Protecting yourself from In-Browser Miners

New update: Last modified: 21 03 2018 22:39

https://raw.githubusercontent.com/Ze.../hosts_browser

Cliff S said:

New update: Last modified: 21 03 2018 22:39

https://raw.githubusercontent.com/Ze.../hosts_browser

Thank you Cliff

worf105 said:

Thank you Cliff

You're welcome Andrew, by the way, there are 1422 mining addresses this time around

As always Cliff, thanks for taking care of us.

Cliff S said:

The script is being blocked from the add on, but not from hosts file.

To understand what the hosts file is/does(very simplified): The Hosts File and what it can do for you

Update: HOSTS file method doesn't block this particular script. It still gets blocked by my AV. However improvements to Firefox mean that it's no longer a problem. If I switch to another browser even with updated hosts file and coin block addons the script still tries to activate.

Lesson learned. Use Firefox for certain websites. Basic protection works.

Source:
Firefox Working on Protection Against In-Browser Cryptojacking Scripts

The cryptojacking blocking system is currently hidden in Firefox Tracking Protection using a list of domains associated with advertisers that have a habit of secretly tracking users across multiple sites.

Since November 16th this list has also been blocking the domains of Coinhive and Crypto-Loot, two companies that provide in-browser mining services.

One might say blocking two domains wouldn't be enough to make a dent. But according to statistics Bleeping Computer received from US security researcher Troy Mursch, the Coinhive JS script is found on 81.6% of all web domains that include a cryptojacking script, while Crypto-Loot is ranked #5 on that list, so, despite blocking just two domains, this list covers quite a lot of ground.

Interesting routine. Thanks for posting it. Think I will hold off running it, waiting for others with more knowledge to comment.

Wiley Coyote said:

As always Cliff, thanks for taking care of us.

ThrashZone said:

Hi,
Good one @Cliff S :)
I didn't have a host calender folder just the host never messed with the host file before but yeah a hidden folder :)
Palemoon the no miner add-on was not compatible so had to do the host file deal so thanks for the caveman instructions
Cheers.

You both are welcome:)