Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Detecting Monero Miners with Bpftrace

blog.px.dev

Post reply on HN
Print view View original

41–50 of 87 posts

Re: Detecting Monero Miners with Bpftrace

#41

Post by BbzzbB »

djhn wrote: post #35
vmception wrote: post #27

Earlier quoted context omitted.

> what are legit things you bought with Monero its been 8 years now, I guess off the top of my head: groceries, domain names, registered agent services, compute instances, graphic design, press releases

Any reading you could recommend on Monero? Beyond wiki, subreddit, etc. Looking for more of an economics angle than cryptography angle, without generic crypto hype.

I have no insightful information to give you with regards to Monero, but to me what you're looking for is a good fit for Marginalia's text-centric search engine [0]. I get interesting results when I'm looking for authentic and elaborate opinions on given subjects outside the beaten path, which seems to be your goal. And especially useful when trying to flee the cesspool of results Google gives you when looking for topics with heavily financial undertones - good effing luck getting to a genuine article speaking of cryptocurrencies, stocks or any topic with financial incentives.

0: search.marginalia.nu

Re: Detecting Monero Miners with Bpftrace

#42

Post by colinmhayes »

devops000 wrote: post #8
rosndo wrote: post #6

Earlier quoted context omitted.

So? Monero also makes it trivial to create a fake paper trail for the origins of your money.

When you will receive the bank wire from the exchange you need to provide to IRS the source of income. What will you say to them?

You've stumbled upon the main use case for NFTs.

Re: Detecting Monero Miners with Bpftrace

#43

Post by colinmhayes »

Jerrrry wrote: post #21
devops000 wrote: post #8

Earlier quoted context omitted.

When you will receive the bank wire from the exchange you need to provide to IRS the source of income. What will you say to them?

Nothing, because of the 5th amendment. You pay taxes on stolen gains. The IRS is explicitly forbidden from reporting the gains themselves.

Because of the "nor shall be compelled in any criminal case to be a witness against himself" part? How does that stop the IRS from telling law enforcement that you've suddenly come into millions of unexplained dollars?

Re: Detecting Monero Miners with Bpftrace

#44

Post by algorade »

devops000 wrote: post #5

Monero is not anonymous anymore as soon as you want to convert to fiat.

It is easy to sell your Monero for fiat anonymously using a service like localmonero.co There is also a growing parallel economy where you can buy goods and services directly with your Monero and avoid selling anything for fiat. For example, I have bought domain names using XMR on nja.la.

Re: Detecting Monero Miners with Bpftrace

#45

Post by alfonmga »

I feel bad about this because I wrote an article[0] about how to hide Monero miners on Linux systems. Sometimes I ask myself if I should unpublish it as probably some of the criminals doing this type of attacks found it helpful.

[0] https://alfon.xyz/posts/hiding-cryptominers-linux

Re: Detecting Monero Miners with Bpftrace

#46

Post by teruakohatu »

alfonmga wrote: post #45

I feel bad about this because I wrote an article[0] about how to hide Monero miners on Linux systems. Sometimes I ask myself if I should unpublish it as probably some of the criminals doing this type of attacks found it helpful. [0] https://alfon.xyz/posts/hiding-cryptominers-linux

How much search engine traffic does that article get?

Re: Detecting Monero Miners with Bpftrace

#47

Post by Hjfrf »

anonporridge wrote: post #9
garaetjjte wrote: post #4

>If these cryptojackers were to mine Bitcoin or Ethereum, their transaction details would be open to the public, making it possible for law enforcement to track them down That doesn't actually matter at all. Monero is used for these purposes probably just because it's mineable only on CPU, thus viable to mine on ordinary hardware. (Bitcoin requires ASIC and Ethereum high-end GPU)

Yep. Monero is explicitly designed to remain CPU mineable, so that theoretically it remains more decentralized and mined by individuals rather than an industrial complex like bitcoin and ethereum have become. Counterintuitively, I think this also makes it more susceptible to nation state attacks, since you can easily deputize fleets of existing CPUs to 51% attack the network, whereas no nation state on the planet can…

51% just doesn't feel like a meaningful threat model when governments can instead prevent exchanges offering monero pairs from accessing banking services in their country/currency.

Re: Detecting Monero Miners with Bpftrace

#48

Post by boring_twenties »

devops000 wrote: post #8
rosndo wrote: post #6

Earlier quoted context omitted.

So? Monero also makes it trivial to create a fake paper trail for the origins of your money.

When you will receive the bank wire from the exchange you need to provide to IRS the source of income. What will you say to them?

I have received many wires from crypto exchanges to my account at a major US bank and have never been questioned about it.

Re: Detecting Monero Miners with Bpftrace

#49

Post by philkuz »

alfonmga wrote: post #45

I feel bad about this because I wrote an article[0] about how to hide Monero miners on Linux systems. Sometimes I ask myself if I should unpublish it as probably some of the criminals doing this type of attacks found it helpful. [0] https://alfon.xyz/posts/hiding-cryptominers-linux

That article is very interesting! Looks like a similar approach to: https://sysdig.com/blog/hiding-linux-processes-for-fun-and-p...

I wouldn't feel bad about it. The article provides info for security experts about a potential attack vector that exists. That doesn't change if you unpublish the post.

Keep it up!

Re: Detecting Monero Miners with Bpftrace

#50

Post by striking »

alfonmga wrote: post #45

I feel bad about this because I wrote an article[0] about how to hide Monero miners on Linux systems. Sometimes I ask myself if I should unpublish it as probably some of the criminals doing this type of attacks found it helpful. [0] https://alfon.xyz/posts/hiding-cryptominers-linux

You could remove references to crypto without changing the rest of the article. That way the cool educational bits remain, and helping bad people do bad things with very very little effort is gone.
Post reply on HN