[ANN] [LTC] [PPS] [OTP 2FA] [Stratum only] LTCMine PPS mining pool (3.3%)

[Balthazar]

13/59

[Balthazar]

16/59

[Balthazar]

17/59

[Oknocaps]

Would it be possible to make two-factor authentication optional instead of forced?

[Balthazar]

Would it be possible to make two-factor authentication optional?

Yes, but you will be unable to change withdrawal address during the SFA session. Only GA sessions will provide access to this feature.

P.S. 18/59

// 15 hours in the console... Will be AFK some time.

[tacotime]

Coinotron has confirmed it wasn't their pool.  Here are the other pools with which I was registered:

pool-x.eu
litecoinpool.org
Burnside's pool (ltc.kattare.com)
give-me-ltc.com
NuKingsMiningCo

[Balthazar]

It's obviously that we can't trust hacker's statements.

P.S. He said that it was "not exactly a pool". Not sure what does it mean.

Hacker has made public confession.

_bender_: john8888, этo нe coвceм пyл был
...
_bender_: Balthazar, пapoли юзepoв взяты чepeз пpocтyю sql-inj в oднoм мecтe, влaдeльцы pecypca нe пpичeм

According to this, _bender_@btc-e chat made passwords dump from unknown vulnerable site. He provided some proofs, i.e. login/password for btc-e account, which was used for stolen funds withdrawal.

[Oknocaps]

Would it be possible to make two-factor authentication optional?

Yes, but you will be unable to change withdrawal address during the SFA session. Only GA sessions will provide access to this feature.

P.S. 18/59

// 15 hours in the console... Will be AFK some time.

Thanks, that sounds great!

[Balthazar]

19/59

[coinotron]

Just in case I disabled payouts for all users with account names from LTCMine list of hacked accounts:

Only two of those accounts have some withdrawals today, so Coinotron definitly isn't "source" of leaked accounts.

[Balthazar]

22/59

[tacotime]

P.S. He said that it was "not exactly a pool". Not sure what does it mean.

I'm not sure either.  That username and password has been used for nothing except pools for me, so I have no idea from where else it would have been obtained, especially by SQL injection.

[Balthazar]

23/59

[Marrs]

It's obviously that we can't trust hacker's statements.

P.S. He said that it was "not exactly a pool". Not sure what does it mean.

Maybe he hacked one of the two litecoin forums?

[Balthazar]

Went to get some sleep, will back tomorrow with withdrawals.

Thank you all for your participation and understanding.

[kha0S]

Hi.
Balthazar alerted me a couple of hours ago about this problem, so I could act quickly.
I've been looking at give-me-ltc.com log files, and so far nothing strange. Several of the "affected" usernames are not even registered there.

Cheers,
khaos

Coinotron has confirmed it wasn't their pool.  Here are the other pools with which I was registered:

pool-x.eu
litecoinpool.org
Burnside's pool (ltc.kattare.com)
give-me-ltc.com
NuKingsMiningCo

[offbyone]

Hey,

I'm testing out this pools with cgminer via mining proxy and I'm seeing an unusually large number of rejected shares:
total:281,    accepted:254, rejected: 9.61%

is this a typical thing for ltcmine.ru ?

[hi]

Hey,

I'm testing out this pools with cgminer via mining proxy and I'm seeing an unusually large number of rejected shares:
total:281,    accepted:254, rejected: 9.61%

is this a typical thing for ltcmine.ru ?

my reject rate is 1.41%

[offbyone]

Hey,

I'm testing out this pools with cgminer via mining proxy and I'm seeing an unusually large number of rejected shares:
total:281,    accepted:254, rejected: 9.61%

is this a typical thing for ltcmine.ru ?

my reject rate is 1.41%

... OK

can you describe how you're running your miners ? Thanks

[hi]

Bathlazar,

I am getting stratum connection to pool interrupted messages along with a lot of stratum detected new block.  On other PPS, I do not receive these messages. Is your pool having connectivity issues?