But the software is clearly a hot avenue for hackers. And trying to legitimize this kind of thing also makes the foray into "cryptojacking" more enticing.
If legit sites start doing this, users will get used to it and hackers will bring in more cash.
CoinHive didn't fix this, as far as I understand. They simply published an alternative miner. As recently as a week ago, many UK and US gov sites were cryptojacked using the CoinHive software: https://motherboard.vice.com/en_us/article/bj5m4v/cryptocurr...
They don't even seem to be trying to root out malicious users:
>The team don’t specifically track domains, so if a user’s email address is not, for example, “contact@website.com,” Coinhive often don’t know where or how the service is being used, though.