Re:GitHub investigating crypto-mining campaign abusing its s...
by williamstein on Saturday April 03, 2021 @10:20AM
(#26681280)
Google Cloud is similar (perhaps the same). I run sites there that involve arbitrary code execution by our users, and periodically Google support contacts us to report cryptomining violations. I don't know exactly what Google's heuristics are for triggering this, but their reports to us typically include the ip address of a mining pool that was contacted by one of our virtual machines. My impression is that mining typically involves a network connection.
[ Parent
| on HN ]
Re:GitHub investigating crypto-mining campaign abusing its s...
by slig on Saturday April 03, 2021 @10:53AM
(#26681513)
Aren't you afraid of running such service on Google infrastructure and getting the ban hammer from Google?
Re:GitHub investigating crypto-mining campaign abusing its s...
by williamstein on Saturday April 03, 2021 @12:48PM
(#26682514)
No I am definitely not afraid of that, based on several factors: knowing what really happens in practice having used GCP since 2014; my company being in the highest tier of Google’s startup program; I know many people who work at Google (eg numerous of my past PhD students). Of course my risk analysis parameters may be completely different than yours. On a purely technical level, GCP is a good quality product.
Re:GitHub investigating crypto-mining campaign abusing its s...
by Tenoke on Saturday April 03, 2021 @11:07AM
(#26681627)
Does it even matter to GCloud (a paid service) if I use 100% of the GPU for Deep Learning or for mining? They operate on profit either way.
Re:GitHub investigating crypto-mining campaign abusing its s...
by williamstein on Saturday April 03, 2021 @12:51PM
(#26682552)
They also care because in practice such use is often done by attackers unbeknownst to the person paying for the resources. That would much rather make the person paying aware ASAP of such usage, rather than have them be on the hook for a large bill at the end of the month. Google does have a complicated process to allow cryptomining on their infrastructure. They also flag all kinds of other suspicious activity, eg once somebody was launching DOS attack from cocalc on “the country of Turkey” and that got some of cocalc shutoff immediately.