[DEAD] DeepBit.net PPS+Prop,instant payouts, we pay for INVALID BLOCKS too

[Veldy]

UPDATE:

• HTTPS/SSL is supported now for improved security

how is it secure when the miner is still using insecure http to send the user and password?

You can only change any settings with the account password, which really should be different from your worker password (which is only used for accessing the API, getting work and submitting shares, so nothing bad can come of others knowing it).

I think it could be used to connect and flood in random hash values at a high rate as a denial of service attempt, but I am not sure that would be a preferred method of attack anyway.  It would be nice if the account login wasn't part of the worker name however.  So, deepbit could implement a system where the user enters their desired worker name [say you have a rig called "saturn" on your network with three miners and thus, you want workers for saturn1, saturn2 and saturn3] and deepbit could create the worker with a unique name that does not contain your account name [i.e. 3xZy9!Q_saturn1].  That would at least not make the accounts on the system not known as easily and carries no overhead of connection encryption.

[ancow]

how is it secure when the miner is still using insecure http to send the user and password?

You can only change any settings with the account password, which really should be different from your worker password (which is only used for accessing the API, getting work and submitting shares, so nothing bad can come of others knowing it).

I think it could be used to connect and flood in random hash values at a high rate as a denial of service attempt [...]

Yes, and with any luck those values will be shares and up your share counter...
Seriously, though, this is not a security problem, which is what I was pointing out.

Also, why sniff worker passwords when you can just write a quick script that creates a couple of accounts with a couple of workers and use those for your flooding attack? It just doesn't change anything, and the extra overhead created by the SSL connection will put as much load on the server as a mid-size DOS attack (and cause more stales and idle miners).
There is such a thing as sub-optimisation...

[shamathana]

why are accounts and pws needed anyway? it appears that eligius does fine without them.

[VastLite]

Just want to inform the pool of unsolicited wallet change requests. If you are using a simple password (like I was, doh!) I would suggest changing it since the Mt. Gox incident. People who are smart enough to use different logins for everything should be fine. I am very glad there are email verifications of wallet address changes, luckily my email password is a lot stronger than the one I had picked for Deepbit. I'm currently changing my passwords for pretty much everything, even differently named accounts. I figured now is as good of a time as any; they have been the same for quite a while. It's just good net practice to change passwords periodically, I just fell into a rut of laziness. The last thing I need is for my bank account to be compromised; I barely have enough to get by as it is, a run on it would not be good for my livelihood.

So, I urge everyone who uses the same username for multiple things to change their passwords before it's too late.

[kcobra]

What does "locking" your bitcoin address in your deepbit account do? I assume it means you simply can not change it in the future. Mining and payments still proceed as normal, correct?

[scar]

UPDATE:

• HTTPS/SSL is supported now for improved security

how is it secure when the miner is still using insecure http to send the user and password?

You can only change any settings with the account password, which really should be different from your worker password (which is only used for accessing the API, getting work and submitting shares, so nothing bad can come of others knowing it).

thanks i didn't realize the worker could have a different passwd.  i only have one so far so it is still the same as my account passwd.  will change them both now...

[goldcd]

Just me - or is the instant payment button not working at the moment?

[Alex AXe]

Just me - or is the instant payment button not working at the moment?

Yes, I have this problem too. Maybe Tycho will clarify situation?

[DamienBlack]

I'm also having a problem with the instant payout button and it is making my feet itchy. Please resolve this immediately.

[DiabloD3]

Just me - or is the instant payment button not working at the moment?

Yes, I have this problem too. Maybe Tycho will clarify situation?

Probably disabled it to prevent post-mtgox bullshit.

[twmz]

Payments in general are not happening.  In addition to the instant payment button not working, automatic payments are not working either.  My balance has been over the auto-pay threshold for more than 24 hours and no payment has happened. 

[zpinto]

Instant payout not working!

[DamienBlack]

Just me - or is the instant payment button not working at the moment?

Yes, I have this problem too. Maybe Tycho will clarify situation?

Probably disabled it to prevent post-mtgox bullshit.

My payment address is locked permanently. There is no reason to "secure" me.

[shamathana]

Block 131803
my share:   115   
pool share:  2965964
reward:       0.00068679 btc
mode: prop.

but when i count this:  50* (115/2965964) = 0.001938661427

and so on every block - less reward
where is the mistake??

Should be 48.5 instead of 50

still wrong it should be (50+fees)-3%

50-3% = 48,5 the fees are kept by the operator are they not?
hmm it says nothing about fees on the homepage, but in the Comparison_of_mining_pools it says: "kept by pool", whichis what nearly every pool does.

[AngelusWebDesign]

Tycho?

You're wanted in this thread...

WHY is instant payout not working?  If you were going to do some kind of "protection" due to the hacking of Mt. Gox, it should have been 2 days ago. Everything's fine now.

What's the deal?  People are already very nervous after recent events...we don't need any more hits to confidence!

Thanks,

Matthew

[Denamen]

Tycho?

You're wanted in this thread...

WHY is instant payout not working?  If you were going to do some kind of "protection" due to the hacking of Mt. Gox, it should have been 2 days ago. Everything's fine now.

What's the deal?  People are already very nervous after recent events...we don't need any more hits to confidence!

Thanks,

Matthew

Why [Tycho] doesn't answer our questions?

What is going on

[AngelusWebDesign]

Tycho?

You're wanted in this thread...

WHY is instant payout not working?  If you were going to do some kind of "protection" due to the hacking of Mt. Gox, it should have been 2 days ago. Everything's fine now.

What's the deal?  People are already very nervous after recent events...we don't need any more hits to confidence!

Thanks,

Matthew

Why [Tycho] doesn't answer our questions?

What is going on

Did Deepbit get hacked now?

[hashme]

Did Deepbit get hacked now?

I hope You're wrong

[AngelusWebDesign]

Well I'd sure feel better if Tycho came in here and said SOMETHING.

The fact is that I (and everyone else here) have NO IDEA what's going on at Deepbit, why the instant payout button all the sudden doesn't work.

[huayra.agera]

We'll all know when our coins went ____ if it has been hacked. Though I doubt.