The Antbleed Backdoor
Antbleed is a backdoor introduced by Bitmain into the firmware of their bitcoin mining hardware Antminer.
The firmware checks-in with a central service randomly every 1 to 11 minutes. Each check-in transmits the Antminer serial number, MAC address and IP address. Bitmain can use this check-in data to cross check against customer sales and delivery records making it personally identifiable. The remote service can then return "false" which will stop the miner from mining. www.antbleed.com
Antbleed is a backdoor introduced by Bitmain into the firmware of their bitcoin mining hardware Antminer.
The firmware checks-in with a central service randomly every 1 to 11 minutes. Each check-in transmits the Antminer serial number, MAC address and IP address. Bitmain can use this check-in data to cross check against customer sales and delivery records making it personally identifiable. The remote service can then return "false" which will stop the miner from mining. www.antbleed.com
Antbleed 2.0 *Confirmed
The procedure doing the second HTTP request is named isAuthToRun, so this seems to be similar to the "antbleed" functions, though this is in a different binary. It appears to make the call to bitmain.com with details of the hash boards and the MAC address, and returns a yes or no if the device is allowed to mine or not.
It's illegal to transmit personally identifying information without consent & breaks multiple international laws, especially exporting data out of the US & EU to non Safe Harbours.
https://www.reddit.com/r/Bitcoin/comments/686rwq/also_latest_bitmain_firmware_fix_calls_home_sands/
The procedure doing the second HTTP request is named isAuthToRun, so this seems to be similar to the "antbleed" functions, though this is in a different binary. It appears to make the call to bitmain.com with details of the hash boards and the MAC address, and returns a yes or no if the device is allowed to mine or not.
It's illegal to transmit personally identifying information without consent & breaks multiple international laws, especially exporting data out of the US & EU to non Safe Harbours.
https://www.reddit.com/r/Bitcoin/comments/686rwq/also_latest_bitmain_firmware_fix_calls_home_sands/
reddit
Also latest bitmain firmware fix calls home. sands mac / serial /...
Posted in r/Bitcoin by u/notthematrix • 200 points and 79 comments
Due to the huge influx of new people joining crypto, we have created helpful info for new traders http://telegram.me/LearnToTrade please share to those who need it. Thanks!
@Litecoin listed on Bithumb, the largest exchange in Korea & 5th largest in the world.
This media is not supported in your browser
VIEW IN TELEGRAM
Bitcoin hits 2000 USD
The telegram crypto community is under going substantial growth atm, welcome all. This is a shout out & thanks to all the admins who donate their time to keep this community running! From now on you can find a list of all the major telegram groups by visiting the following link: ➡️ @Crypto
BREAKING: We received report that OKCoin (CN site) resumed withdraws!
W/d limit based on vip level, starting from 10BTC/200LTC/1000ETH daily (via cnLedger)
W/d limit based on vip level, starting from 10BTC/200LTC/1000ETH daily (via cnLedger)
Telegram & Crypto has had a huge surge in traffic, unfortunately groups have a 5k user limit, which several have hit. We have forked coinfarm to a second group (coin farm classic) to meet demand. Join us at @TheCoinFarm
This media is not supported in your browser
VIEW IN TELEGRAM
Bitcoin hits 3000 USD
Jaxx exploit: stolen coins from a @jaxx_io wallet, user on whalepool due to seed being stored unencrypted more info: https://vxlabs.com/2017/06/10/extracting-the-jaxx-12-word-wallet-backup-phrase/
https://twitter.com/cbaxter/status/874415583848038401
To be clear this isnt an Ethereum hack but a FreeWalletOrg hack
To be clear this isnt an Ethereum hack but a FreeWalletOrg hack
Twitter
Christian Baxter
Watching an Ethereum bank robbery in realtime as someone drains all of the @freewalletorg wallets...$8m and counting https://t.co/nEh3F9kGWY
Warning: Electrumdash.org is a fake clone of the official Dash site, which is https://electrum-dash.org. DO NOT USE electrumdash.org.