3 ms·
Are there any ad networks that allow random advertisers to include custom JavaScript in ads? It just seems like a huge security hole and is not in the interest
by mobjack 7y ago
Are there any ad networks that allow random advertisers to include custom JavaScript in ads?
It just seems like a huge security hole and is not in the interest of ad networks for multiple reasons.
They might have JS in ads, but isn't that from the ad network's infrastructure.
- freehunter 7y agoIn short, yes. Advertisements are a huge way to get malware onto people’s computers. This just one random article from a google search for “malware advertising” but there are tons and it still happens today. https://arstechnica.com/information-technology/2016/03/big-name-sites-hit-by-rash-of-malicious-ads-spreading-crypto-ransomware/ https://arstechnica.com/information-technology/2016/03/big-n...
- michaelmrose 7y agoAre there ad networks that don't?
- teunispeters 7y agoEvery single ad seller's been caught by companies selling these dangerous ads. Google, yahoo, etc. They usually catch it within 3-5 days. That's too long.
- blntechie 7y agoI have seen ads trigger site redirects, app download redirect to app stores etc. and even initiate apk(Android app package) file downloads automatically.
- manicdee 7y agoWhat is in the interest of the ad networks is income and plausible deniability. “Sorry we didn’t realise that there was malicious content in that ad, we’ll do better in the future, and we’ll also work on taking less than four days to remove malicious content.” In the meantime the reason ads are being bought is the ability to deploy customer enrichment experiences (the new name for malware) which will help customers better discover your product (by redirecting their browser, or rewriting links).