aslewofmice

private data-driven policing will end up reinforcing any institutional racism under the guise of math

So the attacker got the password for a work email (and let's be honest, it was likely a shared account amongst a department not an individual) that was used for the CDN account hosting their serve code, where the attacker appended a malware download link to their script running on however many sites they work with.

And they were able to convince website owners to grant them access to visitor's connection in order to prevent people from blocking ads? And they were also able to convince them to pay money for this service?

I don't get the hate, I think it's a great idea. It's completely opt-in and both sides win.

Would love to know this as well. I only have a high level understanding of the purpose of CA Certs, but beyond that I'm lost.

Ignorant questions ahoy:

1. Using Chrome, would you have to manually accept the MITM certificate? 2. Could such a certificate be valid across multiple domains? 3. Would it pose any threat to the computer if it was moved from the MITM network to an outside network? 4. What kind of potential problems could occur if I issued a self-signed certificate for my network?

Because there's a scary proportion of people in here saying things like: - "how about they just move?" - "the guy is a construction worker? they're in demand, just go to a construction office and get a job" - "I don't get it. One person on video lives in nice bedsit (garage) and talks about homeless."

What sort of awesome features? Show me why I should give you my email address.

Access to IP address + browser fingerprint on two sites that you've recently visited. Doesn't seem that implausable with all the recent security breaches.

> Aren't most advertising campaigns focused on acquisitions these days?

Nope, much of it is branding. Some are focused on clicks, some are focused on viewability... it's sort of a turning point in the industry...

> No, and they are not focused on clicks either. The majority of the adspend* cares about impressions, viewability and lift. *display adspend

Most or not, it's still a significant amount. The clients you mention may be more concerned with impressions/viewability/lift, but they're still vulnerable to be gamed the same way as someone who cares about clicks. Viewability is already being manipulated by the same bots that generate fraudulent clicks. It's a great metric in theory, but take it with a grain of salt.

If anything, these companies (Moat, IAS, Oxford...) are the ones who should be most concerned about combating bots.

The problem with display advertising is that too much of the industry is focused on clicks. Anti-fraud companies can come up with ways to try to mitigate click fraud but it won't do much of anything as they can, and will be, gamed by black hats - there's too much money at stake.

I deal with it every day and the best method is to educate the client by explaining why a click is a poor indicator of performance. Work with the client to come up with measurable goals to track click-through/view-through conversions on these goals and ultimately try to measure impact on ROI. It's really not THAT difficult for most campaigns.

The most difficult part is that the client becomes aware of all those wasted dollars on previous campaigns that they thought were high performance because of a high CTR.

They will typically set up several generic websites with ads, and set their click farm loose to represent fake traffic while clicking on ads for X% of impressions. You could also be a mercenary and drive traffic to other website operators who want traffic/rev, or even dilute quality/waste spend on competitor ad campaigns.

Since these click farms are typically just infected computers, they can likely setup other tasks to monetize: DDoS, email, BTC mining, etc...

$2 is pretty good for rev share. Much of those impressions are clearing at $20+

thomasnet.com was decent for finding leads, but we weren't able to find a suitable manufacturer to get past prototype

I think they could succeed by modeling themselves after a Costco/Kirkland-type relationship