-
sech1
You don't need to use the proxy
-
sech1
p2pool can handle multiple connections
-
Cindy
ah
-
Cindy
i guessed that
-
Cindy
like it seemed useless to have xmrig-proxy and p2pool on the same server
-
Cindy
thank you sech1!
-
m-relay
<crypt0_bear:matrix.org> Is the quibic-li client not open source?
github.com/qubic-li/client
-
m-relay
<crypt0_bear:matrix.org> I see binaries but I do not see any source code.
-
m-relay
<crypt0_bear:matrix.org> (Trying to figure out if they are doing dynamic code execution or just shipping with xmrig)
-
Cindy
it looks proprietary
-
Cindy
you could do a strings on the exe file and see if they're using xmrig
-
Cindy
i mean, if they are, it would be a violation of xmrig's license since they're not shipping the source code anywhere
-
m-relay
<crypt0_bear:matrix.org> Yeah. I got the bins. The alienminer seems to be another proprietary one. They have a hiveos config as well that is just doing another random bin install. I can setup a vm and tear it apart but I am pretty sure that they are just shipping xmrig with it
-
m-relay
<crypt0_bear:matrix.org> If they are not. Then the program is basically a RAT and just updates dynamic shellcode
-
m-relay
<crypt0_bear:matrix.org> Which I doubt they implemented. They probably just had xmrig hardcoded on there and then the parent pool can basically send the command to run the program
-
Cindy
if they are shipping a modded version of xmrig
-
Cindy
it is grounds for GPL violation
-
Cindy
unless they uploaded the source code
-
m-relay
<crypt0_bear:matrix.org> There is no mention of it on the docs or anything like that
-
m-relay
<crypt0_bear:matrix.org> I am trying to follow the logic of the ai training part. But the xmr stuff seems to be hardcoded since there is no reference for the ai training stuff yet
-
m-relay
<elongated:matrix.org> It’s a scam coin, they are mining xmr and paying in worthless tokens
-
Cindy
just finding mentions of xmrig inside the binaries are suspicious
-
Cindy
you should go dig deeper in the binaries (after extracting them) to see
-
Cindy
elongated: exactly, the miner program being proprietary is already a red flag
-
m-relay
<crypt0_bear:matrix.org> I was trying to figure out the mechanics of their xmr mining. They claim it is all done via their chain communication. which means you could bypass their greedy mining by snooping into their mempool basically.
-
Cindy
and also tied to a centralized platform
-
m-relay
<crypt0_bear:matrix.org> Also if they are going with full dynamic exeuction then that means that pools basically have full RCE over miners.
-
m-relay
<crypt0_bear:matrix.org> Just trying to figure out the mechanics since they promise the sky and back but I don't see any source code.
-
m-relay
<crypt0_bear:matrix.org> Looks like a marketing stunt betting on not everyone cashing out the new tokens. Basically funding via rehypothecation with xmr as the payout currency
-
Cindy
the client is proprietary and tied to their site
-
Cindy
so it's not decentralized
-
Cindy
btw, "full dynamic execution" is vague
-
Cindy
for example, xmrig does full dynamic execution, it has a JIT engine that allocates a big code buffer to recompile RandomX code into the native CPU instruction set
-
Cindy
of course, if they wanted to do RCE, they could tweak xmrig's JIT to have a little.. something special to it
-
Cindy
without arousing suspicion
-
m-relay
<crypt0_bear:matrix.org> Yeah but xmrig is basically a vm. Their execution is basically done so as virtualization. This would be like they run xmrig in memory but I doubt it
-
Cindy
xmrig is not a VM as i can see it
-
Cindy
it's more closer to a video game console emulator
-
m-relay
<crypt0_bear:matrix.org> Based on their docs, the full computation would mean you run actual executable bins via in memory.
-
Cindy
but for some CISC set
-
Cindy
i mean, it'll be recompiled to instructions for the native CPU and executed
-
Cindy
(nobody would mine in interpreter mode)
-
Cindy
and so i'd think that they could make a modification to xmrig's JIT engine, to have an opportunity to sneak in custom x86 code
-
Cindy
but not actually include it directly in xmrig's code
-
m-relay
<crypt0_bear:matrix.org> so virtual machine right? Not trying to split hairs but basically close to what something like the eth EVM would be. You just run itterations to then figure out the next inputs. But the actual binary that runs is native code. But the "virtual" code inside the calculations is running inside of that. It is not just executing into its own process. (Long day so language skills declin<clipped message>
-
m-relay
<crypt0_bear:matrix.org> ing. if it does not make sense)
-
Cindy
yes
-
Cindy
but xmrig likes to recompile the "virtual" code into native code
-
Cindy
for a ton of extra performance
-
Cindy
(also i realized i was retarded, so yeah randomX is kinda like a virtual machine)
-
Cindy
xmrig actually executes the native code within its own process
-
m-relay
<crypt0_bear:matrix.org> I don't think they modified. They are just having their bins dump it as either a bundled embdedded exe or later on curl to get their version. But from their docs for them to have a full execution of ai training programs then that means their miners would be capable of executing new in memory shellcode right?
-
Cindy
yes
-
Cindy
they could allocate a big code buffer and download shit for their program straight into that
-
Cindy
and execute off of the buffer
-
Cindy
of that buffer*
-
m-relay
<crypt0_bear:matrix.org> Yeah xmrig is self contained. It is a really simple instruction set too so not really something with a huge attack surface for busting out of the thread. (Especially since you are just hashing at the end of the day).
-
Cindy
yes, but i'm referring to the case if they modified xmrig
-
Cindy
since the client is proprietary
-
m-relay
<crypt0_bear:matrix.org> Yeah so at best they are just including xmrig and at worse they are adding a shellcode loader into their miner
-
Cindy
it's also important to note, xmrig is most commonly ran as root
-
Cindy
because of its one-time init code (tbh xmrig should descalate after that)
-
m-relay
<crypt0_bear:matrix.org> I downloaded the bins I could find. I'll spin up some vms next week and then reverse them. I was curious what they did for them. Was late to the 51% drama
-
m-relay
<crypt0_bear:matrix.org> huge pages support too
-
Cindy
all of those are done one-time
-
Cindy
like setting up kernel parameters and MSR registers
-
Cindy
xmrig can be ran as non-root if you do all of that yourself
-
Cindy
they are not gonna reach 51% and push people to run their literal virus lol
-
Cindy
to mine XMR
-
m-relay
<crypt0_bear:matrix.org> Ok yeah I see they give instructions for huge pages an non root since their docs mention that the miner can download and exec runners which are apps
-
Cindy
i like how cfb is saying their crappy shitcoin is decentralized
-
Cindy
a decentralized shitcoin where you have to register for an account on their site
-
Cindy
and mine with a proprietary executable
-
Cindy
"decentralized"
-
m-relay
<crypt0_bear:matrix.org> Yeah I'll dig through these bins next week
-
m-relay
-
m-relay
<shortwavesurfer2009:monero.social> Yo, check out the new Monfluo wallet design.
-
m-relay
<user2570:unredacted.org> I like
-
m-relay
<freddi99:matrix.org> anyone knows if this qubic shit is resolved or are they still trying to sabotage xmr?
-
nioc
resolved? why is there a problem?
-
m-relay
<freddi99:matrix.org> okey well maybe "problem" isn't the right term here. but is this something serious? i see conflicting information everywhere (some lose their mind, some say it's just propaganda) and cannot make up my mind about whether this is legit or some made up bs
-
Cindy
qubic is a paper tiger
-
Cindy
it's mostly FUD
-
Cindy
they're trying to pretend they'll get 51% but they won't get shit
-
rbrunner
Have an eye on this, as somebody said so spot-on recently "blocks don't lie":
moneroconsensus.info
-
rbrunner
In a few minutes they will switch from mining Monero 50% of the time to mine 100%, for 24 hours.
-
rbrunner
Also check the red "piece of cacke" labelled "unknown" here, scroll a bit down beyond the list of pools:
miningpoolstats.stream/monero
-
rbrunner
*piece of cake
-
rbrunner
"unknown" is, give or take a few percents, most probably the Qubic "miners"
-
Cindy
but it probably includes some not-yet-listed pools or solo miners
-
nioc
rbrunner: on miningpoolstats are you referencing qubic dot org?
-
nioc
api error
-
rbrunner
No, the round graph just below that
-
rbrunner
Over the last 1000 blocks
-
rbrunner
Cindy: Well, yes, that's why it's called "unknown".
-
rbrunner
-
m-relay
<elongated:matrix.org> Who is mining empty blocks ? What was % of empty blocks before cubic shit
-
nioc
for moneroconsensus , they added ~9 pools yesterday
-
rbrunner
The assumption is that's Qubic
-
rbrunner
with the empty blocks
-
nioc
unless there are 2 blocks very close together it is qubeic
-
m-relay
<elongated:matrix.org> So only 9 blocks mined by them 🤡
-
rbrunner
Over which time?
-
nioc
yesterday they had 3 or 4 in a row sometimes
-
m-relay
<elongated:matrix.org> Over say a month before cubic started mining empty blocks ?
-
rbrunner
Make of it what you like, but the Qubic fans, on their discord server, trust the "pool hashrate" display on the left side here:
explorer.jetskipool.ai/xmr-tracker.html
-
m-relay
<eddie:oblak.be> I was thinking, we should not publicly react to it anymore, just ignore those fools, the twitter beef is half the fun for them
-
nioc
tweeter? IRC is my social media lol
-
Cindy
this will be a nothingburger
-
rbrunner
I don't see any problem in studying them like we would any other technical or operational problem regarding Monero, calmly and reasonably
-
nioc
yes
-
Cindy
but the problem is interesting
-
m-relay
<eddie:oblak.be> rbunner, I agree
-
m-relay
<eddie:oblak.be> rbrunner, I agree
-
sech1
Just ignore them. They need hype, they need publicity. Don't give it to them.
-
rbrunner
With 2 GH/s they would be the biggest Monero pool right now.
-
sech1
They don't have enough hashrate, and don't worry, we are working behind the scenes. Just can't go public with anything right now.
-
Cindy
qubic fans will throw the biggest fit when they realize that it was just a pyramid scheme
-
Cindy
and cfb will run away with the mined XMR lol
-
plowsof
What do we think of tevadors solution to make centralised pools (prohibitively?) expensive by increasing the bandwidth requirements from 1MB to 3GB a day per miner (pls confirm actual figures)
monero-project/research-lab #136#issuecomment-3170565603
-
plowsof
Essentially pushing people toward p2pool mining
-
Cindy
3GB a day per miner would DDoS the biggest pools
-
Cindy
so that sounds like a pretty good idea
-
m-relay
<eddie:oblak.be> I do not have a problem with centralised mining pools per se, but it is worrying that most miners flock to the biggest pools
-
m-relay
<eddie:oblak.be> you need to be able to attract miners that are technically unskilled, as to increase the potential pool of miners, imho
-
nioc
thx plowsof , I hadn't seen that b4
-
rbrunner
I just fell off my chair. tevador posted 2 hours ago. Wow, quite a relief.
-
Cindy
i wonder how the 3GB will affect small mining pools (LAN-only with a bunch of computers)
-
m-relay
<eddie:oblak.be> would it be possible to devise a mechanism where it gets more difficult for centralized pools only when they reach 5 or 10 % of the total hashrate?
-
nioc
p2pool is great except for the many small payouts you get which will then need to be consolidated
-
Cindy
i wonder about modifying RandomX to include ed25519 signatures in the algorithm
-
Cindy
of course this is "miners signing their own block" which i don't know works
-
Cindy
but a local mining pool could just provide all of its own computers with the key
-
Cindy
while a centralized online pool would have to devise a mechanism to sign data for miners
-
Cindy
how would this affect p2pool?
-
Cindy
btw, does xmrig support mTLS auth in its API service?
-
Cindy
i mean if the service only supports tokens then i'm fine with locking it behind a HTTP forwarder that provides mTLS auth
-
quantum`
Huh, 17 hours mining Nano on P2Pool at 9kH/s, and no Monero...
-
spit
That sucks dude.
-
Cindy
try mini
-
quantum`
Maybe I should switch to Main?
-
Cindy
i mined mini with my crappy laptop at 4KH/s
-
Cindy
and i got atleast some payouts
-
quantum`
28 shares accepted... whatever that means.
-
Cindy
shares in p2pool or xmrig??
-
quantum`
xmrig.
-
quantum`
12 in p2pool.
-
Cindy
p2pool likes to break challenges up into pieces for xmrig
-
Cindy
so i shouldn't rely on xmrig's "shares accepted" thing only
-
quantum`
I see.
-
Cindy
into easier-to-solve pieces*
-
quantum`
"Payouts 0.0000000/month"
-
quantum`
Eh, 'thank you'.
-
sech1
p2pool-nano needs to find a block to pay you. It's all in the README
-
sech1
switch to p2pool-mini to get payouts more often
-
quantum`
How about Main? I don't mind waiting for larger payouts.
-
quantum`
24/7
-
Cindy
main, you'll get crushed by other computers with 1000x more hashrate
-
Cindy
mini is a equlibrum
-
quantum`
Ah
-
Cindy
9KH/s is more than enough for mini
-
Cindy
i don't know why you're mining in nano
-
quantum`
It's the default for Gupaxx.
-
quantum`
... but I've stopped p2pool in Gupaxx, and the ability to choose which sidechain is still grayed-out.
-
quantum`
Oh, I've cleared the Options and now can choose.
-
Cindy
i thought the default was mini
-
quantum`
I haven't messed with that 'till now.
-
quantum`
I've hit Clear on Options, whereas before I used Advanced. Now I have settable Options.
-
quantum`
... except p2pool and xvb are now staying orange, not going to green.
-
Cindy
does xmrig have mTLS auth for its API?
-
quantum`
In Gupaxx there's a TLS checkbox in xmrig.
-
Cindy
that's for the pool server
-
Cindy
i meant if xmrig is hosting a HTTP API server
-
quantum`
Cindy, do you know whether anything writes to the blockchain, other than monerod?
-
quantum`
IOW I want to run two VMs and have them share one disk with the bc.
-
Cindy_
i think its just monerod?
-
Cindy_
run monerod in a seperate server
-
quantum`
I wasgoing to run monerod in one VM and not in the other, but they both need the ports it has.
-
Cindy_
why are you running two VMs
-
quantum`
I could forward those ports as long as they're TCP and not UDP.
-
Cindy_
like why two VMs in the same PC
-
m-relay
<ofrnxmr:xmr.mx> Cuz he's quantum computing
-
Cindy_
all you're doing is adding additional overhead
-
Cindy_
and killing your overall hashrate more :P
-
quantum`
I'm pinning CPUs separately. I've found that when I run 55 threads in one VM hashrate crashes.
-
Cindy_
why are you running 55 threads
-
quantum`
Throttle it back to 24 CPUs or so and I max around 9200.
-
Cindy_
why are you RUNNING 9200 THREADS?!?!
-
quantum`
So I'm splitting those threads into two VMs.
-
quantum`
Nah, 9200H/s
-
Cindy_
ah
-
quantum`
... 2ith 24 CPUs
-
Cindy_
i doubt you're gonna get any performance with this
-
m-relay
<ofrnxmr:xmr.mx> Are you usong cpus and threads onterchangeably
-
Cindy_
you're just adding more burden with the VM engine
-
m-relay
<ofrnxmr:xmr.mx> Cindy, he's not looking for performance, he's looking for a long-term hobby
-
Cindy_
55 threads in 24 CPUs would obviously kill your hashrate
-
Cindy_
because like
-
quantum`
I'm using cpus and threads onterchangeably
-
Cindy_
at some point, the kernel scheduler kicks in
-
Cindy_
ofrnxmr: oh really?
-
quantum`
Well 9200H/s is the best I've ever done. In testing as I increase threads H/s drops off. It's the algo.
-
m-relay
<ofrnxmr:xmr.mx> Seems like it. Lol. This seems like what happens when someone has too much time on their hands. Its not this (weeks) difficulty to mine monero
-
Cindy_
when you increase threads beyond the cores
-
Cindy_
your kernel has to juggle threads around the cores
-
Cindy_
which will be more overhead
-
quantum`
Sure, this is why I'm matching threads to CPU threads.
-
quantum`
... and testing shows that over a certain number of CPU threads performance drops dramatically.
-
Cindy_
also seriously, move the blockchain outside the VM
-
quantum`
So I am splitting CPU threads between VMs. Problem is sharing the blockchai and monerod ports.
-
Cindy_
remember that even if the CPU is being passed through, the hard drive is obviously emulated
-
Cindy_
so youll gain a little by moving it outside the VMs
-
quantum`
The bc drive is in my file server, and is pulled in to the VM. But I can't have two monerod's writing to one BC.
-
Cindy_
wait
-
Cindy_
you're remotely mounting the blockchain on some file server
-
Cindy_
and monerod is using it like that?
-
quantum`
Yep
-
Cindy_
honestly that would be even worse performance than a physical HDD
-
quantum`
KVM VMs.
-
quantum`
It is a rotating drive.
-
Cindy_
oh wow, a combo :P
-
Cindy_
sorry for dunking on you a lot lol
-
Cindy_
but this setup seems way too overcomplicated
-
quantum`
Yay. Is 9,200H/s bad for28 CPU threads?
-
Cindy_
and adding more burden to your miner
-
quantum`
Best I've ever done.
-
quantum`
28 threads in one VM and 28 in t'other.
-
quantum`
I just have to share monerod somehow.
-
Cindy_
host monerod outside this mess?
-
quantum`
This would double my performance over one VM.
-
quantum`
And forward ports?
-
Cindy_
yes
-
Cindy_
also lol "double my performance"
-
Cindy_
bro discovered infinite CPU power glitch
-
Cindy_
just host more VMs
-
m-relay
<eddie:oblak.be> 9 kh/s for 28 CPU is really bad
-
quantum`
Well I'm out of CPU threads to pin now, with 2 VMs.
-
Cindy_
yes
-
Cindy_
eddie is right
-
m-relay
<eddie:oblak.be> You should be able to do 25 or more
-
Cindy_
even my crappy laptop with 4 cores and 4 GB of RAM
-
quantum`
O
-
Cindy_
can still get more than half of that
-
quantum`
Huh...
-
Cindy_
the problem is the amount of overhead you're adding on this
-
m-relay
<eddie:oblak.be> I do 4 on 8 cores
-
quantum`
It hardly hits my disk.
-
m-relay
<eddie:oblak.be> And that's just for giggles
-
Cindy_
but i discovered today that like
-
Cindy_
i can get unlimited hashrate if i host more VMs
-
quantum`
(You're welcome)
-
Cindy_
yay
-
quantum`
CPU cores are passed directly through.
-
quantum`
Need to check my host load, before and after..
-
Cindy_
what about your blockchain
-
quantum`
That disk is hardly hit while hashing.
-
quantum`
I guess monerod updating.
-
quantum`
Hm, if I run monerod in one VM, I don't need the disk in the other VM. Just monerod's ports. Hope they're all TCP.
-
quantum`
... but on the host I can't differentiat between the qemu-system-86' between my herd of VMs...
-
Cindy_
is this all for security? :P
-
quantum`
Yes
-
Cindy_
if i were you, i'd host monerod on a seperate machine
-
quantum`
Ok monerod is indeed all TCP, 18080-3
-
Cindy_
flash linux and put xmrig on a flash drive
-
Cindy_
disconnect the hard drive off the computer and boot off of the flash drive
-
Cindy_
and i'd get 4x the hashrate with the same amount of security
-
quantum`
This is my Big Bad Server wih copious cores.
-
quantum`
I do have an ODroid I could host monerod on, but I don't see the point. The disk is hardly hit.
-
Cindy_
are you mining off of a remote node?
-
quantum`
It's the raw horsepower I bought this server for, specifically monero.
-
Cindy_
you should check what node you're mining off of
-
Cindy_
like "hardly hit disk" is suspicious
-
quantum`
Running Gupaxx. Should be p2pool.
-
quantum`
iotop
-
Cindy_
check the p2pool tab
-
Cindy_
in gupaxx
-
quantum`
Ok the VM's been down a bit so needs to sync up.
-
quantum`
iotop shows the bc disk is hardly hit.
-
quantum`
Had to copy the qcow2 for the second VM.
-
quantum`
(and pin diff CPU cores)
-
quantum`
I am doing New Science, you see.
-
quantum`
Maybe 'burntcorpse' will pop in. (Hopefully someone will open a window if he does)
-
quantum`
Ok p2pool is syncing now.
-
quantum`
"<eddie:oblak.be> I do 4 on 8 cores" That's freakin' 500H/s per core. Unbelievable.
-
Cindy_
the most amount of security i'd be doing is doing all the configuration myself, running xmrig as non-root
-
Cindy_
maybe even running xmrig in a seperate linux namespace
-
quantum`
You're suspicious that KVM is a ottleneck. It's now clear which qemu-system-x86 on the host is altcoin1 VM. 2,797% CPU for 28 cores. 99.8928571429% util.
-
quantum`
I seem to be maxing my CPUs.
-
quantum`
Idk where else a problem could be.
-
Cindy_
even if you're passing through the CPU, a system is a lot more than just the CPU
-
Cindy_
so KVM is emulating the other stuff
-
Cindy_
and it does that through software traps, stuff that cuts into the CPU performance
-
quantum`
Those numbers on the host. On the guest 2,780% usage. Maybe the diff is overhead.
-
quantum`
I don't believe 500H/s per CPU.
-
quantum`
Just running top on host and guest cuts to 5,500H/s.
-
quantum`
Well, stopping top on both I'm still at 5,600H/s. Must be the difficulty.
-
Cindy_
lol
-
quantum`
I was at 9,200+
-
rbrunner
My daemon reorganized 5 times in the last 1.5 hours.
-
rbrunner
Just did No 6 :)
-
nioc
yep 6 here
-
nioc
last one was one of 6 consecutive empty blocks
-
rbrunner
I am sure that the "paper tiger" Cindy wrote about this morning UTC :)
-
Cindy_
oh wow!
-
Cindy_
6 empty blocks? :o
-
rbrunner
6 reorgs in 1.5 hours and 6 empty blocks happens every other week, right? :)
-
Cindy_
rbrunner you don't have to call me out like this :P
-
Cindy_
are they really mining empty blocks right now?
-
nioc
I looked at renting hashpower, only $500 for enough power to on avg find a block
-
nioc
all the blocks they mine for several days now are empty
-
Cindy_
what are they trying to achieve with that :P
-
Cindy_
slowing down transactions?
-
nioc
publicity
-
Cindy_
i see
-
nioc
made me turn on my rigs in the summer lol
-
Cindy_
i mean, honestly
-
nioc
weather has been ok so
-
Cindy_
CFB is just trying to do this for clout, but i wonder if the EU or other governments that are trying to ban monero will jump in on this too
-
Cindy_
like harness tons of computers for the purpose of attempting to sabotage monero
-
» nioc powers up a shitbox
-
Cindy_
isn't that just a litterbox?
-
nioc
there are many types lol
-
nioc
including my car
-
m-relay
<rucknium:monero.social> Your IoT litterbox can mine Monero, too :D
-
nioc
automated litterboxs are a bad idea
-
nioc
you need to observe the output
-
Cindy_
wasn't there that uhh
-
Cindy_
automated cat box from china
-
Cindy_
that literally killed cats
-
Cindy_
like crushed their necks with the (very powerful) window motors
-
Guess65
hey guys
-
Cindy_
i doubt this is the first 51% attack attempt on monero btw
-
Guess65
is there an amazon like shop to buy stuff for xmr?
-
Guess65
hello Cind
-
Cindy_
hi Guess65
-
m-relay
<rucknium:monero.social> Guess65: There have been multiple outfits setup for that, but they closed probably because not enough customers. Check out xmrbazaar.com
-
Guess65
how come there arent enough customers?
-
Guess65
wonders
-
quantum`
Ok I have one monerod and blockchain present in two VMs.
-
nioc
SB #1 online
-
quantum`
And she laughs because I am trying something new...
-
m-relay
<crz:matrix.org> ofrnAI: Check my DM thx
-
nioc
shitbox #2 online
-
midipoet
Are these reorgs actually happening? And if so, should I start thinking about how I can do a 0 conf scam on someone?
-
m-relay
<rucknium:monero.social> midipoet: you can't do that because:
-
m-relay
<rucknium:monero.social> 1) You would have to send a contradictory tx that spends to yourself to the Qubic pool, which doesn't accept direct tx submission AFAIK.
-
m-relay
<rucknium:monero.social> 2) Qubic is mining blocks devoid of any txs anyway, so it would not mine any contradictory txs.
-
m-relay
<rucknium:monero.social> But yes a few orphans are happening:
moneroconsensus.info
-
m-relay
<rucknium:monero.social> You would see this in the default log level of a Monero node, too.
-
m-relay
<rucknium:monero.social> Your first tx to the victim would stay in the txpool, waiting to be mined by honest miners. You would still be sending them the money, just maybe a few minutes later.