| Index | Recent Threads | Unanswered Threads | Who's Active | Guidelines | Search |
| World Community Grid Forums
|
| No member browsing this thread |
|
Thread Status: Active Total posts in this thread: 46
|
|
| Author |
|
|
jonnieb-uk
Ace Cruncher England Joined: Nov 30, 2011 Post Count: 6105 Status: Offline Project Badges:
|
Having looked at the last 463 members to join Ripple 53 were members of WCG for at least 12 days before joining Ripple including 33 (inc Barnsley_Tatts & AgrFan) who had been members of WCG for more than a year before joining Ripple in the last 6 days.
---------------------------------------- |
||
|
|
knreed
Former World Community Grid Tech Joined: Nov 8, 2004 Post Count: 4504 Status: Offline Project Badges:
|
We are investigating what could have happened.
|
||
|
|
Falconet
Master Cruncher Portugal Joined: Mar 9, 2009 Post Count: 3315 Status: Offline Project Badges:
|
Could have been a bug but that would seem very unlikely... please keep us posted, techs.
----------------------------------------![]() - AMD Ryzen 5 1600AF 6C/12T 3.2 GHz - 85W - AMD Ryzen 5 2500U 4C/8T 2.0 GHz - 28W - AMD Ryzen 7 7730U 8C/16T 3.0 GHz |
||
|
|
branjo
Master Cruncher Slovakia Joined: Jun 29, 2012 Post Count: 1892 Status: Offline Project Badges:
|
---------------------------------------- ![]() Crunching@Home since January 13 2000. Shrubbing@Home since January 5 2006 ![]() |
||
|
|
twilyth
Master Cruncher US Joined: Mar 30, 2007 Post Count: 2130 Status: Offline Project Badges:
|
The hackers probably didn't realize how closely a lot of people watch their stats - either that or they didn't care, knowing that even if some people do that, most probably don't.
----------------------------------------So despite the fact that a handful of these situations have now come to light, the odds are that they are still succeeding in getting free XRPs. The part that is really unfortunate though is that since an association between a WCG id and Ripple is made, that association is irrevocable - IIRC. So anyone who has been hacked, should they decide at some future point to participate in the giveaway, they will be unable to under their current id. ![]() ![]() |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Not so. Just changing the wcg account password changes the key rl is hooking into. Also not being member of rl makes that the points are not counted.
----------------------------------------branjo, the from-to column is likely not sorted by order of events. The two transactions logically would be xs > rl > xs. [Edit 1 times, last edit by Former Member at Mar 12, 2014 9:37:55 PM] |
||
|
|
jonnieb-uk
Ace Cruncher England Joined: Nov 30, 2011 Post Count: 6105 Status: Offline Project Badges:
|
What's the source of your info branjo The /boinc/stats/user.gz file produced at 18:12UTC shows him as XtremeSystems and the Ripple Labs member status shows him as retired. |
||
|
|
twilyth
Master Cruncher US Joined: Mar 30, 2007 Post Count: 2130 Status: Offline Project Badges:
|
Not so. Just changing the wcg account password changes the key rl is hooking into. Also not being member of rl makes that the points are not counted. branjo, the from-to column is likely not sorted by order of events. The two transactions logically would be xs > rl > xs. Are you sure about that? I remember someone saying back in Nov. or Dec. that it was irrevocable. Since they use the external authorization code, you're saying that changes when you change your password? ![]() ![]() |
||
|
|
AgrFan
Senior Cruncher USA Joined: Apr 17, 2008 Post Count: 396 Status: Offline Project Badges:
|
My team switched to RL again today. I have set my profile to not accept any new work and will be changing my password after my current work is finished. My clients will be turned off until this is investigated fully and a resolution is found.
----------------------------------------I would hope IBM issues a public response to this very soon. One solution would be to zero out the RL points and stop issuing work to them. This is quite disturbing. But I guess this is what you get when you link volunteering and money.
[Edit 1 times, last edit by AgrFan at Mar 12, 2014 10:47:02 PM] |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Your clients dont need password to connect, nor is the established connection dependent on anything pw related. Change the pw now. Are you using an AMS? Change that one too if you do.
----------------------------------------There was a text on the profile page to say that the public keys would change with the password. Maybe it was lost with that february interface update? Just tested and after changing pw, the external ath key changed, plus theres a button on mp to force the weak key to change instantly. [Edit 1 times, last edit by Former Member at Mar 12, 2014 10:57:33 PM] |
||
|
|
|