Hacker News Reader

Comment by ballenf | Hacker News Reader

Has anyone found attempts to deobfuscate the coinhive source code? Maybe my google-fu needs improvement...

I found a github page that provides a proxy to the coinhive allowing the user to keep 100% of the profit, but it doesn't even link to the coinhive code that I could see. (https://github.com/cazala/coin-hive-stratum)

Also found this, https://jonathanmh.com/testing-coin-hive-crowd-source-monero.... Interesting but no source code.

View on HN

I have a branch of https://github.com/tpruvot/cpuminer-multi, which I am working on tidying up and pushing to Github. It has a bash script that instead of GCC / Clang, compiles to WASM. Any Clang compilable software can compile to WASM theoretically. Only supports cryptonight hashing at the moment.

The actual miner is using WebAssembly so I don't know if it's even possible to deobfuscate in a sensible manner.

I've tried to reverse engineer it, but failed. The best place to start, IMO, is the communication between client-server over a websocket. It is binary, but shows some interesting data and keys as in key-names, from key-value, not crypto-keys).

My idea was to make an API-rate limiter, where a client has to submit a list of calculated hashes (PoW) with each request and so protect the API against bots, scrapers and other (D)DoS attacks. Bad idea, because the data that has to be transfered (in Headers) is going to huge, megabytes, if you want to make even a few cents on a million-hits-per-day API.

Reply on news.ycombinator.com