KanoPool since 2014 🐈 - PPLNS and Solo 0.5% fee - Worldwide - 2436 blocks

[tbonetony]

If you're running your hw on your home network, just use the apps noted, or Teamviewer (even better), to check your statuses.

ALWAYS set a new root password. And close the port.

EDIT: I get people "sniffing" around all the time...they spend all their time looking for vulnerable IPs, etc. The above still applies.

Thanks for the advices. Where can i find that app for kano pool? I haven't seen a relevant link on the website.

[1715625434]

1715625434

[1715625434]

1715625434

[VRobb]

Just search for it at the 'Opp Store' as Arnie says...!

[tbonetony]

Thanks all for your help. I have also found the app from google play.

[wolfen]

Can a bitcoind  core node get hacked through port 8333?

[wolfen]

I have configured s9 network address to static and turned off dhcp.
It is working fine, If I just shut the power off it loses the change and reverts back to dhcp.
Do I need to reboot or do sync;sync;sync ?
Never had the problem with s5 or s7

[Xircom]

Hey Tony,
As I understand it the S9 has an open API that will let anyone logon to it and change what they want if they can get on your network.  Typical from Shitmain, get behind a firewall and you should be good until those with more knowledge of this chime in and give you better/more detailed advice.
This is assuming you have an S9, not sure about the others but if one is open...

Then even more important that you vote for a Bounty at the software section i have set up. I want to get rid of this Stupid BMminer.

[mdefehr]

Alright, well I started mining on Kano in late April with 150 TH and have ramped up to almost 300 TH.

Couldn't be happier - the pool is awesome - but I want to do my part and find a block!!  According to my math, I'm more than overdue...

What do I need to sacrifice in order to get on the acclaim board?

[Xircom]

What are the benefits of running a full node besides helping the network? Do you actually get paid?

I am thinking of setting up my own wallet recently too as my accumulation now nears 10 btc.

If you register a btc address with your node (via https://bitnodes.21.co/) you have a shot at a small cash prize every week, or at least they used to do that.  And you might just get a random donation from someone, but no you don't get paid as that is not the point of running a node.  You run a node to help the network and to have control over your coins.  With 10btc you surely want to have control over them.

Aint it just as safe to keep your hard earned BTC in the blockChain, like the Ledger Wallet or something similar?

[Xircom]

Alright, well I started mining on Kano in late April with 150 TH and have ramped up to almost 300 TH.

Couldn't be happier - the pool is awesome - but I want to do my part and find a block!!  According to my math, I'm more than overdue...

What do I need to sacrifice in order to get on the acclaim board?

Make sure you point your miners to a Kano adress with lowest latency (fastest ping time) is first step.

[813bits]

Hey Tony,
As I understand it the S9 has an open API that will let anyone logon to it and change what they want if they can get on your network.  Typical from Shitmain, get behind a firewall and you should be good until those with more knowledge of this chime in and give you better/more detailed advice.
This is assuming you have an S9, not sure about the others but if one is open...

Thanks for the reply. I do unfortunately open a port forwarding on my main router just so I can check my miner status outside the house.

Here's the router log of the access:

Code:

[DoS Attack: RST Scan] from source: 46.4.73.199, port 443, Thursday, August 04, 2016 10:34:56
[DHCP IP: 192.168.1.19] to MAC address 24:77:03:07:44:8c, Thursday, August 04, 2016 10:34:53
[DoS Attack: RST Scan] from source: 46.4.73.199, port 443, Thursday, August 04, 2016 10:33:56
[DoS Attack: RST Scan] from source: 24.244.4.25, port 80, Thursday, August 04, 2016 10:32:41
[admin login] from source 192.168.1.51, Thursday, August 04, 2016 10:32:39
[DoS Attack: RST Scan] from source: 46.4.73.199, port 443, Thursday, August 04, 2016 10:32:36
[DHCP IP: 192.168.1.17] to MAC address 00:44:fa:86:16:43, Thursday, August 04, 2016 10:32:07
[DHCP IP: 192.168.1.17] to MAC address 00:44:fa:86:16:43, Thursday, August 04, 2016 10:31:46
[DoS Attack: RST Scan] from source: 46.4.73.199, port 443, Thursday, August 04, 2016 10:30:56
[DoS Attack: SYN/ACK Scan] from source: 91.225.237.39, port 80, Thursday, August 04, 2016 10:30:54
[DoS Attack: RST Scan] from source: 46.4.73.199, port 443, Thursday, August 04, 2016 10:14:46
[color=red][b][LAN access from remote] from 178.156.11.35:13328 to 192.168.1.17:80, Thursday, August 04, 2016 10:13:32[/b][/color]
[DoS Attack: Xmas Tress Scan] from source: 212.71.238.108, port 52100, Thursday, August 04, 2016 10:12:42

and 10:13 is about the exact time my miner got disconnected from my pool.

The access IP was 178.156.11.35 from Spain but it could be through a proxy.

Well you are port forwarding directly to the miner on port:80, and you left default user/pass as root?
It's like an open invitation for a hack.  Good thing you noticed quickly.
If you are going to open ports on your network you'll want to set up a specific VNC over SSH using a locked box.
Most people find it just easier to use a third party client like teamviewer or hamachi - but still you'll be going to a designated box that from there can use browser to control miners.

I totally agree that was stupid and lazy setup in first place but I am now so concerned how could someone from the other end of the world locate my public ip? I have never revealed that access port with anyone.

Did you ever change the default host name?  you can pretty easily scan IP blocks for the default host name and gain access that way.  On another note, how many pools do you have defined?  If only a single pool, if the pool goes dead then it will mimic and attack by locking up the miner and you have to do a hard reset. 

[kano]

The web issue is that the API is set by Bitmain to allow ANYONE with web access to your miner to change it.
They set it to W:0/0

At WORST it should be R:0/0,W:HomeNetwork/24 e.g. something like R:0/0,W:192.168.0.0/24

Where do you set it? I've no idea - they've ignored my suggestions to fix this and told me that the setup is what is easiest for Bitmain farms - yes they said that. i.e. they don't care about "your" miner security in the default setup.

It's probably in /etc/config/cgminer or /config/cgminer or .... but I've not gone near a Btimain miner since I switched off my S5 ages ago.

... and FYI, I wrote the cgminer API, and it's default settings are off
https://github.com/ckolivas/cgminer/blob/master/API-README

[darval]

The web issue is that the API is set by Bitmain to allow ANYONE with web access to your miner to change it.
They set it to W:0/0

At WORST it should be R:0/0,W:HomeNetwork/24 e.g. something like R:0/0,W:192.168.0.0/24

Where do you set it? I've no idea - they've ignored my suggestions to fix this and told me that the setup is what is easiest for Bitmain farms - yes they said that. i.e. they don't care about "your" miner security in the default setup.

For what it is worth, it is in /config/bmminer.conf

[Xircom]

I found an easy way to edit the conf file on the S9 and the S7.... or should we say a faster way than SSH.
Go in to the miners "system" tab and choose "Upgrade" and then "generate Archive"... Notice this workaround only works for the miner you are generating, since it copy`s also the Static IP.
Install program 7-zip on your PC, since it can open *.tar containers.
Right clik on the downloadet generated archive and right click and choose "Open" (NOT UNZIP).... then Hokus Pokus cgminer.conf is visible. Then Rigt click again and choose "edit"... Edit the conf file and save it through 7-zip.
File is ready for re-upload to your miner with those changes you made to the conf-file as one *.tar file.
I did it on 50pcs  S7 the other day, since the privileges was messed up in the later batches of S7.

I do not take responsibility if you mess up your miners, just saying this did the job so much easier for me..

[kano]

Alright, well I started mining on Kano in late April with 150 TH and have ramped up to almost 300 TH.

Couldn't be happier - the pool is awesome - but I want to do my part and find a block!!  According to my math, I'm more than overdue...

What do I need to sacrifice in order to get on the acclaim board?

You're on now
Block

[VRobb]

Show me any other pool that gives you THAT kind of service... 
Blocktastic!

[chillfactr]

Alright, well I started mining on Kano in late April with 150 TH and have ramped up to almost 300 TH.

Couldn't be happier - the pool is awesome - but I want to do my part and find a block!!  According to my math, I'm more than overdue...

What do I need to sacrifice in order to get on the acclaim board?

You're on now
Block

Thats an awesome,  ask and you shall receive mdefehr!!

[tlhIlwI]

You're on now
Block

Thats an awesome,  ask and you shall receive mdefehr!!

Ok-- I'm here asking now too!  I'm well past when I should have found a block here!

[tbonetony]

Hey Tony,
As I understand it the S9 has an open API that will let anyone logon to it and change what they want if they can get on your network.  Typical from Shitmain, get behind a firewall and you should be good until those with more knowledge of this chime in and give you better/more detailed advice.
This is assuming you have an S9, not sure about the others but if one is open...

Then even more important that you vote for a Bounty at the software section i have set up. I want to get rid of this Stupid BMminer.

Which I have already done so the day you started it, sir.

[scouse15]

Hi All,

I am a noob to mining, got given an S1 cpl of weeks ago, after lots of reading i pointed it to ck pool, then, after more reading, pointed it to solo mine as a lottery, since last week, I have got the mining bug, and now also have another S1, an S3 and an S5 on the way. With quite a few power supplys also in the post.

Yesterday I put the S1 back at the pool, after deciding i didnt like dust payments mounting up over the next week I will be going to hash more, after reading pretty much 900+ pages in this forum thread I had the inspiration to get my S3 running into the pool, which I have now done, however....

From looking at stats, I am getting a hell of a lot of discarded, wondering if it is normal after switching from 1 device to another, or do you think I could have a problem with the S3 that I have bought ?

Accepted 863
Discarded 8,346

Any help and advice will be appreciated. Thanks

[-ck]

Yesterday I put the S1 back at the pool, after deciding i didnt like dust payments mounting up over the next week I will be going to hash more, after reading pretty much 900+ pages in this forum thread I had the inspiration to get my S3 running into the pool, which I have now done, however....

From looking at stats, I am getting a hell of a lot of discarded, wondering if it is normal after switching from 1 device to another, or do you think I could have a problem with the S3 that I have bought ?

Accepted 863
Discarded 8,346

Any help and advice will be appreciated. Thanks

Discards are irrelevant. Ignore them. It's just the shit way bitmain configure cgminer in their firmware. Alternatively, grab Kano's S3 binaries.