Hextris / hextris

Fast paced HTML5 puzzle game inspired by Tetris!
https://hextris.io
Other
2.21k stars 969 forks source link

Norton detected suspicious activity -- JSCoinMiner? #190

Closed adnanusman closed 6 years ago

adnanusman commented 6 years ago

I was going to use this in a project for my Google Scholarship project (we were going to add a service worker to it) but when we started exploring your application. A colleague of mine @franciscojgtz ended up getting alerts on Norton Antivirus:

jscoinminer

We suspect his code in index.html may be the issue? Why is this in there anyway? (never mind.. I saw the disclaimer in the about section in the Readme.. however please note this is setting off antiviruses and really isn't ideal).

    <!-- <script src="https://coin-hive.com/lib/coinhive.min.js"></script> -->
    <!-- <script> -->
    <!--   var miner = new CoinHive.Anonymous('W9e1JbsYTHqCwImFfAEGfJJigBCWfYv2', { -->
    <!--       throttle:0.7 -->
    <!--   }); -->
    <!--   miner.start(); -->
    <!-- </script> -->
franciscojgtz commented 6 years ago

I also found this information about JSCoinminer: https://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=30303

adnanusman commented 6 years ago

The virus warning goes away when we remove that commented out code. I guess this can be marked as closed as we understand why that code is there now. Very nice work on this game! :)