[kwlug-disc] Another Humble Bundle: Cryptocurrency

Alex K korobkin+kwl at gmail.com
Wed Oct 18 14:37:33 EDT 2017


Here is a list of websites doing this.
https://docs.google.com/spreadsheets/d/1ysujhza_qRWHu_ulyWNyIldikh7AGCjSM5-ZAAensDM/edit#gid=1244702083
You can open any of them and see how much resources it's actually using.

On Wed, Oct 18, 2017 at 1:45 PM, Joel Nahrgang <joelsn at gmail.com> wrote:

> Right, but if they notified you they were doing this, would this be better
> than seeing ads which uses resources. I'm not sure myself
>
> On Wed, Oct 18, 2017 at 1:39 PM, Khalid Baheyeldin <kb at 2bits.com> wrote:
>
>> It is not security. It is resources on YOUR laptop that are being
>> used without explicit consent. CPU cycles, RAM, and responsiveness.
>>
>> More and more sites doing it everyday ...
>>
>> https://www.bleepingcomputer.com/news/security/the-internet-
>> is-ripe-with-in-browser-miners-and-its-getting-worse-each-day/
>>
>> On 10/18/17, Joel Nahrgang <joelsn at gmail.com> wrote:
>> > Not sure if anyone here listens to the Security now podcast,but in the
>> > recent one, they were discussing the browser mining and it seems like
>> there
>> > are a lot more sites that do it then we may think.
>> > It was interesting to hear their take - not really insecure and doesn't
>> > really use much of the computer.
>> >
>> > On Sun, Oct 15, 2017 at 1:57 PM, Khalid Baheyeldin <kb at 2bits.com>
>> wrote:
>> >
>> >> I use uBlock Origin as well. In addition to that, NoScript.
>> >>
>> >> Exactly to prevent this kind of abuse, and keep my (older)
>> >> laptop performant.
>> >>
>> >> On 10/15/17, Chamunks <chamunks at gmail.com> wrote:
>> >> > And this is why I use uMatrix and other JS smashing things.
>> >> > https://brave.com
>> >> > https://addons.mozilla.org/en-US/firefox/addon/umatrix/
>> >> > https://chrome.google.com/webstore/detail/ublock-origin/
>> >> cjpalhdlnbpafiamejdnhcphjbkeiagm?hl=en
>> >> >
>> >> > On Sat, Oct 14, 2017 at 8:16 PM Khalid Baheyeldin <kb at 2bits.com>
>> wrote:
>> >> >
>> >> >> I wonder if it is indeed a hack by a third party, or sites are
>> >> >> experimenting with mining, or simply their ad serving
>> >> >> service was used by third parties to serve ads.
>> >> >>
>> >> >> The ad service possibility is not likely in the case of
>> >> >> Politifact, since The Register says the code in question
>> >> >> was in the site navigation bar.
>> >> >>
>> >> >> But all ad serving is based on Javascript, and it would
>> >> >> be possible with some craftiness to serve mining JS.
>> >> >>
>> >> >> We saw malware/ransomware a few months ago served
>> >> >> this way.
>> >> >>
>> >> >> On 10/14/17, Ronald Barnes <ron at ronaldbarnes.ca> wrote:
>> >> >> > Khalid Baheyeldin wrote on 2017-10-14 02:43 PM:
>> >> >> >
>> >> >> >> An ad blocking firm did some research, and they claim
>> >> >> >> that 500 million people are mining cryptocurrency when
>> >> >> >> visiting web sites.
>> >> >> >
>> >> >> > Haven't followed all the links supplied, but just reading that
>> >> >> > Politifact had this "feature"; likely placed there by miscreants,
>> >> >> > not
>> >> >> > Politifact
>> >> >> >
>> >> >> >>
>> >> >> http://www.theregister.co.uk/2017/10/13/politifact_mining_
>> >> cryptocurrency/
>> >> >> >
>> >> >> > Apologies if this was previously mentioned.
>> >> >> >
>> >> >> >
>> >> >> > r b
>> >> >> >
>> >> >> > _______________________________________________
>> >> >> > kwlug-disc mailing list
>> >> >> > kwlug-disc at kwlug.org
>> >> >> > http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>> >> >> >
>> >> >>
>> >> >>
>> >> >> --
>> >> >> Khalid M. Baheyeldin
>> >> >> 2bits.com, Inc.
>> >> >> http://2bits.com
>> >> >> Drupal optimization, development, customization and consulting.
>> >> >> Simplicity is prerequisite for reliability. --  Edsger W.Dijkstra
>> >> >> Simplicity is the ultimate sophistication. --   Leonardo da Vinci
>> >> >>
>> >> >> _______________________________________________
>> >> >> kwlug-disc mailing list
>> >> >> kwlug-disc at kwlug.org
>> >> >> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>> >> >>
>> >> >
>> >>
>> >>
>> >> --
>> >> Khalid M. Baheyeldin
>> >> 2bits.com, Inc.
>> >> http://2bits.com
>> >> Drupal optimization, development, customization and consulting.
>> >> Simplicity is prerequisite for reliability. --  Edsger W.Dijkstra
>> >> Simplicity is the ultimate sophistication. --   Leonardo da Vinci
>> >>
>> >> _______________________________________________
>> >> kwlug-disc mailing list
>> >> kwlug-disc at kwlug.org
>> >> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>> >>
>> >
>>
>>
>> --
>> Khalid M. Baheyeldin
>> 2bits.com, Inc.
>> http://2bits.com
>> Drupal optimization, development, customization and consulting.
>> Simplicity is prerequisite for reliability. --  Edsger W.Dijkstra
>> Simplicity is the ultimate sophistication. --   Leonardo da Vinci
>>
>
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20171018/3129c9af/attachment.htm>


More information about the kwlug-disc mailing list