Live data from Hacker News

Salon magazine mines crypto-cash with readers' PCs

bbc.com

51–60 of 112 posts

Re: Salon magazine mines crypto-cash with readers' PCs

#51
post #18

Thinking about this, how long till ad blockers will also block these crypto mining scripts... it's not that different.

CoinHive now has the authedmine.com domain, and the scripts served from there only run with explicit and temporary user consent. No reason to block that, although I think some blockers are doing so anyway.

Re: Salon magazine mines crypto-cash with readers' PCs

#52
post #33

Prime example of failed business models and their desperate attempts to survive. I'm really disappointed about how online publishers handle the decline of ad revenue. Of course my ad-blocker will also block your miner script, what do you think how this works? And better yet, integrating external third-party JavaScript into your website screams for abuse by attackers. Someone could just change the wallet address the s…

Every business is failed unless it figures out a way to survive.

Businesses do not survive by default. It takes a lot of work and experimentation to find the right mix of everything to build a viable company.

Re: Salon magazine mines crypto-cash with readers' PCs

#53

Earlier quoted context omitted.

CoinHive provides two miners: one which runs without asking the user, and one which requires explicit consent from the user. The version requiring explicit consent is being used on the Salon website, and isn't currently being blocked by AdBlockers/malware detectors.

It is being blocked as some other commenters showed. I think the company needs to shut down shop and provide their explicit consent miner under a different name because as long as anyone looking up your company's name can only ever find articles about your company providing malware, you won't be very successful.

It did. The new consent based miner is on and served from authedmine.com

Re: Salon magazine mines crypto-cash with readers' PCs

#54
post #36
post #30

Isn't that a good thing? Imagine you have a little widget in your browser that displays something like '50%' which means you constantly use 50% of one core to mine a cryptocurrency for the page you are currently looking at. And in return you get an ad free web. I think that would be way better then the web as we know it.

Seems wasteful & fruitless. Better to evolve a micropayments model that works (because at least i can quantify what I pay)

> Better to evolve a micropayments model that works

I agree but until that exists this is the best thing we have. It's the only way you can pay cents without doing anything else than click a button.

Re: Salon magazine mines crypto-cash with readers' PCs

#55
post #12

Their website was already unreadable on mobile so I guess they're now going to make sure you can't view it on a desktop/laptop by pegging your cpu to 100%

That's config on the miner, can throttle to any CPU usage percentage. No reason for them to be stupid enough to peg at 100%. 50% to 70% seems much more reasonable. Most day to day, non professional applications barely use more than 30%.

Re: Salon magazine mines crypto-cash with readers' PCs

#56
post #48

Earlier quoted context omitted.

In theory yes, but in practice this software is a well-known malware. Not a good idea for any respctable site to be using it.

That's really disingenuous. The software does exactly what it says on the cover and the documentation, no more and no less. And it causes no harm of any sort, but uses lots of power as designed. The malware classification comes because some sites used it without user's permission, which CoinHive fixed via the authedmine.com domain - that only allows the miner to be use with explicit and temporary user consent.

But the software is clearly a hot avenue for hackers. And trying to legitimize this kind of thing also makes the foray into "cryptojacking" more enticing.

If legit sites start doing this, users will get used to it and hackers will bring in more cash.

CoinHive didn't fix this, as far as I understand. They simply published an alternative miner. As recently as a week ago, many UK and US gov sites were cryptojacked using the CoinHive software: https://motherboard.vice.com/en_us/article/bj5m4v/cryptocurr...

They don't even seem to be trying to root out malicious users:

>The team don’t specifically track domains, so if a user’s email address is not, for example, “contact@website.com,” Coinhive often don’t know where or how the service is being used, though.

Re: Salon magazine mines crypto-cash with readers' PCs

#57
post #30

Isn't that a good thing? Imagine you have a little widget in your browser that displays something like '50%' which means you constantly use 50% of one core to mine a cryptocurrency for the page you are currently looking at. And in return you get an ad free web. I think that would be way better then the web as we know it.

Absolutely not. Wasting battery power to let somebody else buy into a pyramid scheme is not my idea of a solution.

Using that battery power does not 'let' anyone buy into the pyramid scheme. People buying monero or not is orthogonal to Salon mining it in your browser. Salon mining it does not in any way facilitate people buying it.

Re: Salon magazine mines crypto-cash with readers' PCs

#58
post #36
post #30

Isn't that a good thing? Imagine you have a little widget in your browser that displays something like '50%' which means you constantly use 50% of one core to mine a cryptocurrency for the page you are currently looking at. And in return you get an ad free web. I think that would be way better then the web as we know it.

Seems wasteful & fruitless. Better to evolve a micropayments model that works (because at least i can quantify what I pay)

I'm sure as soon as that micro-payments model evolves Salon will be happy to switch to it. People have been saying that for 20 years, though, and this is the closest we've come.

Re: Salon magazine mines crypto-cash with readers' PCs

#59
post #16

Earlier quoted context omitted.

Why would they care? They make money off of the ads, if you use an ad blocker, you just run up their server costs. Don't think they care.

Because your site showing up in other news outlets under a title like "Salon Magazine running cryptojacking malware on users" is terrible publicity. I get that they are using the version which asks for consent, but why even take the risk of associating yourself with such a shady piece of software? If you make money of ads, you'd think you wouldn't want to do things that might scare away your users.

The software (script) itself is not malicious, it's the way it's used in a lot of cases. It's similar to how torrents are usually used for piracy, but has some legitimate uses.
Post reply on HN