Are your Browsers subject to Cryptojacking ? Test within!

[FordGT90Concept]

Edge is vulnerable, of course.

 

[kn00tcn]

i dont understand, it's just another ad type, why are people blaming browsers now or thinking some site's checker saying 'safe' means safe?

dont run with js enabled on sites you've never visited, whitelist js if you must, use an adblocker, whitelist sites you want to support... only THEN would the rare need to block known mining scripts appear while allowing ad scripts & having js enabled

a proper blocker would be based on blacklists that get updates & give the user a choice for which list to enable, so then... it's offensive to people's intelligence when browsers like opera pretend to be special by adding an extra checkbox in their settings

Ublock Origns & Adblock Ultimate ( and carefull browsing ) And Firefox 56.02 64 bit

you mean 58?

 

[dorsetknob]

you mean 58?

No Definitely no
Twas humble win 7 pro >>> NO A/V and Firefox 56.02 64 bit ( I have not updated firefox because i have Security cams that use JS and later ver of firefox block JS plugin by default ( and other plugin's i use)

PS you SHOULD READ the update notice's to find out what they fix and what they disable

 

[kn00tcn]

No Definitely no
Twas humble win 7 pro >>> NO A/V and Firefox 56.02 64 bit ( I have not updated firefox because i have Security cams that use JS and later ver of firefox block JS plugin by default ( and other plugin's i use)

PS you SHOULD READ the update notice's to find out what they fix and what they disable

you think i dont read the changelogs? that's exactly why you need to update! we've been warned for like 2 years about the plugin change, that's not news

https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/ what about these notices, oh dear they must be important, so much red color everywhere, but no the user & user convenience is most important, should i assume you dont update the cameras or they dont even have updates? it's this complete bs from both companies & users that caused the botnet that took down part of the north american east coast internet

that's just unacceptable behavior, you could run a portable old version just for the cameras, while going to public sites with a properly updated & faster browser

whatever, it's your crappy insecurity not mine, ESR or palemoon should be used to extend old addon life (what js, addons are not exactly js, that's also lame that a camera cant use html5 or standalone software)

 

[DRDNA]

you think i dont read the changelogs? that's exactly why you need to update! we've been warned for like 2 years about the plugin change, that's not news

https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/ what about these notices, oh dear they must be important, so much red color everywhere, but no the user & user convenience is most important, should i assume you dont update the cameras or they dont even have updates? it's this complete bs from both companies & users that caused the botnet that took down part of the north american east coast internet

that's just unacceptable behavior, you could run a portable old version just for the cameras, while going to public sites with a properly updated & faster browser

whatever, it's your crappy insecurity not mine, ESR or palemoon should be used to extend old addon life (what js, addons are not exactly js, that's also lame that a camera cant use html5 or standalone software)

WHile there are points in this and maybe value too BUT can we please stay on topic as I would prefer that this thread does NOT turn to shit with rants and arguments! The topic is 1 "Take the test" 2 "report if you passed or failed" 3"Post what app you used to block the Crytojacking on the test site given in 1st post (https://cryptojackingtest.com/)"

Thank you in advance for everyones cooperation with this thread. Anyone who would like to go off topic can start a Thread for such

 

[newtekie1]

Edge is vulnerable, of course.

I'm pretty sure most browsers are without some kind of add-on to stop it. If I disable my Avast, Chrome is vulnerable too.

 

[DRDNA]

I'm pretty sure most browsers are without some kind of add-on to stop it. If I disable my Avast, Chrome is vulnerable too.

I would also like to build a bit on this; I have found that when a Browser has a ad-on for stopping cryptojacking like for example FF with "No Coin" will STOP cryptojacking before Malewarebytes can get a chance to but with out the plug ins then it falls on Malewarebytes which then does the Blocking, on my PC

 

[craigo]

 

[kn00tcn]

i disabled filters in ublock/umatrix, still says protected in FF, didnt bother trying to disable the addons entirely (edit: or enabling third party cookies), do note that modern secure FF comes with some disconnect (addon) & extra anti-tracking features built in

the only other thing i have right now is qupzilla (uses chromium, comes with some easylist or others adblocker), had to disable the adblocker for it to say not protected

again most adblocking tools are capable & already block mining, not allowing js from third parties or sites you visit until you add them will also 'protect' you, this tool is somewhat disingenuous & pretty annoying that it tells you to download opera even when protected

edit: the real question is when mining starts using random urls or code hosted on the first party site, anyone can block known mining services even in their hosts/firewall so that zero software is needed, but how can you stop normal looking js without hard sniffing or scanning load (like FF's 'this script is taking too long, would you like to stop it' alert), it's a false sense & opera boasting at this time

 

[DRDNA]

why does the "test" double as an ad for Opera? just wondering.

again most adblocking tools are capable & already block mining, not allowing js from third parties or sites you visit until you add them will also 'protect' you, this tool is somewhat disingenuous & pretty annoying that it tells you to download opera even when protected

answered by RTB in post #22

Gotta pay for it somehow...

Also i have found NO other available test for Cryptojacking and did mention if there are other cyptojacking tests to please PM me them and I will add them and so far not a single PM, back on topic.

 

[Devon68]

It says I'm protected. I'm using chrome with ublock orgin.

 

[Laurijan]

I ran the test and it says i am protected. Adblock plus and ublock origins in opera. I installed ublock origins bacause browsing on tweaktown site made me believe they use some sort of undetectable miner. My cpu and ram usage went up alot there before ublock

 

[RejZoR]

Users of Ghostery are also protected.

 

[Easy Rhino]

Man, you guys are all noobs. I only use cURL to browse the web!

Also, any reason why that site pings Facebook using its own script???

<body>
<div id="fb-root"></div>
<script>(function (d, s, id) {
var js, fjs = d.getElementsByTagName(s)[0];
if (d.getElementById(id)) return;
js = d.createElement(s);
js.id = id;
js.src = 'https://connect.facebook.net/en_GB/sdk.js#xfbml=1&version=v2.11';
fjs.parentNode.insertBefore(js, fjs);
}(document, 'script', 'facebook-jssdk'));</script>

Oh, looks like you can "share" this on FB. And people are concerned about browser safety? LMAO!

 

[kn00tcn]

Also i have found NO other available test for Cryptojacking and did mention if there are other cyptojacking tests to please PM me them and I will add them and so far not a single PM, back on topic.

i gave two browser results of the topic's current test & detailed the multiple blocking methods that already block or unintentionally allow mining, it's not exactly an on/off standalone feature/issue

the thread can easily evolve into a mining information thread as new checkers/methods pop up, though it's all extremely similar to third party ads/scripts that we've always had to deal with... but i'm not going to withhold technical information, this isnt voodoo, this is critical to the stability of the internet & its users

 

[Space Lynx]

Someone like me?

A tech savvy guru type, I mean your one of the top Admins of this website, it just seems to me that most that community, or admins of IT stuff generally just use Firefox. Opera being owned by a Chinese firm just seems an odd choice for someone who is educated in this field. Vivaldi made by the original Opera maker seems like a no brainer, I'm not sure I trust any browser out of China, but suit yourself. I mean no offense, I myself don't like Firefox that much, it just seems to be what most people in these tech websites use.

 

[hckngrtfakt]

Using ghostery / adblock on both chrome and FF
plus added this filter to adblock
||coin-hive.com/lib/coinhive.min.js

 

[blobster21]

Latest firefox/Edge/Chome/Midori/YouNameIt available to date + local DNS handled by my Pi-Hole (Raspberry Pi) = SAFE

 

[RejZoR]

Firefox is using its own Anti-Track feature and I think they've included Cryptojacking in it too.

 

[Vya Domus]

Seems to me it just checks if ads get blocked.

 

[CrAsHnBuRnXp]

update Waterfox

Whats the benefit of using waterfox these days when Firefox now supports 64bit natively?

 

[Space Lynx]

Whats the benefit of using waterfox these days when Firefox now supports 64bit natively?

fanboys. I only use Vivaldi and Firefox.

I have a Chromebook I use that I use for paying bills, just because well Google makes my life easier in that regard, I keep all ID and financial related info off my main gaming PC

 

[fullinfusion]

Edge is vulnerable, of course.

from what my test run says, Edge is protected while having AdBlock extension installed

 

[erocker]

A tech savvy guru type, I mean your one of the top Admins of this website, it just seems to me that most that community, or admins of IT stuff generally just use Firefox. Opera being owned by a Chinese firm just seems an odd choice for someone who is educated in this field. Vivaldi made by the original Opera maker seems like a no brainer, I'm not sure I trust any browser out of China, but suit yourself. I mean no offense, I myself don't like Firefox that much, it just seems to be what most people in these tech websites use.

I’m a moderator not a tech guru. I deal with bad bahavior and bad/questionable browsers. Hehe

 

[Ahhzz]

Users of Ghostery are also protected.

didn't know that I'm running so many stupid addons heheh. Blocking Facebook, scripts, sound, Ghoster, nocoin, etc, etc...