PhoenixMiner 6.2c: fastest Ethereum/Ethash miner with lowest devfee (Win/Linux)

[Searinox]

Do we have any hashes of the purported fake versions they pushed before they realised something was wrong? I'm not saying they did, or didn't, but I have auto-updates disabled on my mining rig and haven't updated in a month, and on my PC I use Excavator because it has no fee and I have an nVidia card while my rig is all AMD cards. So I went ahead and checked my PhoenixMiner version and all the hashes checked out. What exactly was the malware version?

[1633stoneage]

Do we have any hashes of the purported fake versions they pushed before they realised something was wrong? I'm not saying they did, or didn't, but I have auto-updates disabled on my mining rig and haven't updated in a month, and on my PC I use Excavator because it has no fee and I have an nVidia card while my rig is all AMD cards. So I went ahead and checked my PhoenixMiner version and all the hashes checked out. What exactly was the malware version?

Agreed, to add on what you say djeZo already confirmed that they used the legit link and therefor no fake version has been pushed. Although Nicehash has not explained why in the press release they mention different location:

Control shasum from new download locations does not match the value published by the developer on his channel! This brings the possibility that the Phoenix miner's author wants to cover its tracks and disappear or even do something malicious.

It is maybe an error of communication only, but I think this needs to be clarified

[Metroid]

2. Our bitcointalk.org account is safe and secure and we have full control over it.

I'm glad you are okay, make sure you clear any suspicion regarding what is going on with the next releases.

[ferk]

Hey there, I am new to the forum, just signed up to keep checking on what is happening with the situation here regarding Phoenix.
I work in IT, currently working as an Engineering Manager leading 2 teams 14 people total.

After these posts and these allegations and the style how you basically behave, the topics you discuss showed me that this is not the right place for me to be.
Nicehash would be an amazing product, it is really a good idea and a great concept that many many newcomers would love, but the negativity around it, the allegations and all the hacks, arrests on co-founder and stuff that was released regarding Nicehash just scares the shit out of me.
And publicly insulting each other and talking about murder, hanging, light threats on a forum thread that is technical based just shows how unprofessional Nicehash is. If this person really is a related to Nicehash. I am talking about djeZo.

Software and programming should be about the future and about helping each other, not about publicly disrespecting each other when there are many people here that joined out of fear and wish to get helped.
Try to help people, that are in need and do something useful not destructive.

Saintdogz

Totally agree with you. I'm a newbie in mining, and as such I started by using NiceHash. I stopped a month ago because of all the downtimes and 'maintenances' and tried most other miners and several pools to see what worked best for me.

I don't know if PhoenixMiner is legit or not, but the way this NiceHash guy is behaving, acting, talking is... I don't even know how to classify him. And apparently he was jailed once for I don't know how many years, I wouldn't even have known about this matter if they didn't start this 'fight' against PhoenixMiner. The one conclusion I take from all this drama: stay away from NiceHash and never touch it again. I just uninstalled their software from my pc. It doesn't matter if he's legit concerned about PhoenixMiner or if he's doing it with malice, but it has backfired terribly at least to me.

And no, I'm not part of some kind of conspiracy against NiceHash organized by minerstat, I'm just a random guy mining with a shitty card lol.

[JFoxOne]

I see that Matjaž "djeZo" wants to bring his/their failed action against Phoenix into personal FUD against me, I've edited my post for clarification purposes and to defend my stance.

https://bitcointalk.org/index.php?topic=2647654.msg56509020#msg56509020

[booze]

This is the one area that really shits me and brings down the whole crypto scene - childish behaviour. Oh and the hysterical panic people suffer at the slightest sign of trouble.

@PhoenixMiner keep up the good work my friend. You've handled the situation extremely well. Haters gonna hate.

[TBOEMC]

This is the one area that really shits me and brings down the whole crypto scene - childish behaviour. Oh and the hysterical panic people suffer at the slightest sign of trouble.
@PhoenixMiner keep up the good work my friend. You've handled the situation extremely well. Haters gonna hate.

agree... stop hating, continue mining - this is the thing, we are "in here"...

So - is there A BIG SECURITY PROBLEM, if i downloaded last version 5.5c right after they released? It was lot of weeks ago...
I think many of us did it and used it normally.
And only few ppl get faked versions with virus from spam-users (aka 5.5d etc) - so thats THEIR problem...

Why should i stop using 5.5c?

[apocalypse_milk]

The one thing that stands out to me from this whole drama is how the Phoenix Miner Dev team responded to the accusations by Nice Hash. Phoenix handled it like a proper team should, professionally and respectfully. What NiceHash did all of yesterday was just downright disgusting to see. I agree with others in this thread; I will be uninstalling NiceHash from all of my machines and never recommending their software in the future. There is just too much shady stuff going on with that company for me to ever trust them again.

[jims2321]

So has it been confirmed that NiceHash did not distribute any malware through a bad version of phoenix miner? I see a bunch of FUD and people claiming they did but no proof reading through everything.

I think your answer is in their Tweets and Reddit postings.  When they realized that they pushed a version that they could not validate, they panicked and start spewing their FUD to the masses.  Was it malware, does it even matter, it was not an official release of Phoenix miner.  So what are the takeaways?

1. Do not trust any software you get thru Nicehash.  Clearly they have no documented process or procedures to properly vet updates to miners.  This includes their own developed software.
2. Consider the source when getting information from anyone.  Ask yourself, 'What if any benefit could the source get from this information they are spreading?'   In NH case a few things.
    a. Legal cover in case it was actually malware, although their latest TOS should protect them,  becauses says we use their software are our own peril.
    b. Promote their own in house miner.  Which maybe open source now, but who knows 6 months from now, it could be close source and collect a fee from users.
    c. Eliminate a competitor so there are few options.  From what I gather Nicehash and independent developers treat each other as 'necessary evil partners'.

3. Where ever and when ever possible don't use their windows app, as you have no idea where and if they vet any thing pushed to your desktop. That goes for any publisher of software.  All it takes is one bad apple and your
    information is on the darkweb.  

JimS2321

[Desertsweeper]

The one thing that stands out to me from this whole drama is how the Phoenix Miner Dev team responded to the accusations by Nice Hash. Phoenix handled it like a proper team should, professionally and respectfully. What NiceHash did all of yesterday was just downright disgusting to see. I agree with others in this thread; I will be uninstalling NiceHash from all of my machines and never recommending their software in the future. There is just too much shady stuff going on with that company for me to ever trust them again.

I just uninstalled NiceHash and will never use them again. Lost $10 doing so (below their minimum withdraw limit) but not interested in supporting them in future. Small loss

[Randey Lahey]

I just uninstalled NiceHash and will never use them again. Lost $10 doing so (below their minimum withdraw limit) but not interested in supporting them in future. Small loss

I did too, but I haven't used it for months...basically only the first week and a half that I ever mined.  Nicehash isn't too bright if this was a ploy against PM, as it's going to have the opposite effect in that many now will not trust NH.

[lotfiuser]

The rumors of our demise (or our tuning into bad guys) are completely false. Here is what has happened:

1. Sometime yesterday MEGA decided to terminate our account, and the accounts of some other prominent crypto mining software authors (e.g. Clyamore) for "violation of our terms of service". We didn't receive any further information about this violation, so it is safe to assume that someone in high places has put pressure to MEGA to delete the most popular mining software from their site. It is partially our fault that we believed their statement that they are "censor-resistant" but we have learned our lesson and we are currently setting up several independent hosting solutions in case anything similar happens in the future.

2. Our bitcointalk.org account is safe and secure and we have full control over it. The latest released version remains PhoenixMiner 5.5c with the following checksums:

Code:

    File: PhoenixMiner_5.5c_Windows.zip
    ===================================
   SHA-1: 9a3efe6130ba21ab2ade9df38ff9d52a539d9693
 SHA-256: 0bb20989cd107c6b65d08da30f014df0b3cb94f8124253e2caee1dfa99431c2d
 SHA-512: 2e1aa259f6519d6759ccf679bf1b989c36fe504c9066cc3ba79537bf34129fb168b2956e385a4cf593e45c3a22e89590319870fb502ff13a371932aad441b250

    File: PhoenixMiner_5.5c_Linux.tar.gz
    ====================================
   SHA-1: 43bc9221582c8e90188fb1b416df14a8259d5b4e
 SHA-256: 66914e1b5011c35cf6af3f0d3e7540f5fa1bbe1563105fd242a67a96437b8e69
 SHA-512: 1088fcfd06b1bf63a3ab0d92089504b37e634bc138290c432797594ed25d37f8e5a658cf4124b6bb4495592b2b90f89bf0a68d03f51ce97e61b69efbe0667943

   Here are the checksums of the individual executable files in case you don't have the original zip archive (these are all SHA-256 sums):

Code:

ad20e44954960278ad965b05e8c67d9d314c200809b99b1b5a219a916ce06b21 *IOMap64.sys
287e44f5067a4e770e8a0605f5720d3d1477ecc4aa4f3a26ce5d3a489ae79780 *EIO.dll
402438684406d1e3b2d1d5629151259ad864ffc55c8e6ab176f4c47c543d4fee *EIO.exe
599393e258d8ba7b8f8633e20c651868258827d3a43a4d0712125bc487eabf92 *PhoenixMiner.exe

   And these are the SHA-512 checksums of the same files:

Code:

0d8597b79a2615059f0bdd1fd0c2207b0bd96dac29b27af5f6af1bfbf003ceeed984a7bad54e2c917ffb5d9738229a8c0d52972c4caf69e353406c2068c000fd *EIO.dll
804307f91ec5c3b664b07fc3ce21b453621925ba209e40d17b7ecae78cfad8ed20fa969dc29633d92daeebccd28453128bc098511553322677201fb120555485 *IOMap64.sys
60a230568445bcbfc9c638cb672d55b79febeede23b64620cf5a8a32b6ae6a78dc7878dc95d6a5008cfffec5a6ad47c6e48ea8321887e2f19eeff3bcf7436194 *EIO.exe
cf78d162ef4ecf88bbfd4a460471d2ddd8faa505d24cc7c671ad27ba482c9b82b256fb5e5c2c44a8a666a2acbdfe78def303636aa1a92cab29718ce265a536db *PhoenixMiner.exe

   3. We are working on the next release of PhoenixMiner.

   4. The blog post of Nicehash is pure FUD and the only factual thing there is that our MEGA account is terminated.  We will give them the benefit of doubt and assume that they are motivated out of abundance of caution for their customers.

Kim Dotcom is just a liar

[Sledge0001]

I must say this has turned into the second royal shit show over the past 48 hours.

NH has handled this extremely poorly and the rush to judgement speaks volumes about how their business is being run.

I will continue to use and support the Phoenix software and their dev team.

[themoonhowls]

Can you provide some proof that you are actually the real PhoenixMiner and not a hacker controlling PhoenixMiner account on bitcointalk?

   Gladly, if you have any idea how to do this let us know. In the meantime - do not believe to any "hofixes" or whatever else you see posted in this thread from other users. The last released version of PhoenixMIner so far is 5.5c, and the checksums are the same as at the moment of its release. When the new release is ready it will be posted here, from our own account.

One reasonable way to do this would be to take some action involving this ETH address you've been including in epools_example.txt for the past few years?

0x008c26f3a2Ca8bdC11e5891e0278c9436B6F5d1E

Perhaps announce that you'll be moving a specific amount of ETH at a specific time, and then follow through?
This should serve as solid proof that you currently control both this Bitcointalk account and that particular ETH account that's been bundled with the miner for years.

Good idea! We will do this ASAP after we finish scrubbing the MEGA links from our posts, and setting up the github.com account.

May I suggest establishing and using PGP Signature for important official announcements (eg. new release, official response to important issues, file checksums) from now on? Then there will never be any doubt of your identity.

Of course this will be after you proving this account is authentic.

[CryptoEnlightenment]

Thanks for your response Phoenixminer, your story sounds legit but I think a lot of us would like to have some additional peace of mind.

How can we get this?

One thing I can think of is that someone can analyze the binary..

I think it would great if someone with some cracking and Assembly experience could analyze Phoenix miner for any suspicious routines.

Even if decompiling does not fully work you'd think that miners are so straightforward that many suspicious routines would stand out, just by checking the assembly instructions. For example, a miner has no business accessing most of the I/O streams of a system or opening unexplained external ports.

Surely Phoenixminer would not mind right?

[Joreal]

Having interacted with djeZo several times in the last couple of weeks talking to him about his Quickminer he is very unstable.  He seems pretty insistent that it is only a matter of time before one of the "3rd party" miners steals everything you own and that he is the only solution that can keep you safe. Yet his actions the last few days have demonstrated that he is anything but safe.  Everything else that has been used for months is suddenly deemed so unsafe that you should immediately switch to Quickminer lest you become a victim. Not some other supported miner, but his specifically and not the main Nicehash, but this new quickminer, and not the tryout quickminer, but the installer version. This didn't just start the last couple of days with Phoenix miner stuff.  He has been on this crusade to call everything else unsafe since at least January.

Also if you go on the Nicehash discord you'll find that djeZo888 hadn't participated at all until last month at least not on that account. That's when Quickminer started getting called the only "safe" solution and yet the main Nicehash miner still installs 3rd party miners by default.

Also why would you not have any kind of "status" or indicator in your own discord that you are the dev and someone with authority/importance?  He's a nitro booster, but anyone can do that.

So why is Phoenix so risky, but nbminer is not?
If 3rd party miners are ticking timebombs then why install any 3rd party miners at all?
Why is the version of Nicehash miner with only the addition of limited liability statements still only a test version and not being forced out to everyone if its that unsafe?
Why does this new version still install 3rd party plugins by default if they are unsafe?
Why not remove Phoenix miner entirely instead of using a 15.9 "fake" version?

There is just so much that doesn't add up with this drama.  And as was stated here by JFoxOne it sure seems like djeZo is at the center of it all.

[jims2321]

Oh the spinning of NH reaction and smear campaign on their Reddit forum is gone to new heights.  The main arguement why NH is not responsible for the FUD and smear campaign is because the end user click a pop up and download the 5.5d so therefore its on the end user for downloading it, without vetting it.  Ignoring the fact that NH offered it and therefore implied it was a validate version.  I am always amazed at some of the stupid logic that people use to defend the indefensible actions of companies NH and djeZo.

JimS2321

[PhoenixMiner]

As promised, we will confirm that we are not hacked in any way by transferring 123.456 ETH from our defvee account at 0x008c26f3a2Ca8bdC11e5891e0278c9436B6F5d1E



The actual transaction will be done in about 30 minutes so everyone interested, please check here that the transaction does not exists yet:

https://etherscan.io/address/0x008c26f3a2Ca8bdC11e5891e0278c9436B6F5d1E

May I suggest establishing and using PGP Signature for important official announcements (eg. new release, official response to important issues, file checksums) from now on? Then there will never be any doubt of your identity.

Of course this will be after you proving this account is authentic.

Not a bad idea, the only problem with PGP is that quite a small amount of people know how to use it.

The actual transaction will be done in about 30 minutes so everyone interested, please check here that the transaction does not exists yet:

https://etherscan.io/address/0x008c26f3a2Ca8bdC11e5891e0278c9436B6F5d1E

The transaction is confirmed, you can check it here: https://etherscan.io/tx/0xdb61993bb0fcdf73cf9f36f0bfd834b20d365d2cda170685362a28f47f7bea9b

[moderator's note: consecutive posts merged]

[Andartis]

The actual transaction will be done in about 30 minutes so everyone interested, please check here that the transaction does not exists yet:

https://etherscan.io/address/0x008c26f3a2Ca8bdC11e5891e0278c9436B6F5d1E

The transaction is confirmed, you can check it here: https://etherscan.io/tx/0xdb61993bb0fcdf73cf9f36f0bfd834b20d365d2cda170685362a28f47f7bea9b

I should have become a dev for miner software.................

Fair enough for me, I will continue using Phoenix miner.

[lordsandwich]

I should have become a dev for miner software.................

Fair enough for me, I will continue using Phoenix miner.

Phoenix is the only miner whose memory tweaks work stably on my STRIX 1080. A relatively tiny dev fee is more than deserved for getting my hashrate up by 30-40%.