I am sorry to say that earlier this morning, my pool (Zapto) was hacked.
They managed to withdraw all funds,
As we do not know the backdoor or route they used,
WE ARE CLOSING OUR POOL
I will remain an active part of the noblecoin community (I'm a miner myself)
I wish this could have gone better.
My bots will remain unaffected,
I apologize,
Icecube45
I'm sorry to hear this. I liked the Zapto pool, and it's a shame to see it go.
In light of this news,
http://noble.pool-mining.com will be setting ALL accounts to anonymous today, and we'll be setting the default status to anonymous also. You'll be able to choose to drop the anonymity, but the "anonymous" setting will become opt out, rather than opt in.
We've also noticed quite a few accounts don't have autopayment set. We've decided, again, to set all accounts to 1 NOBL auto payment. Feel free to modify this if you need, but the less money in the wallet, the less can go missing. This change will be a one off, and will happen later this morning.
We've also already changed our auto lockout process. We have set the incorrect PIN and Incorrect Password counters from 5 to 3. This is back to MPOS default, and it will mean extra work for us unlocking accounts.
Hopefully you don't think we're overstepping the mark, but security of our users has to be our top priority. We think that by reducing the amount of money in the central wallet, and by hiding the majority of our users, we'll become a smaller target and the chance of being brute forced are lower.
We've also started taking more steps to secure our infrastructure. We've started adding more web frontend servers, these are based on a different image - for you this means that should the server you're connected to be replaced, you may have to login again. This will only affect the website.
We're also planning to implement SSL, but this may take a little longer than the above as we assess the impact on the website a whole within our test system.
As has been mentioned before in this thread, please also use different user/password/pin combinations for all pools.
