Live data from Hacker News

No More Deceptive Download Buttons

googleonlinesecurity.blogspot.com

91–100 of 263 posts

Re: No More Deceptive Download Buttons

#91
post #32

Earlier quoted context omitted.

I just checked and the download page on getpaint.net still has a deceptive "Start Download" AdSense ad. That site came to mind because, a few months ago, I tried to be charitable and disabled ad blocking for a few days. That was the site where I decided enough was enough and started blocking again.

I just went there and saw a fake start download button, but it was with the 'AdChoices' network, not AdSense. EDIT: I guess AdSense is involved with AdChoices somehow. My mistake.

I'm not too familiar with AdSense vs. DoubleClick vs. AdChoices, but when I hover the ad it shows a link to DoubleClick, the little triangle icon points to an AdSense support page, and the JavaScript to load the ad comes from googlesyndication.com. From what I understand, that all points to it being an AdSense ad.

I suspect the reason that kind of ad is allowed (despite being deceptive IMHO) is that it's not just a download link. It also indicates that it's an ad for a driver update site (which makes it even shadier to my eye, but probably not violating any policies).

Re: No More Deceptive Download Buttons

#92

Perhaps now that Google has taken steps to block websites that display these ads, Google should take steps to stop accepting these ads onto their network in the first place. Most of the time when I see those DOWNLOAD/PLAY buttons, they're hosted on doubleclick.

I'm not at all against this move from Google - it is good sense. However, to play Devil's advocate, what are the odds this was pushed down by the MPAA/RIAA or similar? This policy more or less directly targets sites that offer free online streaming or torrent downloads of Movies/TV/Music. The sites that wind up with these deceptive ads are typically sites that provide copyrighted content to their users. Again, this i…

Google doesn't make any attempts to pander to the MPAA/RIAA anymore. http://googlepublicpolicy.blogspot.com/2014/12/the-mpaas-att...

Re: No More Deceptive Download Buttons

#93
So if a site is using Adsense and doesn't require all ads are reviewed then as site owners appears we run the risk of another part of Google telling visitors that the site is malicious. Hope that the site owner tooling referred to is good enough that it can identify the advert, at worst the network otherwise only option would be to remove Adsense code.

Re: No More Deceptive Download Buttons

#94

"Pretend to act, or look and feel, like a trusted entity — like your own device or browser, or the website itself." This is a broad statement. Taken at face value, this covers all native advertising - with articles/images/videos/thumbnails/etc intended to fit in with the content of the site/app.

If we can get rid of native advertising too, I'm all for it. Native advertising is a special kind of evil.

Re: No More Deceptive Download Buttons

#95
post #90

Earlier quoted context omitted.

I just went there and saw a fake start download button, but it was with the 'AdChoices' network, not AdSense. EDIT: I guess AdSense is involved with AdChoices somehow. My mistake.

Pretty sure it's an AdSense ad: http://imgur.com/OBy1PFR The AdChoices icon is used by many ad networks, not just Google's, to indicate that there's per-user targeting happening. [1] But if you click on that "AdChoices" button and you get an AdSense help page. [1] http://www.youradchoices.com/faq.aspx

When I click the > I get https://support.google.com/adsense .

The link from the ad is to https://googleads.g.doubleclick.net

I don't see how it can't be a Google-sold ad.

Re: No More Deceptive Download Buttons

#97
I'm surprised of the negativity towards this action, but I guess I shouldn't be. A lot of you are in a very different situation than me and this will affect you directly. However, warning people away from being potentially tricked by these deceptive ads is a very good thing.

Tons of sites out there that turn a blind eye to such ads and that's bad. Yes, there will be some unfortunate pain for sites that responsibly attempt to block these ads as they come up. Assuming the blog post is correct and Google has implemented this correctly, it should be minimal for those sorts of folks since they claim the penalty will only occur if users are consistently getting social engineering ads. (I suspect Google will ratchet up the rate over time though, assuming these ads become less common as a result of this and similar efforts).

EDIT: See below. I'm convinced and with y'all now. Google--this is a step in the right direction and I support this action, but you do need to get your own house in order too!

Re: No More Deceptive Download Buttons

#98

Earlier quoted context omitted.

Mostly because there's more benefit to be gained in making the web usable by non-experts than in preserving the current status quo. There's a reason the Wild West didn't stay wild.

I agree, but it still sucks that it seems you're being sold something at every turn. Websites are no longer there, just to be there. It's always about the upsell or agenda.

That's one reason why I'm a little annoyed personal websites went mostly the way of the Dodo and you can only expect friends to check things out if you give them direct links to some trusted site from a site they use all the time, like a link to a Youtube video from Facebook, or your Medium or Tumblr entry from Twitter.

I still like designing personal websites, but it seems like a waste of time now.

Re: No More Deceptive Download Buttons

#99

So safe browsing is now blocking pages where the adverts are "often not distinguishable from the rest of the page"? IMO that covers all of Google's search result pages. Most users don't seem to realise that the top results are paid advertising...

Here's a google SERP for "insurance": http://imgur.com/VUqwyPq

Are you saying the bright "ad" lozenge next to the paid results isn't explicit enough?

And anyways, users don't go out of their way to avoid clicking on ads unless the ads are utter crap. Google's whole business is to make the ads relevant to the search and the user, so who's to say the ad isn't actually a relevant result?

Re: No More Deceptive Download Buttons

#100
post #9

This is a joke right ? We run Adsense display ads on our site and have to spend significant time every day reviewing and blocking new ads which try to use these deceptive practices. Since Google clearly has the tech to detect this they should be implementing it at source on the advertisers (malvertisers). Instead they are pushing this down to the publishers and hitting them with penalties. It's a clever ploy in some…

It's a big company, I can imagine the browser guys wanting this but the ad guys saying they "can't" do this and there being a mini-war. You get the sense that sort of thing happens all the time at microsoft for example, before Ballmer left it felt like the ASP.Net team were pulling in one direction, the Visual Studio team another and the IIS team had gone rabid and were just trying to bite everyone. It happens when d…

It also happens when one department is perceived as an "expense" like IT or R&D, and starts pushing against "revenue-generating" departments like sales.

Of course, all components of a properly-functioning organization are revenue-generating. An idealized business in some respects would be people giving you money with no money being spent. Everyone knows that's not how the world works, but it's awfully hard to justify on a quarterly statement.

At Google, many departments aren't directly revenue-generating. Sure, Chrome and Android help people browse the Internet, where they view ads, but that's quite removed from actually selling the product, and those are very large projects. Search, maps, and gmail can show ads internally to generate revenue, but that's still a layer removed. Perhaps Google Apps and Drive are loss leaders, and maybe Fiber will make money eventually, but Glass? Calico? Driverless cars? Loon? Seriously, where does the money for these projects come from? I suppose you can answer "AdSense and AdWords", but why do those businesses give them money? And the harder question is how do they generate political and cultural capital to maintain these expenses?

At most of the companies I have been involved with, these projects would have been cut, outsourced, or consumed by the AdWords and AdSense teams. But there's little question that the world is better and the Internet is used more because of projects like Search, Gmail, Android, and Chrome.

How does Google generate this culture? How can other companies replicate this process?

Post reply on HN