Security Warning: Dmania.lol is running mining scripts using your computer resources.

Hey Again Steemitizens,


Edit after a day of this post being up, in fairness:

@zombee responded quickly and fairly decisively and has resolved this issue. Dmania.lol is no longer mining as noted below.

Here from the comments section below, is the result of this post:

[-]zombee (65) · 7 hours ago
I have definitely not installed any mining script on dMania and the site wasn't compromised.
It makes absolutely no sense that I would run a mining script on a small website like dMania. The rewards for that would be almost zero and I would lose all trust of the users.
That would endanger the whole project and everything I have worked for the last 6 months.

The only way that is possible is that some third party library has included a mining script somewhere. I am going to investigate and check if it's true.
dMania uses a lot of libraries that could potentially include a mining script with a new update without my knowledge. That's the only possible explanation and could potentially happen to any website.

Update
Apparently there was actually running a crypto miner on dMania without my knowledge. It was probably included in some external library in one of the last updates. I have updated all external libraries and the miner is gone.

I want to clarify that I had nothing to do with this. Projects like dMania use hundreds of libraries. Those libraries can potentially include a miner in a new update. I am now checking the code for that before every update so that won't happen again.

Update 2

Ok looks like the problem is not resolved. Atm I have no idea whats going on and how the miner gets onto the website. I took down dMania to protect the users until I fix it. ( dMania-bot is also down and won't upvote anything).

dMania will be online again when the problem is resolved.


this is the original post body, before @zombee responded and the addition was made above this line:

You should know that dmania.lol is running crypto mining scripts when you visit their site. Because of the warning issued by my security software, I did not proceed into the site today. This is the first time I have received this warning on their site.

I am not accusing the site operators of mal-doing, but if they are mining surreptitiously, well that's pretty shady. It is possible however, they have been hacked and this script was maliciously injected.

Either way, when this same thing happened to steem.supply, there was massive public outcry when people found out. I feel this bears reporting now to the community as a result.

Yours in service,
@SirCork

Steem Witness #71

Founder @YouAreHOPE Foundation - Steem based, community fueled worldwide humanitarian aid charitable organization.

Founder @SteemStarNetwork 24/7 stream at the center of the steemiverse.


Please remember to cast your witness vote for @SirCork,
your charitable, irritable steem witness!

H2
H3
H4
3 columns
2 columns
1 column
224 Comments