3 ms·

How can we detect it inside the browser ?

by m00dy 5y ago

blacksmith_tb 5y ago
Detect, or block? There are a few options for blocking, if you run uBlock Origin[1] the Resource Abuse list covers many. 1: https://github.com/gorhill/uBlock https://github.com/gorhill/uBlock
- m00dy 5y ago
  Detect. How can we detect js-implemented monero miner inside a browser ? E.g. Is chrome dev tools exposing vm internals like in the blog post ?
crecker 5y ago
I do not think it's possible to mine using RandomX and a browser. From docs: > Web mining is infeasible due to the large memory requirement and the lack of directed rounding support for floating point operations in both Javascript and WebAssembly. So you can do whatever you want, but you will end with nothing.
- dmitrygr 5y ago
  So? implement soft float and round any way you please. Slow? Sure. But don’t say “infeasible”.
  - xiphias2 5y ago
    infeasible - not possible to do easily or conveniently; impracticable.
    - dmitrygr 5y ago
      For many us embedded folk, implementing soft float is a fact of life and isn’t impractical or uncommon. Not everyone lives in nodeJS land.
      - retrac 5y ago
        One can mine Bitcoin on an IBM 1401 [1] from 63 years ago. Runs at 50 kHz and there are no binary operations so you have to simulate XOR using a subroutine operating on strings to represent bitstrings. Slow. As in seconds per hash not hashes per second. But it works! Still. I am inclined to call that "impractical". In the same way softfloat-in-JS miners are impractical. A vast botnet of such might buy a coffee after a year or two. At a certain point, slow enough turns into impractical, and then practically impossible. [1] http://www.righto.com/2015/05/bitcoin-mining-on-55-year-old-ibm-1401.html?m=1 http://www.righto.com/2015/05/bitcoin-mining-on-55-year-old-...
        selestify 5y ago
        > At a certain point, slow enough turns into impractical, and then practically impossible. That is, after all, the whole idea behind asymmetric cryptography. You could perhaps crack some things by brute forcing until the heat death of the universe, but that's so slow as to be impossible for all practical purposes.

How can we detect it inside the browser ?

by m00dy 5y ago

How can we detect it inside the browser ?

Detect, or block? There are a few options for blocking, if you run uBlock Origin[1] the Resource Abuse list covers many. 1: https://github.com/gorhill/uBlock https://github.com/gorhill/uBlock

m00dy 5y ago
Detect. How can we detect js-implemented monero miner inside a browser ? E.g. Is chrome dev tools exposing vm internals like in the blog post ?

crecker 5y ago

I do not think it's possible to mine using RandomX and a browser. From docs: > Web mining is infeasible due to the large memory requirement and the lack of directed rounding support for floating point operations in both Javascript and WebAssembly. So you can do whatever you want, but you will end with nothing.

dmitrygr 5y ago
So? implement soft float and round any way you please. Slow? Sure. But don’t say “infeasible”.
- xiphias2 5y ago
  infeasible - not possible to do easily or conveniently; impracticable.
  - dmitrygr 5y ago
    For many us embedded folk, implementing soft float is a fact of life and isn’t impractical or uncommon. Not everyone lives in nodeJS land.
    - retrac 5y ago
      One can mine Bitcoin on an IBM 1401 [1] from 63 years ago. Runs at 50 kHz and there are no binary operations so you have to simulate XOR using a subroutine operating on strings to represent bitstrings. Slow. As in seconds per hash not hashes per second. But it works! Still. I am inclined to call that "impractical". In the same way softfloat-in-JS miners are impractical. A vast botnet of such might buy a coffee after a year or two. At a certain point, slow enough turns into impractical, and then practically impossible. [1] http://www.righto.com/2015/05/bitcoin-mining-on-55-year-old-ibm-1401.html?m=1 http://www.righto.com/2015/05/bitcoin-mining-on-55-year-old-...
      - selestify 5y ago
        > At a certain point, slow enough turns into impractical, and then practically impossible. That is, after all, the whole idea behind asymmetric cryptography. You could perhaps crack some things by brute forcing until the heat death of the universe, but that's so slow as to be impossible for all practical purposes.