News for hackers. Stuff that matters.

A comment on Salon magazine mines crypto-cash with readers' PCs. Parent comment

Re:Salon magazine mines crypto-cash with readers' PCs by abusoufiyan on Tuesday February 20, 2018 @03:23AM (#16418685)
>A coin being mined is controlled, handled entirely by first party, provides no incentive for tracking, etc.

Yeah, also a haven for hackers and malicious actors...

EDIT: I guess you weren't aware. CoinHive doesn't track the users who sign up for the service. It doesn't collect any information except email address. So malicious actors can easily sign up for the service and deliver the javascript through an XSS vulnerability for example. I thought that's what you meant by "no incentive for tracking".

[ Parent | on HN ]
Re:Salon magazine mines crypto-cash with readers' PCs by staticassertion on Tuesday February 20, 2018 @03:27AM (#16418698)
In what way? I consider this a security win. Instead of a third party delivering unknown, unscreened content (ads), I get a mining script directly from the site that I'm visiting.
[ Parent | on HN ]
Re:Salon magazine mines crypto-cash with readers' PCs by realitycheck_13 on Tuesday February 20, 2018 @06:58PM (#16425507)
That’s all true.
[ Parent | on HN ]