Before I post the announcement, I just wanted to go over some of the security aspects that the pool is currently using (just to help make sure investors feel confident in the pool):
Mining Operation Physical Security- On-site security at the warehouse.
- 24/7 motion sensor in our unit, deactivated only by using keycode upon facility entry and re-activated upon exit.
- $25,000 insurance (protects against theft / fire / flooding, but not acts of god. This covers the replacement value of the current hardware, and will be expanded as the hardware eventually grows)
Pool server security is kept up to a high enterprise standard. All pool servers have iptables completely blocking all access to them through everything but the stratum ports. The only http traffic allowed to the pool servers is traffic that comes from cloudflare.
The only way that even I can remote into the servers is through using one of the Gartner 'visionary' cloud security providers - I have to sign into my account with the cloud security provider, use 2FA authentication and then specify how long it is that I want to have access to the server. There are no exceptions to this. All passwords have been generated with KeePass for the various service accounts and coin daemons. The root account is also protected by a SSH key, which I have on my laptop as well as backed up securely here at work. I also have a copy of it stored on a USB key that I have stored in a fire safe I have at home.
If any community members are into security stuff, I would love a third party audit of the security that I have in place.
Posting the good pool news on the hashrate.org/news now.
(btw, thank you TwinWinNerD and cobaltskky!!!)