5 ms·
Given the complexity and quirks of modern browser engines it seems like it should be pretty easy to detect this type of custom "browser".
by tlrobinson 10y ago
Given the complexity and quirks of modern browser engines it seems like it should be pretty easy to detect this type of custom "browser".
- geocar 10y agoMost anti-ad fraud vendors can't do the IP packet analysis trick since they use ELB to help control their costs/scale. All the other techniques require JavaScript and/or AS3 and are thus subject to modification by these kinds of sophisticated attackers. The only real way to do JavaScript in these cases is to change it often enough and run enough parallel versions that the attacker cannot keep up.
- baybal2 10y agoAah, they were doing it for the last 10 years or so. People who are serious into botting have software that basicaly runs the browser in a vm. The level of programming skill in the "industrial scale botting" community is high. Top tier botters can easily get into +$100k club if they were doing whitehat stuff.
- hnguy4 10y agoI am a developer with these types of skills, but was mainly testing for a pet project scraping data. What are you referring to with the "whitehat stuff" to get in the 100k+ (/day) club?
- baybal2 10y ago>What are you referring to with the "whitehat stuff" to get in the 100k+ (/day) club? Bot detection, ad auditing, antifraud systems
- didntt 10y agoI reversed engineered (out of curiosity) the JS/AS code of > 10 solutions of this nature. Wrote bypasses for many (locally, for fun). How do you make whitehat 100K+/day with these skills?
- codeddesign 10y agoAbsolutely. As a lead dev for a video ad company, I can tell you that we pay big money for skilled security and anti fraud guys.
- baybal2 10y ago>What are you referring to with the "whitehat stuff" to get in the 100k+ (/day) club? Bot detection, ad auditing, antifraud systems