Someone on reddit checked what data left your pc, pub keys only.
I know ppl who did this but then went solo never mining with hpool, their coins never mysteriously vanished.
Edit.
If they didn’t do this ppl would steal plots and earn a fortune possibly.
Left your pc? What? Do you understand what the mnemonic phrase is for? Anyone that has that phrase has your keys. All of them. That phrase is your backup if you loose your keys. It is how you recover your wallet. So when you copy and paste that phrase into their site, you give them everything.
Yes I understand how keys work lol.
I’ve explained how and why it’s done as it is.
If you don’t believe it, that’s fine, let’s agree to disagree.
If you honestly believe that you pasted your mnemonic phrase into their program and they don’t have your keys (all of them), then that is some blind trust. I wouldn’t have that level of trust for anyone when it comes to money. If they truly want to gain trust, they should have just asked for what they actually need. The public keys.
Coins still sat on an address are proof enough for me that no ones using anything maliciously.
That with the reddit poster and other bits I’ve read are enough to satisfy me.
Do I think they are going to steal my coins? Probably not. But am I going to do everything in my power to make sure my exposure is limited? Absolutely! That is why HPool is running on its own VM and firewalled from my network. It only has access to the plots. And when I earn, I remove my balance to my cold wallet. Just because you “feel” like it is alright, doesn’t mean you should just trust them entirely. Heck, I didn’t even do that with Slushpool. I move all my crypto to my Ledger Nano. I will do that with Chia once it is supported.
Yeah, I checked the logs every night and morning. The only warning I get is that the plots check time is above 5s, sometime 5.02s and max of up to 6s. As well some warning about nodes disconnect. I believe this should be fine. I did all the tuning I could and made sure everything is correct on the NAS and 10G switch. The storage setup is RAID 50 and I’ve turned off all RAID maintenance functions. When I did a test, I was able to read data of up to 800 MBps.
So far I am satisfied with HPool. Wish I did not have to take this route. I do not mind replotting again for the official pooling method, but waiting and not making at least 1 XCH is discouraging.
And thays good practise, but claiming they have your pvt key when it never leaves your pc is entirely different.
Claiming that they don’t have your pvt key is also wrong. Because you gave them everything they need to gain access to that key. Just because one guy says that the initial info sent to HPool does not contain your private key does not mean it is never sent. You are running their software 24/7 with access to everything they need to get that key. Just because the initial plotter call did not take it doesn’t mean it isn’t taken once the link is established. Saying that you “know” that key is not sent is just wrong. Because you don’t know. Nobody does. That’s the point. If you trust that they don’t have your key. Great. You are a trusting person. But trust is not fact.
Well the people i was mentioning don’t run the software, only gave the mnemonic.
And I’m saying it’s enough to satisfy me with others backing it up.
Your being paranoid about what could happen, instead of looking at what is happening, your perogative.
Anyway, that’s enough debate, I have no need to convince anyone of anything.
As always caveat emptor.
Enjoy your day.
When dealing with IT (which has been my career), you absolutely need to plan for “what could happen”. Just strolling along thinking everyone will do the right thing will just get you screwed. But if that is what you prefer to do, that’s fine. But telling everyone here that everything is safe and not to worry is just passing bad information because you don’t know. That is your assessment, your belief with no way of knowing if that statement is actually true. What their software is doing right this very second as I type this is an unknown and there is nothing you can say that will prove otherwise. That is the bottom line. That is fact.
Caveat emptor as I said.
Ppl must take responsibility for themselves, not listen to randoms on the interwebs.
Tough lesson to learn, but thats how it is.
Maybe HPool hasn’t done anything nefarious to you yet, other than charge 30%. But an obvious scenario is coming that you should prepare for.
When the official pool protocol is finally finished, people will leave HPool in droves. Sure, those Chinese customers who were there from the beginning might stay, and HPool itself might implement the official protocol. But their fees are too high and those who only joined because they were sick of waiting for the official protocol will flee. They have no loyalty to HPool, and the reverse is also true.
HPool has made a mint so far. But when the gravy train stops running, they could have a “boating accident”. I’m not saying it will happen, but it’s something you should be prepared for. And the first step in that contingency planning is to make sure the wallet to which you gave them your private keys contains 0 XCH.
I’m not so sure about that as official pools will require re-plotting (Thanks to Chia Inc who couldn’t care less about their early adopters)
Personally plotting is a PITA for me. I’m just about to fill my last drive and the idea of throwing all that away and starting from scratch sounds overwhelming at the moment.
2 rules I follow with hpool:
If hpool decides to stiff their users I will lose up to 0.1 XCH which is not a big deal for me.
Yes, of course there will be some people such as yourself who will stick with HPool. And it sounds like you’re taking the basic necessary precautions to avoid losing money if an HPool rug pull happens. Hopefully everyone else is doing the same.