This is trivially defeated though. Simply render 2 copies of the DOM. The first runs all the Javascript, loads all the ads, maybe even fake clicks them just to

This is trivially defeated though. Simply render 2 copies of the DOM. The first runs all the Javascript, loads all the ads, maybe even fake clicks them just to fuck with ad tech (or fire off a few hundred requests and see what happens to their Web server after a bit), the second has the ads removed by detecting their position or path or properties in the DOM. Problem solved. Ad tech cannot win at this game, plain and simple, as long as the user controls their browser. The only way ad tech can win is if we are going to hardware DRM to access the Web. I'm quite disappointed that a company calling themselves "whitehat sec" is so blatantly stupid. Much of this is already solved using reek's anti-adblock killer, which they're apparently unaware of. Fuck, if it comes down to it I'm sure we can render the DOM entirely and use some machine learning to recognize ads.