5 ms·

This is laughable. If site owners could go to jail every time a 3rd-party code they're not fully responsible for does something bad, they'd all be in jail now.

This is laughable. If site owners could go to jail every time a 3rd-party code they're not fully responsible for does something bad, they'd all be in jail now. https://blog.malwarebytes.org/threat-analysis/2015/08/large-malvertising-campaign-takes-on-yahoo/ https://blog.malwarebytes.org/threat-analysis/2015/08/large-... http://arstechnica.com/security/2016/03/big-name-sites-hit-by-rash-of-malicious-ads-spreading-crypto-ransomware/ http://arstechnica.com/security/2016/03/big-name-sites-hit-b... Etc.

franciscop 10y ago
Then the only standing ones would be site owners who care enough to make sure they don't allow malware on their visitor from their site. What's the problem?
- archon810 10y ago
  Because that's not how the world works. You'd jail 99.999% of publishers and the only ones not jailed would be ones who don't have any advertising.
  - J_Darnley 10y ago
    Sounds great to me. People only publishing what they want others to read, no clickbait, absolutely marvellous.
    - umanwizard 10y ago
      How do you expect journalists to pay their rent in this utopia?
      - franciscop 10y ago
        The internet and cheap computing has made anyone with some writing skills able to compete with journalists. So maybe journalism as a profession is dying as blogging as a hobby rises. Of course there is value in professional journalism, but the need for that journalism is more specific. IMO it will happen similar to encyclopedia authors or GPS makers followed a decade back.
      - ddebernardy 10y ago
        By producing much better content and analysis then they currently do. The kind of content and analysis that someone is willing to sponsor or pay for or support through other ways. There's no shortage of bloggers, small outlets, and analysts who are doing just fine - no intrusive ads needed.
      - J_Darnley 10y ago
        Being unemployed myself, I don't really care. Perhaps I should tell them to change careers.
  - stan_rogers 10y ago
    And the ones who vet and "print" (locally serve) the ads. You know, the way print and broadcast media have been doing it pretty much since their inception. The "targeting" only ever has to amount to content-linked (a photography site would be pretty safe serving camera and editing software ads) and general brand consciousness stuff (they're probably not going to buy a car this week either, but we want them thinking Chevy when the time comes).
- tobltobs 10y ago
  Or which are hosted in Russia.
chopin 10y ago
Then don't include 3rd party code. What's the problem with it? If I am including shitty 3rd party stuff in physical goods I am fully responsible for the final result and possible bad outcomes. Why should that be any different for web sites?
c0nducktr 10y ago
You don't have to jail them. I think a hefty fine would do the trick.
AlexandrB 10y ago
The adtech industry strongly resembles a money laundering operation, except what's being laundered is malware and malvertising. The system's complexity means no one can (or wants to) pin down where malicious content enters the system, so all involved just shrug their shoulders. "I don't know how that malware ended up on your PC, I was just serving ads from such-and-such network!"
Sanddancer 10y ago
Contributory negligence at the very least. They gave a portal to let pretty much any tom dick and harry throw whatever content they want on their site. The only way this will get better is if content providers start owning up to /all/ their content, including the stuff in between script tags.

franciscop 10y ago

Then the only standing ones would be site owners who care enough to make sure they don't allow malware on their visitor from their site. What's the problem?

archon810 10y ago
Because that's not how the world works. You'd jail 99.999% of publishers and the only ones not jailed would be ones who don't have any advertising.
- J_Darnley 10y ago
  Sounds great to me. People only publishing what they want others to read, no clickbait, absolutely marvellous.
  - umanwizard 10y ago
    How do you expect journalists to pay their rent in this utopia?
    - franciscop 10y ago
      The internet and cheap computing has made anyone with some writing skills able to compete with journalists. So maybe journalism as a profession is dying as blogging as a hobby rises. Of course there is value in professional journalism, but the need for that journalism is more specific. IMO it will happen similar to encyclopedia authors or GPS makers followed a decade back.
    - ddebernardy 10y ago
      By producing much better content and analysis then they currently do. The kind of content and analysis that someone is willing to sponsor or pay for or support through other ways. There's no shortage of bloggers, small outlets, and analysts who are doing just fine - no intrusive ads needed.
    - J_Darnley 10y ago
      Being unemployed myself, I don't really care. Perhaps I should tell them to change careers.
- stan_rogers 10y ago
  And the ones who vet and "print" (locally serve) the ads. You know, the way print and broadcast media have been doing it pretty much since their inception. The "targeting" only ever has to amount to content-linked (a photography site would be pretty safe serving camera and editing software ads) and general brand consciousness stuff (they're probably not going to buy a car this week either, but we want them thinking Chevy when the time comes).
tobltobs 10y ago
Or which are hosted in Russia.

chopin 10y ago

Then don't include 3rd party code. What's the problem with it? If I am including shitty 3rd party stuff in physical goods I am fully responsible for the final result and possible bad outcomes. Why should that be any different for web sites?

c0nducktr 10y ago

You don't have to jail them. I think a hefty fine would do the trick.

AlexandrB 10y ago

The adtech industry strongly resembles a money laundering operation, except what's being laundered is malware and malvertising. The system's complexity means no one can (or wants to) pin down where malicious content enters the system, so all involved just shrug their shoulders. "I don't know how that malware ended up on your PC, I was just serving ads from such-and-such network!"

Sanddancer 10y ago

Contributory negligence at the very least. They gave a portal to let pretty much any tom dick and harry throw whatever content they want on their site. The only way this will get better is if content providers start owning up to /all/ their content, including the stuff in between script tags.