Print

• Show the most recent posts.

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[pf]

Pool is down for a few minutes for some maintainence, I may upgrade it to the 16 GB VPS right now just to prevent this issue from recurring.
There has been an interesting DDOS attack that has been occuring recently too, someone has gone to a great deal of effort to develop some kind of stratum DDOS tool (as that is the only port on the pool that is even open) - it's neat how it looks like legitimate miner traffic but it's clearly DDOS because it's not actually submitting shares.

[wiser]

Pool is down for a few minutes for some maintainence, I may upgrade it to the 16 GB VPS right now just to prevent this issue from recurring.
There has been an interesting DDOS attack that has been occuring recently too, someone has gone to a great deal of effort to develop some kind of stratum DDOS tool (as that is the only port on the pool that is even open) - it's neat how it looks like legitimate miner traffic but it's clearly DDOS because it's not actually submitting shares.

Is it possible that this "DDOS tool" could be some kind of malware? I ask only because yesterday and this morning (while I had miners pointed to hashrate.org), both those rigs were hacked, meaning the url I use to control them remotely got broken into and my pools got deleted and replaced with another pool that I do not recognize. The first time it happened I changed the password, but then it happened again. I have two other miners which were not pointed at hashrate.org which were not affected. My rigs are controlled via the Minera platform.

I'm only asking if this is even possible--that someone pointed some kind of malware at the pool and used that to somehow trace back to the mining rigs' urls and then compromise them? I'm not technically minded enough to really know and I'm not throwing accusations, just bringing this up as a potential data point/theory.

Right now I have the rigs pointed elsewhere. You mentioned the pool was down for now and my rigs were showing reduced hash rates. Once I see an update that things have settled down with the pool I'm really looking forward to mining there again.

[pf]

The pool's security has not been breached at all.
If you're mining using Linux however, make sure you apply the bash shellshock updates.  If you're mining with ASIC hardware, most of the current ASIC hardware is completely susceptile to shellshock attacks and likely will be until the vendors eventually patch it.  Make sure to keep any ASIC's safely behind a firewall and restrict all inbound access to them.  If you need to be able to administer them securely, have a dedicated machine behind the firewall and access it via VNC and then access the ASIC's via port 80.
I've got the pool working again for now (properly showing hashrates) but a couple of the smaller coin daemons are still turned off pending me upgrading the VPS resources (5-10 min outage).  I will try and get this done in about an hour, I am on a work trip so I have a work meeting right now though.

[wiser]

The pool's security has not been breached at all.
If you're mining using Linux however, make sure you apply the bash shellshock updates.  If you're mining with ASIC hardware, most of the current ASIC hardware is completely susceptile to shellshock attacks and likely will be until the vendors eventually patch it.  Make sure to keep any ASIC's safely behind a firewall and restrict all inbound access to them.  If you need to be able to administer them securely, have a dedicated machine behind the firewall and access it via VNC and then access the ASIC's via port 80.
I've got the pool working again for now (properly showing hashrates) but a couple of the smaller coin daemons are still turned off pending me upgrading the VPS resources (5-10 min outage).  I will try and get this done in about an hour, I am on a work trip so I have a work meeting right now though.

What is a shellshock attack?

I'm assuming my data center runs some kind of firewall. I have never experienced this with any other pool I've mined, and they've been numerous.

I have my rigs on Minera. Do they have some sort of shellshock update?

EDIT: I should also ask: what are you doing poolside to protect it and the miners against shellshock attacks, whatever they are?

[pf]

http://en.wikipedia.org/wiki/Shellshock_%28software_bug%29
The pool uses multi-layered protection.  The only way that an attacker would be able to even find the source IPs of the miners would be to gain shell level access to the stratum server.
The stratum server is protected with multiple layers of protection (ie, SSH private key, dome9 cloud firewall managing all connectivity with 2FA protection, cloudflare professional [with all access from anywhere except cloudflare being rejected at the iptables level).)
I actually get emailed any time an IP connects directly to the server via SSH, as well as get emailed whenever I request access through dome9 to connect directly to the server.

[pf]

Initial report (CVE-2014-6271)
This original form of the vulnerability involves a specially crafted environment variable containing an exported function definition, followed by arbitrary commands. Bash incorrectly executes the trailing commands when it imports the function.[38] The vulnerability can be tested with the following command:
env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
In systems affected by the vulnerability, the above commands will display the word "vulnerable" as a result of Bash executing the command "echo vulnerable", which was embedded into the specially crafted environment variable named "x".[8][39]
CVE-2014-6277
Discovered by Michał Zalewski.[7][36][40] this vulnerability relates to the parsing of function definitions in environment variables by Bash, and can cause a segfault.[41]
CVE-2014-6278
Also discovered by Michał Zalewski.[41][42] this relates to the parsing of function definitions in environment variables by Bash.
CVE-2014-7169
On the same day the original vulnerability was published, Tavis Ormandy discovered this related bug[30] which is demonstrated in the following code:
env X='() { (a)=>\' bash -c "echo date"; cat echo
On a vulnerable system this would execute the command "date" unintentionally.[30]
Here is an example of a system that has a patch for CVE-2014-6271 but not CVE-2014-7169:
$ X='() { (a)=>\' bash -c "echo date"
bash: X: line 1: syntax error near unexpected token `='
bash: X: line 1: `'
bash: error importing function definition for `X'
$ cat echo
Fri Sep 26 01:37:16 UTC 2014
The system displays syntax errors, notifying the user that CVE-2014-6271 has been prevented, but still writes a file named 'echo', into the working directory, containing the result of the 'date' call.
A system patched for both CVE-2014-6271 and CVE-2014-7169 will simply echo the word "date" and the file "echo" will not be created, as shown below:
$ X='() { (a)=>\' bash -c "echo date"
date
$ cat echo
cat: echo: No such file or directory
CVE-2014-7186
Florian Weimer and Todd Sabin found this bug,[8][37] which relates to an out-of-bounds memory access error in the Bash parser code.[43]
An example of the vulnerability, which leverages the use of multiple "<<EOF" declarations:
bash -c 'true <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF' ||
echo "CVE-2014-7186 vulnerable, redir_stack"
A vulnerable system will echo the text "CVE-2014-7186 vulnerable, redir_stack".
CVE-2014-7187
Also found by Florian Weimer,[8] this is an off-by-one error in the Bash parser code, allowing out-of-bounds memory access.[44]
An example of the vulnerability, which leverages the use of multiple "done" declarations:
(for x in {1..200} ; do echo "for x$x in ; do :"; done; for x in {1..200} ; do echo done ; done) | bash ||
echo "CVE-2014-7187 vulnerable, word_lineno"
A vulnerable system will echo the text "CVE-2014-7187 vulnerable, word_lineno". This test requires a shell that supports brace expansion.[45]

[wiser]

 Can you please explain the above you quoted in plain English?

So, if the pool is completely protected (and I believe you), can you think of any way that my rigs could have been compromised by the mere act of connecting to your pool stratum server? What I'm trying to figure out, is what, if any, vulnerability about the way my rigs are set up could have caused this. On further reflection it's possible I may have experienced less extreme versions of what happened from other pools, but just not been aware of it. For example, on Mining Rig Rentals, I've had times where my rig will go offline immediately after getting rented (and pointed to an unknown to me pool). It almost seemed like the rig was responding to some kind of feedback from the pool itself. I've never had anything changed on the command platform before yesterday, though.

Can you elaborate further on what shellshock means, or whatever it was that struck your pool which may have impacted my rigs due to some vulnerability on my end?

I appreciate any insight. Thanks.

[ASNXT]

Which brings the best advertisement when our pool is not running? The beginning was hashrate.org, they are now on other roads PF?

[dhj1965]

Hi,

some hours ago I had a stable connection to the pool and I brought my miner back... but now it's the same as before again. Unstable connections and the miner declares the pool as "dead".

dhj.


Edit: Just noted that the pool seems to be down completely...

[apex944]

Same here... Pool = Dead

I'm sure PF is aware. Just adding this for the benefit of those those came back from Turkey-Day dinner with family to find their miners down...

PF, if you could give daily updates on the pool status and any ETA if you have one that would be great.

[pf]

Sorry, I hadn't realized the problem recurred so soon.
The VPS is also having issues with disk space, I have just taken it offline to upgrade both resources and capacity.

[pf]

Pool is back up, 16 GB of RAM and 8 vPro this time (double the resources it had before)
I am also grooming and removing lots of older coin daemons to save some disk space.  Payouts ran for everyone that was owed coin, I will check again tomorrow to verify if the auto-payout process is working properly but at this point it should be.

[semibaron]

When will the next dividends be payed out?

[pf]

In a couple hours, just out for brunch

[wiser]

One other question I have about how the pool works. I'm mining it again and so far so good

I've noticed the rate at which NXT accumulates is quite variable. Is this because trading other coins out for NXT doesn't happen at the same rate as mining? Right now, for example, the NXT accumulation seems very slow. Does this balance out over time? Perhaps you can explain a bit about how the process works?

Thanks

[pf]

As coins are mined, they go into the pending column.  Once they have confirmed, then the pool automatically (well, every second hour) transfers the coins to the exchanges and sells them and credits the miners accounts with the NXT.

So yeah, it's not uncommon to see 2 hr intervals for the NXT amounts to increment.

BTW, weekly dividends momentarily, 1.59 NXT/share

[pf]

Amount paid, Account, TX
53284.43, NXT-SQ9J-JCAN-8XVY-5XN7K, 294197376126514920
17098.735, NXT-2AHU-UXZW-K9Q2-HENLW, 15439842734357621672
15904.20942, NXT-R3DM-JL5U-QATR-9XELX, 2224540425681486686
7952.9, NXT-RNKQ-TTGX-V6DP-H55PS, 3789399238745001813
5073.9502, NXT-XRK4-5HYK-5965-9FH4Z, 16716322052452610844
4584.05156, NXT-3R28-ZBCB-E8GT-C34JC, 15431145781911885682
4170.50076, NXT-SZUB-FHZP-JTFL-7YEET, 7225312848094139018
4028.93914, NXT-WCKP-RDGX-76XY-BQ9U7, 12783975086807300233
3621.75066, NXT-8UNC-QVL6-43W7-9KMFT, 6822443535646009285
3499.276, NXT-FRS2-MQR5-758P-ANNEX, 8561974262385821925
3394.29772, NXT-G9WM-6HNW-FMF2-6T8M2, 1390710771820038865
3181.16, NXT-RBR6-EFX3-TSSA-7SXEX, 16604430532976476896
2773.97152, NXT-7HL4-WMNR-XGFL-ASVHV, 2927937657445012993
1590.58, NXT-G8BT-FHN8-SZQG-G3FRC, 13766363066109105239
1590.58, NXT-5Z35-ZCDV-BC28-7KL5F, 3049607737772117438
1590.58, NXT-EEV3-LGUF-JC43-F7NNN, 15008994035841872994
1418.79736, NXT-7R8S-X9GD-W3M9-DWCX2, 16385346182327211068
1317.00024, NXT-ECBU-G3RB-W4HN-DD75D, 1871946031718169555
1269.28284, NXT-ZJHC-Y5D7-DAN7-4RD6W, 11879891530608475111
1154.76108, NXT-SYNR-ZAES-GZ3F-BCDFH, 376699338359298537
1113.406, NXT-FDW8-THXX-PY8X-9VK6M, 703361228122022002
1064.09802, NXT-53EB-6WSS-BAGG-39UXP, 11651057189540918886
847.77914, NXT-BT7K-KX8C-784T-EZ3WG, 16633010651205523541
795.29, NXT-6RKA-ZVFL-VBS6-7D2EP, 14522677072787343556
779.3842, NXT-6BLV-3QZM-HMMQ-6Y5LZ, 5177455085303802791
758.70666, NXT-ZV69-C2DP-SJQG-73PJT, 9954606506126883288
731.6668, NXT-724Q-JJL2-K2MH-9JJ77, 4407618320455054063
690.31172, NXT-GXCJ-N4PL-VV5U-49YQP, 4585227384266405593
636.232, NXT-QCHL-NRMF-26CY-74V9E, 5070427839452114572
636.232, NXT-KB63-98AB-PQJN-GTB6C, 7081652823003793732
477.174, NXT-CLPB-VKUG-NU5Y-HTAC7, 15228830778309761057
473.99284, NXT-7NQY-PVNX-M2BL-HWRDA, 12833097714484927091
415.14138, NXT-PSDF-QZ22-QEET-HQ4UZ, 11771563638620166388
408.77906, NXT-ULR2-T4TH-4X7P-8WVPV, 12162250485224277458
383.32978, NXT-HEXJ-6MUN-37CN-FFTRQ, 15165840919534734292
345.15586, NXT-WZE4-CTFK-GGN6-86HFG, 1580997173261661652
338.79354, NXT-2AS9-D5GB-BNHD-9DJXQ, 10715509571626661707
337.20296, NXT-CSMZ-VJV5-YVVP-5FZQU, 5436660478017719916
324.47832, NXT-L8EV-EMP8-7VE8-88WWL, 7146625053874447569
319.70658, NXT-2EMX-S2KR-6TWL-8ZNM6, 14461399846845633867
318.116, NXT-FAHJ-MNJE-5BHY-24PP4, 10305154973480205973
318.116, NXT-8QLY-CRHV-NSJZ-CCZ5K, 2115146766086005047
318.116, NXT-DHSB-MWTV-CNWX-APK48, 18139649305060401711
318.116, NXT-RNCR-YXDZ-V866-BS5RX, 12643095658120241969
300.61962, NXT-X5EF-HTB2-RLYU-HW8E7, 6242372995105719227
276.76092, NXT-WHBB-VBW5-H3D5-C8PNY, 13542708980195811046
264.03628, NXT-7J3A-8H99-G3XF-GVTJN, 13327840381576917124
241.76816, NXT-KQ74-NY5D-2J8J-2ZPT2, 14257442265049374706
229.04352, NXT-8CZB-A2NB-S646-94CSV, 10871018018440382058
229.04352, NXT-Q2AQ-CLV6-Q6SF-CB6ZT, 9679324358958910550
200.41308, NXT-BY7Y-UB4X-6Z3C-8PP3V, 2655837714646075812
190.8696, NXT-ZGCD-3Z6V-T7CX-HFPFU, 11356511273891431830
186.09786, NXT-M76U-NADD-LLJP-GVETZ, 11531014655471983499
171.78264, NXT-UAPC-3T43-FFT6-HW5BZ, 10185471619527699680
171.78264, NXT-TY3H-NC47-AFPK-G9CE7, 7027423594439965893
163.82974, NXT-VGHQ-VX2A-PMUR-85XPU, 8606476075470654206
162.23916, NXT-NNBQ-NXU8-8R7E-3TG5M, 14477048580317219577
160.64858, NXT-PJ4S-P5MU-LFBV-6ARBY, 13736718448064397445
159.058, NXT-44HE-6Z3Y-N2ZL-E9ZPW, 10287500236379801019
159.058, NXT-GP7Y-W4TK-3S7A-9KSTH, 14218750605348851400
159.058, NXT-LTLB-WLM9-4X6U-8L5PT, 6909918068915141747
159.058, NXT-RTYD-LJXQ-EPNJ-H7AQ5, 12283397032386759778
143.1522, NXT-QK6T-BTVP-N8SL-9ZLD4, 10360992195252669520
128.83698, NXT-8CBP-XQAH-J47K-GNQPB, 12847387669299524637
127.2464, NXT-2KH6-CUX7-RYC6-4S45F, 11672097397243264676
127.2464, NXT-4K4B-76X2-DWAB-22TEF, 13611310506045355056
124.06524, NXT-2RBA-JXE9-EQ22-3LX75, 3202672474142496188
119.2935, NXT-PUPS-2CHE-HST4-6EGNP, 5021857503856121751
119.2935, NXT-H63H-3YUT-S3H5-B6EF6, 16456849805109466401
117.70292, NXT-UDHN-A4VD-JMWP-GQY57, 970650244642354279
111.3406, NXT-EFR9-BPVT-FGAN-CUUGD, 2456038792468146341
111.3406, NXT-P44H-3ZA6-TQBD-FESF3, 9825358896412940260
108.15944, NXT-ZR6Q-2DBZ-JTZP-5Q6ZK, 663545375673831797
103.3877, NXT-TRCN-ZSHH-R4YS-HLAYP, 13037455627551211111
101.79712, NXT-SZ7C-NT8L-MDP8-7NNDZ, 1425055952446236737
95.4348, NXT-EDH9-ZN8C-4FDG-2FDJZ, 17263781003665996473
95.4348, NXT-ASVV-RXUE-HFN9-94C5Q, 1998223265196137392
85.89132, NXT-7G7H-BE28-B967-FTBWW, 16869225594573357822
81.11958, NXT-ND7Z-BKP8-9YVX-HSBV2, 12797473726769802093
81.11958, NXT-NH53-QEG6-NG4U-6D9DZ, 10822726848997226597
79.529, NXT-Q5VB-Z25V-5WG6-3HWAK, 864955115253868442
79.529, NXT-ELGV-W7NM-TNML-893ZQ, 2247061145015479918
79.529, NXT-RQ59-49XB-A8H4-DBR6G, 9951353609080031469
65.21378, NXT-HBFW-X8TE-WXPW-DZFAG, 493499308483188703
62.03262, NXT-PNBK-H6U2-B2LR-827N7, 1531902182381805388
60.44204, NXT-6WM6-Y223-99GM-DWU7M, 12525908449367892372
57.26088, NXT-57FY-PYYU-UELC-HE5C9, 6677062317410247041
55.6703, NXT-LFMT-59SD-QMYP-CBEY9, 14271792789997972636
54.07972, NXT-BAD7-238Z-2SEX-2TJ2S, 21241961864675874
54.07972, NXT-R7SM-95YT-MZ4Z-6M3T9, 5848847655694184394
49.30798, NXT-G2B8-D648-K8WA-HSCCP, 554257368969381285
47.7174, NXT-MNLR-8MCV-3UJW-DZF3K, 18048894467702731360
47.7174, NXT-5HZF-TPQ5-GSHF-7GV33, 7751289167983338032
44.53624, NXT-NQWP-HBER-UYR3-8PH4T, 18293731938209851110
42.94566, NXT-2VZ7-3ET4-G9PD-BV8P5, 11327110194363912298
38.17392, NXT-NT9Z-6BTS-2798-ATVG2, 2524885735438003922
38.17392, NXT-6QJD-EGQN-WT7W-GXUFY, 2137892879813506359
38.17392, NXT-QE74-HCES-C3VP-FA9HD, 1874050422463684294
38.17392, NXT-DH4T-9PH3-5V8S-HQJC5, 4386270798394269255
36.58334, NXT-UCC7-44N4-DBMX-FYUPD, 11928320252084384407
31.8116, NXT-HFGU-SKRB-5S5T-6EKT4, 12525248892814545283
31.8116, NXT-DBSU-KJ8N-BE67-FXX98, 7759587654586170399
31.8116, NXT-8T88-RJHB-QE2X-H4TXW, 15799089139632677771
31.8116, NXT-SVEK-VTRU-HWLQ-ADJGV, 5638380600583729075
30.22102, NXT-ARPS-CRKJ-XP9M-D69VM, 5694829316048664146
27.03986, NXT-F8QG-GNXA-U5TW-6DX3K, 5890650311499349522
23.8587, NXT-8WM4-MC99-95YB-749A4, 16566727680924088237
23.8587, NXT-WMTF-ZJLL-NHSX-GET4S, 4013124487505191889
23.8587, NXT-S96S-MDZY-UKG8-2ACBP, 2200273299980096177
23.8587, NXT-N7RK-A54P-8ACE-8AAZD, 18148316492362867731
20.67754, NXT-5MMT-RUYC-NCC9-AU8BL, 624895371509529647
19.08696, NXT-P5DJ-PDW3-CGSP-8Y8QU, 5432366315109320094
17.49638, NXT-89GJ-DQLE-MM3P-EBCDF, 3176184576273390734
15.9058, NXT-JW54-86LK-PL76-278YK, 9707374571617321285
15.9058, NXT-8V72-VHZ3-PFEV-9J3TZ, 5128243181576220917
15.9058, NXT-XFAH-7N9C-6AS6-B3GLZ, 10927575413185390352
15.9058, NXT-7SP2-EWRJ-ZU3Z-9PN6A, 3013671363943138363
15.9058, NXT-PMMZ-4YPL-YXFE-G9DSP, 1776675710389108662
15.9058, NXT-ZZ4W-YB6N-2TPJ-7EUY9, 7682754151146495729
15.9058, NXT-P8TT-R6XR-FESE-HQZ5U, 5763334476950000783
14.31522, NXT-LQU5-UREL-D5BG-D8HQ2, 14025005104957819073
12.72464, NXT-UWKJ-GFEV-AGY4-5C4YS, 10618522922671860227
11.13406, NXT-Q3FL-S6D3-DHLR-7WNSX, 7523868967694630565
11.13406, NXT-P3KT-WP6T-CY3U-ADX3Q, 16336260000791609307
11.13406, NXT-63UG-63M4-RKTE-B3PX9, 6824416789919355883
11.13406, NXT-P5KE-ASXN-FYQP-DCVT7, 18038297405969925600
11.13406, NXT-BPZH-L5JZ-TS9Q-6RVTM, 7679427044749802906
9.54348, NXT-RACK-EQL5-TDLN-HPT6L, 12926000608471939813
9.54348, NXT-UJSR-5UXA-ZYA2-8S5WN, 10191958857038934000
7.9529, NXT-8Y8X-APKP-VCXZ-DY84Z, 17168012109856860765
7.9529, NXT-CHQD-Y5SX-C6RV-HC8HS, 4073825469864415837
7.9529, NXT-YN7U-HGT2-99H2-F7MTD, 4501939077555112961
7.9529, NXT-3D3P-EWUP-QRM7-GGF24, 13966978106038571148
7.9529, NXT-63BT-VQ87-A4MD-D9WJX, 11876982369817928590
7.9529, NXT-BKQS-CPAA-NYCD-74H7Q, 12616036242580487723
7.9529, NXT-N8U7-TU6Z-HU3S-759Y7, 6279359110300135250
6.36232, NXT-6DRG-8Y7R-MWWX-4966R, 2899522412145070630
6.36232, NXT-HLY6-UDK3-PAUW-5LQM3, 4916769530047916050
6.36232, NXT-RZ8L-27Y6-RYJC-FSBFW, 6337916839643580722
6.36232, NXT-FCD8-7KBP-3UTP-2PBKU, 3292104498364671528
6.36232, NXT-UWJU-XXST-3MPQ-2JWG7, 17219400805516559937
6.36232, NXT-3ZKZ-KZ8V-TYFK-HTW4U, 16224571435734650853
4.77174, NXT-NQSZ-Z9SJ-5HD7-8D6BM, 8209099171607775109
4.77174, NXT-YLLG-W6HV-GRGK-76NKE, 2878507303346445060
3.18116, NXT-QTCA-67EQ-VCBL-EUTZD, 2861761465926086646
3.18116, NXT-8D65-AVB7-X8SM-2JTX4, 10745805632294591077
3.18116, NXT-JV3P-RT63-K6NG-6JXBR, 15803270217920097597
3.18116, NXT-U7WR-P287-5F2P-BEAVN, 6169671172277041661
3.18116, NXT-DSEY-S997-7G5H-29LT8, 8025858128039590509
3.18116, NXT-NVFP-G5PF-DL98-FR4PR, 11026729009965630508
1.59058, NXT-3EYJ-RFBJ-2K54-DGWKW, 11617400878617945718
1.59058, NXT-9BZC-5SCS-GSK2-4GNKT, 5263121377118433039
1.59058, NXT-4FJK-396D-8PSV-8TM3P, 5444963825158362579
1.59058, NXT-JSWL-FJN7-AJTA-4SFHZ, 14131106542518069513
1.59058, NXT-WUZ3-BB8N-7LR3-G55UV, 13797224849487229560
1.59058, NXT-3QE2-ZZ7N-63EG-DHPGB, 15330786989332743713
1.59058, NXT-8RSR-72UY-BP2V-FQQUE, 8461105126573728938
1.59058, NXT-N4PS-NP2D-H97D-72BGS, 13843677540283626377
1.59058, NXT-HMDN-2RHB-GAZN-9FGLG, 12919341655595240962
1.59058, NXT-HDPB-FQXF-VKWD-BSUH8, 15067678550792984176
1.59058, NXT-G6XM-CPK9-PX9N-5GSLV, 15044631868471853034
1.59058, NXT-GAX7-BWPG-HYSG-A2HWW, 10035675841573031809
1.59058, NXT-5BHG-9VRE-QGW6-DRZVQ, 11093603853368338553
1.59058, NXT-YQG4-JGA2-HEK9-CQZYZ, 4615284741643309225
1.59058, NXT-WS9M-UGC4-YEXG-957A6, 15424113074220959650
1.59058, NXT-F3YR-55QV-BLQT-H6QSC, 9815474094061253166
1.59058, NXT-R67P-6BZ2-XWAK-8RHZR, 4641879230442370567
1.59058, NXT-BRCK-Z9ZR-E22X-7KUBY, 11595211439150978346
1.59058, NXT-2Q6G-NLGD-PPR8-DZXNK, 17295931325675114356
1.59058, NXT-U49W-4KNB-ATU5-GKEMZ, 10795648245524913408
1.59058, NXT-4RMZ-NG8P-PUUC-58WAT, 10511787945748059438
1.59058, NXT-W6UF-8HF4-MVGH-HYQLM, 12773878330011245192
1.59058, NXT-ZU89-LK9S-R8M2-4X7YL, 7410179228303176628
1.59058, NXT-2HBD-9Y5Z-RZL2-8B2P6, 17063904057616500115
1.59058, NXT-CH27-27YX-BW5Z-D9GUY, 17995535153107125727
1.59058, NXT-D5PC-WX5R-KXKX-EZK53, 255418573645532535
1.59058, NXT-6F8N-ZQB5-KZAQ-32MAP, 193980401386365657
1.59058, NXT-5AG4-86JG-XKS3-4E2D5, 5718310246206373330
1.59058, NXT-63DB-ZJPU-WCHS-GX9BE, 4909163126557301572
1.59058, NXT-FPWP-UABJ-KVYQ-668SF, 15422421617770540317
1.59058, NXT-WWUM-UM8N-W5H9-FHDCD, 12392321784448447561
1.59058, NXT-T55T-WKCX-AZDN-5NP29, 8984753972780284050
1.59058, NXT-RK8S-YYAJ-QJEP-35J9B, 10341024739890884109
1.59058, NXT-UTS4-4GW9-TRFJ-95TZ6, 12731444607996782144
1.59058, NXT-XLR8-66PW-253Z-3T5M8, 17760926224282038273
1.59058, NXT-57HD-5ZYH-ACQ6-7H8PC, 3770960178154713091
1.59058, NXT-RT5L-ABNN-ASG8-G94GE, 4069784848078694049
1.59058, NXT-DJ7T-8AF7-J849-HWVCC, 4907443174149115872
1.59058, NXT-VP6V-H2DE-U5GA-HZGH5, 10286583866422067590
1.59058, NXT-QM5V-C7Z5-ER69-G6TRW, 7476075005673986061
1.59058, NXT-8CUQ-RUMP-X34V-CDAGP, 1095373088953109352
1.59058, NXT-5CMM-XZQ8-L5AG-E2XA8, 13295623705825539238
1.59058, NXT-M8R2-7NVN-GLDE-BX2KN, 14690184282784533783
1.59058, NXT-KYDZ-SJL6-QQWA-9RBEB, 16755137249793093682
1.59058, NXT-WFWM-SPBK-664P-5DZPW, 471315290371260950
1.59058, NXT-TETH-WG8X-W3KH-BBD2N, 11568209058142180965
1.59058, NXT-ZBLP-BVUG-U5PY-CS4K4, 17285404800228968875
1.59058, NXT-UUUR-AG4X-VJRS-CGUGC, 6188236912993282199
1.59058, NXT-AN9T-KLF9-9R6E-8S7LE, 7934813205957275252
1.59058, NXT-8CUF-UFPJ-NDTR-4W3ML, 1573846766929424024
1.59058, NXT-G9XB-W3ER-H9D6-DVQWW, 14526131332418687760
1.59058, NXT-9S7J-TRKA-WRYH-9QJXW, 2171100629172254187
1.59058, NXT-K4FX-9ZUY-FGNJ-BKL5Q, 1582609214308415549
1.59058, NXT-4DXB-Q56X-7GAF-HPSHU, 4798061424396598676
1.59058, NXT-RTLT-33MH-BQHB-35PR5, 3039647232373836143
1.59058, NXT-C7HZ-P8MP-9WJ5-4SMWS, 9416806650422620162
1.59058, NXT-A3CC-YG8Z-HNFP-23QMS, 867535656169285450
1.59058, NXT-CSQ5-K2GT-FP8S-DVMFK, 10754723177317489692
1.59058, NXT-2CZZ-V98K-NBVJ-2YHDM, 12990340299703343672
1.59058, NXT-4ZRX-J6CN-MX2D-AGWZU, 7235536715630899117
1.59058, NXT-HLWC-9PB9-84BT-DQU7Z, 9431688517437907726
1.59058, NXT-8PUQ-GDKF-NEPD-FR6QH, 6783122762645296915
1.59058, NXT-TMFP-KSA2-Y29L-69W3R, 10764126459967501667
------------All transactions processed------------

[printshop]

The pool's security has not been breached at all.
If you're mining using Linux however, make sure you apply the bash shellshock updates.

You just said you were being hit by a custom DDOS attack that bypassed your port firewall, and you are instructing your users to apply security updates, but your security has not been breeched?

We still own significant amounts of HRNXTPool. Will this downtime affect profits directly based on the downtime or will it have less of an impact?

[wiser]

As coins are mined, they go into the pending column.  Once they have confirmed, then the pool automatically (well, every second hour) transfers the coins to the exchanges and sells them and credits the miners accounts with the NXT.

So yeah, it's not uncommon to see 2 hr intervals for the NXT amounts to increment.

BTW, weekly dividends momentarily, 1.59 NXT/share

Thanks. That helps a lot

[pf]

The pool's security has not been breached at all.
If you're mining using Linux however, make sure you apply the bash shellshock updates.

You just said you were being hit by a custom DDOS attack that bypassed your port firewall, and you are instructing your users to apply security updates, but your security has not been breeched?

We still own significant amounts of HRNXTPool. Will this downtime affect profits directly based on the downtime or will it have less of an impact?

There is no port firewall blocking the stratum ports (how else would anyone manage to mine?)
I just thought it was interesting that there appears to be some sort of DDOS tool that manages to create what look like valid mining packets, but are missing a bunch of the fields.
If it had been a syn flood or something, my security would have just dropped the connection.
And my recommendation for users to apply their security updates has nothing to do with this pool - I would advise that anyone in the crypto space look at applying the shellshock updates (if they run linux, or if they are using ASIC miners that are linux based).