sent from a disposable whonix qube

  • OwOarchist@pawb.social
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 days ago

    Still can have issues with javascript crypto miners. And there’s always the possibility of malicious javascript finding a way to escape its sandbox and escalate permissions.

    • cley_faye@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      15 hours ago

      JavaScript in the browser have no “sandbox” to evade. It does not have the ability to run outside of it’s virtual machine, at all. It’s completely different from a native executable, that actually have the ability to make system calls, that would evade a container/chroot/whatever.

      Also, running a crypto miner in a browser tab (or even as a service worker) is probably more costly to put in place than it will ever bring back. It’s just not efficient enough.

    • Tanoh@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      2 days ago

      Most (all?) browsers throttle tabs that take too much cpu for too long (especially background). The actual numbers vary, but hidden cryptominers are not that effective anymore.