Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)

#1

Post by petteralexander » Thu, Jan 04, 2018, 10:17 AM UTC

Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)
arnaucode.com

Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)

#2

Post by moepstar » Thu, Jan 04, 2018, 2:01 PM UTC

I've thought about adding something like this to my guest wifi to mine some cryptocurrency - but quickly dismissed it as most guests would need to use a charger soon(ish) and thus using my electricity :P

Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)

#3

Post by [deleted] » Thu, Jan 04, 2018, 2:04 PM UTC

[deleted]

Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)

#4

Post by mnx » Thu, Jan 04, 2018, 2:24 PM UTC

This is (one of the reasons) why we need https.

Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)

#5

Post by diegorbaquero » Thu, Jan 04, 2018, 2:27 PM UTC

Excellent write up. That’s why we need SSL/TLS with HSTS. Pure HTTP, specially in public WiFi, is dead.

Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)

#6

Post by dre85 » Thu, Jan 04, 2018, 2:59 PM UTC

I guess all it takes is one request to a non-https site?

Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)

#7

Post by dx034 » Thu, Jan 04, 2018, 3:00 PM UTC

diegorbaquero wrote: post #5

Excellent write up. That’s why we need SSL/TLS with HSTS. Pure HTTP, specially in public WiFi, is dead.

Since we won't get https everywhere soon, is WPA2 on a public Wifi with a publicly known key a workaround? Should prevent plain MITM?

Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)

#8

Post by hellbanner » Thu, Jan 04, 2018, 3:03 PM UTC

(OT: petteralexander's name shows a different color than other usernames. Why?)

Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)

#9

Post by mschuster91 » Thu, Jan 04, 2018, 3:09 PM UTC

hellbanner wrote: post #8

(OT: petteralexander's name shows a different color than other usernames. Why?)

New users are green, iirc 50 or 100 karma points required to get normal grey

Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)

#10

Post by 0xWilliam » Thu, Jan 04, 2018, 3:12 PM UTC

mschuster91 wrote: post #9

hellbanner wrote: post #8

(OT: petteralexander's name shows a different color than other usernames. Why?)

New users are green, iirc 50 or 100 karma points required to get normal grey

Feels like they are more superior than us based on his color.