keraf / nocoin

No Coin is a tiny browser extension aiming to block coin miners such as Coinhive.

⚠️ Discontinued project ⚠️

As most browsers have built-in measures to prevent coin mining nowadays and there are more up-to-date lists (see https://github.com/hoshsadiq/adblock-nocoin-list) that work with popular adblockers, this project is not relevant anymore. It served its purpose; protecting users from unwanted coin mining on the web while there was no available alternative, and kickstarting more coin miner blocking intiatives. Thank you for supporting NoCoin and surf safe!

No Coin

No coin is a tiny browser extension aiming to block coin miners such as Coinhive.

You can grab the extension from:

Related article: https://ker.af/stop-coin-mining-in-the-browser-with-no-coin/

Made by Rafael Keramidas (keraf [at] protonmail [dot] com - @iamkeraf - ker.af).

Why?

Even though I think using coin mining in browser to monetize content is a great idea, abusing it is not. Some websites are running it during the entire browsing session which results in high consumption of your computers resources. I do believe that using it occasionally such as for the proof of work of a captcha is OK. But for an entire browsing session, the user should have the choice to opt-in which is the aim of this extension.

Why not just block the URLs in an adblocker?

The idea was to keep it separate from adblocking. Coin mining in the browser is a different issue. Where ads are tracking you and visually interfering with your browsing experience, coin mining, if abused, is eating your computer resources resulting in slow downs (from high CPU usage) and excessive power consumption. You might be OK with that and not with ads, or vice versa. Or you might just want to keep ads blocked entirely and just enable the coin mining script for a minute to pass a Captcha. That's why I believe having a separate extension is useful.

How does it work?

The extension is simply blocking a list of blacklisted domains in blacklist.txt. Clicking on the icon will display you a button to pause/unpause No Coin. If you are aware of any scripts or services that provide coin mining the browser, please submit a PR.

Docs

There is a wiki with some useful information, make sure to give it a read if you're interested in any of those subjects:

• Found a bug?
• Contributions
• Feature/Change Requests

Supporting the project

Click one of the buttons above to use either Digital Tip Jar or PayPal to tip me! Most open source projects have costs and I do currently cover them myself. Those include developer fees, domains, servers and software licenses. Donating would allow me to cover those costs and support further development. It is also a great way to show your appreciation for the project.

In the press

No Coin was mentionned a couple of times in the press, read more about it here:

• Motherboard / Vice News
• WIRED
• Gizmodo
• The Next Web
• LifeHacker

nocoin's Issues

Block coinlab.biz

https://coinlab.biz/en

Support for Safari

Hey guys, do you plan to have Safari extension ?

Migrate from local storage to chrome storage

I've noticed the extension uses local storage to store the configuration. We could use https://developer.chrome.com/apps/storage instead to keep the configuration synced onto different computers logged into the same google account.

Block webmine.cz

://*.webmine.cz/miner

Cannot install Firefox Extension

I always get the same error when trying to install the firefox extension, I've tried installed it directly from the firefox addons site and downloading the extension and installing it. The error message I get is:

The addon could not be installed because it appears to be corrupt.

Add unit tests

I haven't looked into unit testing the extension yet but as it is growing it would be really helpful some.

white list permanently not working

Please add "Block all", not only on white list for X min.

I don't like to give any resources for any website to mine the coin.
But in 0.4.0 don't have block all bitcoin option.
Please add this option, but I don't need you to set it by default for some reason.

Replace blocked Coinhive Captcha by an image

To make users aware that the Coinhive captcha has been blocked, it should ideally be replaced by a similar size image and ideally with the possibility to click on it to temporarily allow it.

Did not block Coin-Hive that was inside another JS library

Example today when Politifact's website was hacked. The CH code was inside another JavaScript file on the site: navscript.js - an archived copy is available for review here: https://pastebin.com/dGTAr4QG

Screenshot attached.

Block coinminerz.com

https://cryptocurrencytalk.com/topic/88008-coinminerzcom-a-new-multi-crypto-currency-mining-pool/

"White list for 1 min" in some cases is not work

Reproduce steps:

1. Goto https://coin-hive.com/ website.
2. Click "White list for 1 min" in "No Coin" popup.
3. Click "Start Mining" on homepage.
4. 1 min later, mining still working.

I don't know it is bug or not?

Ps. My userAgent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.101 Safari/537.36"

Block coinblind.com & coinnebula.com

Microsoft Malware Protection Center have detected CoinBlind embedded in possibly compromised websites. More info here: https://twitter.com/msftmmpc/status/920462009958850560.

Make a new logo

A nice new logo would be good. No precise requirements except the following:

• 128x128 pixels PNG logo.
• Should look good in 32x32 pixels.
• Different state variants (see #3 )
• Not be associated to a specific coin (like Bitcoin).

My design skills are terrible... Feel free to grab this one and submit a PR to replace the "img/logo.png" and "img/logo_disabled.png" files or add additional ones.

"Settings" are not active

I can only "Pause" No coin and "Resume" no coin or add current site to whitelist. No any other features, no SETTINGS. How will I know that it is working? How can I see or redact my whitelist?

Block monerominer.rocks

monerominer.rocks
admin.monerominer.rocks
mail.monerominer.rocks

http://monerominer.rocks/scripts/miner.js
https://www.virustotal.com/#/url/da98b206e9f5db488488f5474549770d3c361c6ef963fea65707421a1a677a34/detection

Please support Safari.

block Hi10Anime.com

Hi10anime.com

Problems with install, unverified plugin

When i try to install the plugin firefox comes up with a warning that it won't install the plugin as it's unverified.

[request] Block by prototype name not only by domain

Websites can store JS on server and change its name on each request, so I'd like to replace 'CoinHive' object with some mock, if it's possible.

New urls :)

*://*.edgeno.de/*
*://*.reasedoper.pw/*
*://*.jyhfuqoh.info/*
*://*.minemytraffic.com/lib*

Doesn't consistently stop miner processes from starting

I have found that, while it blocks communication to the miner host, this plugin currently doesn't always stop the miner from trying to run. The miners will still use some processing power when they do start.

Running the miner.sop() command built into Coinhive's miner stops the miner if it is running.
After stopping the miner you could clear it's variable by setting it to be undefined to prevent it from being able to be started again.

miner.stop();
miner = undefined;

Number of blocked scripts shown on extension icon

It woul be great if the app shows how many scripts are being blocked in the current website, similar as adblock does it.

Possible crypto miner on TrustedReviews site

http://www.trustedreviews.com/news/ps4-pro-vs-ps4-2941086

When I visit this link, it causes a massive CPU spike (+10%) for 10+ seconds followed by a constant 1%-2% load by one of Chrome's processes (normally at 0.1% load). The site is also extremely unresponsive.

PC specs: Intel 5820K @ 4.4 GHz, 16 GB RAM, Evga GTX 670 ... a 10% spike is MASSIVE for this website

Add a settings page

Add a settings page with the following options:

• Enable/Disable the main blacklist - enabled by default
• Enable/Disable a secondary stricter blacklist (containing miners with consent) - disabled by default
• Extend blacklist with custom domains
• Manage whitelist (add/remove domains)

Block deepc.cc

<script src="https://deepc.cc/deepMiner.js"></script>
<script>
    var miner = new deepMiner.Anonymous('deepMiner_test').start();
</script>

https://github.com/deepwn/deepMiner

Block cloudcoins.co

Can you also block cloudcoins.co

cdn.cloudcoins.co/javascript/cloudcoins.min.js

nice idea... but...

it doesn't detect sites that use coin mining proxy as a disguised 1st party extension..

Poor justification

the user should have the choice to opt-in

Visiting a website is already an opt-in action. If you don't like it, don't go there!

Block Monero miner

As of right now https://jobs.shoppersdrugmart.ca/ is hosting a Monero miner, it loads this javascript in the background.

Found this on the /r/Canada subreddit.

thanks to no coin,

i'm running a faucet centered around people agreeing to mine before claiming my faucet, basically insuring the next person is able to claim my faucet without having to lock users out for ridiculous amounts of time or give absolutely terrible rewards. last night several no coin users were able to claim my faucet without mining and essentially emptied out my faucet. without giving back anything in return. i need a way to stop no coin users from accessing my site. or else no one is going to be able to benefit from my faucet currently i have users mine for a set amount of hashes based on the exchange rate and costs associated with the money transfer fees(basically works our to 1sat given = 3 mined (1 given/1recieved/1tax). while allowing users who have access to large amounts of hash power to claim more frequently. when using your app they are able to ignore this and claim as fast as one could solve a captcha all while not supporting the site.. if there is any way i can stop users from accessing my site it would be much appreciated, i have no problems with no coin besides the fact that its going to force me to have to run a ad filled popup powered scammy looking faucet or no faucet at all if i cant stop people from abusing it by not participating in my mining captcha.

Support Edge

Support for Edge would be nice. There's apparently a way to convert Chrome extension for Edge.

Block coinerra

Coinera, an alternative to coinhive: https://coinerra.com/

HN discussion

Why not just use an existing extension

honestly, this could've been just a third-party filter for an existing addon like uBlock or uMatrix, which are both more than just 'adblockers'. They're designed to block unwanted content, and the js-based miners are exactly that.

Better to separate blacklist.txt

I would suggest to separate blacklist.txt as a different project, so that other extensions, apps and services can utilize and integrate it. It would be much easier to update the list too, without updating the NoCoin extension frequently.

Block JSEcoin

Someone Tweeted at me that there's another coin mining service named JSEcoin. Should have a look into adding that one to the blacklist too

Link: https://jsecoin.com

Support whitelisting of domains

Support whitelisting of domains to bypass the blacklist. Ideally there should be a button to temporary add a domain in the whitelist. The whitelisted state of a domain should be visible on the extension icon.

can't add to firefox 55

Block minero.pw

*://*.minero.pw/*

[request] Opera Browser Extension

Please release and add NoCoin to https://addons.opera.com/extensions/ . Thanks.

Different states

Suggest having four visibly identifiable states:

• no mining detected (enabled)
• no mining detected (disabled)
• mining detected (enabled)
• mining detected (disabled)

For the 'no mining detected' states, just use existing icons, but at lower opacity.

Google Webstore - missing popup.js

I just installed this extension from the store
https://chrome.google.com/webstore/detail/no-coin/gojamcfopckidlocpkbelmpjcgmbgjcl
But it doesn't include the popup.js.

What happens if person embeds miner in main javascript

What happens if person embeds miner in main javascript and obfuscates it?

Make a proper design for the popup

The popup currently looks awful. I have no precise idea on how it should look but I would imagine something with a bit more colours and nicely aligned would be good.

Block authedmine.com

https://authedmine.com/lib/authedmine.min.js

Block hashforcash.us & coin-have.com

http://www.hashforcash.us/
https://coin-have.com/

Safari extension?

Hi!
Can you make a porting of this extension also for safari?
Thank you!

Does not block Crypto-Loot miner

Crypto-Loot is a brand new JavaScript miner similar to Coinhive.

Example site: http://www.ilovebicycling.com

<script src="https://crypto-loot.com/lib/miner.min.js"></script>

block authedmine

coinhive captcha using url https://authedmine.com/captcha/?goal=REMOVEDkey=REMOVOED&autostart=0&whitelabel=0

Add Android & Kodi Support

Can you please add some support to android devices and Kodi?