[4+ EH] Slush Pool (slushpool.com); Overt AsicBoost; World First Mining Pool

[slush]

...I noticed I had been robbed of a bitcoin while mining in slush's pool. Apparently someone had changed my bitcoin and namecoin address and also unchecked the box that notifies me when I have had a payout. So of course as soon as I noticed everything I immediately changed both addresses to the correct ones and then checked my emails because I receive emails almost anytime I alter my account there. Then it dawned on me, "Why didn't I receive emails when my addresses were changed just a few days earlier by the bandit?" So I tried to notify Slush about this and he responded but I don't really understand what his email is trying to tell me. Hopefully he can figure out what happened because I am stumped. I keep thinking about it and I can only think of 2 ways this could have happened.

1. The bastard whole stole my bitcoin also checked my email and deleted the two emails notifying me of the address changes a few days ago.

2. This is the work of a hacker who was able to prevent the emails from ever being sent.

Either way I hope slush can figure this out and I hope this hasn't happened to anyone else. I love mining in Slush's pool and hope to never experience this ever again.

Hi Jack1Rip1BurnIt, I remember our email conversation. Actually I don't know about any possibility how to avoid email confirmation on wallet change. There were some successful robberies before email confirmations were implemented (mtgox credentials leak), but as far as I remember, nothing happen since then.

If you see any bug which allow attacker to change payout address without email confirmation, tell me and I'll fix it ASAP. From what I know and what is the most likely, your mailbox was compromised as well, so attacker was able to confirm the request by self.

[1713429096]

1713429096

[1713429096]

1713429096

[1713429096]

1713429096

[1713429096]

1713429096

[1713429096]

1713429096

[1713429096]

1713429096

[slush]

I also doubt that it was some kind of pool hack, because there are many accounts with balance in hundreds of bitcoins, which are still untouched.

[disclaimer201]

Just by chance I noticed there is a much higher payout of namecoins at Slush's pool than at Btcguild. Are we still getting those extra coins from people who haven't got a namecoin address or is it just because of different fees and pps? I noticed because I wanted to withdraw some old fractions of coins and it took two days of 400Mhash to mine a single namecoin over there.

[slush]

Are we still getting those extra coins from people who haven't got a namecoin address or is it just because of different fees and pps?

A lot of people isn't interested in NMC, so you still have some extra nmc income here...

[slush]

NMC difficulty is ~2.5x lower than BTC difficulty, so nmc payout should be 2.5x higher in the time period. But a lot of people isn't interested in NMC, so the real NMC payouts are around 4x higher than BTC. At current NMC price (0.01 BTC/NMC), merged mining on the pool is giving roughly 4% extra profit...

[rjk]

NMC difficulty is ~2.5x lower than BTC difficulty, so nmc payout should be 2.5x higher in the time period. But a lot of people isn't interested in NMC, so the real NMC payouts are around 4x higher than BTC. At current NMC price (0.01 BTC/NMC), merged mining on the pool is giving roughly 4% extra profit...

For those that don't have an NMC address, do they still get aux longpolls from NMC blocks? If so, can they be an option to disable?

[DeathAndTaxes]

Hi Jack1Rip1BurnIt, I remember our email conversation. Actually I don't know about any possibility how to avoid email confirmation on wallet change. There were some successful robberies before email confirmations were implemented (mtgox credentials leak), but as far as I remember, nothing happen since then.

One thing I would add is email is usually the weak link in any security system.

If hacker comrpomises a users system he likely can keylog the email login (or get password via password recovery, or compare it against compromised website database, etc). At that point resetting account passwords, and hiding the evidence is trivial.

Any system is only as secure as your email. With exchange account, ewallets, pool accounts, dwolla, gambling sites, banks, etc all allowing reset of password by email, weak email = weak accounts.

google offers 2 factor authentication for email (for free). I am sure other providers do to.  No matter how secure slush (or other service provider) makes their system is your email is weak that is where the attack is coming from.

[disclaimer201]

NMC difficulty is ~2.5x lower than BTC difficulty, so nmc payout should be 2.5x higher in the time period. But a lot of people isn't interested in NMC, so the real NMC payouts are around 4x higher than BTC. At current NMC price (0.01 BTC/NMC), merged mining on the pool is giving roughly 4% extra profit...

This is cool!!!

[Jack1Rip1BurnIt]

Thanx guys for all of your replies. I do believe the thief attacked me through my email. I have another email accout and it is a google one. Is it possible for me to switch my email account without having to create a totally different account?

[Panda Mouse]

Mr Slush.

I like your pool, but please do something with this:

#         Block found                Duration     Total        BTC reward   Block #   Validity
11884   2012-04-25 07:46:55   1:21:00     1471663    2.05002772   177137     95 confirmations left
11883   2012-04-25 06:25:50   0:11:28     299041     1.52255313   177130     88 confirmations left
11882   2012-04-25 06:14:17   0:03:22     89905      1.38637470   177129     87 confirmations left
11881   2012-04-25 06:10:50   0:45:29     882289     2.14206501   177128     86 confirmations left

Now I feel very bad with such kind of discrimination.  

Can you solve this problem?
Many thanks in advance because second 55GH is waiting

Panda Mouse.

[slush]

I like your pool, but please do something with this:

I'm right now working on new payout method (double geometric), which definitely solve it.

[highlevelminer]

Its great to see a popular mining pool do everything they can to stay up to date on making the bitcoin a great enterprise.

Keep up the good work guys!

[Panda Mouse]

I like your pool, but please do something with this:

I'm right now working on new payout method (double geometric), which definitely solve it.

Thank you, it's very good news, as you might think, when you manage to start new payment system?

Panda Mouse.

[disclaimer201]

I like your pool, but please do something with this:

I'm right now working on new payout method (double geometric), which definitely solve it.

Thank you, it's very good news, as you might think, when you manage to start new payment system?

Panda Mouse.

With 55gh/s or even twice as much, why aren't you solo mining? Just wondering. It seems worth it, or not?

[Panda Mouse]

I like your pool, but please do something with this:

I'm right now working on new payout method (double geometric), which definitely solve it.

Thank you, it's very good news, as you might think, when you manage to start new payment system?

Panda Mouse.

With 55gh/s or even twice as much, why aren't you solo mining? Just wondering. It seems worth it, or not?

I like Bitcoin idea. I think that must be supported.
The most through the promotion of good pools.

Panda Mouse.

[Graet]

I like your pool, but please do something with this:

I'm right now working on new payout method (double geometric), which definitely solve it.

Thank you, it's very good news, as you might think, when you manage to start new payment system?

Panda Mouse.

With 55gh/s or even twice as much, why aren't you solo mining? Just wondering. It seems worth it, or not?

<Graet> ;;bc,calc 55000000
<gribble> The average time to generate a block at 55000000 Khps, given current difficulty of 1577913.4856767 , is 1 day, 10 hours, 13 minutes, and 39 seconds

a pool with more than twice that hashrate had a 11million share block over 4 days recently, joining a pool reduces that variance

[FreshJR]

I cannot figure out where to enter my namecoin address to start mining some namecoins.

I searched the site.

Did it get disabled slush?

[slush]

I cannot figure out where to enter my namecoin address to start mining some namecoins.

It's on your profile page, just check "Namecoin" checkbox, namecoin settings will appear then...

[FreshJR]

I cannot figure out where to enter my namecoin address to start mining some namecoins.

It's on your profile page, just check "Namecoin" checkbox, namecoin settings will appear then...

.......

Thanks slush

[disclaimer201]

Hi again, is there an ETA for Double Geometric? Just read somewhere now that most proportional pools are gone Deepbit and Slush are getting extra targeted for pool hopping, even if hoppers' gains are somewhat limited here at Slush's.