Just wanted to make you guys aware that between yesterday 4/7/2014 and today 4/8/2014 i noticed that my btc payout address had been changed without my authorization. It was changed from 16rBgvegJnDWQtakxc6ChYaUu2fozuDk47 (which has been my legitimate address since i started with hashcows) to 1GxdwuYxuoJEtzoJrxv2mQQ4344YgqUAzv (bad address that i don't recognize).

I changed my address back and did a cashout of my funds. None of my bitcoins seem to have been lost. I have already changed my password with hashcows and will look to further secure things on my end. I never wrote the password down and i used a password that i have never used on any other site. I know online security is a myth and this is not an accusation of any kind, just a heads to the other members of this community to check their payout addresses. I know this might just be an isolated incident of my password being brute forced or something, but in light of the December Hack I would prefer to be safe than sorry.Maybe nearmiss and his team can take a look internally? or maybe add another step to changing btc addreses? wemineltc 4 digit pin to make changes comes to mind.
user id is miner4ever.

As has been mentioned, we patched the servers asap earlier this morning.  We are in the midst of a full audit for possible changes like this, as mentioned, feel free to report if you notice anything out of the ordinary.  We'll likely be forcing site-wide password resets as a precautionary measure once the audit is complete.   We'll have a full news update on this later tonight.  This was not a hashcows-specific vulnerability, and is related to heartbleed mentioned above.  

Why can't people take time to investigate issues and ask questions before going off the handle and throwing accusations about?

Firstly even a little time spent reading would tell you that the nature of this pool means that payments take time to ramp up.

Also what evidence do you have to support a statement like "The owner is most likely skimming profits from everybody"?

I have been with this pool for most of it's life and have had absolutely NO reason to doubt nearmiss' integrity.

anyone else getting : ssl_error_bad_cert_domain  ?

A few updates:

1) SSL Cert has been updated due to heartbleed.  I notice now the old one was for both www and blank, new one is not.  I can't simply re-issue the old as startssl is being owned atm (not unsurprisingly).  https://hashco.ws works as expected, email links are updated to reflect this.  If I can't get into startssl soon I'll just order another cert for www as well.

2) Site-wide password resets are required.  This is a precautionary measure due to heartbleed.

3) Anyone who made an address change between April 7th 0:00:00 UTC and the time we patched the servers, have had their btc addy's changed to a garbage string.  Simply log in and change to a valid address and your good to go

4) The delayed payout from Monday (due to my back issues), and then last night due to heartbleed, will be paid out tonight.

Go back through that dude's post history too. At least 75% of his posts are shrieking about one thing or another.  

im having a problem accessing hashcows - https://hashco.ws/

Secure Connection Failed

An error occurred during a connection to hashco.ws. The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.

tried both www and without the www. same message on both.

Same here. Both with and without www

Same here... but getting the error on mozilla. Chome loads the page just fine... Havnt tried ie yet but im sure some1 else will