Someone else is contributing to my TEAM

Moderators: Site Moderators, FAHC Science Team

maxthompson
Posts: 7
Joined: Wed Nov 25, 2009 10:12 pm

Someone else is contributing to my TEAM

Post by maxthompson »

Today I viewed the status of my team 175186.

I used the hex hey for extra security.

I started the team to utilize some of my network computers that have intel duo and not being used now.

But - instead of my user being credited - a non team member called louze001 is getting the credit for the process. my userid shows 0.

So - since I just started this - I have to wonder - can I trust this situation - security is key and if someone that want's to donate - and others want to take the credit???

Please explain if someone knows before I disable usage.

Below it does not even show me as a team member and those credits below belong to me (maxthompson). Who the heck is "louse0001"?



ROCKET360

Report generated on 14:02:43 November 25, 2009
Date of last work unit 2009-11-25 12:14:53
Active CPUs within 50 days 1
Team Id 175186
Grand Score 383 (certificate)
Work Unit Count 2 (certificate)
Team Ranking (incl. aggregate) 63783 of 168865
Home Page

Team members
Rank
(within team) Donor Score WU
1 louze001 3
Last edited by maxthompson on Fri Nov 27, 2009 4:18 am, edited 1 time in total.
maxthompson
Posts: 7
Joined: Wed Nov 25, 2009 10:12 pm

Re: Someone Hacked my New Team

Post by maxthompson »

OK - So this is really strange - like just 1 minute after this post - someone modified the Team Status. Now I am showing, with less credit - and "louse0001" still showing.????

How can this be?

I've been in IT for 33 years - I know when to smell a fish!
maxthompson
Posts: 7
Joined: Wed Nov 25, 2009 10:12 pm

Re: Someone Hacked my New Team

Post by maxthompson »

Credits that belong to me are still being credited to louse0001 - who is louse0001?

How did they Hack the process off my computer. Maybe Stanford will have to address this Security Hack ASAP.
Grandpa_01
Posts: 1122
Joined: Wed Mar 04, 2009 7:36 am
Hardware configuration: 3 - Supermicro H8QGi-F AMD MC 6174=144 cores 2.5Ghz, 96GB G.Skill DDR3 1333Mhz Ubuntu 10.10
2 - Asus P6X58D-E i7 980X 4.4Ghz 6GB DDR3 2000 A-Data 64GB SSD Ubuntu 10.10
1 - Asus Rampage Gene III 17 970 4.3Ghz DDR3 2000 2-500GB Segate 7200.11 0-Raid Ubuntu 10.10
1 - Asus G73JH Laptop i7 740QM 1.86Ghz ATI 5870M

Re: Someone Hacked my New Team

Post by Grandpa_01 »

That's odd I just checked your team page (175186) and it shows Rocket360 with 4 WU's and a score of 803 no other members no louse0001
Image
2 - SM H8QGi-F AMD 6xxx=112 cores @ 3.2 & 3.9Ghz
5 - SM X9QRI-f+ Intel 4650 = 320 cores @ 3.15Ghz
2 - I7 980X 4.4Ghz 2-GTX680
1 - 2700k 4.4Ghz GTX680
Total = 464 cores folding
maxthompson
Posts: 7
Joined: Wed Nov 25, 2009 10:12 pm

Re: Someone Hacked my New Team

Post by maxthompson »

Yep - this is not good. Who is hacking the system and who needs to be notified?

The stats have been changed between my last post and by Grandpa_01 » Wed Nov 25, 2009 6:04 pm.
Slash_2CPU
Posts: 57
Joined: Sat Apr 19, 2008 5:15 pm

Re: Someone Hacked my New Team

Post by Slash_2CPU »

Decent chance it was a stats "hiccup," and the credit never actually changed.
ASRock X99 WS i7-5930K @ 4.4GHz /2x GTX 970 @ 1.46GHz /4x4GB DDR4-2666
Phenom II X6 @ 3.7GHz /2x2GB DDR3-1680 /GTX 970 @ 1.40GHz
450-600K PPD @ ~850W
patonb
Posts: 348
Joined: Thu Oct 23, 2008 2:42 am
Hardware configuration: WooHoo= SR-2 -- L5639 @ ?? -- Evga 560ti FPB -- 12Gig Corsair XMS3 -- Corsair 1050hx -- Blackhawk Ultra

Foldie = @3.2Ghz -- Noctua NH-U12 -- BFG GTX 260-216 -- 6Gig OCZ Gold -- x58a-ud3r -- 6Gig OCZ Gold -- hx520

Re: Someone Hacked my New Team

Post by patonb »

You now have 4 wus, with 3 as louis and 1 as max
WooHoo = L5639 @ 3.3Ghz Evga SR-2 6x2gb Corsair XMS3 CM 212+ Corsair 1050hx Blackhawk Ultra EVGA 560ti

Foldie = i7 950@ 4.0Ghz x58a-ud3r 216-216 @ 850/2000 3x2gb OCZ Gold NH-u12 Heatsink Corsair hx520 Antec 900
maxthompson
Posts: 7
Joined: Wed Nov 25, 2009 10:12 pm

Re: Someone Hacked my New Team

Post by maxthompson »

Just ran the stats - same as before - so not sure what Grandpa_01 » Wed Nov 25, 2009 6:04 pm was looking at - unless they have two stat engines???


ROCKET360

Report generated on 15:47:18 November 25, 2009
Date of last work unit 2009-11-25 14:11:54
Active CPUs within 50 days 2
Team Id 175186
Grand Score 803 (certificate)
Work Unit Count 4 (certificate)
Team Ranking (incl. aggregate) 56905 of 168871
Home Page


Team members
Rank
(within team) Donor Score WU
1 louze001 467 3
2 maxthompson 336 1
P5-133XL
Posts: 2948
Joined: Sun Dec 02, 2007 4:36 am
Hardware configuration: Machine #1:

Intel Q9450; 2x2GB=8GB Ram; Gigabyte GA-X48-DS4 Motherboard; PC Power and Cooling Q750 PS; 2x GTX 460; Windows Server 2008 X64 (SP1).

Machine #2:

Intel Q6600; 2x2GB=4GB Ram; Gigabyte GA-X48-DS4 Motherboard; PC Power and Cooling Q750 PS; 2x GTX 460 video card; Windows 7 X64.

Machine 3:

Dell Dimension 8400, 3.2GHz P4 4x512GB Ram, Video card GTX 460, Windows 7 X32

I am currently folding just on the 5x GTX 460's for aprox. 70K PPD
Location: Salem. OR USA

Re: Someone Hacked my New Team

Post by P5-133XL »

The first thing you do when there is a suspicion that you are not getting credit for your WU's is to check your clients configuration and their logs. Who is listed as the user and what is the team number? Invariably, it is not that someone hacked something but that either the user name is incorrect or the team number is wrong and all that you have to do is reconfigure.

Please do not use a text editor to reconfigure but rather reconfigure from within the client. The client.cfg is NOT a text file! If you edit the file it is common that the file gets destroyed and all your work goes to anonymous...
Image
bruce
Posts: 20824
Joined: Thu Nov 29, 2007 10:13 pm
Location: So. Cal.

Re: Someone Hacked my New Team

Post by bruce »

Use of the passkey is still in the process of of being implemented on the servers. It doesn't prevent anyone from contribituing to your team but eventually I expect you will be able to identify those contributions which used it.

The person louze001 is running four clients, one of which is crediting your team. The other three cleints are crediting a team number with one different digit. Obviously they've made a typographic error. I have no way to contact them to inform them of the error unless they show up here and ask why their team credits are too low. Nobody named louze001 has joined this forum.
7im
Posts: 10179
Joined: Thu Nov 29, 2007 4:30 pm
Hardware configuration: Intel i7-4770K @ 4.5 GHz, 16 GB DDR3-2133 Corsair Vengence (black/red), EVGA GTX 760 @ 1200 MHz, on an Asus Maximus VI Hero MB (black/red), in a blacked out Antec P280 Tower, with a Xigmatek Night Hawk (black) HSF, Seasonic 760w Platinum (black case, sleeves, wires), 4 SilenX 120mm Case fans with silicon fan gaskets and silicon mounts (all black), a 512GB Samsung SSD (black), and a 2TB Black Western Digital HD (silver/black).
Location: Arizona
Contact:

Re: Someone contributed to my New Team

Post by 7im »

And just for the record, nothing was hacked. This is just a misunderstanding of how the crediting process works for user names and team numbers. And a title edit might be in order. No use scaring people...

Edit by Mod: Done.
How to provide enough information to get helpful support
Tell me and I forget. Teach me and I remember. Involve me and I learn.
maxthompson
Posts: 7
Joined: Wed Nov 25, 2009 10:12 pm

Re: Someone contributed to my New Team

Post by maxthompson »

No - something is still not right - I'm not scaring people. In fact louze001 is still getting credit for the processes that are running on my machine.

My CPU is generating all the work that is posted for it. I have monitored the processing and no credit is being made to my CPU's

This team was created and immediately louze001 started getting my credit - now there is no way that some random person joined my team the same moment I created the team.

Hey I've been in IT for over 30 years - so it's not a mystery of what - but why and how.

If I am going to trust you to use my CPU's then - Why are you dismissing this as a fluke.

And if your systems are so Glitchable/ FLUKE-ish - how can you produce reliable scientific data??? - this is 2009 and the old GLITCH story dosen't fly.

SO next time I say someone HACKED my Team - let's find the problem and not glaze - and DO NOT ALTER my valid concern post TITLE - as Someone Contributed - ha this is a slap in the face of a donation.

I'll be contacting the University Admin Next week.

Best Reguards
Last edited by maxthompson on Fri Nov 27, 2009 4:31 am, edited 1 time in total.
maxthompson
Posts: 7
Joined: Wed Nov 25, 2009 10:12 pm

Re: Someone HACKED my TEAM

Post by maxthompson »

As you can see below - my CPU's have been processing non stop - although the credits are still going to louze001. Louze001 is not running these processes - my CPU's are.


ROCKET360

Report generated on 19:53:13 November 26, 2009
Date of last work unit 2009-11-26 00:06:37
Active CPUs within 50 days 2
Team Id 175186
Grand Score 1305 (certificate)
Work Unit Count 7 (certificate)
Team Ranking (incl. aggregate) 52163 of 168933
Home Page http://fah-web.stanford.edu/generic.html


Team members
Rank
(within team) Donor Score WU
1 maxthompson 672 2
2 louze001 633 5
bruce
Posts: 20824
Joined: Thu Nov 29, 2007 10:13 pm
Location: So. Cal.

Re: Someone HACKED my TEAM

Post by bruce »

Please post FAHlog.txt from the clients which are being credited to louze001 and we'll get this straightened out. According to the information I have, the most recent credits for those clients are
Intel Windows 2009-11-24 20:05:55 P4626 R20 C90 G42
Intel Windows 2009-11-26 12:07:26 P4602 R14 C83 G19
PS3 -PS3 2009-11-26 18:12:25 P3462 R29 C176 G21
AMD Windows 2009-11-26 20:07:05 P6316 R26 C12 G9
7im
Posts: 10179
Joined: Thu Nov 29, 2007 4:30 pm
Hardware configuration: Intel i7-4770K @ 4.5 GHz, 16 GB DDR3-2133 Corsair Vengence (black/red), EVGA GTX 760 @ 1200 MHz, on an Asus Maximus VI Hero MB (black/red), in a blacked out Antec P280 Tower, with a Xigmatek Night Hawk (black) HSF, Seasonic 760w Platinum (black case, sleeves, wires), 4 SilenX 120mm Case fans with silicon fan gaskets and silicon mounts (all black), a 512GB Samsung SSD (black), and a 2TB Black Western Digital HD (silver/black).
Location: Arizona
Contact:

Re: Someone HACKED my TEAM

Post by 7im »

To repeat what Bruce said above... louie is a valid user, but mistyped his/her team number (by one digit) in one of the 4 clients s/he is using to donate to Stanford. That mistake just happens to be your team number. Louie is not taking your work, s/he is simply adding to your team totals (in addition to your donations) by mistake.

Yes, please post your fah logs so we can see more details about what may be going on with your clients. And while your clients may have been running non-stop for several days, how many work units have your clients actually completed? Remember, it can take several days just to complete a single work unit. Again, your logs will show that, or may show something else completely.

And I'm glad you've had some IT experience, so then you will understand well the information I am going to present... Stanford takes security very seriously, and has various checks in place to prevent what I would describe as a third person hack. First, the fah client can only be downloaded from Stanford, so we know the client has not been hacked unless someone did so on your computer. (With your IT experience, we'll just assume that didn't happen.) Next, completed work units will only be accepted by the Stanford work servers when that WU is sent back to Stanford from the same fah client ID on your computer which that WU was originally assigned to at the start. Again, unless someone hacked your computer, and has your Client ID, the Stanford server won't accept the work unit for credit from another source. And if someone can hack the 2048 bit digital signatures that FAH uses en route to your system, in the 2 days time it takes to complete your work units, then the world has bigger problems, and much more likely targets than your fah client. ;)

I apologize if we have seemed dismissive. I can see where our confidence in the strong security of the fah clients and servers, and the excellent 10 year (clean) track record might be misinterpreted. Basically, whatever you configured in your client for a fah user name and team number is where the points will be credited. I can't rule out some new glitch at Stanford, but let's just say it's very unlikely. So again, please post your fah log contents. Thank you.

References: FAH FAQ: What about security issues?
How to provide enough information to get helpful support
Tell me and I forget. Teach me and I remember. Involve me and I learn.
Locked