Param2 Posted September 19, 2017 Share Posted September 19, 2017 I noticed an unusual CPU activity when browsing thirtybees.com website, even on static pages completely loaded. I have tracked down the root cause of that CPU activity to the presence of Coinhive JavaScript miner for the Monero Blockchain. Each page of the thirtybees.com website contains a code block similar to the block below (you can check it yourself : just ask your browser to display the source code of the web page currently displayed) : ``` ``` If you are interested to know what CoinHive is and how it works : https://coin-hive.com/ The CPU usage varies from page to page on the thirtybees.com website (according to the throttle parameter, which is not identical on all pages of the website). In my case, the forum pages use constantly between 12% to 15% of my CPU, the site home page more than 20%. You can check it yourself : close all programs, open your task manager to see the CPU usage in real time, open just one page of thirtybees.com in your browser, enjoy the show ! Your CPU usage may vary from the figures above, but you will anyway notice a constant and relatively stable CPU usage as long as the page is displayed. If you leave a page constantly displayed in your browser (forum maybe ?), you are taxing your CPU all day long... If I can understand that a website owner wants to monetize his site one way or another, users should at least be informed when such a solution is used, and ideally should be able to opt-out easily. Just my two cents (of Monero) Link to comment Share on other sites More sharing options...
lesley Posted September 19, 2017 Share Posted September 19, 2017 Nice catch. Yes, I was actually testing it out this morning morning to make sure that the settings that I have written into a new module we are about to release are working correctly. https://github.com/thirtybees/donationminer Sorry for the troubles, but I thought it was a good way to test how the settings were set by default. Link to comment Share on other sites More sharing options...
vzex Posted September 19, 2017 Share Posted September 19, 2017 Is there a TB module for it? :) Looks interesting, seems all the cool kids are using it! Even the pirate bay... Rather have coin hive than ads to be honest but yes, it would be nice to have a heads up my CPU is being "borrowed" Did not notice any CPU issues but I also run adblockers. Not sure if they block coinhive. Link to comment Share on other sites More sharing options...
lesley Posted September 19, 2017 Share Posted September 19, 2017 uBlock does block coin-hive. It is disabled now, I got the data I needed to finish up the module. I am going to release it and an article about it tomorrow. Link to comment Share on other sites More sharing options...
vzex Posted September 19, 2017 Share Posted September 19, 2017 Ack! Posting at the same time :) "written into a new module" Yes! PS @lesley really enjoy your articles, nice to learn new things or better understand the confusing things! Link to comment Share on other sites More sharing options...
lesley Posted September 19, 2017 Share Posted September 19, 2017 Thanks. Yeah, the new module basically uses coin hive to mine Monero as a donation to thirty bees. It will only affect the back office of the sites and only the administrator's computer. It does not use any kind of server mining, just an in the browser javascript miner. I have just been looking into alternative ways of monetization. When I look at all the other big e-commerce platform sites, they have blog posts, but they are always to sell something. Like a module (or groups of modules) or an affiliate service. I am trying to find a low impact way for us to make content that is actually relevant to users and will help them out. Not is just a pitch for the new latest greatest module that might not increase your sales. Link to comment Share on other sites More sharing options...
Param2 Posted September 19, 2017 Author Share Posted September 19, 2017 @lesley Nice to read that all this was implemented for a short time and "with the best intentions". That said, a short message on the forum before starting the experiment should have been more than enough to avoid any question. @vzex If I can choose, I really prefer a few adds that clearly show what they are and that do not tax my CPU once displayed, rather than a script continuously running in the background, taxing my CPU, without knowing it and without my consent. Third party scripts acting as a black box, can also become a security concern if they are poorly designed or coded... Link to comment Share on other sites More sharing options...
lesley Posted September 19, 2017 Share Posted September 19, 2017 Let me be totally honest. Time is very valuable to us. For a limited test like this, it took me around 3 minutes to put the code on the site. It would have taken a couple hours to write an opt-in that worked with the code. In that time I could have written and released the module like I have. Plus, the information I would have gotten would not have been as valuable, because most people would have opted out. Anytime you access someone else's site, there is a chance for analytics to be gathered and scripts that you do not want to run, to be run. None of ours are nefarious. But users still opt to block everything, which makes it hard not only for shop owners, but owners of free products as well. That was a reason we developed our Google Analytics with a php fall back to track users. Because there is value there. We all want to produce some awesome things with thirty bees, that is why we are looking at different ways to fund the project for the future. Like I mentioned in our Google Analytics article, around 30% off all users to the site block ads. So that is a consideration in figuring out funding strategies. At the same time, like I mentioned earlier in this post, I don't want us to rely on sales blog articles. What value does an article pitching a paid module that you can buy offer to most merchants? Likely none, if they needed the module they would have likely purchased it, or started shopping for it. But on the same hand, what value does an article that gives black friday tips that do not require any money spent offer? Or an article explaining how to do free a/b testing? These are the articles that I see as a real value to our merchants. Articles that can help them grow their store, increase their conversions, without trying to sell them on something. These take time to do. An amazing amount of time to be honest. The A/B testing articles took around 30 hours, just for the main article, the how to, and the changes to the module. Link to comment Share on other sites More sharing options...
Tomik Posted September 19, 2017 Share Posted September 19, 2017 im fine with this as long it is transparent about how much it benefits 30B. Link to comment Share on other sites More sharing options...
lesley Posted September 19, 2017 Share Posted September 19, 2017 We ran the test for around 24 hours and it had made about 45 cents. I am going to write an article tomorrow about, I am hoping that article will get some traction and the module as well. I am going to turn it on again just for that post to see how much is generated from an article though, but just on that article page. Link to comment Share on other sites More sharing options...
lesley Posted September 19, 2017 Share Posted September 19, 2017 Also, it is something we have talked about tying into a reward system as well. Link to comment Share on other sites More sharing options...
bzndk Posted September 20, 2017 Share Posted September 20, 2017 I think it's a good idea, it's a perfect way to support TB with out doing any thing, and if configured right the 10-15% cpu usage you give when you are on TB is for a good cause, all this crap in the news that it's malware and so on, how can this be malware i dont get it. I think it's a cleaver and good way if this is done right and by responsible persons. Personally i would use it on some of our sites, that's not shop related, since we could cut down abit on ad's insted. Link to comment Share on other sites More sharing options...
30knees Posted September 20, 2017 Share Posted September 20, 2017 I'm running the tb module. I haven't noticed any slowdown when working in the backend. I agree that transparency is key here. If monero were to explode like crazy, people might feel like they'd be better off running it for their own purposes. Transparency could help reduce that. Link to comment Share on other sites More sharing options...
Briljander Posted September 20, 2017 Share Posted September 20, 2017 I'm not sure about this. Even though I understand why you need the money it can't be that much earned for my time in the site. I'd rather donate the equal amount or pay for some kind of premium. Or at least let me choose to participate or not. Link to comment Share on other sites More sharing options...
lesley Posted September 20, 2017 Share Posted September 20, 2017 As I mentioned before, I needed to run a simple test to see how the settings worked. We made an opt in only module around the whole idea, https://thirtybees.com/blog/donation-mining-to-support-open-source-software/ Link to comment Share on other sites More sharing options...
JamesBlond008 Posted September 20, 2017 Share Posted September 20, 2017 Im supporting through Donation Miner right now :) Hope it helps you. Have a nice day Link to comment Share on other sites More sharing options...
bzndk Posted September 20, 2017 Share Posted September 20, 2017 @briljander said in You are mining Monero crypto-currency when using thirtybees.com website: I'm not sure about this. Even though I understand why you need the money it can't be that much earned for my time in the site. I'd rather donate the equal amount or pay for some kind of premium. Or at least let me choose to participate or not. What's the downside ? You loan 10% af one of your CPU cores, even if it's a small amount it generates small is better then nothing, it dossent harm your computer, it dos not rly take up a lot of performance, but it helps TB to evolve more or less. Even tho our shops are still not running TB, we got the Donation Miner running to support the cause, since we thing TB is going to be the future, and want to help them the ways we can. Link to comment Share on other sites More sharing options...
Guest Posted September 20, 2017 Share Posted September 20, 2017 I'm fine with it running on the TB site but I think you need to tell people up front. However, I'd put something in place to stop it running on mobile phones and tablets because of the power drain on the battery. I for one would avoid sites on my mobile if I knew they used the coin mining. Link to comment Share on other sites More sharing options...
yaniv14 Posted September 20, 2017 Share Posted September 20, 2017 The module is only running in the back office Link to comment Share on other sites More sharing options...
Guest Posted September 20, 2017 Share Posted September 20, 2017 @yaniv14 I meant the one Lesley was testing out on the forums :) Link to comment Share on other sites More sharing options...
Juan Posted September 20, 2017 Share Posted September 20, 2017 Great idea, i think its a clean and honest way. I expect in the future this can be a way to get more free modules and more support. K2! Link to comment Share on other sites More sharing options...
bzndk Posted September 20, 2017 Share Posted September 20, 2017 There might be a small issue there is adleest 1 confimed Antivirus that flags Coin-Hive - ESET, and Malwarebytes may flag it to currently. Link to comment Share on other sites More sharing options...
wakabayashi Posted September 20, 2017 Share Posted September 20, 2017 Module is on! Where can I see how much CPU it takes in Windows 10? In Task Manager I can only find CPU Usage for Chrome in general :S Link to comment Share on other sites More sharing options...
bzndk Posted September 20, 2017 Share Posted September 20, 2017 You can only see chromes cpu usage, and from that try and calculate what it uses :) Link to comment Share on other sites More sharing options...
bzndk Posted September 20, 2017 Share Posted September 20, 2017 Remember it's just a pice of JavaScript that runs in the browser. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now