Live data from Hacker News

Hackers Make $5M a Day by Faking 300M Video Views

forbes.com

81–90 of 136 posts

Re: Hackers Make $5M a Day by Faking 300M Video Views

#81
post #60

I know some legitimate businesses depend on ads for revenue, but it really has become ridiculous. As a 'normal' internet user, being bombarded and having websites complaining about my ad blocker is starting to piss off quite a bit of people. When I need something, I buy it online most of the time (if possible). I'm kinda happy someone is gaming that whole system against them, maybe it will help transform the ad ecosy…

I'm not sure I can see how this would really help transform the ad ecosystem, even on a sustained basis. The hackers did this enrich themselves at the expense of companies wanting to advertise a product. If the victimized companies were selling low value or dubious products (a value judgement) like magical diet pills, then it might bankrupt a few of them in the short-term. Maybe those companies who lost money go back…

> In the end, what actual change do you think would be enacted by companies who wish to advertise their products being the victim of fraud?

They stop advertising through the web, and we can get rid of the ad-driven startup bubble, and get rid of most ads on the web in general.

Re: Hackers Make $5M a Day by Faking 300M Video Views

#82

I'm not involved in ad tech, but am curious - isn't the easy solution for the advertiser to only show ads on sites that they pre-approve?

Advertisers already do this, but part of the report claims that Methbot spoofs common domains. They provide a sample here: http://www.whiteops.com/methbot/domains.txt

Re: Hackers Make $5M a Day by Faking 300M Video Views

#83

I'm not involved in ad tech, but am curious - isn't the easy solution for the advertiser to only show ads on sites that they pre-approve?

You take a decision based on an offer called the bid request, domain/url/page is part of said metadata.

The catch is that almost all fields in said offer can be faked by a malicious adversary due to lack of security/competence from the exchange.

Re: Hackers Make $5M a Day by Faking 300M Video Views

#86
post #15

Normally a "real browser" can't run 100s of ad players at once, but "methbrowser" is a node.js application with a C module that speaks Flash's plugin protocol directly. It simulates a dom, runs JavaScript in a node VM, but doesn't have to do any of the messy rendering that things like PhantomJS have to. It was discovered years ago because: * Their IP stack was acting like Linux[1] * Their flash player said "I'm Linux…

Here's an awesome technical writeup about MethBot: http://go.whiteops.com/rs/179-SQE-823/images/WO_Methbot_Oper...

The part that confused me is when they claim to have obtained MethBot source code, but never mention how.

Re: Hackers Make $5M a Day by Faking 300M Video Views

#90

Earlier quoted context omitted.

Here's an awesome technical writeup about MethBot: http://go.whiteops.com/rs/179-SQE-823/images/WO_Methbot_Oper...

The part that confused me is when they claim to have obtained MethBot source code, but never mention how.

Yeah was curious about this as well.
Post reply on HN