Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by salqadri | Hacker News Reader

Full thread

salqadri·

Someone really should make 'Crypto-Blocker' plugins for browsers, similar to Ad Blockers.

View on HN

Make sure the “resource abusive” filter is enabled in uBlock.

https://raw.githubusercontent.com/uBlockOrigin/uAssets/maste...

No.

You'd always be one step behind. Reacting rather than acting.

I recommend

Firefox

NoScript

RequestPolicy

And if you want:

Ublock Origin

Umatrix

Adblock does

uBlock origin’s additional blacklists blocks it

uMatrix blocks it.

Noscript blocks it.

I saw an addon for Firefox that does that a couple days ago. I think you can do the same thing with filters in uBlock Origin though, but if you don't use an adblocker, it might be useful.

https://addons.mozilla.org/en-US/firefox/addon/nominer-block...

It just blocks urls by pattern. That's easily subverted.

Explain that to the ad industry. Of course a list needs maintainance.

An extension that tries to identify and stop all forms of js mining is probably hard to maintain and equally subvertable.

As long as the effort to block an entity is much lower than the effort to subvert the blocking the concept will probably work.

Especially since curating blocklists is somewhat more scalable than subverting the list.

Sure. It's just less easy to detect and maintain a list since there is no visual tipoff.

How would such a plugin work? Say you're visiting a webpage with lots of graphical effects that require lots of computation. How would the blocker distinguish those computations from mining?

Making a signature of certain libraries?

That could be circumvented by a smart javascript minimizer.

Since the hackers have access to the adguard plugin, they can just test and adjust until their code passes.

And they can even make it dynamic.

adblock already blocks it.

Ah ok; thanks!

Wouldn’t ScriptBlocker uMatrix handle that by default?

Reply on news.ycombinator.com