Should Palemoon block crypto miners by default ?

Talk about code development, features, specific bugzilla bugs, enhancements, patches, and other highly technical things.

Moderator: satrow

Forum rules
Please keep everything here strictly on-topic.
This board is meant for Pale Moon source code development related subjects only like code snippets, patches, specific referenced Bugzilla bugs, mercurial, etc.

This is not for tech support! Please do not post tech support questions in the "Development" board!
Please make sure not to use this board for support questions. Most "bug reports" do not belong in this board and should initially be posted in Community Support or other relevant support boards.

Please keep things on-topic as this forum will be used for reference for Pale Moon development. Expect topics that aren't relevant as such to be moved or deleted.
jangdonggun1234
Moonbather
Moonbather
Posts: 56
Joined: 2013-06-06, 01:29

Should Palemoon block crypto miners by default ?

Unread post by jangdonggun1234 » 2018-10-02, 12:36

Crypto miner has become a very annoying for the web lately, and a lot of websites use this method to generate money but is so evil and annoying. I think Palemoon should block miners by default as Firefox, Chrome and Opera blocked them already: https://www.coindesk.com/firefox-announ ... g-scripts/

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 23693
Joined: 2011-08-28, 17:27
Location: 58°2'16"N 14°58'31"E
Contact:

Re: Should Palemoon block crypto miners by default ?

Unread post by Moonchild » 2018-10-02, 12:43

Purpose: The browser is a client meant to display content, not block it.
Limited risk: Crypto miners are all delivered through WASM which is disabled by default in Pale Moon.
Mitigation: content blocking extensions are aplenty which can effectively block bad actors on the web (e.g. ABL + a proper filter subscription)
Firefox's "solution" is simply their baked-in disconnect.me, being touted as something unique and new while all it is is just blocking more things through the system add-on.

Conclusion: I don't see anything actionable here. :)
Last edited by Moonchild on 2018-10-02, 12:51, edited 1 time in total.
City of Heroes public server: https://www.moonshard.org/ -- Vote for it: Image

"If you want to build a better world for yourself, you have to be willing to build one for everybody." -- Coyote Osborne
"I'm afraid you have me mistaken for someone who can be shamed by a child." -- Quillspawn

User avatar
gepus
Lunatic
Lunatic
Posts: 300
Joined: 2017-12-14, 12:59

Re: Should Palemoon block crypto miners by default ?

Unread post by gepus » 2018-10-03, 14:24

Moonchild wrote:Mitigation: content blocking extensions are aplenty which can effectively block bad actors on the web (e.g. ABL + a proper filter subscription)
Firefox's "solution" is simply their baked-in disconnect.me, being touted as something unique and new while all it is is just blocking more things through the system add-on.

Conclusion: I don't see anything actionable here. :)
Full Ack!

- small addition
JavaScript Miners like Coinhive can use asm.js as fallback.
If false, the miner will use the faster WebAssembly version if supported and otherwise fall back to asm.js.
source
Because of security qualms (CVE-2015-0817 CVE-2015-2712) I have asm.js disabled since 2015 and didn't encounter major negative impact on sites I visit regularly.

Locked