Last week there was an article pointing out that hundreds of websites have been hacked to add bitcoin cryptocurrency mining scripts into them. This of course is interesting to the media because it uses the words ‘hacked’ and ‘bitcoin’ cryptocurrency in the same sentence. Tools like AT&T’s Video O…

Nice digging. I get the really strong feeling that this is going to be getting worse very quickly. If you’re feeling adventurous there are a few other miners that I had to block to keep people from using WPT as a mining farm: variants on coinhive: coin-hive.com coinhive.com cnhv.co Other miner …

Here’s a spreadsheet of all requests matching the domains @patmeenan mentioned including the Alexa rank of the parent pages: https://docs.google.com/spreadsheets/d/1ehxSVoK9sCDwwqQQ6NS07UpkBTLRoySSaQOw1zyWK6w/edit?usp=sharing 1071 unique pages. Up to ~80 requests flagged per page. Not many surpris…

Way back in the day I wrote about the idea of “ collaborative Map-Reduce in the browser ”, little did I know… cryptomining would become the leading use case. :expressionless: @doug_sillars kudos, awesome analysis.

I found an even longer list: [image] hoshsadiq/adblock-nocoin-list Block lists to prevent JavaScript miners . Contribute to hoshsadiq/adblock-nocoin-list development by creating an account on GitHub.

Nice. Here’s an all-inclusive query that gives rank/page/request info: SELECT rank, page, req.url FROM `httparchive.har.2017_10_15_chrome_requests` AS req JOIN `httparchive.runs.2017_10_15_pages` AS pages ON req.page = pages.url WHERE REGEXP_CONTAINS(req.url, '(cnhv.co|coin-hive.com|c…

Some awesome analysis here! Nice work @doug_sillars ! Expanding on @rviscomi ’s query, we can use REGEXP_EXTRACT_ALL to extract the library used in the SELECT clause. The query below shows which cryptocurrency libraries are most popular - SELECT library, COUNT(DISTINCT page) library_count FR…

This thread has already influenced one of the affected websites! [image] Guilherme (mobtec) @felipehoffa @dougsillars @rick_viscomi @paulcalvano @HTTPArchive We've reported to Coinhive and to owner's site a few days ago. Both removed. twitter.com/mobtec/status/… Guilherme @mobtec Reporta…

30 days later. In the 10/15 run, there were 1,040 mobile sites with the CoinHive Javascript embedded. In the 11/15 HTTPArchive run, this has dropped to 759 - a drop of 27%! Updating @paulcalvano ’s query to 11/15 (and mobile instead of chrome), we see: [image] (there are probably lots of double r…

This https://blog.trendmicro.com/trendlabs-security-intelligence/malvertising-campaign-abuses-googles-doubleclick-to-deliver-cryptocurrency-miners/ reminded me of this post

The Performance Impact of Cryptocurrency Mining on the Web

Analysis

rviscomi November 2, 2017, 5:26pm 3

Wow really interesting. I’m imagining a transparency report powered by the HTTP Archive that publishes a list of URLs found to contain crypto mining libraries.

Topic		Replies	Views
Using Wappalyzer to Analyze CPU Times Across JS Frameworks Analysis	4	7930	April 24, 2018
Ads impact (bytes transferred, execution time) on the web over time Analysis	9	1602	April 9, 2019
What's the web page speed in kbps? Analysis	15	4266	July 5, 2013
Is there any way to download daily historical data about website performance (1 year period) in CSV or Excel format for different websites?	19	1721	October 19, 2022
Exploring Relationships Between Performance Metrics in HTTP Archive Data Analysis	4	4070	May 14, 2019

The Performance Impact of Cryptocurrency Mining on the Web

Related topics