SoylentNews is people
SoylentNews
Arthur T Knackerbracket has found the following story:
Thanks to the ridiculous valuation of Bitcoin and other cryptocurrencies, cryptomining code has become a common mechanism for converting authorized and stolen computing cycles into potential cash.
Antivirus and ad-blocker makers have responded by trying to halt crafty coin-crafting code from hijacking CPU time, particularly in browsers.
For those interested in violating computer laws – please, don't – and those interested in computer security research projects, a developer named Arnau, based in Spain, has published a proof-of-concept walkthrough for hacking public Wi-Fi networks to inject crypto-mining code in connected browsing sessions.
[...] As Arnau explained, the attack – demonstrated on a VirtualBox set up rather than in the wild – can be automated. The published version doesn't work with requests for HTTPS webpages, though the addition of sslstrip could solve that.
The code, mostly Python, is available on GitHub. ®
(Score: 2) by rob_on_earth on Monday January 08 2018, @08:11AM
When WEP (wifi auth) was first cracked it did not get much attention. Only as more and more tools and guides were created showing how easy and quick it was did mainstream media accept that it was fundamentally broken. And only then did big manufactures start turning away from the easy to use WEP encryption.
As more and more of these "it really is easy" articles come out for MitM attacks for mining only then will people start taking it seriously.
It will be the same with Meltdown and Spectre. And then we will still find some old PC in a cupboard everyone has forgotten about that does some crazy important security and has not been patched ...