Live data from Hacker News

Google Says 5% of Visitors to Its Sites Have Ad Injectors Installed

techcrunch.com

41–50 of 156 posts

Re: Google Says 5% of Visitors to Its Sites Have Ad Injectors Installed

#41

Earlier quoted context omitted.

Ah yes sourceforge. How far the mighty have fallen.

Sourceforge was doing this on like day 3, so i'm not sure they fell that far?

There was a time where I would tell friends, family, and clients that the top sourceforge projects were the only safe things to download on the internet.

Re: Google Says 5% of Visitors to Its Sites Have Ad Injectors Installed

#42

Earlier quoted context omitted.

For you. It looks more like the OP's version to me, including 'softonic' as the third linked one. The top two are mozilla's (and I use an ad blocker so I don't see the ad). On Chrome the first 6 links are mozilla's then the 'download sites' start.

I don't use an adblocker and I get the same results as you (top two are Mozilla, followed by softonic), no ads present.

I personally have adblock disabled on google.com because I want to support them and I see this: https://i.imgur.com/dEnFy15.png

The ads are not gone.

Re: Google Says 5% of Visitors to Its Sites Have Ad Injectors Installed

#43

Well maybe they should stop allowing download sites that offer ad infected downloads to buy the top spots on the google search results page? https://i.imgur.com/Ote9c2k.png Adwords is probably one of the main infection vectors for malware these days. Previous rant: https://news.ycombinator.com/item?id=8879229

Your rant is outdated. This is what "download firefox" looks like now: http://i.imgur.com/dG7wONC.png

There are still lot of Google ads on download sites that are extremely misleading and look like download buttons. http://blog.malwarebytes.org/wp-content/uploads/2012/10/Ad8....

As I wrote in another comment, even YCombinator invested in a bundleware company and PG defended it, so I guess the problem is deep rooted.

https://news.ycombinator.com/item?id=9283176

Re: Google Says 5% of Visitors to Its Sites Have Ad Injectors Installed

#44
post #31

Do these injectors work with https (ssl) sites? Where in the web page fetch/render process does this occur?

That HTTPS supposedly keeps out ads like this was one of Google's selling points for suggesting HTTPS to publishers. I was expecting this article to end with "and that is why all sites should be running HTTPS now". 5% is a lot. If HTTPS reduces this number to 1%, it might be worth the change.

HTTPS will keep out injection during transit from the server to your computer. But it will do absolutely nothing against toolbars and other browser extensions and that is what this article is about so at a guess the 5% is on top of injection in transit.

Re: Google Says 5% of Visitors to Its Sites Have Ad Injectors Installed

#45
And this is why open source, combined with trusted repos is the way to go. Granted, I do have a few closed source apps (Steam, games, Chrome and Opera contain open source bits but are also closed source), but those are apps I mostly 'trust' (I don't trust them 100%, but then again I'm also not pouring through the Linux kernel code).

Best way to avoid scams is common sense (if something looks dodgy, it probably is).

Re: Google Says 5% of Visitors to Its Sites Have Ad Injectors Installed

#46

Well maybe they should stop allowing download sites that offer ad infected downloads to buy the top spots on the google search results page? https://i.imgur.com/Ote9c2k.png Adwords is probably one of the main infection vectors for malware these days. Previous rant: https://news.ycombinator.com/item?id=8879229

I have a google alert for one of my open source projects (APSW) and every day almost they email me one or two sites where it has popped up. Virtually every one has a bizarre name, and on going to the site it is content obviously generated using Markov chains from other sites and incomprehensible to humans.

Of course there is no way to tell Google that these aren't real sites (I tried) and distinguishing real text from Markov chains using a computer is hard.

I keep wondering what it will take for them to figure out bad content, both for the computer (javascript etc) and for people (english etc).

Re: Google Says 5% of Visitors to Its Sites Have Ad Injectors Installed

#48
post #2

You can't trust anybody except for open source repositories. The easiest way to get such trash on your computer is installing software from a commercial vendor. Oracle is one major source of headache, if you aren't careful you'll find your 'java' install also gives you a severe case of malware/crapware. There are whole companies dedicated to this concept of piggy-backing junk.

Open source isn't some magical protection. Even with being a much smaller target, there have been malware on Linux repos.

Example on Gentoo(ignore the over the top headline):

http://www.zdnet.com/article/linux-infection-proves-windows-...

Not to mention that the repos themselves have been having security issues over the years.

Re: Google Says 5% of Visitors to Its Sites Have Ad Injectors Installed

#49
Here's an example of said extension.

https://gist.github.com/fsaintjacques/e53eadd8b260a4105bbf

If you want to test the effect of it, copy/paste 'console.js' content in Chrome's console, I recommend to go into incognito mode:

https://gist.github.com/fsaintjacques/e53eadd8b260a4105bbf#f...

Re: Google Says 5% of Visitors to Its Sites Have Ad Injectors Installed

#50

Well maybe they should stop allowing download sites that offer ad infected downloads to buy the top spots on the google search results page? https://i.imgur.com/Ote9c2k.png Adwords is probably one of the main infection vectors for malware these days. Previous rant: https://news.ycombinator.com/item?id=8879229

This, right here, is why I have no qualms installing Adblock Edge and insisting that my parents (and anyone else who isn't very tech-savvy) do the same. It's not about not wanting to support independent bloggers. It's about making sure that unsuspecting users don't accidentally download malware when they're doing something mundane like downloading their web browser . In the age of the web, Adblock is the new anti-vir…

It's definitely the people who are least inclined to install an ad blocker that could use it most.

On the other hand, it takes a long time, but they do learn to be more cynical about the Internet if they're exposed to its raw state.

Post reply on HN