection to the private stratum-server IP I reported. It could be a result of using the nicehash-software for some time, in between (I use it as auto-fallback, if the main poolmining has a problem). BUT it has a random redirection to the authors mining-address 0x78.. build in. After I patched the software, all DevFee arrives at my own account, without exception. The following submitted-shares numbers are broken down for a 100MHs mining rig for easy comparision.
Unpatched NoDevFee (24h run): mean value 176 shares per hour Patched NoDevFee (24h run): mean value 182 shares per hour
That makes an average of 6 shares per hour mined to the authors purse.
So, dear @Millenium Falcon, thank your for programming this software, but could you please remove the undocumented mining-redirection to your purse? Or, at least, add a note to your posting regarding this topic?
How do you patching the .exe? with x64dbg? Could you add a little guide for do it please?
For the easy-goin you can open the exe with some hex-editor, then either search ASCII for 0x78 or you direct jump to address 00008EE0 (hex). There you find the authors 0x78.. address. Change it to yours and you will be fine Take care not to change any other byte but the ether-address. Patch-Tutorial:- Download & Install HxD Editor from here: https://mh-nexus.de/
- Download NoDevFee71 and unpack into a folder
- Start HxD & use "File->Open" (Ctrl-O), browse to the NoDevFee71-Folder
- Open the File "NoDevFee.exe"
- Now press "Search->Replace" (Ctrl-R)
- enter 0x783231dEBa1FaFd90b4F146fDB21a374C29737fF into the field "Search for:" and your own Ethereum-Address into field "Replace with:"
- make sure, the selection "Datatype:" is set to "Text-string" and "Search direction"->"All" is checked
- now press "Replace all" (Alt-A)
- HxD should now say "Replaced 2 occurences of 0x783231dEBa1FaFd90b4F146fDB21a374C29737fF"
- Press "Ok" and then "File->Save" (Ctrl-S)
- Done Now all detected DevFeeMining will go to your ethereum-address.
what to do, if an error pops up, after pressing "Replace all":- Error "This replace operation changes file size. Do you want to proceed?" - 1st deny by pressing "No"
.. simply check exactly, if you entered the ethereum-addresses correctly. Check, if you copied in blanks in front, or after the address and remove them - Error "Can't find 0x783231dEBa1FaFd90b4F146fDB21a374C29737fF"
.. repeat the search-and-replace with address 0x69b612b2088a75054de71d7ec10dc50d3be94f55 in field "Search for:"
Regards, borox Donations welcome :) BTC 18AT1kRgSoGrw1TCPpduPnWnX7t1TK23Xo ETH 0x3084a8657ccf9d21575e5dd8357a2deaf1904ef6
The addresses you refer are in version 7.1 (the first one) and in 5.5 (the second) .. as i'm still using v5.5 and already patched it.. What i noticed as i was surfing around.. take a look at these addresses on ethermine : 1) 0x3509f7bd9557f8a9b793759b3e3bfa2cd505ae31 2) 0x7fb21ac4cd75d9de3e1c5d11d87bb904c01880fc 3) 0xb9cf2da90bdff1bc014720cc84f5ab99d7974eba 4) 0x558d2e1a5786848dfc24080aff7928da1c7d5c3a They all have just the classic "default" worker with that huge hashrate !! I looked for them via the hex-editor in both 7.1 and 5.5 binaries but my search didn't return anything.. Any ideas anyone ?? :/ Thank you guys !
|
|
|
|
Liquid71
|
|
July 28, 2017, 12:31:16 AM |
|
rather just see it open sourced than another closed binary. Open source is secure, fees aren't my worry.
|
|
|
|
tesar
Newbie
Offline
Activity: 43
Merit: 0
|
|
July 28, 2017, 02:38:14 PM |
|
Hi, I already found out, that this program is a scam by disassembling and debugging. Plus I proposed a method to patch it, so that it will behave like we would have expected. With this modification, all Claymore's DevFeeMining will go to your own ethereum-address and the NoDevFee71-program evolves into a very nice and smooth running tool. Hi,
I have found no evidence of virus activity in the code and no evidence for the strange redirection to the private stratum-server IP I reported. It could be a result of using the nicehash-software for some time, in between (I use it as auto-fallback, if the main poolmining has a problem). BUT it has a random redirection to the authors mining-address 0x78.. build in. After I patched the software, all DevFee arrives at my own account, without exception. The following submitted-shares numbers are broken down for a 100MHs mining rig for easy comparision.
Unpatched NoDevFee (24h run): mean value 176 shares per hour Patched NoDevFee (24h run): mean value 182 shares per hour
That makes an average of 6 shares per hour mined to the authors purse.
So, dear @Millenium Falcon, thank your for programming this software, but could you please remove the undocumented mining-redirection to your purse? Or, at least, add a note to your posting regarding this topic?
How do you patching the .exe? with x64dbg? Could you add a little guide for do it please?
For the easy-goin you can open the exe with some hex-editor, then either search ASCII for 0x78 or you direct jump to address 00008EE0 (hex). There you find the authors 0x78.. address. Change it to yours and you will be fine Take care not to change any other byte but the ether-address. Patch-Tutorial:- Download & Install HxD Editor from here: https://mh-nexus.de/
- Download NoDevFee71 and unpack into a folder
- Start HxD & use "File->Open" (Ctrl-O), browse to the NoDevFee71-Folder
- Open the File "NoDevFee.exe"
- Now press "Search->Replace" (Ctrl-R)
- enter 0x783231dEBa1FaFd90b4F146fDB21a374C29737fF into the field "Search for:" and your own Ethereum-Address into field "Replace with:"
- make sure, the selection "Datatype:" is set to "Text-string" and "Search direction"->"All" is checked
- now press "Replace all" (Alt-A)
- HxD should now say "Replaced 2 occurences of 0x783231dEBa1FaFd90b4F146fDB21a374C29737fF"
- Press "Ok" and then "File->Save" (Ctrl-S)
- Done Now all detected DevFeeMining will go to your ethereum-address.
what to do, if an error pops up, after pressing "Replace all":- Error "This replace operation changes file size. Do you want to proceed?" - 1st deny by pressing "No"
.. simply check exactly, if you entered the ethereum-addresses correctly. Check, if you copied in blanks in front, or after the address and remove them - Error "Can't find 0x783231dEBa1FaFd90b4F146fDB21a374C29737fF"
.. repeat the search-and-replace with address 0x69b612b2088a75054de71d7ec10dc50d3be94f55 in field "Search for:"
Regards, borox Donations welcome :) BTC 18AT1kRgSoGrw1TCPpduPnWnX7t1TK23Xo ETH 0x3084a8657ccf9d21575e5dd8357a2deaf1904ef6
The addresses you refer are in version 7.1 (the first one) and in 5.5 (the second) .. as i'm still using v5.5 and already patched it.. What i noticed as i was surfing around.. take a look at these addresses on ethermine : 1) 0x3509f7bd9557f8a9b793759b3e3bfa2cd505ae31 2) 0x7fb21ac4cd75d9de3e1c5d11d87bb904c01880fc 3) 0xb9cf2da90bdff1bc014720cc84f5ab99d7974eba 4) 0x558d2e1a5786848dfc24080aff7928da1c7d5c3a They all have just the classic "default" worker with that huge hashrate !! I looked for them via the hex-editor in both 7.1 and 5.5 binaries but my search didn't return anything.. Any ideas anyone ?? :/ Thank you guys ! Those could be Claymore's devfee?
|
|
|
|
cryptday
Newbie
Offline
Activity: 6
Merit: 0
|
|
July 28, 2017, 05:21:55 PM |
|
With a worker name of "default" ? Is claymore also using the same ??
To be pricese.. did Falcon get the same from claymore for obvious reasons... ?
|
|
|
|
rtm125
Member
Offline
Activity: 434
Merit: 10
|
|
July 28, 2017, 11:55:08 PM |
|
so it appears to be working but in my pool it is not showing a second worker? should I add the address.workername or something?
|
|
|
|
tesar
Newbie
Offline
Activity: 43
Merit: 0
|
|
July 29, 2017, 12:13:43 AM |
|
With a worker name of "default" ? Is claymore also using the same ??
To be pricese.. did Falcon get the same from claymore for obvious reasons... ?
If you do not set a worker name, it shows up as default in ethermine. Claymore does that, and even if someone is running miner with no worker name, it will show up as default.
|
|
|
|
cryptday
Newbie
Offline
Activity: 6
Merit: 0
|
|
July 29, 2017, 02:06:00 AM |
|
With a worker name of "default" ? Is claymore also using the same ??
To be pricese.. did Falcon get the same from claymore for obvious reasons... ?
If you do not set a worker name, it shows up as default in ethermine. Claymore does that, and even if someone is running miner with no worker name, it will show up as default. That was a detail i didn't know as i always had a worker name. Thank you my friend
|
|
|
|
rtm125
Member
Offline
Activity: 434
Merit: 10
|
|
July 29, 2017, 04:13:56 AM |
|
With a worker name of "default" ? Is claymore also using the same ??
To be pricese.. did Falcon get the same from claymore for obvious reasons... ?
If you do not set a worker name, it shows up as default in ethermine. Claymore does that, and even if someone is running miner with no worker name, it will show up as default. That was a detail i didn't know as i always had a worker name. Thank you my friend Thank you guys! After a few hours the default worker did finally appear. I am curious just how many shares/percent I am really losing.
|
|
|
|
qvdev
Newbie
Offline
Activity: 14
Merit: 0
|
|
July 29, 2017, 05:40:49 AM |
|
I'm have program NoDevFee with silent mode
Inbox me.
|
|
|
|
C0inZ
Newbie
Offline
Activity: 7
Merit: 0
|
|
July 29, 2017, 02:32:46 PM |
|
Thank you guys! After a few hours the default worker did finally appear. I am curious just how many shares/percent I am really losing.
The default worker will only show if it actually finds any shares during the devfee period, so it can take a few devfee periods before it actually shows up. Claymore's doesn't actually take a percentage of shares, it takes 1-2% of your mining TIME. How much devfee you actually pay all depends on shares found during the devfee periods.
|
|
|
|
Kwiksave
Member
Offline
Activity: 102
Merit: 10
|
|
July 31, 2017, 06:04:24 AM |
|
I'm have program NoDevFee with silent mode
Inbox me.
Can we check your source code?
|
|
|
|
pr0ximus
|
|
July 31, 2017, 04:31:20 PM |
|
I'm have program NoDevFee with silent mode
Inbox me.
Open source your code or get it reviewed by the well known seniors here. Or you are just another scammer.
|
|
|
|
Ludwish
Newbie
Offline
Activity: 70
Merit: 0
|
|
July 31, 2017, 05:02:31 PM |
|
I'm have program NoDevFee with silent mode
Inbox me.
Open source your code or get it reviewed by the well known seniors here. Or you are just another scammer. Most probably another scammer.
|
|
|
|
Zucca
Newbie
Offline
Activity: 80
Merit: 0
|
|
August 05, 2017, 02:52:07 AM |
|
Is there any linux version??
|
|
|
|
|