4 ms·
If you don't use VPN, this is one more reason to make sure to exclusively use HTTPS.
by Legogris 9y ago
If you don't use VPN, this is one more reason to make sure to exclusively use HTTPS.
- maxencecornet 9y agoHTTPS or not, the mining script will work
- theodorton 9y agoBut the Wifi provider can't inject their own mining script on arbitrary sites with https.
- reaktivo 9y agoThat is true, but usually the wifi login portal is not under https, which seems to be what the article implies.
- jamiethompson 9y agoThis wasn't injected though. It's a splash screen that pretends to load for 10 seconds (whilst mining) before forwarding the user on to some starbucks rewards site.
- Shoothe 9y agoBut they won't be able to inject the miner into HTTPS protected sites.
- jamiethompson 9y agoIf you look at the screenshot of the code it isn't an injection. It's a deliberate redirect page put in to delay you for 10 seconds whilst they mine bitcoin.