Live data from Hacker News

Online ad giant Adform was hacked, proving once again why ad blockers are needed

this.weekinsecurity.com

51–60 of 107 posts

Re: Online ad giant Adform was hacked, proving once again why ad blockers are needed

#51

Browsers should not have access to the clipboard.

You can disable it on Firefox by setting dom.event.clipboardevents.enabled to false. I haven't had any issues with it.

Someone shared the code in the comments, it uses 'copy' and 'cut' event listeners, so disabling this setting would have prevented the exploit regardless of an adblock.

Re: Online ad giant Adform was hacked, proving once again why ad blockers are needed

#52
post #37

The sad thing is that we need adblockers in the first place. Granted, even in the 1990s there were ads; I remember blinking banners and what not. But often the underlying website was still fine as such. Fast forward some years. Now if you look at e. g. medium.com but many other websites, you are CONSTANTLY bombarded with pointless pop-ups, slide-ins, and pester-naggers. No I do use ublock origin (it works on thorium…

I read an article a while ago about some scientist who decided that he wanted to go around investigating a certain species of leech that lives inside a hippo's butt, like attached directly to the colon. He suggested that, as big as the hippo is, it probably wasn't really all that aware that the leeches are even in its butt, but that's where the leech likes to be because there's a good source of blood there for the le…

This is internet gold and makes me believe in people again.

Re: Online ad giant Adform was hacked, proving once again why ad blockers are needed

#53

The sad thing is that we need adblockers in the first place. Granted, even in the 1990s there were ads; I remember blinking banners and what not. But often the underlying website was still fine as such. Fast forward some years. Now if you look at e. g. medium.com but many other websites, you are CONSTANTLY bombarded with pointless pop-ups, slide-ins, and pester-naggers. No I do use ublock origin (it works on thorium…

>If you want anyone to read your content

Reading the content is really not necessary, but the business is predicated on selling ads.

Re: Online ad giant Adform was hacked, proving once again why ad blockers are needed

#54

The sad thing is that we need adblockers in the first place. Granted, even in the 1990s there were ads; I remember blinking banners and what not. But often the underlying website was still fine as such. Fast forward some years. Now if you look at e. g. medium.com but many other websites, you are CONSTANTLY bombarded with pointless pop-ups, slide-ins, and pester-naggers. No I do use ublock origin (it works on thorium…

> Granted, even in the 1990s there were ads;

the ads in the 90s were served by the same server of the site you were browsing. those ads were images. today's ads are from 3rd party servers running arbitrary JS code that the server of the site you are browsing knows nothing about how it works. ads from the 90s while possibly obnoxious and annoying were not able to be malicious as ads from today.

Re: Online ad giant Adform was hacked, proving once again why ad blockers are needed

#55
post #38
post #31

Earlier quoted context omitted.

Never in history has good prevailed over evil for more than a short time.

I would argue the opposite is true. We’ve gone from despotic theocratic regimes controlling essentiallt every living human in the world to democratic self determination being one of the most prevalent political theories on the planet. The tolerance for slavery, brutal warfare, institutionalized racism and much more is way lower now than it has been in the past. “The arc of the moral universe is long, but it bends tow…

For the last... 30 years? At least the first 20 of the last 30 years, and then it reversed.

Re: Online ad giant Adform was hacked, proving once again why ad blockers are needed

#57
post #38

Earlier quoted context omitted.

I would argue the opposite is true. We’ve gone from despotic theocratic regimes controlling essentiallt every living human in the world to democratic self determination being one of the most prevalent political theories on the planet. The tolerance for slavery, brutal warfare, institutionalized racism and much more is way lower now than it has been in the past. “The arc of the moral universe is long, but it bends tow…

LOL The world has always be run by oligarchs, and nothing changed since ten thousands of years. Most people today on this planet are still slaves.

Black people were bought and sold in the US just a few hundred years ago.

For years one of the perks of being a soldier was raping and pillaging, now that lands you in prison (depending on the country of course).

The world isn’t some utopia where everyone is treated fairly and there are no oligarchs, but I think it’s hard to argue that the amount of justice is unchanged for all of human history.

Re: Online ad giant Adform was hacked, proving once again why ad blockers are needed

#59
post #14
post #10

Earlier quoted context omitted.

Nobody wants ads (*) but somehow they are never banned. Makes you wonder, are we living in a democracy or not? (*) shown at inconvenient moments and tracking the user; yellow pages were fine

I do not recall ever hearing of an organized effort to ban ads. These days, good luck getting bipartisan agreement, especially with all the dark money in politics being legalized and normalized. That said... The modern internet is built off many free services paid for by people who buy stuff from ads. It is hard to imagine a world without ads - many sites and services would disappear. Hosting costs money. I could see…

> It is hard to imagine a world without ads - many sites and services would disappear.

It is hard to imagine a world without horses & carts; many businesses would disappear.

Re: Online ad giant Adform was hacked, proving once again why ad blockers are needed

#60

Probably should just link to the security researcher's post, since it's far more informative: https://doublepulsar.com/adform-compromised-to-serve-crypto-...

The bitcoin wallet swap thing that these malware scripts often push, how effective is it? It just seems so niche, if I'm doing stuff with my crypto wallet, I'm more likely to do it from my phone where I wont be copying and pasting to and from a web browser, maybe a webview if anything? I always double check the characters match up anyway... I am just shocked the level of effort for the most niche hack.
Post reply on HN