Looks like the DDOSers have found a way to do it again...
 
Thankfully it's getting fixed much faster.  Back up again.

Guess you didn't hear:
 
Wednesday, December 25th, 2013 - Merry Christmas! The stratum daemon has been upgraded. This was done for three reasons. 1. Preparing for VARDIFF support for the pool. 2. Better performance. 3. Better integration with the newer Litecoin software. I was/am worried that the older stratum was failing to submit foudn blocks to the litecoin daemon properly each and every time. This upgrade should resolve any possible issue.

!!!!!
 
Warning! lite.coin-pool.com must be having a critical security breach, LTC is getting stolen from accounts, cash out your LTC now before you lose it!
 
https://litecointalk.org/index.php?topic=3674.msg85254#msg85254
 
I'm glad I stopped using that pool site when I did.....

ArtyD42

_Nite_
!!!!!
 
Warning! lite.coin-pool.com must be having a critical security breach, LTC is getting stolen from accounts, cash out your LTC now before you lose it!
 
https://litecointalk.org/index.php?topic=3674.msg85254#msg85254
 
I'm glad I stopped using that pool site when I did.....

ONE person screaming wolf does not make a security breach.  More likely the person never changed his password from the security breach that happened on ANOTHER server:
 
Monday, December 2nd, 2013 - Bitcointalk.org was hacked. Hackers captured user passwords and are trying to use them on every public pool website to steal coins. If you used the same or similar password at bitcointalk.org that you use here at this pool please change it right away!

Yes but Matt is currently offline right now..... damage is being done as we speak,
 
I seen that dec 2nd news already thats old :P

ArtyD42

_Nite_

ArtyD42

_Nite_
!!!!!
 
Warning! lite.coin-pool.com must be having a critical security breach, LTC is getting stolen from accounts, cash out your LTC now before you lose it!
 
https://litecointalk.org/index.php?topic=3674.msg85254#msg85254
 
I'm glad I stopped using that pool site when I did.....

ONE person screaming wolf does not make a security breach.  More likely the person never changed his password from the security breach that happened on ANOTHER server:
 
Monday, December 2nd, 2013 - Bitcointalk.org was hacked. Hackers captured user passwords and are trying to use them on every public pool website to steal coins. If you used the same or similar password at bitcointalk.org that you use here at this pool please change it right away!

Yes but Matt is currently offline right now..... damage is being done as we speak,
 
I seen that dec 2nd news already thats old :P

TWO people are complaining as we speak, and you didn't inform either one in the thread you linked about this.  Perhaps you should?

the bitcointalk hack and lite.coin-pool.com hack are completely seperate they are not linked, Matt had to redo his poolsite and reinstall all his software on the pool site to get it back up after changing the server location, he must have missed something critical before putting it back up.

Shows my coins to still be there, 0.14858599 LTC,  just did a withdraw to see what happens.

ArtyD42

TheWolf
Shows my coins to still be there, 0.14858599 LTC,  just did a withdraw to see what happens.

He's shut that off for the moment.  No idea if we can still mine and add to the pool at all.

I had had some of my worker set to there but I was seeing no updates or coins/shares being made.
I moved most of them to fast-pool yesterday and a few to doge-coin.

I guess I'll be changing pools..

Do i have to join a pool I don't want to share my coins.

My bad I said fast-pool above but I was having some trouble there as well but was only with the stats page for the workers.
I moved back to Give-Me-Coins with 7 clients and a couple back to doge coin for CryptoValley.
These 3 are the ones I'll be using from this point onwards.

Spongebob28
My account so far has stayed in tacked.  I've only had one payout and its to my wallet.  Should would we give the guy a chance to correct the hole in the sever or dump him and run?  I feel bad just dumping him. Suggestions?

I had mixed thoughts about it, it is a good pool still its just the owner is having one issue after another so its not very reliable at the moment is why I switched.

I made so far $150 on Litecoin (7 or 8 coins worth) I started beginning of dec, and now its almost the end, so that calculator I used to calculate my hashrate to $$ was pretty accurate.

Cross-reference posting.
https://litecointalk.org/...3674.msg86300#msg86300

fcmattGuys, I am not gone. I have had very limited time due to family. It is the holidays and I cannot just ignore them to figure out what is going on with the pool. As I write this I am still not sure how the attacker has gotten in. I reached out to a friend who now has access to determine what went wrong. I am wrapping up with my family and will now have a good amount of time to figure out what to do. It sucks trying to enjoy the holidays with this all going on in my mind.

Without making sure the hole that allowed the attacker to steal coins is truly fixed how can I bring the site back up to normal? That is my problem in a nutshell right now. Everything needs to be audited for a potential security problem.

By disabling payouts I bought myself time. The last 2 blocks the pool found is in the wallet and not missing. I fully understand if you shift your mining power elsewhere to be productive. I am pretty sure this was a mysql injection attack but what part of the code was hit needs to be determined.

But not only does the hole need to be fixed I am not even sure I can trust the litecoin payout addresses in the db at the moment. I may very well have to make everyone change their password, delete all payout addresses so they can be reentered, and what ever other solutions need to be put in place so the attacker cannot get any more ltc.

I have a lot of private messages and emails that I have not answered yet. There was so many it becomes overwhelming. From a hobby to a job. Please bear with me a day or two longer.

 
 

yea I seen that, I havn't switched back yet, see how it goes on his pool for a few weeks before I do.
 
Not enough active pool miners anyway so that has to build back up again so blocks are found faster on that pool
 
when it gets up to at least 3 blocks found a day I will switch back, I can monitor that here http://lite.coin-pool.com/statsAuth

This is starting to be insane.  There's no reason this massive of an attack should be happening and successfully working.