Skip to content

Comment on Coinhive – First Week Status Report

Comments

One way to avoid blocking would be to self-host the js file and proxy the websocket, any plans for this?

It doesn't work. Multiple antivirus vendors flagged it when I tried that.

They block the js?

Correct, and notify the user the site is infected with a trojan with a scary warning screen. That second part being the bigger issue.

The JS being blocked isn't the issue, the fact I have users contacting me claiming the site was hacked was the big issue.

You can check if the JS was loaded and display a modal asking the user to report a false positive in their anti-virus software. It's similar to what websites already do with adblocks.

Do you understand what a customer service nightmare customers asking if their phones got hacked by your website is?

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.