People still haven't figured out to never click anything in that top ad section in search results?
Google Ad Disguising Itself as www.gimp.org
11–20 of 230 posts
Re: Google Ad Disguising Itself as www.gimp.org
#12Not to defend Google but this has been against Ad Words terms for as long as I can remember. It’s surprising they found a way to evade auto detection for this.
Re: Google Ad Disguising Itself as www.gimp.org
#13This is outrageous. We need to find a way to stop Google. Google invades our privacy. Google holds us hostages for more money. Now this? When is enough is enough?
Re: Google Ad Disguising Itself as www.gimp.org
#14IMO checksums more or less offer a false sense of security for users if they're stored/shared on the same page/domain as the download, since it'd be trivial for a bad actor to change them if the files are compromised.
Linux mint, for example, the attacker updated the checksums for the ISOs on the page when it was compromised https://www.infoworld.com/article/3036178/lesson-from-linux-...
I don't really have a solid solution to this, besides searching the checksum on google to see if it's listed anywhere else as a soft 3rd party check
Re: Google Ad Disguising Itself as www.gimp.org
#15People still haven't figured out to never click anything in that top ad section in search results?
Those that have also figured that ad block is essential nowadays.
Re: Google Ad Disguising Itself as www.gimp.org
#16This is outrageous. We need to find a way to stop Google. Google invades our privacy. Google holds us hostages for more money. Now this? When is enough is enough?
As outrageous as a site having a leak or being hacked. As for what someone can do. It's simple. Don't use Google.
Re: Google Ad Disguising Itself as www.gimp.org
#17How is it even possible to spoof the shown URL?
Pay Google money, and they'll let you do all sorts of things you're not supposed to do.
Re: Google Ad Disguising Itself as www.gimp.org
#18IMO checksums more or less offer a false sense of security for users if they're stored/shared on the same page/domain as the download, since it'd be trivial for a bad actor to change them if the files are compromised. Linux mint, for example, the attacker updated the checksums for the ISOs on the page when it was compromised https://www.infoworld.com/article/3036178/lesson-from-linux-... I don't really have a solid s…
Checksums are meant to verify data integrity. Who ever said otherwise?
Re: Google Ad Disguising Itself as www.gimp.org
#19Re: Google Ad Disguising Itself as www.gimp.org
#20How is it even possible to spoof the shown URL?
It's just a setting in Google AdWords. The display URL and target URL are not related. You can also play tricks like a "tracking URL template" that is a URL that can be on another domain and receives the "target URL" as a parameter. It is expected to redirect to the correct URL, of course nothing enforces this other than a manual review.
I can't believe that Google allows this but tracking is clearly more important to them than user security.