Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bing has been serving up malicious Google Chrome ads for months

forbes.com

Post reply on HN
Print view View original

31–40 of 249 posts

Re: Bing has been serving up malicious Google Chrome ads for months

#31

Post by ocdtrekkie »

chris_wot wrote: post #5
greenyoda wrote: post #3

The title of this article is deceptive clickbait.[1] The problem has nothing to do with the Edge browser, it has to do with search results returned by Bing, which happens to be Edge's default search engine. If you have a new Windows 10 PC and want to download Chrome, how else could you do it besides "using Microsoft Edge to download Chrome"? So "stop using Edge to download Chrome" is not useful advice. Better advice…

It's not irrelevant. Bing is what Microsoft chooses to use a default search engine. Edge does not warn of a malicious website. Chrome and Firefox do. This has everything to do with Edge.

This is an ad I once saw on Google Search which worked the same way: https://plus.google.com/u/0/115181074626403443464/posts/fSPm...

As I noted back in 2017, Edge flagged the destination site as malicious, Chrome did not. Warning on malicious websites is, in fact, done in Edge. But as with Chrome and Firefox, it doesn't catch every one of them.

Re: Bing has been serving up malicious Google Chrome ads for months

#33

Post by jamieweb »

Xylakant wrote: post #25
orev wrote: post #20

Earlier quoted context omitted.

“apt search this”

apt search chrome. Good luck with that on a default Debian install.

chromium-browser is the one. Although on Ubuntu it's in the Universe repository, so you have to add the chromium-team ppa in order to get on-time updates.

I will admit that Chrome/Chromium is one of the few things you can't easily get from the repos, on Ubuntu at least.

Re: Bing has been serving up malicious Google Chrome ads for months

#34

Post by a3n »

sparkpeasy wrote: post #21
vijaybritto wrote: post #11

This was bing's shit to begin with. Anyway no one ever uses it. This is serious but limited in attack surface I would say. BTW: forbes can fuck off with their auto play videos shit. Even on mobile. Who really thinks this is a good strategy?!!?

No one uses Bing.... except every user of Windows 10 by default

Indeed. Any poster on HN should consider that, relatively speaking, we are the no one.

Re: Bing has been serving up malicious Google Chrome ads for months

#35

Post by Latteland »

greenyoda wrote: post #3

The title of this article is deceptive clickbait.[1] The problem has nothing to do with the Edge browser, it has to do with search results returned by Bing, which happens to be Edge's default search engine. If you have a new Windows 10 PC and want to download Chrome, how else could you do it besides "using Microsoft Edge to download Chrome"? So "stop using Edge to download Chrome" is not useful advice. Better advice…

Is microsoft: dangerous together better? Microsoft's web infrastructure, including Bing and edge and advertising on their properties are not controlled by Microsoft? They could fix this. One could be pedantic and say the entire Microsoft web stack is dangerous together, if you interrupt the default flow with a different browser, different search engine or different os this wouldn't happen (cause edge is only on Windows and edge defaults to using dangerous Bing). I'm sure it sucks but the all Microsoft combination together exposes you to this.

Re: Bing has been serving up malicious Google Chrome ads for months

#36

Post by jamieweb »

michaelmrose wrote: post #27

So basically Microsoft's browser isn't even safe to use temporarily to download a real browser. In 2018 can we stop pretending that any web browser is a safe effective way to acquire any software. While it can be done people have been consistently getting pwned for decades now. Software should be distributed via apps stores. Preferably vetted lists as opposed to free for alls you can post malware to for $25. Linux ha…

The scariest thing about this example is that the green "URL" below the ad says "www.google.com". Who thought it would be a good idea to allow advertisers to fake the URL like that?

Unless it's an IDN homograph attack?

Re: Bing has been serving up malicious Google Chrome ads for months

#37

Post by michaelmrose »

Xylakant wrote: post #25
orev wrote: post #20

Earlier quoted context omitted.

“apt search this”

apt search chrome. Good luck with that on a default Debian install.

Debian prioritizes being open source over being user friendly.

Googling debian google chrome results in instructions for getting chrome on debian.

I have 3 different distros installed on 3 different computers. Chrome is listed on all app searches.

Re: Bing has been serving up malicious Google Chrome ads for months

#38

Post by anonred »

flipp3r wrote: post #18
greenyoda wrote: post #3

The title of this article is deceptive clickbait.[1] The problem has nothing to do with the Edge browser, it has to do with search results returned by Bing, which happens to be Edge's default search engine. If you have a new Windows 10 PC and want to download Chrome, how else could you do it besides "using Microsoft Edge to download Chrome"? So "stop using Edge to download Chrome" is not useful advice. Better advice…

> And the problem seems to have been fixed. When I search for chrome download on Bing, the top result is https://www.google.com/chrome . Which could be faked, as seen in the referenced tweet: https://twitter.com/GabrielLandau/status/1055300918101598208 Yes, they show the word "Ad", alongside the domain name "google.com" - except the user doesn't end up on "google.com".

Perhaps the ad was using one of the Google redirect tricks? There’s a few google.com endpoints (if I recall) that you can abuse to redirect to arbitrary URLs.

Re: Bing has been serving up malicious Google Chrome ads for months

#39

Post by dang »

greenyoda wrote: post #3

The title of this article is deceptive clickbait.[1] The problem has nothing to do with the Edge browser, it has to do with search results returned by Bing, which happens to be Edge's default search engine. If you have a new Windows 10 PC and want to download Chrome, how else could you do it besides "using Microsoft Edge to download Chrome"? So "stop using Edge to download Chrome" is not useful advice. Better advice…

Ok, we've changed the title to the subtitle.

Re: Bing has been serving up malicious Google Chrome ads for months

#40

Post by joshuamorton »

ocdtrekkie wrote: post #9
natuz wrote: post #4

This has been happening for so long that it's hard to believe Microsoft is not aware of it.

Given the malware Google's ads also ship, which Googlers here on HN have tried to have removed only to return an hour later, suffice to say malicious ads are an industry pervasive problem, and the solution is to kill the online advertising market. Aggressively. In fact, when I tried to look for a specific class of malicious ads (looking for "mapquest") recently, DuckDuckGo was even as bad as Google, it was Bing who g…

Just FYI, that ad you're talking about appears to really, truly be gone now. Im not sure why it reappeared, but I didn't need to take any other action for it to be removed.
Post reply on HN