Wow. Bitcoin is almost $1,500

[ElFenix]

Crypto is bad enough for the environment when mined on asics and gpus. Just imagine when people mindlessly click an opt in to allow it from their browser, or worse.

 

[VirtualLarry]

The problem is that you can't really get a meaningful amount of crypto profits with just CPU mining, and GPU mining from a browser is likely going to cause problems for people with outdated video drivers.

Well, "meaningful crypto profits" in this scenario, would be on the order of cents, not dollars, but yeah, unless the coin in question was worth a quite a bit, a few minutes of CPU mining might not amount to much. (Though, for the website operator, if they did pool-mining with all of their visitors, maybe it would amount to something tangible?)

And I do agree with you about out-dated / non-compute-oriented video drivers, especially on OEM rigs, and laptops... gee, I didn't really consider the thermal issues with laptops with my proposal, just thinking of my super-powerful dual-GPU desktop.

 

[destrekor]

If it isn't Coinbase Pro, Binance, or maybe Poloniex, I don't touch them.

I was like, what the hell is Coinbase Pro? Then I searched and found that's the rebranded GDAX. Yeah, I'd agree.

Binance I feel is legit, but I'm not 100% on the security. A) I'm not exactly trustful of Chinese companies - not by default, but for a lot of security products especially, I try to avoid. This is entirely due to the fear of State Sponsored activity, not that the companies themselves are untrustworthy.

And don't forget that just recently Binance had a breach. That said, I'd largely agree here in the end when the real worry is safety of your overall investments. I didn't follow up on the recent breach but I'd suspect Binance to make customers right in the end if the funds aren't recovered. And otherwise I don't see likelihood of there being a long con or scam here.

Poloniex - agreed.


One to add: Gemini
But it isn't so much a fully featured exchange as it is a reputable entry and exit point. I've largely done my actual cashing or buying in there, then transfer out tokens. I don't have any kind of banking linked at any other exchange. Though I might still have Coinbase linked. I never ended up doing anything with GDAX/Coinbase Pro, at the time I preferred other platforms.

 

[DrMrLordX]

The problem is that you can't really get a meaningful amount of crypto profits with just CPU mining, and GPU mining from a browser is likely going to cause problems for people with outdated video drivers.

Stuff like XMR is CPU-mineable. Rome would be an XMR beast. Heck 16c Zen2 would be beastly.

Binance I feel is legit, but I'm not 100% on the security.

They did suffer a breach, and I'm a bit bothered by that. Apparently it was a hot wallet or something. Anyway a few people lost a few million in crypto, and Binance said they'll cover the losses. So that's good. Compare that to when Bitfinex got hacked. Ha ha.

One to add: Gemini

I'm not so sure about them sometimes. I found them to be a pain in the arse to use. With GDAX/Coinbase Pro being out there, I didn't much see the point. Some folks like them, some folks don't.

 

[VirtualLarry]

Stuff like XMR is CPU-mineable. Rome would be an XMR beast. Heck 16c Zen2 would be beastly.

So, in a near-future world out there, where the "entry-level" CPU is a Ryzen-family 6C/12T or i5-8400/9400(F), then CPU-mining might still be worth-while, if web-site operators had that option. I wasn't so wrong.

Edit: Of course, the numbers, if I get $0.10-$0.11 per 24hr period "mining" CNR or CN8 on my 6C/12T CPU (only really using 4 threads to mine, due to cache limitations and size), then what portion of that would a web-site operator get, if I only have the web site open for 5-10 minutes? (Of course, you know that Facebook is going to be all over this idea, when it's implemented, given the amount of time that people spend on Facebook.)

 

[ultimatebob]

I'm also not sure if I want to give the Winklevoss twins even more money than they already have. They already made enough from suing Facebook, no?

 

[JEDI]

Crypto is bad enough for the environment when mined on asics and gpus. Just imagine when people mindlessly click an opt in to allow it from their browser, or worse.

whats this???

 

[ElFenix]

whats this???

what are you asking about?

 

[JEDI]

what are you asking about?

mindlessly click an opt in to allow it from their browser

 

[ultimatebob]

mindlessly click an opt in to allow it from their browser

Sadly, most sites wouldn't even bother offering an opt-in. They would just start the mining engine in the background automatically.

Mining using something like Javascript in the browser is super inefficient, too. The Nimiq guys tried it, and found that it only mines crypto about 1/4th as quickly as a dedicated mining software program.

 

[VirtualLarry]

Mining using something like Javascript in the browser is super inefficient, too. The Nimiq guys tried it, and found that it only mines crypto about 1/4th as quickly as a dedicated mining software program.

That's why I proposed using the Netscape Plug-In API to map certain "crypto URLs" to plug-ins, and then the mining could happen in native code. (Yes, I know the eventual goal is to eliminate most plug-ins, due to security risk issues, but for now, it would work.)

 

[DrMrLordX]

Sadly, most sites wouldn't even bother offering an opt-in. They would just start the mining engine in the background automatically.

This has already happened, has it not?

Mining using something like Javascript in the browser is super inefficient, too. The Nimiq guys tried it, and found that it only mines crypto about 1/4th as quickly as a dedicated mining software program.

The trick would be to use WASM.

 

[JEDI]

Sadly, most sites wouldn't even bother offering an opt-in. They would just start the mining engine in the background automatically.

Mining using something like Javascript in the browser is super inefficient, too. The Nimiq guys tried it, and found that it only mines crypto about 1/4th as quickly as a dedicated mining software program.

would an antivirus program catch it and/or stop that?

 

[destrekor]

Netscape Plug-In API

What year do you think it is?

... oh, just realized that's what NPAPI is lol
Well it's dying/dead anyway. Let it die for good please. Thanks.

 

[destrekor]

would an antivirus program catch it and/or stop that?

Some have/do stop it, but I'm not sure how widespread that kind of built-in defense for AV suites truly is.

It may have become quite well developed in the past year or so, because I used to hear all about the browser mining but haven't seen much about it as of late. AV providers and ad-block software may have stepped up as they caught on to the trend and methods.

 

[destrekor]

I'm not so sure about them sometimes. I found them to be a pain in the arse to use. With GDAX/Coinbase Pro being out there, I didn't much see the point. Some folks like them, some folks don't.

I'm not sure how it is today, but I think it used to be the case that actual pricing transparency was a little off, essentially in a way that may have allowed Coinbase to skim more off the top like a Market Maker on steroids. They always priced fees and their own little profit into the main Coinbase exchange rates, and at the time I recall that carrying over to GDAX as well. So depending on your own personal volume and price targets, you might see significant-enough differences in exchange rates between GDAX, or USDT-based prices (that may have only been at other exchanges...), which would all differ from other places with strict USD rates based on the fiat dollar and not on the dollar peg. It always seemed that Gemini had consistent and favorable rates.

I'm also not sure if I want to give the Winklevoss twins even more money than they already have. They already made enough from suing Facebook, no?

Yeah I'm not really concerned about that angle. If they have a solid product, solid banking partnerships, and appear to have quality security practices, and above all is based in the USA, I'm happy with that. Yes Poloniex is American as well, and one of the big reasons I like them too.

 

[ultimatebob]

would an antivirus program catch it and/or stop that?

Some of the ad blockers already block crypto mining plugins, as does some antivirus software.

Hell... I had to tell Microsoft AV that my Ethereum desktop miner was legit years ago.

 

[ultimatebob]

I noticed that Coinbase is bribing people $10 to watch some videos about Stellar Lumens. I have no idea if they will catch on, but hey.... $10 is $10

 

[Red Squirrel]

I hate the fact that browsers even allow sites to just run arbitrary code like that. If they can mine crypto and have full access to your GPU(s) imagine what else they could do if they really wanted to. Actually I'm surprised the malicious crypto ones don't just load a Windows service on your machine so it keeps mining even once you get off the site.

That said, I could see some neat applications for web based mining if done with consent.

 

[VirtualLarry]

You can be absolutely sure of getting a guaranteed profit and full return on your investment.

They are trusted and legit. I have made a lot of bitcoin from them.

Yeah, yeah, sure buddy. No legitimate investment opportunity would say that you are "sure" of "guaranteed profit", that I know of, anyways. Pretty-much any investment that I know of, involves SOME sort of risk, and no legitimate investment offering, would fail to mention that in a disclaimer.

 

[Train]

I hate the fact that browsers even allow sites to just run arbitrary code like that. If they can mine crypto and have full access to your GPU(s) imagine what else they could do if they really wanted to. Actually I'm surprised the malicious crypto ones don't just load a Windows service on your machine so it keeps mining even once you get off the site.

That said, I could see some neat applications for web based mining if done with consent.

All javascript is "arbitrary code", and always has been. Browser sandboxing has been a thing for a long time. No, "arbitrary code" is not going to install a windows service.

 

[Red Squirrel]

All javascript is "arbitrary code", and always has been. Browser sandboxing has been a thing for a long time. No, "arbitrary code" is not going to install a windows service.

Never been a fan of the idea of javascript either, because of the fact that it's arbitrary code. Would not be so bad if it was strictly only to run stuff within the web page and only really affect formatting, but it's not. Clearly the sandboxing can be bypassed if they can access your GPU(s) to run code on it. I'm sure someone who knows what they're doing could easily do more malicious stuff. Kind of like when you land on a bad site and it starts loading crap in your machine and you get extra icons on your desktop.

 

[ultimatebob]

I noticed that Hexel shut down, so I lost my complimentary storefront for Coolcoin. I guess that you'll need to order your laser kitty t-shirts from me the old fashioned way via PM once you accumulate 1,000 of them

 

[Train]

....
Clearly the sandboxing can be bypassed if they can access your GPU(s) to run code on it.
...

It's called WebGL, and gave JavaScript access to the GPU. It is still very much sandboxed. You can disable WebGL if you really want to, in any browser.

Kind of like when you land on a bad site and it starts loading crap in your machine and you get extra icons on your desktop.

Sounds like you have much bigger problems than browser js.

 

[DrMrLordX]

Here comes the pump folks. Is it "real" this time? Hmm:

https://cryptopotato.com/150-million-new-usdt-tether-printed-what-does-it-mean/

https://www.cryptonewsz.com/tether-...0-million-usdt-printing-and-whats-next/27059/

Currently there is nearly 3.5 billion USDT in circulation. Good grief.