Mining through the browser and how to protect against it
Yes, friends, you heard right, Mining through the browser!
The last week on the net is actively discussing the phenomenon of mining in the browser. The principle of browser mining is not news, but until recently, no one tried to implement hidden mining scripts directly into the code page of the site.
MMining via browser
The first such experiment launched the popular torrent tracker Piratebay. Instead of making money on advertising (as most do), the guys decided to cash in another way. Imperceptibly for visitors to the site, their browser is using the resources of the computer mine cryptocurrency. This caused a great resonance, as users began to notice that the hidden method of monetization increases the processor load up to 100%.
Using this method, any site that you visit in a browser, and any browser extension, can quietly start mining cryptocurrency.
In principle, I am not against browser mining. But it should be the user's choice. If the site asks permission and the user gives his go-ahead, everyone is bundled and everyone is happy. Otherwise, this is unacceptable and similar hidden browser mining should be blocked.
NCheck your browser to Mining
The developers of the Opera browser have created a website that will help you check your browser. To check the browser for hidden mining, you must go to the website cryptojackingtest.com and click on the start button.
It takes no more than two seconds to complete, and the result is either that the browser you are using is protected or that your browser is vulnerable.
- The green inscription YOU'RE PROTECTED - your browser is protected.
- The red inscription YOU'RE NOT PROTECTED - your browser is vulnerable.
Keep in mind, this check does not give 100% result. Despite the positive test result, you still need to take steps to protect against mining in the browser.
D.Domains browser miners
To begin with, here is a list of all currently known domains:
- azvjudwr.info
- cnhv.co
- coin-hive.com
- gus.host
- jroqvbvw.info
- jsecoin.com
- jyhfuqoh.info
- kdowqlpt.info
- listat.biz
- lmodr.biz
- mataharirama.xyz
- minecrunch.co
- minemytraffic.com
- miner.pr0gramm.com
- reasedoper.pw
- xbasfbno.info
ForHow to Protect Against Mining in the browser
There are several ways to protect against mining in a web browser:
- Editing the hosts file
- Installing a special utility
- Turn off javascript in the browser
- Installing a special browser add-on
- Adding a filter to uBlock and AdBlock
Each of them has its pros and cons. Let's start in order.
WProtection Mining using hosts file
To block mining, Windows users need to add mining domains to the hosts file. For example, I’ll add the domain of the already known miner Monero coin-hive.com.
- Open Explorer or another file manager and navigate to the folder:
C: \ Windows \ System32 \ drivers \ etc
2. Open the hosts file in a text editor, such as Notepad. Add the line 0.0.0.0 coin-hive.com to the end of the document.
3. Save the document.
This procedure blocks requests for the domain coin-hive.com.
This method has one drawback: the line in the hosts file blocks the exact address of the domain. Those. if necessary, you will have to add other addresses yourself. And as you know, addresses can be added over time.
Ready, current list of domains to add to the hosts file. Just copy all the addresses and paste.
BLock Browser Mining with Anti-WebMiner
The other day, the Anti-WebMiner utility appeared . All that a program can do is blocking miners by redirecting domains.
Run the program and click the big “Install” button.
You can also easily remove it by clicking on the “Unintelligible” button.
I recommend using Anti-WebMiner only to those who do not know and do not want to know what the hosts file is and those who do not want to install browser add-ons.
WProtection Miner with JavaScript off
Another option is to disable javascript on sites. This can be problematic, as sites may require javascript to work properly.
For those who do not know. JavaScript can be disabled in the browser itself, but it is much more convenient to use the NoScript extension .
WProtection Mining using NoCoin additions
You can also use the NoCoin extension to block scripts and URLs . Supplement is available for users of browsers: Chrome, Firefox and Opera. This blocker perfectly blocks mining through browsers.
At the moment, the addition only blocks Coinhive, but the author Rafael Keramidas promised not to throw the extension and update this tool.
UsedMiner lock using MinerBlock add-on
MinerBlock is another Chrome browser extension for blocking mining. You can both add and remove miners.
WProtection Mining using AdBlock and UBlock
You can block mining in the browser via the AdBlock and UBlock extensions.
Using the following steps you can add filters to AdBlock:
- Go to the list of extensions
- Go to Adblock Plus and click "Options".
- Click the "Add your own filters" tab.
- In the text box that appears, enter || coin-hive.com/lib/coinhive.min.js and click "Add Filter".
In the same way, add:
||coin-hive.com^$third-party
||jsecoin.com^$third-party
||miner.pr0gramm.com^
||gus.host/coins.js$script
||cnhv.co^
In uBlock, this is done on the “My Filters” tab. I will not show, everything is clear there.
The disadvantage of this method is that you need to add new domains and change existing ones if the need arises.
BConclusions
Despite the fact that I am opposed to unnecessary additions, I would still recommend installing the NoCoin extension to newbies (based on the author’s reputation). But an advanced user is better if he works with pens!
Well, that seems to be all you need to know about mining through the browser at the moment. I hope that by applying these methods you will never see a 100% CPU load!
Commentaires