3 ms·

Does anyone have a reusable signature for the injected ads so a side can detect the tampering?

• soared 2y ago
  It’s not in chrome web browser, just the google app. So you can’t run scripts/etc afaik
  • pushcx 2y ago
    Yeah. It's fairly likely the ads link to a URL with a recognizable pattern. Failing that, if an ad is reproducible we can iterate with a site owner to detect the DOM modification a few different ways. I've drafted a blog post to collaborate with others on reverse engineering this: https://push.cx/google-ad-injection https://push.cx/google-ad-injection
    • rafram 2y ago
      Website owners can simply opt out: https://docs.google.com/forms/d/1h9I0TbN-H_1e85CqXYb1ng7rQfg2ijfODc1sBxPBd08/viewform?edit_requested=true https://docs.google.com/forms/d/1h9I0TbN-H_1e85CqXYb1ng7rQfg...
      • eek2121 2y ago
        Phishing Exercise #16,777,216 -- THIS TIME IT WILL VALIDATE. YES.
        • rafram 2y ago
          The link was in the article. I agree that it’s hardly a great way to create an opt-out system.