4 ms·
I'm not involved in ad tech, but am curious - isn't the easy solution for the advertiser to only show ads on sites that they pre-approve?
by intrasight 10y ago
I'm not involved in ad tech, but am curious - isn't the easy solution for the advertiser to only show ads on sites that they pre-approve?
- yeezyseezy 10y agoAdvertisers already do this, but part of the report claims that Methbot spoofs common domains. They provide a sample here: http://www.whiteops.com/methbot/domains.txt http://www.whiteops.com/methbot/domains.txt
- fsaintjacques 10y agoYou take a decision based on an offer called the bid request, domain/url/page is part of said metadata. The catch is that almost all fields in said offer can be faked by a malicious adversary due to lack of security/competence from the exchange.
- deleted 10y ago[deleted]
- notoriousOIT 10y agoThey do whitelist. MethBot was faking URLs though so it's hard for platforms to detect that in milliseconds. This goes to the IP level at this point with that list posted online. Our company is already getting asked to provide full reports by IP address to see how far this goes.
- intrasight 10y agoGot it. So preventing domain spoofing would solve this problem. Who's job is that?
- gondo 10y agoisn't the whitelist bound to the user? i mean if i register account as a publisher on some ad exchange, i should be asked for domains where i will be showing my ads. in that case i can not simply report that my username is generating traffic from cnn.com f.e. as this domain is not associated with my account. or this is not how it works?