Calendar 2 later re-appeared in the App Store, and Magarshak tweeted that he and Apple were working together to bring out a release without cryptocurrency mining features. To make up for the hassles caused by the mining version all users – existing and new – will get free access to upgraded features for one year. The app’s description in the App Store said nothing about cryptocurrency. And according to some App Store reviews, the mining mode was allegedly enabled by default, meaning that users were taken by surprise and did not opt into allowing their Mac to exhibit the undesirable behaviors. Calendar 2 was not very clear about what it was doing.
- Download Cryptocurrency Watcher for macOS 10.11 or later and enjoy it on your Mac. Cryptocurrency Watcher is a small app that lives in your menubar, you can watch the price of any of the supported Cryptocurrencies (currently Bitcoin, Ethereum, Litecoin and Bitcoin Cash) Each currency can be watched independently, you can view a history of.
- The other great thing for Mac users is that Binance is the only reputable cryptocurrency platform that has a dedicated cryptocurrency app for Mac desktops. The app is basically just an interface for the web app but for those that like to use a desktop app instead of a browser, it’s a big plus.
- Stockfolio is a stock, commodity and cryptocurrency investment app for Mac allowing you to easily research and track your portfolio Based on 150+ App Store reviews Try for free Download on the Mac App Store.
Resource-draining currency miners are a regular part of the Google Play market, as scammers pump out apps that covertly harness millions of devices, in some cases with malware so aggressive it can physically damage phones. A popular title in the Mac App Store recently embraced coin mining openly, and so far Apple gatekeepers haven't blocked it.
The app is Calendar 2, a scheduling app that aims to include more features than the Calendar app that Apple bundles with macOS. In recent days, Calendar 2 developer Qbix endowed it with code that mines the digital coin known as Monero. The xmr-stack miner isn't supposed to run unless users specifically approve it in a dialog that says the mining will be in exchange for turning on a set of premium features. If users approve the arrangement, the miner will then run. Users can bypass this default action by selecting an option to keep the premium features turned off or to pay a fee to turn on the premium features.
Feels like the first time
If Calendar 2 isn't the first known app offered in Apple's official and highly exclusive App Store to do currency mining, it's one of the very few. The discovery comes as sky-high valuations have pushed the limits of currency mining and led to a surge of websites and malware that surreptitiously mine digital coins on mobile devices, personal computers, and business servers. Calendar 2 is slightly different in the sense that it clearly discloses the miner it runs by default. That puts it in a grayer zone than most of the miners seen to date.
'On the one hand, using the user's CPU for cryptomining has become extremely unpopular,' Thomas Reed, director of Mac offerings at antimalware provider Malwarebytes, told Ars. 'The fact that this is the default is something I don't like. I would want to see a legit app informing the user in advance or making it an option that can be turned on but is off by default. On the other hand, they [the developers] do disclose that they are doing it and give other options for people who don't like it. My personal feeling on this is that, given the disclosure, I think the user should be allowed to make their own choice. Some people might be perfectly willing to let an app like this mine cryptocurrency so that they can use it for free.'
Apple representatives didn't respond to emails asking if the recently updated Calendar 2 violated App Store terms and services. Almost 24 hours after Ars alerted them to app, it remained available for download. Patrick Wardle, a researcher specializing in macOS security, has a detailed analysis of the miner here.
In an email, Qbix founder Gregory Magarshak said the rollout of the currency miner has been complicated by two bugs that prevented it from working as intended. The first flaw caused the miner to run indefinitely, even when users changed the default setting. The second bug caused the miner to consume more resources than planned. Developers programmed the miner to use 10 percent to 20 percent of a Mac's computing power, depending on whether the machine was plugged in. The new miner has been using much higher percentages.
Magarshak wrote:
In short, as you can imagine, these two bugs caused issues for many of our users. We got a lot of messages saying 'I love your app and used it for many years, but this version is kicking my computer into overdrive! Please fix it ASAP.' (Paraphrased.) And so forth. What started out as a well-meaning option to just let people try out a new way to get all features unlocked became an option that made many people associate 'mining' with huge CPU consumption.
The miner—or at least the bugs found in the one released—has generated plenty of criticism on social media. Email app wont open on mac.
@SGgrc@QbixApps Calendar 2 for Mac (from the App Store) launched a cryptocurrency miner without my permission. Then it ate 200% CPU until I found it and killed it. I didn't expect a miner infection from an App Store vendor. Wow. Network mac to pc. It runs the xmr-stak Monero miner.
— Fred Laxton (@fredonline) March 12, 2018
Qbix is in the process of publishing an update to fix the bugs. Magarshak went on to note that he has long criticized what he says is an 'arms race to waste electricity to solve hashes.' Such arms races are created by currency mining based on what's known as 'proof of work' computing. He said he's considering removing the miner altogether from Calendar 2. For now, it's still there, and there's no indication Apple has any plans to change that.
Update: In an e-mail sent about 90 minutes after this post went live, Magarshak said he has decided to remove the miner from future versions of Calandar 2. He explained:
![App App](/uploads/1/3/4/1/134140731/665088002.jpg)
We have decided to REMOVE the miner in the app. The next version will remove the option to get free features via mining. This is for three reasons:
1) The company which provided us the miner library did not disclose its source code, and it would take too long for them to fix the root cause of the CPU issue.
2) The rollout had a perfect storm of bugs which made it seem like our company *wanted* to mine crypto-currency without people's permission, and that goes against our whole ethos and vision for Qbix.
3) My own personal feeling that Proof of Work has a dangerous set of incentives which can lead to electricity waste on a global scale we've never seen before. We don't want to get sucked into this set of incentives, and hopefully our decision to ultimately remove the miner will set some sort of precedent for other apps as well.
Run android apps on mac os. Ultimately, even though we technically could have remedied the situation and continued on benefiting from the pretty large income such a miner generates, we took the above as a sign that we should get out of the 'mining business' before we get sucked into the Proof of Work morass of incentives.
Apple representatives have yet to return requests for comment.
Is it malware if it tells you exactly what it's going to do and then does that very thing?
That's essentially the question facing Apple after reports broke that a program available in the Mac App Store was mining cryptocurrency on users' computers. Although initially approved by Apple, the Calendar 2 program was pulled — either by its developer Qbix or the folks in Cupertino — on March 12.
![Cryptocurrency mac app store app Cryptocurrency mac app store app](/uploads/1/3/4/1/134140731/292337149.jpg)
Mac security site Objective-See did a deep dive into the matter after being tipped off by Ars Technica's Dan Goodin, pointing out that the app was mining Monero — a cryptocurrency loved by the seedier side of the internet for its relative anonymity. https://renewtecno.weebly.com/blog/mac-app-developer-id.
Importantly, Calendar 2 told potential users that it would do this very thing — with a small but important caveat (more on that later). Similar to Salon's recent foray into cryptocurrency mining in lieu of running ads, Qbix apparently decided to offer the app's pro features in the free version if you agreed to let it generate some digital bucks on your computer in the meantime.
Not everyone was cool with this. And, as one particular feisty iTunes review made clear, it appears that (for at least this one reviewer) the mining feature was turned on by default.
We contacted Apple to determine if this violates the company's rules, but have not received a response as of press time. Meanwhile, Objective-See's Chief Research Officer (and respected malware hunter) Patrick Wardle pointed out that the App Store guidelines appear to prohibit this behavior.
Apple's App Store guidelines seem rather clear RE: cryptocurrency mining in Apps (context: https://t.co/WzbnB4GppO): 'monetizing built-in capabilities provided by the hardware or operating system' is 'Unacceptable' -section 3.2.2 (ii) ?♂️ HT Mark Allen/ClamXav pic.twitter.com/MFJUnN7EzO
— patrick wardle (@patrickwardle) March 12, 2018
In an email exchange with Ars Technica Qbix founder Gregory Magarshak chalked this mess up to bugs. He claimed the miner used more CPU resources than intended, and mistakenly ran after users disabled it. Basically, it was all a screw-up on their part, or so the theory goes. Magarshak told the publication the crypto miner would not be included in future versions of the software.
Cryptocurrency Mac App Store For Windows
Importantly, sketchy cryptocurrency mining is not limited to the Apple ecosystem. It has bedeviled Chrome extensions and various apps in the Google Play store since way back in 2014. As cryptocurrency continues to take over the international zeitgeist, it only makes sense that illicit ways of generating it have spread as well. Apple's devices and even the apps in its App Store, it would seem, are no special exception.