Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nimiq.com #109811

Closed
spirillen opened this issue Feb 20, 2025 · 10 comments
Closed

nimiq.com #109811

spirillen opened this issue Feb 20, 2025 · 10 comments
Labels
Coin Blocker Bitcoin, Ethereum, Mining, etc. (Not malware, but could be used by it) Tracking Basically the same as SpyWare but TrackWare is used to Track you're online habits
Milestone

Comments

@spirillen
Copy link
Contributor

spirillen commented Feb 20, 2025

Comments

@ShadowWhisperer do you have any comments about the Cryptocurrency mining in badmojr/1Hosts#1896? Do you believe it should still be added to #coinblocker?

easyprivacy/easyprivacy_trackingservers_mining.txt:||nimiq.com^$third-party

Wildcard domain records

nimiq.com|coinblocker,tracking

Sub-Domain records

null

Hosts (RFC:952) specific records, not used by DNS RPZ firewalls

cdn.nimiq.com|tracking
demo.nimiq.com|tracking
hub.nimiq.com|tracking
keyguard.nimiq.com|tracking
mail.nimiq.com|tracking
mx.nimiq.com|tracking
network.nimiq.com|tracking
promo.nimiq.com|tracking
repo.nimiq.com|tracking
safe.nimiq.com|tracking
seed-16.nimiq.com|tracking
seed-17.nimiq.com|tracking
seed-18.nimiq.com|tracking
seed-19.nimiq.com|tracking
seed-1.nimiq.com|tracking
seed-20.nimiq.com|tracking
seed-2.nimiq.com|tracking
seed-3.nimiq.com|tracking
shop.nimiq.com|tracking
www.nimiq.com|tracking

Safe Search records

null

Screenshots

Screenshot, click to expand

N/A

Links to external sources

Name servers

aiden.ns.cloudflare.com.
hope.ns.cloudflare.com.

logs from uBlock Origin

N/A

@spirillen spirillen added the Tracking Basically the same as SpyWare but TrackWare is used to Track you're online habits label Feb 20, 2025
@spirillen spirillen added this to the Tracking milestone Feb 20, 2025
@ShadowWhisperer
Copy link

I'm too familiar with this company. I block them because it's related to Crypto. If a network gets compromised, I don't want untraceable money transfers taking place.

From ChatGPT

Nimiq (NIM) uses a unique browser-based mining system called Albatross (for staking) and previously used Argon2d (CPU-friendly mining). However, after transitioning to Nimiq 2.0, it moved from traditional mining to a Proof-of-Stake (PoS) model. So, it no longer supports mining in the traditional sense but instead uses staking.

Staking is the process of locking up cryptocurrency in a blockchain network to support its operations, such as validating transactions and securing the network. In return, participants earn rewards in the form of additional cryptocurrency. It is commonly used in Proof-of-Stake (PoS) and similar consensus mechanisms as an alternative to mining.

@spirillen
Copy link
Contributor Author

Hi @ShadowWhisperer thanks for your reply, I to will then throw then on the coinblocker list as it seems like they just chained approach and not behavior

@spirillen spirillen reopened this Feb 20, 2025
@spirillen spirillen added the Coin Blocker Bitcoin, Ethereum, Mining, etc. (Not malware, but could be used by it) label Feb 20, 2025
@Albermonte
Copy link

@ShadowWhisperer

Just to clarify some things about that ChatGPT answer:

Nimiq (NIM) uses a unique browser-based mining system called Albatross (for staking)

Nimiq 2.0 doesn't use any browser-based mining, since the transition to PoS on 19/11/2024 there is no more mining but just staking, which doesn't require any CPU power or harm in any way the user experience.

Albatross is not the mining system, but the consensus algorithm. You can read more in this blog post or in this live demo

I don't want untraceable money transfers taking place

All transactions can be tracked, as all information is public, traceable and verifiable.

@spirillen

it seems like they just chained approach and not behavior

Thank you for taking your time reviewing this, is there any possibility or something I can do so you remove Nimiq related domains from the list?
Since Nimiq is native to the browser, having Nimiq related domains on adblocking lists make the user experience worse because it causes some of our apps to broke or take too long to establish consensus.

Thank you both, let me know if I can help with anything or provide more information.

@spirillen
Copy link
Contributor Author

is there any possibility or something I can do so you remove

Always and yet always... not

It all hinges on the principle of OPT-IN rather than opt-out. If a user is fully aware of what they are opting into, you are essentially opening a wide door for participation.

However, to avoid any confusion between this list system and a conventional blacklist, please refer to this section for clarification on this list.

This implies that you are already engaging with users, providing them access to knowledge, and assisting them in gaining insights so they can make informed decisions for themselves.

This brings us to the crucial question: Are these domains still actively linked to coin mining through the browser? Have users not opted in to this? If the answer to both questions is no, and they can no longer be classified as part of the coin mining industry, then the classification should, of course, be updated to reflect this change.

Thanks for you participation

Best regards

spent 18m

@ShadowWhisperer
Copy link

@Albermonte I understood what I read.

I don't want untraceable money transfers taking place.

@Albermonte
Copy link

This brings us to the crucial question: Are these domains still actively linked to coin mining through the browser?

No. You cannot mine in the browser anymore since we have transitioned to Proof-of-Stake.

Have users not opted in to this?

Here I'm not really sure what to answer, because if you go to any web app that uses Nimiq, it needs to load the @nimiq/core package to work and connect to various nodes to reach consensus and be able to interact with the network.
You are already aware that it needs to connect to the network, it's like going to youtube but blocking the youtube domain. So I would say users are aware that the app needs to connect to the network and doesn't need to be opt-in since there's no mining involve and no harm to the user, web nodes are not resource intensive and cannot do more than basic communication with the network, there is no incentive or advantage of having a web node in a webpage that doesn't need one. This could be the case in the past with browser mining but not anymore.

So I am confident in saying that there is no danger or reason why nimiq domains should be blacklisted.

Thank you for your time.

@ShadowWhisperer
Copy link

ShadowWhisperer commented Feb 21, 2025

For the 0.0000000001% of people who will use Nimiq, they can whitelist on their own.... as with all items in my lists. If there is a massive increase in demand for it, it will still stay in my list. I do not care what it does. If it is crypto related (not just news), it will stay in my list.

It'd be like going into a Google block-list and complaining that youtube.com is blocked. It's not being blocked because it's malware, it's blocked because of the category. *An optional category selected by the end user.

Answer is final. Have a good weekend.

@Albermonte
Copy link

For the 0.0000000001% of people who will use Nimiq

No need to attack 😅

they can whitelist on their own....

Of course they can, but extra steps are always harmful for UX. People with no tech background using a VPN with an adblocker ON and finding that they cannot connect or use our apps won't think about whitelisting a specific domain in the adblocker, they will think that it doesn't work and will blame us and move on.

If it is crypto related (not just news), it will stay in my list.
Answer is final. Have a good weekend.

I can totally understand that, I'm just trying to do what I can in favor of our userbase like you are doing in favor of your userbase.
No bad feelings from my side, have a good weekend you too.

@spirillen
Copy link
Contributor Author

Hi @Albermonte

Thanks you a lot for sharing this knowledge to us all, it is very appreciated.

About having your domain removed from the Coin blocker list, I primarily stands as ShadowWhisperer, bot at least to the whitelist policy, but to the nature of this projects goal, spreading knowledge of domain.

If you like, you are most welcome to write a little text I can add in the top of the OP, where you shortly describe your domain.

@Albermonte
Copy link

Nimiq Keyguard - keyguard.nimiq.com
The Keyguard is a security module designed to manage cryptographic keys within the Nimiq Wallet. Its primary responsibilities include:

  • Key Management – The Keyguard handles the generation, storage, and management of private keys used for signing transactions within the Nimiq Wallet. This ensures that sensitive keys remain secure and are not exposed to potential threats.
  • Signing Transactions – When a user initiates a transaction, the Keyguard signs it with the appropriate private key.

Nimiq Hub - hub.nimiq.com
The Nimiq Hub is a user interface component of the Nimiq Wallet that manages account information, storing addresses along with user-defined labels, without ever holding private keys.
It unifies different key storage solutions (such as the Keyguard and hardware wallets) into a consistent interface for:

  • Viewing balances
  • Managing transactions

The actual blockchain communication is handled by the browser client.

Nimiq Website - nimiq.com
The domain nimiq.com is the official gateway to the entire Nimiq ecosystem. It serves as a central hub that:

  • Introduces Nimiq’s Vision and Technology and provides information about the project.
  • Offers Access to Key Products and Apps
  • Provides Developer and Community Resources

In essence, nimiq.com is the entry point for users to learn about, interact with, and join the Nimiq blockchain ecosystem.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Coin Blocker Bitcoin, Ethereum, Mining, etc. (Not malware, but could be used by it) Tracking Basically the same as SpyWare but TrackWare is used to Track you're online habits
Projects
None yet
Development

No branches or pull requests

3 participants