the1silverwolf (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 07, 2013, 11:57:43 PM |
|
And we are full again.
Going to leave it here for a little while.
|
|
|
|
the1silverwolf (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 08, 2013, 12:13:40 AM |
|
'CASH OUT' sends to a blank page
Let me check it. one sec. I cashed out and it worked fine for me. Make sure you have entered your payment address and saved it. Also, make sure your pin is correct. is anyone else having trouble with this ![Huh](https://bitcointalk.org/Smileys/default/huh.gif) Let me know if you continue to have trouble with this and we will figure it out ! I tried it again and it's still working fine. ![](https://ip.bitcointalk.org/?u=http%3A%2F%2Fi40.tinypic.com%2F21x000.jpg&t=665&c=gbTUmVEMg_tTUA) Let me know if you are continuing to have issues.
|
|
|
|
Pmalek
Legendary
Offline
Activity: 2884
Merit: 7430
Playgram - The Telegram Casino
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 08, 2013, 12:18:49 AM |
|
Are total shares column precise? It says current round shares 277 for example and total shares 51, and I have already made to that moment about 2300 shares? But on the pool it says 330 current round + total?
|
|
|
|
▄▄███████▄▄███████ ▄███████████████▄▄▄▄▄ ▄████████████████████▀░ ▄█████████████████████▄░ ▄█████████▀▀████████████▄ ██████████████▀▀█████████ █████████████████████████ ██████████████▄▄█████████ ▀█████████▄▄████████████▀ ▀█████████████████████▀░ ▀████████████████████▄░ ▀███████████████▀▀▀▀▀ ▀▀███████▀▀███████ | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ Playgram.io ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ | ▄▄▄░░ ▀▄ █ █ █ █ █ █ █ ▄▀ ▀▀▀░░
| │ | ▄▄▄███████▄▄▄ ▄▄███████████████▄▄ ▄███████████████████▄ ▄██████████████▀▀█████▄ ▄██████████▀▀███▄██▐████▄ ██████▀▀████▄▄▀▀█████████ ████▄▄███▄██▀█████▐██████ ██████████▀██████████████ ▀███████▌▐██▄████▐██████▀ ▀███████▄▄███▄████████▀ ▀███████████████████▀ ▀▀███████████████▀▀ ▀▀▀███████▀▀▀ | | │ | ██████▄▄███████▄▄████████ ███▄███████████████▄░░▀█▀ ███████████░█████████░░█ ░█████▀██▄▄░▄▄██▀█████░█ █████▄░▄███▄███▄░▄██████ ████████████████████████ ████████████████████████ ██░▄▄▄░██░▄▄▄░██░▄▄▄░███ ██░░░█░██░░░█░██░░░█░████ ██░░█░░██░░█░░██░░█░░████ ██▄▄▄▄▄██▄▄▄▄▄██▄▄▄▄▄████ ███████████████████████ ███████████████████████ | | │ | ► | |
|
|
|
the1silverwolf (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 08, 2013, 12:45:40 AM |
|
Are total shares column precise? It says current round shares 277 for example and total shares 51, and I have already made to that moment about 2300 shares? But on the pool it says 330 current round + total?
It is correct, but it doesn't include blocks that haven't confirmed yet. Since the round time is so low there are a lot of shares tied up in blocks that haven't been confirmed yet. Give it a little time and your total shares will go up.
|
|
|
|
zenrog
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 229
Merit: 45
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 08, 2013, 01:55:01 AM |
|
Open registrations!!! ![Sad](https://bitcointalk.org/Smileys/default/sad.gif)
|
|
|
|
Pmalek
Legendary
Offline
Activity: 2884
Merit: 7430
Playgram - The Telegram Casino
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 08, 2013, 03:03:49 AM |
|
Got it thanks!
|
|
|
|
▄▄███████▄▄███████ ▄███████████████▄▄▄▄▄ ▄████████████████████▀░ ▄█████████████████████▄░ ▄█████████▀▀████████████▄ ██████████████▀▀█████████ █████████████████████████ ██████████████▄▄█████████ ▀█████████▄▄████████████▀ ▀█████████████████████▀░ ▀████████████████████▄░ ▀███████████████▀▀▀▀▀ ▀▀███████▀▀███████ | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ Playgram.io ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ | ▄▄▄░░ ▀▄ █ █ █ █ █ █ █ ▄▀ ▀▀▀░░
| │ | ▄▄▄███████▄▄▄ ▄▄███████████████▄▄ ▄███████████████████▄ ▄██████████████▀▀█████▄ ▄██████████▀▀███▄██▐████▄ ██████▀▀████▄▄▀▀█████████ ████▄▄███▄██▀█████▐██████ ██████████▀██████████████ ▀███████▌▐██▄████▐██████▀ ▀███████▄▄███▄████████▀ ▀███████████████████▀ ▀▀███████████████▀▀ ▀▀▀███████▀▀▀ | | │ | ██████▄▄███████▄▄████████ ███▄███████████████▄░░▀█▀ ███████████░█████████░░█ ░█████▀██▄▄░▄▄██▀█████░█ █████▄░▄███▄███▄░▄██████ ████████████████████████ ████████████████████████ ██░▄▄▄░██░▄▄▄░██░▄▄▄░███ ██░░░█░██░░░█░██░░░█░████ ██░░█░░██░░█░░██░░█░░████ ██▄▄▄▄▄██▄▄▄▄▄██▄▄▄▄▄████ ███████████████████████ ███████████████████████ | | │ | ► | |
|
|
|
the1silverwolf (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 08, 2013, 03:38:44 PM |
|
Open registrations!!! ![Sad](https://bitcointalk.org/Smileys/default/sad.gif) Increased share difficulty again to decrease server load. This time from 30 - 60. I will open additional server slots in 5 minutes.
|
|
|
|
|
the1silverwolf (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 08, 2013, 04:38:04 PM |
|
|
|
|
|
the1silverwolf (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 08, 2013, 06:30:59 PM |
|
Silverwolf's SBC Pool http://silverwolf.ath.cx/sbc* Added networkhash display * Added automatic user registration cap when pool exceeds 45% of network hash. (Currently at 48.56%) WE NEED MORE POOLS!!!
|
|
|
|
Pmalek
Legendary
Offline
Activity: 2884
Merit: 7430
Playgram - The Telegram Casino
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 08, 2013, 06:53:08 PM |
|
I want to confirm that your pool works great for now and payouts are fair and as expected! Keep it up ! ![Wink](https://bitcointalk.org/Smileys/default/wink.gif) Do you have more pools?
|
|
|
|
▄▄███████▄▄███████ ▄███████████████▄▄▄▄▄ ▄████████████████████▀░ ▄█████████████████████▄░ ▄█████████▀▀████████████▄ ██████████████▀▀█████████ █████████████████████████ ██████████████▄▄█████████ ▀█████████▄▄████████████▀ ▀█████████████████████▀░ ▀████████████████████▄░ ▀███████████████▀▀▀▀▀ ▀▀███████▀▀███████ | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ Playgram.io ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ | ▄▄▄░░ ▀▄ █ █ █ █ █ █ █ ▄▀ ▀▀▀░░
| │ | ▄▄▄███████▄▄▄ ▄▄███████████████▄▄ ▄███████████████████▄ ▄██████████████▀▀█████▄ ▄██████████▀▀███▄██▐████▄ ██████▀▀████▄▄▀▀█████████ ████▄▄███▄██▀█████▐██████ ██████████▀██████████████ ▀███████▌▐██▄████▐██████▀ ▀███████▄▄███▄████████▀ ▀███████████████████▀ ▀▀███████████████▀▀ ▀▀▀███████▀▀▀ | | │ | ██████▄▄███████▄▄████████ ███▄███████████████▄░░▀█▀ ███████████░█████████░░█ ░█████▀██▄▄░▄▄██▀█████░█ █████▄░▄███▄███▄░▄██████ ████████████████████████ ████████████████████████ ██░▄▄▄░██░▄▄▄░██░▄▄▄░███ ██░░░█░██░░░█░██░░░█░████ ██░░█░░██░░█░░██░░█░░████ ██▄▄▄▄▄██▄▄▄▄▄██▄▄▄▄▄████ ███████████████████████ ███████████████████████ | | │ | ► | |
|
|
|
|
the1silverwolf (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 09, 2013, 02:08:27 AM Last edit: June 09, 2013, 02:31:47 AM by the1silverwolf |
|
One of our users "mysbl" has figured out how to abuse the manual payout system and has stolen approx 2,300 coins from the pool.
I have disabled manual payouts until I can find & fix the vunerability. In the mean time please use the automatic payout threshold to withdraw coins.
Thanks so much "mysbl" for ruining it for the rest of us.
This is how many coins this user withdrew : 2641.66263495 This is how many coins this user earned : 306.65277 It is userID : 432 The ip address this user connected from is : 173.230.118.194
|
|
|
|
the1silverwolf (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 09, 2013, 02:45:52 AM |
|
The pool is a bit underfunded at the moment due to the theft.
If anyone would like to help us recover, please set a generous donation percentage.
Thank You
|
|
|
|
the1silverwolf (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 09, 2013, 02:52:09 AM Last edit: June 09, 2013, 03:34:06 AM by the1silverwolf |
|
The pool is a bit underfunded at the moment due to the theft.
If anyone would like to help us recover, please set a generous donation percentage.
Thank You
I'm putting all 3 of my miners on the pool with 100% donation percentage. This will bring us back into the black, but it will take about two days. Your donations are appreciated. If you wish to you may donate directly to the pool by sending to this address : sftK67MrwsbchASciNJ3FwCvhZqZaniqBZ
|
|
|
|
ManOfKnight
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 09, 2013, 03:35:30 AM |
|
I am increasing mine to 5% donation. Have you fixed the issue that allowed the individual to do that?
|
|
|
|
the1silverwolf (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 09, 2013, 03:47:38 AM |
|
I am increasing mine to 5% donation. Have you fixed the issue that allowed the individual to do that?
Thank You for helping ! I'm pretty sure he used some kind of software or plugin to submit the post data for a manual withdrawal several times in rapid succession (all within the same second), this resulted in multiple payouts being started before the first payout was completed and his balance was reset to 0. Automatic withdrawals are not subject to this vulnerability because they are run by the cron job. They cannot be triggered manually. Manual Withdraws have been disabled completely. Automatic Withdraws are working normally. I will not re-enable Manual Withdraws until I'm certain the issue has been fixed. So we are safe from this happening again, we just won't be able to do manual withdrawals until I can figure it out.
|
|
|
|
nearmiss
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 09, 2013, 03:50:49 AM |
|
I am increasing mine to 5% donation. Have you fixed the issue that allowed the individual to do that?
I'm pretty sure he used some kind of software or plugin to submit the post data for a manual withdrawal several times in rapid succession (all within the same second), this resulted in multiple payouts being started before the first payout was completed and his balance was reset to 0. Automatic withdrawals are not subject to this vulnerability because they are run by the cron job. They cannot be triggered manually. Manual Withdraws have been disabled completely. Automatic Withdraws are working normally. I will not re-enable Manual Withdraws until I'm certain the issue has been fixed. So we are safe from this happening again, we just won't be able to do manual withdrawals until I can figure it out. probably want to consider wrapping the process in a transaction, doing the db updates first (update balance, insert into ledger), then the coin send (if the previous sql succeeded), and if the coin send succeeds commit, otherwise rollback. That, and rate limit how frequently you can do a manual transaction. I'm sure 60+s is reasonable for normal use. Just a suggestion.
|
Profit-Switching Pool w/ Vardiff -> http://hashco.ws Optionally keep the alts we mine or auto-trade for BTC. In addition can be paid out in any of: 365, AC, BC, BTC, C2, CINNI, COMM, FAC, HBN, MINT, PMC, QRK, RDD, WC, XBC
|
|
|
the1silverwolf (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 09, 2013, 03:56:12 AM |
|
I am increasing mine to 5% donation. Have you fixed the issue that allowed the individual to do that?
I'm pretty sure he used some kind of software or plugin to submit the post data for a manual withdrawal several times in rapid succession (all within the same second), this resulted in multiple payouts being started before the first payout was completed and his balance was reset to 0. Automatic withdrawals are not subject to this vulnerability because they are run by the cron job. They cannot be triggered manually. Manual Withdraws have been disabled completely. Automatic Withdraws are working normally. I will not re-enable Manual Withdraws until I'm certain the issue has been fixed. So we are safe from this happening again, we just won't be able to do manual withdrawals until I can figure it out. probably want to consider wrapping the process in a transaction, doing the db updates first (update balance, insert into ledger), then the coin send (if the previous sql succeeded), and if the coin send succeeds commit, otherwise rollback. Just a suggestion. That might still be vulnerable to the same kind of attack, I'm not sure. What I'm thinking is I'm going to separate the actual send function from the front end completely. Like this : 1. The user hits the withdrawal button and a flag is set in the database. 2. 1 minute later when the cron job runs again it will send the payment, adjust the balance and ledger, and reset the flag. That way, no matter what you can't trigger multiple payments, you'd just be setting the flag over and over again. It wouldn't have any effect. It would mean a short delay (up to 1 minute) in sending manual payments, but that's a pretty small inconvenience and it would help prevent new kinds of attacks as well.
|
|
|
|
mercSuey
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 09, 2013, 04:00:16 AM |
|
I am increasing mine to 5% donation. Have you fixed the issue that allowed the individual to do that?
Thank You for helping ! I'm pretty sure he used some kind of software or plugin to submit the post data for a manual withdrawal several times in rapid succession (all within the same second), this resulted in multiple payouts being started before the first payout was completed and his balance was reset to 0. Automatic withdrawals are not subject to this vulnerability because they are run by the cron job. They cannot be triggered manually. Manual Withdraws have been disabled completely. Automatic Withdraws are working normally. I will not re-enable Manual Withdraws until I'm certain the issue has been fixed. So we are safe from this happening again, we just won't be able to do manual withdrawals until I can figure it out. Hey, about you delete that post...for obvious reasons. At the very least, don't include details of the attack. lol
|
|
|
|
|