Ad blockers at dns level too, not just browsers. A lot of people don’t even know how to block them, check your parents or kids (or non technical people in general) phone and you will see how they are riddled with ads. I had a dns blocker installed on my parents phones and in around 6hrs it blocked 10k queries from 3 apps only..
DNS level is more secure but less effective because apps and website can serve the essential content on the same domain as the advertisement. It will also become less effective over time.
YouTube does this, so you need to use a browser-based ad blocker.
I personally also block access by web browsers to non-standard ports (aka not :80 or :443) via an app firewall (Little Snitch here). In this case it would have warned me when the compromised script would have called home to that endpoint on the non-standard port.
Gotta tackle such issues at different places all at once for sure. It's like wearing 5 digital condoms at once. Too bad there's still some leakage somewhere for sure. B)
I have a feeling everyone with understanding of the situation or even a vague malaise opening a news article and being bombarded with popups that intercept their attention knows why ad blockers are needed, and any perceived "discourse" to the contrary is one sided, from the ad agencies and media platforms that largely and subversively direct the narrative.
It's getting harder by the day to tell sentiment apart from narrative.
"You will be annoyed" and "you will be served malware" are two different classes of need. The first is enough to get me running Firefox/uBlock Origin on my own devices. The second is what got me to run it at work.
I do not recall ever hearing of an organized effort to ban ads. These days, good luck getting bipartisan agreement, especially with all the dark money in politics being legalized and normalized.
That said... The modern internet is built off many free services paid for by people who buy stuff from ads. It is hard to imagine a world without ads - many sites and services would disappear. Hosting costs money.
I could see a dystopia without ads where a government provides free hosting for citizens. That quickly becomes "thought police" when an authoritarian leading head of state comes in. If we pretend like that will not happen, I think we would have a much more wonderful internet.
> It is hard to imagine a world without ads - many sites and services would disappear.
Don't you see the problem with that statement? Ads are profitable, and we are paying for them, indirectly, through buying products and services. Adtech takes a chunk of that profit. Therefore, we pay more than we should!
I don't care. It was better before there were ads. It will be better after there are ads. Most actual useful content isn't monetised, and most monetised content is slop. There is a spectrum between the two endpoints, of course.
Probably should just link to the security researcher's post, since it's far more informative:
https://doublepulsar.com/adform-compromised-to-serve-crypto-...
[delayed]
Browsers should not have access to the clipboard.
It's you versus Google on that one. Who will win?
Are the crypto addresses known/recorded anywhere? would be interesting to see on the blockchain how much was stolen this way.
The code in question is here: https://pastebin.com/raw/mc7psaNF
It appears to be normal Adform code plus two appended chunks at the end.
Edit: Activity for those addresses:~$110k bitcoin
https://www.blockchain.com/explorer/addresses/btc/bc1qmplgt0...
~$55k in ETH
https://www.blockchain.com/explorer/addresses/eth/0xE7983E69...
Ad blockers at dns level too, not just browsers. A lot of people don’t even know how to block them, check your parents or kids (or non technical people in general) phone and you will see how they are riddled with ads. I had a dns blocker installed on my parents phones and in around 6hrs it blocked 10k queries from 3 apps only..
DNS level is more secure but less effective because apps and website can serve the essential content on the same domain as the advertisement. It will also become less effective over time.
YouTube does this, so you need to use a browser-based ad blocker.
Let them eat cake. Setting up that ad proxy stuff is a bunch of work that many websites won't do.
I personally also block access by web browsers to non-standard ports (aka not :80 or :443) via an app firewall (Little Snitch here). In this case it would have warned me when the compromised script would have called home to that endpoint on the non-standard port.
Gotta tackle such issues at different places all at once for sure. It's like wearing 5 digital condoms at once. Too bad there's still some leakage somewhere for sure. B)
I have a feeling everyone with understanding of the situation or even a vague malaise opening a news article and being bombarded with popups that intercept their attention knows why ad blockers are needed, and any perceived "discourse" to the contrary is one sided, from the ad agencies and media platforms that largely and subversively direct the narrative.
It's getting harder by the day to tell sentiment apart from narrative.
"You will be annoyed" and "you will be served malware" are two different classes of need. The first is enough to get me running Firefox/uBlock Origin on my own devices. The second is what got me to run it at work.
Nobody wants ads (*) but somehow they are never banned.
Makes you wonder, are we living in a democracy or not?
(*) shown at inconvenient moments and tracking the user; yellow pages were fine
I do not recall ever hearing of an organized effort to ban ads. These days, good luck getting bipartisan agreement, especially with all the dark money in politics being legalized and normalized.
That said... The modern internet is built off many free services paid for by people who buy stuff from ads. It is hard to imagine a world without ads - many sites and services would disappear. Hosting costs money.
I could see a dystopia without ads where a government provides free hosting for citizens. That quickly becomes "thought police" when an authoritarian leading head of state comes in. If we pretend like that will not happen, I think we would have a much more wonderful internet.
> It is hard to imagine a world without ads - many sites and services would disappear.
Don't you see the problem with that statement? Ads are profitable, and we are paying for them, indirectly, through buying products and services. Adtech takes a chunk of that profit. Therefore, we pay more than we should!
I don't care. It was better before there were ads. It will be better after there are ads. Most actual useful content isn't monetised, and most monetised content is slop. There is a spectrum between the two endpoints, of course.