[ANN] LeaseRig.net Rent & Hire Scrypt(Jane/Nfactor)/SHA3/SHA256/X11 HashPower!

[miaviator]

Has the traffic gone down on leaserigs.com? I've noticed a substantial reduction in rents. Before you say it... yes I'm competitive on price.

Is leaserigs promoting the service at all? I know there are other services, but I feel like this one has the best technology, so want to hang out here and not jump ship.

The new referral program and several press releases will be coming out soon.

After the initial security roll-outs are complete.

[grippy54]

Has the traffic gone down on leaserigs.com? I've noticed a substantial reduction in rents. Before you say it... yes I'm competitive on price.

Is leaserigs promoting the service at all? I know there are other services, but I feel like this one has the best technology, so want to hang out here and not jump ship.

The new referral program and several press releases will be coming out soon.

After the initial security roll-outs are complete.

That's good to hear. Thanks.

[rorbit]

Hi,

what's the best way to start LeaseRigProxy after a reboot?

I added the following line to /etc/crontab:
            
@reboot         root    /root/LeaseRigProxy/leaserigproxy_bamt 3333 ***LRP ID*** 0 >> /home/user/LeaseRigProxy.log

However, last night LeaseRigProxy got stuck in a loop and I ended up with a 450Mb text file log filled with this:

WARNING: Hostname ***pool***.com resolved to zero!
--127.0.0.1:60171->connecting to pool ***pool***.com
--127.0.0.1:60172->rig connected
WARNING: Hostname ***pool***.com resolved to zero!
--127.0.0.1:60172->connecting to pool ***pool***.com
--127.0.0.1:60173->rig connected
WARNING: Hostname ***pool***.com resolved to zero!
--127.0.0.1:60173->connecting to pool ***pool***.com
--127.0.0.1:60174->rig connected
WARNING: Hostname ***pool***.com resolved to zero!

cgminer was running without any errors just no hashing. 

It didn't even go to the secondary pool.  Seems a bit flaky.

The pool works fine when I add it directly to cgminer.conf and bypass the proxy.

I'm running Litecoin BAMT 1.4.

Thanks.

Bump.

Has nobody had similar problems?

[hutnik]

To me looks like LR is no longer showing time as in CET timezone. Why is that? I almost shortened lease on one of my rigs because 24h lease looked like 26h.

[salsamoves]

it's not good that we need to enter password and captcha everytime when open this page, it has not been before. Passwords are unusually long, and captcha is quite difficult. Cant you make this login system like it was before?

You mean can we make our site use a plain-text cookie to store a password and username which gives access to a bitcoin wallet and stays logged on indefinitely?

We could.  If customers and providers really wanted that.

The second security release is almost complete which will do away with the annoying captchas in favor of longer session times and 2FA.

can we have 2fa as optional? I am sure we understand the risks but sometimes it just takes too long to fiddle about. Its different if we have a wallet with money in it, but as a provider, its a one way ticket, and if anyone else wants to send money to me, they are welcome......

[hutnik]

maybe use only 2FA for important things, like changing payout address for provider, or unlock rig hiring for next x minutes upon succesfull 2FA authorization...

[as4uz]

The problem is still there (seems that you uploaded back that file), I can fix it for you,I didn't receive any bounty yet.

[DarkKnight]

Did you already open a support ticket?

Just in case you missed it, lots of people DON'T LIKE the way sessions are expiring continuously. If that's deliberate, please don't. If it's accidental, please fix.  

Agreed! So irritating. That said, the captcha seems to be working correctly again, so that's something.

To me looks like LR is no longer showing time as in CET timezone. Why is that? I almost shortened lease on one of my rigs because 24h lease looked like 26h.

It's showing in UTC, as it always should have been. A better system would be to have the time localized. CET is PITA to try to convert for anyone not in Europe. It was just not worth complaining about in the past.  

You mean can we make our site use a plain-text cookie to store a password and username which gives access to a bitcoin wallet and stays logged on indefinitely?

We could.  If customers and providers really wanted that.

The second security release is almost complete which will do away with the annoying captchas in favor of longer session times and 2FA.

Yes, I mean: 'Can you make your site use a plain-text cookie to store password and username, and stay logged in indefinitely?'. E.g. Coinbase never logs me out, Cryptsy logs me out twice a day. Cryptsy=annoying, Coinbase=not.

Reserve 2FA for any transactions would could be deemed harmful. From a provider's perspective lowering prices and changing pools are about it. Create a set of trusted pools which require 2FA to change, and email notifications for any price or pool changes. The worst that could happen is someone could try to lower your prices, then rent your rigs for nothing. You would get emails about all of that and be able to terminate the lease immediately. Security can be further improved by logging IPs to transaction records and displaying them in the history.

Official request:

Customer POOL HISTORY! Today is the third day in a row someone has rented from me with problems. I got a PM from a customer this morning that my rigs were down, but they weren't, and 3 minutes later everything was okay. I have no idea what the problem was because I have no way to tell from the graph if the pool was bad or the rigs weren't responding. LRP is capable of telling the difference between no/bad pool authorization and rigs disconnecting or down. The graph should indicate with different highlighting which is which. A list of all the pools with user/pass that the customer has tried to connect with (stored for current renting session only) would be extremely useful in further narrowing down configuration problems vs provider problems. I don't mind extending leases due to equipment or network malfunctions, but I would like to be confident of the problem before I make that choice.

[miaviator]

Official request:

Customer POOL HISTORY! Today is the third day in a row someone has rented from me with problems. I got a PM from a customer this morning that my rigs were down, but they weren't, and 3 minutes later everything was okay. I have no idea what the problem was because I have no way to tell from the graph if the pool was bad or the rigs weren't responding. LRP is capable of telling the difference between no/bad pool authorization and rigs disconnecting or down. The graph should indicate with different highlighting which is which. A list of all the pools with user/pass that the customer has tried to connect with (stored for current renting session only) would be extremely useful in further narrowing down configuration problems vs provider problems. I don't mind extending leases due to equipment or network malfunctions, but I would like to be confident of the problem before I make that choice.

As leaserig is no longer intricately and exclusively linked to this forum we have to centralize feature requests.   Leaserig.freshdesk.com 

[miaviator]

it's not good that we need to enter password and captcha everytime when open this page, it has not been before. Passwords are unusually long, and captcha is quite difficult. Cant you make this login system like it was before?

You mean can we make our site use a plain-text cookie to store a password and username which gives access to a bitcoin wallet and stays logged on indefinitely?

We could.  If customers and providers really wanted that.

The second security release is almost complete which will do away with the annoying captchas in favor of longer session times and 2FA.

can we have 2fa as optional? I am sure we understand the risks but sometimes it just takes too long to fiddle about. Its different if we have a wallet with money in it, but as a provider, its a one way ticket, and if anyone else wants to send money to me, they are welcome......

After the next roll-out: http://leaserig.freshdesk.com/support/solutions/articles/1000041161  You will find that providers will either lose all access to their accounts or have an online wallet.

Depending on whether everyone read the big red letters:

All provider/admin accounts are required to have a customer account using the same email address as their provider account!  Any provider accounts with no email or without a matching customer account WILL LOSE ACCESS TO THE PROVIDER PAGE AND WILL BE REQUIRED TO REJOIN THE SITE INCLUDING VERIFICATION AND SECURITY DEPOSIT

[miaviator]

Yes, I mean: 'Can you make your site use a plain-text cookie to store password and username, and stay logged in indefinitely?'. E.g. Coinbase never logs me out, Cryptsy logs me out twice a day. Cryptsy=annoying, Coinbase=not.

Reserve 2FA for any transactions would could be deemed harmful. From a provider's perspective lowering prices and changing pools are about it. Create a set of trusted pools which require 2FA to change, and email notifications for any price or pool changes. The worst that could happen is someone could try to lower your prices, then rent your rigs for nothing. You would get emails about all of that and be able to terminate the lease immediately. Security can be further improved by logging IPs to transaction records and displaying them in the history.

How do you get Coinbase to keep you logged in for more than 10 minutes?  I cannot get either of those sites to stay authenticated.


Yes, I mean: 'Can you make your site use a plain-text cookie to store password and username, and stay logged in indefinitely?'.     I'll send you the liability waiver.

[snipsnoop]

it's not good that we need to enter password and captcha everytime when open this page, it has not been before. Passwords are unusually long, and captcha is quite difficult. Cant you make this login system like it was before?

You mean can we make our site use a plain-text cookie to store a password and username which gives access to a bitcoin wallet and stays logged on indefinitely?

We could.  If customers and providers really wanted that.

The second security release is almost complete which will do away with the annoying captchas in favor of longer session times and 2FA.

can we have 2fa as optional? I am sure we understand the risks but sometimes it just takes too long to fiddle about. Its different if we have a wallet with money in it, but as a provider, its a one way ticket, and if anyone else wants to send money to me, they are welcome......

After the next roll-out: http://leaserig.freshdesk.com/support/solutions/articles/1000041161  You will find that providers will either lose all access to their accounts or have an online wallet.

Depending on whether everyone read the big red letters:

All provider/admin accounts are required to have a customer account using the same email address as their provider account!  Any provider accounts with no email or without a matching customer account WILL LOSE ACCESS TO THE PROVIDER PAGE AND WILL BE REQUIRED TO REJOIN THE SITE INCLUDING VERIFICATION AND SECURITY DEPOSIT

Well it would maybe help if you explained how we link the two?
When I initially got the provider account setup, there was no mention of email address.

[miaviator]

Well it would maybe help if you explained how we link the two?
When I initially got the provider account setup, there was no mention of email address.

Providers only!  If you only Hire rigs from lease rig this does not apply to you!

All provider/admin accounts are required to have a customer account using the same email address as their provider account!  Any provider accounts with no email or without a matching customer account WILL LOSE ACCESS TO THE PROVIDER PAGE AND WILL BE REQUIRED TO REJOIN THE SITE INCLUDING VERIFICATION AND SECURITY DEPOSIT

Providers must login and enter their email address here:



If you do not have a customer account or your customer account is under a different email please create a new customer account using the same email as your provider/admin account.

If you already have a customer account please verify your provider account and customer account list the same email address.

If you do not have an email address listed in your provider account (All 50 of you) please enter an email.

Again if you do not have a customer and provider account under the same email address: YOU WILL LOSE ACCESS TO THE PROVIDER PAGE AND WILL BE REQUIRED TO REJOIN THE SITE INCLUDING VERIFICATION AND SECURITY DEPOSIT

Providers only!  If you only Hire rigs from lease rig this does not apply to you!

[snipsnoop]

Ahha.. Thanks for that.
Would be a good idea to update the http://leaserig.freshdesk.com/support/solutions/articles/1000041161 post with that info

[gsupp]

So where did the "Administration" link go for providers?

If I click on a rig to edit details, there's no way to get back to the admin page without clicking the back button on my browser a bunch of times.

Also the frequent session expiration and captcha are really making the site difficult to use.

[Gamer67]

So where did the "Administration" link go for providers?

If I click on a rig to edit details, there's no way to get back to the admin page without clicking the back button on my browser a bunch of times.

Also the frequent session expiration and captcha are really making the site difficult to use.

'providers' link on the top right of the page.

[byt411]

So where did the "Administration" link go for providers?

If I click on a rig to edit details, there's no way to get back to the admin page without clicking the back button on my browser a bunch of times.

Also the frequent session expiration and captcha are really making the site difficult to use.

Providers link at top right of page.
Also, i have been forced to use my last resort, which is to make Google Chrome remember the ridiculously long passwords.

[miaviator]

Ahha.. Thanks for that.
Would be a good idea to update the http://leaserig.freshdesk.com/support/solutions/articles/1000041161 post with that info

Done.

[miaviator]

The problem is still there (seems that you uploaded back that file), I can fix it for you,I didn't receive any bounty yet.

PM'd

[DarkKnight]

How do you get Coinbase to keep you logged in for more than 10 minutes?  I cannot get either of those sites to stay authenticated.


Yes, I mean: 'Can you make your site use a plain-text cookie to store password and username, and stay logged in indefinitely?'.    I'll send you the liability waiver.

I don't know. I haven't needed to log back in for at least 3 days so far. I usually just click over to another tab to refresh my balance a few times a day. The session seems to last at least until I restart my machine, and even then it carries over. I'm fine with it.

Cryptsy has a 2FA system with a time-out adjustment. I have my account set at 12 hours, so I usually have to relog once or twice a day. Not as bad as a bank, but still annoying considering it used to last a day before I enabled 2FA.

You could take the (marketing) approach of "We have banking grade security", but I rather think it doesn't need to be any more secure than a pool account. Rolling 24 hour auto-withdrawals will keep your BTC/DOGE balance low, and make you a less appealing target for a heist. Say something like UTC 00:00 + (Num of min = RIGID). For example: for 'RIGID=495' it would be UTC 00:00 + 495 minutes or UTC 08:15. That way, withdrawals aren't all going out at once, and everyone gets paid once a day. Not having 24hr withdrawals is why Hashcows became a target and Middlecoin did not. And fuck hashclowns anyway. They've had a small unexchanged balance for me for months!

My approach to security is to make it 'good enough' until there is a reason to make it more of a hassle. As long as your other practices makes you a less appealing target, like not holding onto balances longer than 24 hours, you shouldn't have any problems. 2FA sessions can be tied to IP addresses, right? Even if someone were able to access your current session key (due to compromised admin PC), they'd be trying to access it from a different IP, and require relogging. Even so, I'd still argue it the provider's fault for having a compromised PC, not leaserigs.