search

keraf / NoCoin

No Coin is a tiny browser extension aiming to block coin miners such as Coinhive.
MIT License
1.58k stars 144 forks source link

Does not sniff for mining scripts #193

Open ghost opened 5 years ago

ghost commented 5 years ago

It seems users installing this software may not have read your intro or blog post describing your feelings towards web mining and are opening issues like #141 #179. Have you considered adding a sniffer in addition to your blacklist like MinerBlock?

Also, what do you suppose the chances are an extension like this could get hacked like the MEGA Chrome Extension was last year? That seems like it could be a problem for user privacy and security in general. What are your thoughts?

keraf commented 5 years ago

Hi there,

I have been away from the project for a while and am planning to come back to it. Having additional measures (other than a blacklist) to detect coin miners is on my list. I will also look into updating the blacklist as I have read reports of the extension failing to block miners.

Regarding the extension getting hacked, I am trying to be as careful as I can with my online accounts, especially those than can publish packages/software to users. I am also closely inspecting all PRs before merging them (ie. I check all links added to the blacklist to prevent websites/resources being blocked unfairly). Of course, there's always a chance that this could happen to No Coin like it could happen to every other extensions, but I keep this in mind and take the steps I deem necessary to avoid this situation.

Cheers, Raf