Live data from Hacker News

CBS's Showtime caught mining crypto-coins in viewers' web browsers

go.theregister.com

31–40 of 220 posts

Re: CBS's Showtime caught mining crypto-coins in viewers' web browsers

#31
I’ve been running a miner via coin-hive.com. The earnings are ridiculously low. With 5 ad slots, I make around $6 RPM. With coin-hive/monero, it's not even equivalent to $0.5. Unless you are a website with the page open for hours and you have millions of views, this does not even make sense.

Or maybe I am not doing this right.

Re: CBS's Showtime caught mining crypto-coins in viewers' web browsers

#32

The web seriously sucks. One thing I admire, at least in theory, about Xbox 360 games or iOS apps is the limited access a specific program can run. https://www.youtube.com/watch?v=CiqioE1zGCw talks about this Why is the overwhelming majority of networked software still not secure, despite all effort to the contrary? Why is it almost certain to get exploited so long as attackers can craft its inputs? Why is it the cas…

When you get a spare half hour to figure it out well enough, add the uMatrix extension to your browser. It is like an old-school software firewall, except it is for your browser.

There is a learning curve, but it's fine once you get up to speed. It's a bit like NoScript, but on steroids.

Re: CBS's Showtime caught mining crypto-coins in viewers' web browsers

#33

Is this a violation of the CFAA? Without explicit permission to do this, it seems an awful lot like unauthorized use

CFAA is wholly or at least primarily a part of the code focusing on criminal violations. So unfortunately it would require a motivated government attorney in order to invoke the CFAA. This likely falls beneath their outrage level.

Re: CBS's Showtime caught mining crypto-coins in viewers' web browsers

#34
post #29

Earlier quoted context omitted.

Certainly it's possible for the script author to throttle. Not so much for the web site visitor.

I hope it's just a matter of time before browsers start to throttle sites... Or maybe search rankings will be affected by CPU usage, and bandwidth.

Chrome has added throttling for inactive tabs. The problem is this is an active tab open for long stretches of time doing a somewhat cpu intensive task, so throttling isn't an option. I also doubt that be too adversely affected by slipping down the search rankings in this case.

Re: CBS's Showtime caught mining crypto-coins in viewers' web browsers

#35

The web seriously sucks. One thing I admire, at least in theory, about Xbox 360 games or iOS apps is the limited access a specific program can run. https://www.youtube.com/watch?v=CiqioE1zGCw talks about this Why is the overwhelming majority of networked software still not secure, despite all effort to the contrary? Why is it almost certain to get exploited so long as attackers can craft its inputs? Why is it the cas…

> Why is the overwhelming majority of networked software still not secure, despite all effort to the contrary? Why is it almost certain to get exploited so long as attackers can craft its inputs? Why is it the case that no amount of effort seems enough to fix software that must speak certain protocols?

That's interesting, but I'm not sure it's relevant here because downloading and executing arbitrary code without understanding what it does is a fundamentally insecure thing to do.

Unfortunately, the same technology is used by Facebook, Google, etc. to track people around the internet, so it's unlikely to get "fixed" any time soon.

Re: CBS's Showtime caught mining crypto-coins in viewers' web browsers

#36
post #3

Actually, why is this not a potential legitimate business model? I let you stream content for free and you let me mine cryto-coins with your spare CPU cycles while you watch. Isn't that better for people who don't like all the tracking by ads?

Mining in Javascript will get you less than the infrastructure costs to provide the videos, let alone replacing ad revenue.

Not if it's free and distributed worldwide. 99% of people don't even know what these coins are, regardless of what happens in the background when a computer requests content on a server.

I see it alongside ads.

Re: CBS's Showtime caught mining crypto-coins in viewers' web browsers

#37
post #3

Actually, why is this not a potential legitimate business model? I let you stream content for free and you let me mine cryto-coins with your spare CPU cycles while you watch. Isn't that better for people who don't like all the tracking by ads?

Mining in Javascript will get you less than the infrastructure costs to provide the videos, let alone replacing ad revenue.

No matter how many browsers are working on it?

Re: CBS's Showtime caught mining crypto-coins in viewers' web browsers

#38
post #22

Earlier quoted context omitted.

I hate it being done without informed consent. It's also a huge waste of electricity. On the plus side it could lead to micropayment funded instead of ad-funded sites.

> I hate it being done without informed consent. I'm more worried about the precedent, "informed consent" can always be buried deep in a T&C document.

"consent" can perhaps be buried, but I doubt it would be found to be informed.

Re: CBS's Showtime caught mining crypto-coins in viewers' web browsers

#39
post #3

Actually, why is this not a potential legitimate business model? I let you stream content for free and you let me mine cryto-coins with your spare CPU cycles while you watch. Isn't that better for people who don't like all the tracking by ads?

Mining in Javascript will get you less than the infrastructure costs to provide the videos, let alone replacing ad revenue.

What about a clever webgl shader to leverage the GPU?

Re: CBS's Showtime caught mining crypto-coins in viewers' web browsers

#40
post #3

Actually, why is this not a potential legitimate business model? I let you stream content for free and you let me mine cryto-coins with your spare CPU cycles while you watch. Isn't that better for people who don't like all the tracking by ads?

You pay us in electricity draw we didn't tell you about is a good business model?
Post reply on HN