Moon on Nostr: I have been running my own copy of iris and spent a couple days fiddling with it ...
I have been running my own copy of iris and spent a couple days fiddling with it constantly in chrome inspector while testing changes to the code and to a custom content security policy i have installed. i have it locked down so it can't sneak any code in from another site. I've been watching traffic emanating from iris. I can't say it with 100% assurance, but it would be really difficult to hide a crypto miner from me right now, I'd probably see it getting batches and submitting results or trying to make an offsite request for javascript. if it were trying to run external code it would be failing rather than running the miner/whatever due to the CSP, but i still see iris running hot. I cannot absolutely rule it out but i strongly think it's not running a miner.
Published at
2023-03-01 18:04:08Event JSON
{
"id": "4445a429823ad7951a642d778b6cb21d42fa602f1d1a43772527533ee3cb6610",
"pubkey": "dbdf3807187591723175334ce628cb1a139ff1c98c3790630e91c38c3432a578",
"created_at": 1677693848,
"kind": 1,
"tags": [
[
"e",
"97d0ac61070a7188d8c8e414dbfa53ac8107396673da85e25d33723a53364913",
"",
"root"
],
[
"e",
"41d81f80f576ffd8b75cc61121e2e2c92179102588b394836cbd30f36cc05237",
"",
"reply"
],
[
"p",
"e09d67ed248a7b1c8761f2c81566109d31b0a9285fb4d463b9496946e8eaf88e"
],
[
"p",
"ba2883fb4a7f62cb851b9f5411659791cffb2e3fc8b90f683ee5091f413880a1"
]
],
"content": "I have been running my own copy of iris and spent a couple days fiddling with it constantly in chrome inspector while testing changes to the code and to a custom content security policy i have installed. i have it locked down so it can't sneak any code in from another site. I've been watching traffic emanating from iris. I can't say it with 100% assurance, but it would be really difficult to hide a crypto miner from me right now, I'd probably see it getting batches and submitting results or trying to make an offsite request for javascript. if it were trying to run external code it would be failing rather than running the miner/whatever due to the CSP, but i still see iris running hot. I cannot absolutely rule it out but i strongly think it's not running a miner.",
"sig": "5861969ddab684ae8513c46ef4b572a80b48122d04339a92012b42f0c9c06a9a2f00becec3df04ec84539b557d375bb852055d7177fbeef209310633e01b3bf4"
}