[4+ EH] Slush Pool (slushpool.com); Overt AsicBoost; World First Mining Pool

[AngelusWebDesign]

This might be an ignorant or obvious observation, but...

Didn't Slush have some kind of whitelist system, whereby "proven" IPs were allowed access, but others were not?

Maybe, in the future, Slush will have to be for those with static IP addresses only?

[1714217154]

1714217154

[1714217154]

1714217154

[brucemangy]

You miss the point of DDoS. Even if you black list an IP. You will still receive the packet but ignore them. It take processing time and the bandwidth is still taken.

[Camello_AR]

You miss the point of DDoS. Even if you black list an IP. You will still receive the packet but ignore them. It take processing time and the bandwidth is still taken.

And routers and other network infraestruture must to process the packets, and took they time, bandwith, even when will be discarded in next hop

[fc10a3]

I just found my 3 gpu have been running full power for nothing for 3 hours 30.
no share but heat produced so electricity used...

Correct me if I', wrong but yes your 3gpu's were running using power, however since they are basically at idle, much less power is wasted than at full bore.  Not enough to worry about at least.

[brucemangy]

I just found my 3 gpu have been running full power for nothing for 3 hours 30.
no share but heat produced so electricity used...

Correct me if I', wrong but yes your 3gpu's were running using power, however since they are basically at idle, much less power is wasted than at full bore.  Not enough to worry about at least.

I would not have said anything if they were idle.
That's what I do not understand ... 95 degres Celcius for my 6990 is definitely NOT idle ^^

[solitude]

Slush, any estimate on when you can have a new address for us?

[irritant]

moving away from OVH is a good thing I suppose... seems they just been failing and failing, I really hate to see my favorite pool under attack   I hope slush can get things sorted out ASAP and hopefully with some better service this time... , the first bitcoin mining pool... very reliable, just not during the recent ddos attacks/failures      I don't want to move to another pool... 

[andTo86]

You miss the point of DDoS. Even if you black list an IP. You will still receive the packet but ignore them. It take processing time and the bandwidth is still taken.

And routers and other network infraestruture must to process the packets, and took they time, bandwith, even when will be discarded in next hop

How about a public address that first timers connect to, then once you've proven yourself with x number of shares over y days (years?) you get an e-mail with one of many different (maybe 10) IPs of a private pool. Clients put that in their hosts file. Keep a record of who gets what IP. If the attacker does the work and gets a private pool IP, then DDOS's it, you've narrowed it down to 1/10 of your client base as possible scumbags, and they can only DDOS 1/10th of your client base. Give them all one of the other 9 private pool IPs. When that one gets ddos'd, you now have the attacker narrowed down to 1/90th of your client base, and only affecting 1/90th of users. Repeat. 1/720th. Eventually they get tired.


Not sure how feasible it would be to have a datacenter set up this way.

[tiktoc]

He had something similar to this for trusted users, but he said OVH black holed those ips and the one getting attacked all at once.

edit: PS  Good luck Slush, hope the move goes ok and   to botnetworks

[Oktoberfest]

bah, second day I can't connect. Is he really getting DDoS'd this bad? Someone mentioning he's switching servers? Hope that goes smoothly and hastily. My dedicated miner is sitting crying for shares. 

[Gimpeline]

Remember to take some breaks, Slush. Health always comes first. 

[jerethdaminer]

same im just waiting

[nybbler905]

I am in -8GMT and tryed the proxy again...

2013-04-17 12:15:11,046 WARNING proxy mining_proxy.main # Trying to connect to S
tratum pool at stratum.bitcoin.cz:3333
Unhandled error in Deferred:
Unhandled Error
Traceback (most recent call last):
Failure: stratum.custom_exceptions.TransportException: SocketTransportClientFact
ory connection timed out

I am not giving up on slush's pool!!!
Got the getwork working, it's not found anything yet, but still hopefull for a share even with the 10% and so i can thumb my nose at the DDos attackers and tell them ' yea, still getting shares in spite of you bots '

I'm even looking at an old DURON 1GHZ system and thinking i could get some hashes out of that box.....

[centove]

ddos gonna escalate in my opinion,we must implement some countermeasures,like udp and icmp filtering or engress filtering...

Well see, the 'old' ddos was just hammer away with traffic at an ip (random traffic). And in some cases 'specially crafted' packets, remember the windows crashing packet of death fiascoes? Other fun was invalid protocols in the headers (gets routers all worked up and overloaded).

Now what we are seeing is targeted attacks. Lots of legitimate looking traffic directed at a specific service on the target. Most notable of these of late was the wordpress login ddos.

So what counter measure should people employ?

[jerethdaminer]

take it though tor,  set it up as a hidden service force miners to email slush + a group of mods for address, that would give a bit of  controll as you couldnt just google it, and youd have records of who gave out the info

[irritant]

cant all members of the pool be like a proxy for the rest, for if the main one fails? 
I guess not really, because I don't know what I'm talking about, or is very complicated, and not all miners have enough bandwidth fir this, but maybe it is something to think about.. start a decentralized pool? like p2pool, but different (with stratum)?

[centove]

if you really must mine you can mine on my p2pool node

http://ask.gxsnmp.org:9332 -u <btc address to send payments to> -p anything you  want.

[Richy_T]

It's not a crime to use another pool while you wait for a fix. HHTT allows you to mine without having to register an account or I'm currently quite liking p2pool.

[solitude]

It's not a crime to use another pool while you wait for a fix. HHTT allows you to mine without having to register an account or I'm currently quite liking p2pool.

Thanks, using HHTT now.  How soon do you think i'll get a payout if I'm mining at 1200 Mhash/s?

[slush]

Still working on it...