4 ms·
While well-intentioned, I don't think the casual website visitor is going to understand what a cryptominer is and the blog post doesn't really do a good job of
by r1ch 6y ago
While well-intentioned, I don't think the casual website visitor is going to understand what a cryptominer is and the blog post doesn't really do a good job of explaining what's going on, especially for non-English visitors. Instead of the blog post, a dedicated landing page I think would work much better - crowdsource some translations on github and put up something very simple like the Cloudflare interstitial design:
"The website that sent you here has been hacked and may not be safe to use. Please contact the site owner to let them know. Are you the website owner? Click here for a detailed explanation."
It also seems like the modal popup JS doesn't remember if the dialog has already been shown and will appear on every new navigation causing a lot of frustration for visitors. Given the widespread impact this has to users, it feels a bit rushed.
- sodality2 6y agoI agree. I wouldn't be surprised if someone thought the popup was the scam.
- deathanatos 6y agoI think messaging this to a "normal" user is going to be really, really hard no matter what. Bordering on impossible. E.g., with your proposed wording, now the website owner gets reported that their website has been compromised, when, in the case of compromised routers discussed in the article, it hasn't. (I do think some of your suggestions are valid; the article isn't going to be approachable for the average Joe, and if it does pop up that frequently, perhaps that could be improved.)
- BlueGh0st 6y agoThe core intention of the script is to be loud enough for the person responsible for the site to quickly take notice. Explaining the situation to the casual visitor is pretty much pointless as they can't really do anything about it and, as it's not serving anything malicious currently, that's all that's really necessary at this point.