I just wanted to chime in from Stack Overflow here and let people know: we are aware of the issue. And we're NOT okay with it. We're trying to sort out how to kill the audio behavior now. It's not very straightforward to find where it's coming from, but we are working on it. We've also reached out to Google for their assistance in tracking it down. If anyone can offer advice, we'll more than happily take it. - Nick C…
Why are you allowing arbitrary javascript to be served to your users?
Why is Stack Overflow trying to start audio?
251–260 of 416 posts
Re: Why is Stack Overflow trying to start audio?
#252I just wanted to chime in from Stack Overflow here and let people know: we are aware of the issue. And we're NOT okay with it. We're trying to sort out how to kill the audio behavior now. It's not very straightforward to find where it's coming from, but we are working on it. We've also reached out to Google for their assistance in tracking it down. If anyone can offer advice, we'll more than happily take it. - Nick C…
Nick, how did things go so wrong from three years ago? e.g. https://news.ycombinator.com/item?id=20289841
Re: Why is Stack Overflow trying to start audio?
#253Earlier quoted context omitted.
Arbitrary code execution isnt really that trivial.
Arbitrary javascript execution is generally meaningless. Very rarely you'll get a zero-day or something, or maybe a site will use too much battery when focused.
Re: Why is Stack Overflow trying to start audio?
#254Earlier quoted context omitted.
No they don't. They use their own adserver (bought from adzerk) to physically serve the ads, but they have always come through RTB connections to ad exchanges. There are private marketplaces and "automated guaranteed" deals to isolate their inventory in its representation and pricing from the rest of the market but the actual campaigns they get exposure to, and the creatives delivered, aren't special to them.
I've seen plenty of SO-specific ad campaigns being run on the site.
https://www.stackoverflowbusiness.com/advertising
They do sell job postings and have sponsored tags so it's not all network ad revenue, but that's a minority of the income. Since they released their Q/A SaaS product now, maybe they’ll shift to selling that as the primary revenue stream.
Re: Why is Stack Overflow trying to start audio?
#255Earlier quoted context omitted.
From the post: "The ad is attempting to use the Audio API as one of literally hundreds of pieces of data it is collecting about your browser in an attempt to "fingerprint" it... Your browser may be blocking this particular API, but it's not blocking most of the data." Seems like killing the audio is the metaphorical putting a finger in the dyke of serving arbitrary JavaScript to your users.
Maybe in the dyke holding back user outrage, but the dyke of serving arbitrary JavaScript was never built in the first place.
Re: Why is Stack Overflow trying to start audio?
#256Earlier quoted context omitted.
I thought Penny Arcade does bespoke ads. Rock Paper Shotgun used to do bespoke ads. I always found them million times more effective, and more trust-inspiring of both ad AND site, to me. Is SO smaller business? Possible... just surprised.
Those sites are far smaller than Stackoverflow. Bespoke campaigns don't always pay more, and usually mean less total revenue for the site if that's all they run.
He also sells three ad spots on his mostly weekly podcast for $6000 each. He’s a one man business grossing over 1 million a year without a sales team.
Re: Why is Stack Overflow trying to start audio?
#257I just wanted to chime in from Stack Overflow here and let people know: we are aware of the issue. And we're NOT okay with it. We're trying to sort out how to kill the audio behavior now. It's not very straightforward to find where it's coming from, but we are working on it. We've also reached out to Google for their assistance in tracking it down. If anyone can offer advice, we'll more than happily take it. - Nick C…
Hi Nick, If you're serious about this, I've built tools for the publisher side for stopping exactly this. My email address is in my profile.
Re: Why is Stack Overflow trying to start audio?
#258Earlier quoted context omitted.
It amazes me that people act like Enterprise sales isn’t a thing.
Advertising isn't enterprise sales.
Re: Why is Stack Overflow trying to start audio?
#259Earlier quoted context omitted.
Of course it’s that simple. Don’t let ads run JS. Done. You’re saying that doing this would drastically decrease ad revenue. Which is what I’m saying too: it’s about money, not necessity. Would a site like SO be unable to survive without ads that run arbitrary JS? I don’t know. Even if the answer is that they must do this to survive, it’s still insane that content companies let randos inject arbitrary code into their…
Money is a necessity, that's how SO exists, and it wouldn't sustain its current size if it required JS-free network campaigns or tried to sell all ad space directly. Simple doesn't mean it's easy or realistic. Yes, adtech has major problems but they're being slowly worked on and won't change overnight. This applies to any other industry where you think can just walk in and solve everything if everyone just did X. Rea…
Of course reality doesn’t work that way. Ad companies aren’t going to change, because they like money and don’t give a shit about users.
We’re stuck in a local minimum. It’s insane. It could be easily fixed if everyone just stopped doing the insane things. And they won’t stop.
Re: Why is Stack Overflow trying to start audio?
#260Earlier quoted context omitted.
I thought Penny Arcade does bespoke ads. Rock Paper Shotgun used to do bespoke ads. I always found them million times more effective, and more trust-inspiring of both ad AND site, to me. Is SO smaller business? Possible... just surprised.
Those sites are far smaller than Stackoverflow. Bespoke campaigns don't always pay more, and usually mean less total revenue for the site if that's all they run.
In my mind major respected operation like SO should have an easier job. I interpreted OP to imply "nobody is big enough to run bespoke ads".
I guess I don't have metrics for it and my impression that's clearly a more reliable investment of one's advertising dollars is a mistaken one :-/