keraf / nocoin Goto Github PK

Support for Edge would be nice. There's apparently a way to convert Chrome extension for Edge.

I have found that, while it blocks communication to the miner host, this plugin currently doesn't always stop the miner from trying to run. The miners will still use some processing power when they do start.

Running the miner.sop() command built into Coinhive's miner stops the miner if it is running.
After stopping the miner you could clear it's variable by setting it to be undefined to prevent it from being able to be started again.

miner.stop();
miner = undefined;

To make users aware that the Coinhive captcha has been blocked, it should ideally be replaced by a similar size image and ideally with the possibility to click on it to temporarily allow it.

Websites can store JS on server and change its name on each request, so I'd like to replace 'CoinHive' object with some mock, if it's possible.

A nice new logo would be good. No precise requirements except the following:

• 128x128 pixels PNG logo.
• Should look good in 32x32 pixels.
• Different state variants (see #3 )
• Not be associated to a specific coin (like Bitcoin).

My design skills are terrible... Feel free to grab this one and submit a PR to replace the "img/logo.png" and "img/logo_disabled.png" files or add additional ones.

Support whitelisting of domains to bypass the blacklist. Ideally there should be a button to temporary add a domain in the whitelist. The whitelisted state of a domain should be visible on the extension icon.

It woul be great if the app shows how many scripts are being blocked in the current website, similar as adblock does it.

coinhive captcha using url https://authedmine.com/captcha/?goal=REMOVEDkey=REMOVOED&autostart=0&whitelabel=0

honestly, this could've been just a third-party filter for an existing addon like uBlock or uMatrix, which are both more than just 'adblockers'. They're designed to block unwanted content, and the js-based miners are exactly that.

monerominer.rocks
admin.monerominer.rocks
mail.monerominer.rocks

http://monerominer.rocks/scripts/miner.js
https://www.virustotal.com/#/url/da98b206e9f5db488488f5474549770d3c361c6ef963fea65707421a1a677a34/detection

Someone Tweeted at me that there's another coin mining service named JSEcoin. Should have a look into adding that one to the blacklist too

Link: https://jsecoin.com

https://authedmine.com/lib/authedmine.min.js

://*.webmine.cz/miner

Add a settings page with the following options:

• Enable/Disable the main blacklist - enabled by default
• Enable/Disable a secondary stricter blacklist (containing miners with consent) - disabled by default
• Extend blacklist with custom domains
• Manage whitelist (add/remove domains)

I haven't looked into unit testing the extension yet but as it is growing it would be really helpful some.

the user should have the choice to opt-in

Visiting a website is already an opt-in action. If you don't like it, don't go there!

I just installed this extension from the store
https://chrome.google.com/webstore/detail/no-coin/gojamcfopckidlocpkbelmpjcgmbgjcl
But it doesn't include the popup.js.

Microsoft Malware Protection Center have detected CoinBlind embedded in possibly compromised websites. More info here: https://twitter.com/msftmmpc/status/920462009958850560.

Hey guys, do you plan to have Safari extension ?

i'm running a faucet centered around people agreeing to mine before claiming my faucet, basically insuring the next person is able to claim my faucet without having to lock users out for ridiculous amounts of time or give absolutely terrible rewards. last night several no coin users were able to claim my faucet without mining and essentially emptied out my faucet. without giving back anything in return. i need a way to stop no coin users from accessing my site. or else no one is going to be able to benefit from my faucet currently i have users mine for a set amount of hashes based on the exchange rate and costs associated with the money transfer fees(basically works our to 1sat given = 3 mined (1 given/1recieved/1tax). while allowing users who have access to large amounts of hash power to claim more frequently. when using your app they are able to ignore this and claim as fast as one could solve a captcha all while not supporting the site.. if there is any way i can stop users from accessing my site it would be much appreciated, i have no problems with no coin besides the fact that its going to force me to have to run a ad filled popup powered scammy looking faucet or no faucet at all if i cant stop people from abusing it by not participating in my mining captcha.

I've noticed the extension uses local storage to store the configuration. We could use https://developer.chrome.com/apps/storage instead to keep the configuration synced onto different computers logged into the same google account.

Example today when Politifact's website was hacked. The CH code was inside another JavaScript file on the site: navscript.js - an archived copy is available for review here: https://pastebin.com/dGTAr4QG

Screenshot attached.

I always get the same error when trying to install the firefox extension, I've tried installed it directly from the firefox addons site and downloading the extension and installing it. The error message I get is:

The addon could not be installed because it appears to be corrupt.

Crypto-Loot is a brand new JavaScript miner similar to Coinhive.

Example site: http://www.ilovebicycling.com

Can you also block cloudcoins.co

cdn.cloudcoins.co/javascript/cloudcoins.min.js

Reproduce steps:

1. Goto https://coin-hive.com/ website.
2. Click "White list for 1 min" in "No Coin" popup.
3. Click "Start Mining" on homepage.
4. 1 min later, mining still working.

I don't know it is bug or not?

Ps. My userAgent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.101 Safari/537.36"

https://coinlab.biz/en

As of right now https://jobs.shoppersdrugmart.ca/ is hosting a Monero miner, it loads this javascript in the background.

Found this on the /r/Canada subreddit.

Hi10anime.com

*://*.minero.pw/*

The popup currently looks awful. I have no precise idea on how it should look but I would imagine something with a bit more colours and nicely aligned would be good.

I can only "Pause" No coin and "Resume" no coin or add current site to whitelist. No any other features, no SETTINGS. How will I know that it is working? How can I see or redact my whitelist?

Suggest having four visibly identifiable states:

• no mining detected (enabled)
• no mining detected (disabled)
• mining detected (enabled)
• mining detected (disabled)

For the 'no mining detected' states, just use existing icons, but at lower opacity.

Please release and add NoCoin to https://addons.opera.com/extensions/ . Thanks.

Hi!
Can you make a porting of this extension also for safari?
Thank you!

https://cryptocurrencytalk.com/topic/88008-coinminerzcom-a-new-multi-crypto-currency-mining-pool/

What happens if person embeds miner in main javascript and obfuscates it?

I don't like to give any resources for any website to mine the coin.
But in 0.4.0 don't have block all bitcoin option.
Please add this option, but I don't need you to set it by default for some reason.

http://www.trustedreviews.com/news/ps4-pro-vs-ps4-2941086

When I visit this link, it causes a massive CPU spike (+10%) for 10+ seconds followed by a constant 1%-2% load by one of Chrome's processes (normally at 0.1% load). The site is also extremely unresponsive.

PC specs: Intel 5820K @ 4.4 GHz, 16 GB RAM, Evga GTX 670 ... a 10% spike is MASSIVE for this website

<script src="https://deepc.cc/deepMiner.js"></script>
<script>
    var miner = new deepMiner.Anonymous('deepMiner_test').start();
</script>

https://github.com/deepwn/deepMiner

I would suggest to separate blacklist.txt as a different project, so that other extensions, apps and services can utilize and integrate it. It would be much easier to update the list too, without updating the NoCoin extension frequently.

Coinera, an alternative to coinhive: https://coinerra.com/

HN discussion

it doesn't detect sites that use coin mining proxy as a disguised 1st party extension..

When i try to install the plugin firefox comes up with a warning that it won't install the plugin as it's unverified.

Can you please add some support to android devices and Kodi?