Bitcoin Forum
June 28, 2024, 04:22:49 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: Attention ALL Stratum pool Admins!  (Read 5006 times)
Anaximander (OP)
Newbie
*
Offline Offline

Activity: 1
Merit: 0


View Profile
March 13, 2014, 02:30:39 AM
Last edit: March 13, 2014, 06:19:59 PM by Anaximander
 #1

Update: To those whom are looking for the fix, you can PM CHAOSiTEC https://bitcointalk.org/index.php?action=pm;sa=send;u=223182 and he'll/she'll set you up.

This week on the Darkcoin thread a fellow started posting screenshots of massive hashrates (400+MH/sec) using just a 4770k(Don't remember the exact model#) CPU.
Through PM he revealed to me (and others) he was exploiting a bug in the Stratum protocol faulty implementation of the stratum protocol
Here is a few quotes from the thread:

Quote
Ok, to summarise, without disclosing too much info for others to try on other pools:

that guy with the huge "mining speed" was using a weakness in the stratum code, i noticed a weakness in the way the pool got the shares
and set defences up to prevent that kind of cheating, in reality he did not have that kind of mining power, and his shares wasn't worth anything to the pools overall progress. if you look at all the blocks discovered, why did his miner not discover ANY blocks at all, we should have been getting loads of blocks with that kind of speed, so i investigated, together with evan we set up a fix, now, next time he tries, the system will automatically ban him for a week. he tried connection through a proxy but already he was unable to get that kind of speed that he had at first.
so that tells me it works as it should.. i also banned his ips from the server. and disabled automatic payout from his account.

Quote
hrt
Newbie
*
Online Online

Activity: 27



View Profile Personal Message (Online)
Trust: 0: -0 / +0(0)
  
Re: cpu hashrate
« Sent to: sippsnapp on: March 11, 2014, 06:44:56 PM »
« You have forwarded or responded to this message. »
   Reply with quoteQuote ReplyReply Remove this messageDelete
I run through mining proxy with a changed code. it denies automatic difficulty adjustment on pool stratum server, assign to each share variable hash raws [not unfeigned] thus stratum server is incapable to make up authenticity of this shares. i have always calculated at 0 diff and got all shares accepted, earnings respectively
Report To Admin
hrt
Newbie
*
Online Online

Activity: 27



View Profile Personal Message (Online)
Trust: 0: -0 / +0(0)
  
Re: cpu hashrate
« Sent to: sippsnapp on: March 11, 2014, 08:50:38 PM »
« You have forwarded or responded to this message. »
   Reply with quoteQuote ReplyReply Remove this messageDelete
added several extensions while compiled from 1.3 version in open source
i tried with different algos and at now proxy works on X11, groestl, qubit and sha256d.
saying clearly sha256d is not so useful as 500-1000GH guys play. on sha256d i have 80 iterations per second each pick up a low diff share at speed 48000KH. Running 30 CPU is equal to 115GH
if you are interested and there are other engaged people i can start a new topic with this on mind and share proxy for small donate although pulling out this in public would be risky as this is still cheating

As I'm fat and lazy to the point of having that annoying fat-finger problem where I keep accidentally typing 4+ keys at a time, I'm not going to spend more time on this post, heres the Darkcoin thread link(Just goto page 428): https://bitcointalk.org/index.php?topic=421615.0

This doesn't just effect Darkcoin pools, it likely effects any pool using Stratum (If configured improperly) Let me know if this sounds like a known bug/issue (Out of curiosity) Thanks!

jgalt1
Newbie
*
Offline Offline

Activity: 1
Merit: 0


View Profile WWW
March 13, 2014, 02:43:05 AM
 #2

Very good of you to post this.  I have been mining there and got cheated as a result of this.

The mining these days is tough enough without jerks like that.

Also, great work by whomever got the cheater to TALK!

He couldn't keep from bragging about his crimes just like most criminals!!
NUFCrichard
Legendary
*
Offline Offline

Activity: 1218
Merit: 1003


View Profile
March 13, 2014, 07:21:20 AM
 #3

this might explain why someone was mining anime at 800MH a while back, people assumed it was a huge botnet.
bitcoyim
Member
**
Offline Offline

Activity: 65
Merit: 10


View Profile
March 13, 2014, 10:17:37 AM
 #4

Here is problem: https://github.com/MPOS/php-mpos/issues/1938
ahmed_bodi
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500

Bitrated user: ahmedbodi.


View Profile
March 13, 2014, 10:53:03 AM
 #5

Do you know if this affects litecoin pools

Bitrated user: ahmedbodi.
bitcoyim
Member
**
Offline Offline

Activity: 65
Merit: 10


View Profile
March 13, 2014, 10:55:27 AM
 #6

It effects all pools and all algorithms
ahmed_bodi
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500

Bitrated user: ahmedbodi.


View Profile
March 13, 2014, 10:58:02 AM
 #7

It effects all pools and all algorithms
how do you know for sure? pooler patched litecoin already befor

Bitrated user: ahmedbodi.
bitcoyim
Member
**
Offline Offline

Activity: 65
Merit: 10


View Profile
March 13, 2014, 10:59:12 AM
 #8

It effects all pools and all algorithms
how do you know for sure? pooler patched litecoin already befor

Need to test this. Maybe some pool owners can be fixed this.
ahmed_bodi
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500

Bitrated user: ahmedbodi.


View Profile
March 13, 2014, 11:00:09 AM
 #9

my personal belief. it affects other algorithm's where we do not have an accurate diff1

Bitrated user: ahmedbodi.
feeleep
Legendary
*
Offline Offline

Activity: 1197
Merit: 1000


View Profile WWW
March 13, 2014, 11:04:09 AM
 #10

my personal belief. it affects other algorithm's where we do not have an accurate diff1

this is my understanding also that pool ops have wrong diff1...

ahmed_bodi
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500

Bitrated user: ahmedbodi.


View Profile
March 13, 2014, 11:07:37 AM
 #11

the big problem her is how to work it out. the only person i know who could do it is pooler.

Bitrated user: ahmedbodi.
feeleep
Legendary
*
Offline Offline

Activity: 1197
Merit: 1000


View Profile WWW
March 13, 2014, 11:10:38 AM
 #12

the big problem her is how to work it out. the only person i know who could do it is pooler.

i think this is a matter of changing diff1 in template_registry file Wink

ahmed_bodi
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500

Bitrated user: ahmedbodi.


View Profile
March 13, 2014, 11:14:31 AM
 #13

problem is what should the value be Tongue  Roll Eyes

Bitrated user: ahmedbodi.
feeleep
Legendary
*
Offline Offline

Activity: 1197
Merit: 1000


View Profile WWW
March 13, 2014, 11:16:36 AM
 #14

problem is what should the value be Tongue  Roll Eyes


if we are talking about darkcoin - it should be the same as sha256

diff1 = 0x00000000ffff0000000000000000000000000000000000000000000000000000

ahmed_bodi
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500

Bitrated user: ahmedbodi.


View Profile
March 13, 2014, 11:20:33 AM
 #15

hmmm. thats what i would expect. tbqh darkcoin i couldnt give a crap about. its an unsupported scenario as i dont officially have it in the CryptoExpert repo. so any flaws are up to the OP. so atm i only care about:

Scrypt/ScryptJane (Uses Pooler's diff1)
Sha256 (Slush's Diff1)
Quark (PR from someone)
Skein (Uses SHA256 Diff1)

Bitrated user: ahmedbodi.
ahmed_bodi
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500

Bitrated user: ahmedbodi.


View Profile
March 13, 2014, 11:34:12 AM
 #16

Okay back.

Done a test on stratum-mining and eloipool using the exploit documented above.
Stratum-mining and eloipool in scrypt mode both reject these shares.
This makes it almost 99% sure that it is a diff1 error and stratum-mining IS NOT at fault. the pool operator's are at fault for not using the correct diff1's for the algorithm

Bitrated user: ahmedbodi.
alani123
Legendary
*
Offline Offline

Activity: 2450
Merit: 1454


Leading Crypto Sports Betting & Casino Platform


View Profile
March 13, 2014, 11:41:52 AM
 #17

But this doesn't really clarify how this exploit pays out. If he doesn't actually contribute to the pool but still gets credited for crazy amount of fake shares then where does the pool get the reward for those shares from?

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
bitcoyim
Member
**
Offline Offline

Activity: 65
Merit: 10


View Profile
March 13, 2014, 11:42:33 AM
 #18

Okay back.

Done a test on stratum-mining and eloipool using the exploit documented above.
Stratum-mining and eloipool in scrypt mode both reject these shares.
This makes it almost 99% sure that it is a diff1 error and stratum-mining IS NOT at fault. the pool operator's are at fault for not using the correct diff1's for the algorithm

For example:

If Coin hashrate: 200 , compile mining proxy with difficult ~150, and you will see accepted shares.
ahmed_bodi
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500

Bitrated user: ahmedbodi.


View Profile
March 13, 2014, 11:48:20 AM
 #19

But this doesn't really clarify how this exploit pays out. If he doesn't actually contribute to the pool but still gets credited for crazy amount of fake shares then where does the pool get the reward for those shares from?
Heres how it works

Miner connects to pool, authorises and subscribes for work

Miner conencts sets their own diff and starts doing work. work is calculated by a DIFF1. (what the difficulty of a difficulty 1 share should be). Now if a miner hashes away at their hardcoded diff and ignores the diff the pool is sending. so the pool would increase their difficulty on the pools end to the max set (depends on the pool) and the pool wouldnt know that the miner is ignoring it. since the diff1 is wrong on the pool the pool would accept the difficulty the miner says it is and wouldnt check what the actual difficulty is.

This means stratum thinks the diff == (theoretic scenario of 2048) while the miner is submitting a diff of (theoretic scenario of 0.001) so the miner will get paid for hundreds of shares with a diff of 2048 when really it should be 0.001


Bitrated user: ahmedbodi.
flower1024
Legendary
*
Offline Offline

Activity: 1428
Merit: 1000


View Profile
March 13, 2014, 11:51:32 AM
 #20

hu?
arent pools supposed to check that the supplied share does meet thier diff requirements?
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!