detecting web based (javascript) monero miners on any website

k@suy

sr. member

Activity: 882

Merit: 269

Quote from: whitrzac on September 27, 2017, 07:04:19 PM

I would rather have this, and the site be upfront about it, than have a shit ton of adds, popups and videos.

Thats true, visitor must be informed or in the form of disclaimer about this. I think this kind of system is another kind of revenue from your site and its something new aside from adsense etc. I hope there is also something like a compensation for visitor

1Alino

newbie

Activity: 5

Merit: 0

well I am blocking it on the DNS level. Adding this line to the hosts file on your OS will block it

Code:

127.0.0.1   coin-hive.com

other approach could be firewall,
or a browser extension like AdBlock, but you would need to make a custom filter rule like this

Code:

||coin-hive.com/lib/coinhive.min.js

more info here -> https://adblockplus.org/blog/kicking-out-cryptojack

iminethereforeiam

member

Activity: 110

Merit: 10

Can Ad-Block handle it? If not I suppose adding a rule to the firewall would be enough.

1Alino

newbie

Activity: 5

Merit: 0

would you like it even if you had 15 tabs opened and 5 of them would be mining? I wouldn't
Anyway that's a different topic, this extension is not blocking it, just letting you know that it's there, because everyone who implemented this didn't let their users know so far.

whitrzac

member

Activity: 126

Merit: 10

90*c is good, right?

I would rather have this, and the site be upfront about it, than have a shit ton of adds, popups and videos.

1Alino

newbie

Activity: 5

Merit: 0

Probably you are familiar with this website http://coin-hive.com
They provide a service to implement a javascript monero miner which you can put on your website.
Your visitors would be mining for you...
It was silently added to thepiratebay.org website and today to dennikn.sk (news website in Slovakia)
I think many more websites will try to silently add such scripts. So I have made a chrome extension to show you this information so you are aware if your currently opened website contains a miner script or not.

source code: https://github.com/Alino/MinerDetector
chrome store: https://chrome.google.com/webstore/detail/miner-detector/likbfajepcccjkogmjghenhpboggoglb

Topic: detecting web based (javascript) monero miners on any website (Read 352 times)