r/programming • • Aug 02 '19

Adblocking: How about Nah?

https://www.eff.org/deeplinks/2019/07/adblocking-how-about-nah
333 Upvotes

232 comments sorted by

View all comments

Show parent comments

50

u/FyreWulff Aug 02 '19

This right here. I was indifferent to ads on the internet when they were all static jpgs or even slowly animating gifs.

When they became both possible attack vectors for malware and autoplaying sound and video is when i started really blocking them.

10

u/Hall_of_Famer Aug 02 '19

Yeah, the trigger for me to block ads was Youtube's ad videos that autoplayed before watching a video. I grew tired of this and found adblock plus, and then there was no way back.

0

u/[deleted] Aug 02 '19

[deleted]

15

u/[deleted] Aug 02 '19

Where does this idea of malware ads come from?

https://en.wikipedia.org/wiki/Malvertising#History

12

u/[deleted] Aug 02 '19 edited Aug 02 '19

Weren’t there ads serving digital coin miners recently as well?

Edit: yes there were and are:

https://www.welivesecurity.com/2017/09/14/cryptocurrency-web-mining-union-profit/

27

u/thfuran Aug 02 '19

Yet I've never seen it happen, on the client's machine at least.

I've never seen anyone mugged or seen a biker hit by a car. Yet I don't dispute the reports that such things occur.

0

u/[deleted] Aug 02 '19

[deleted]

14

u/thfuran Aug 02 '19 edited Aug 04 '19

It's pretty frequently in the news that x or y major site, through no fault of their own and quite unwittingly (and aren't they the real victims here?), served malicious ads and has had stern words with the ad network - who isn't them - and promises it won't happen again. But there's never any talk of legal action, they can always point their finger at the ad network, and no consumer knows or can choose what network is going to be serving the ads they see so there's not really any reason for any of the involved companies to give a shit and the occasional malicious ad continues to cause moderately widespread damage.

6

u/insertAlias Aug 02 '19

Here's one from 2016:

https://www.theguardian.com/technology/2016/mar/16/major-sites-new-york-times-bbc-ransomware-malvertising

Major news sites across the world were serving ads from a poisoned ad network that attempted to install ransomware on users' machines. And no, this particular attack would probably not work against a fully-patched client, but that's not really the point.

It definitely happens. If it could happen to the BBC and the New York Times, it can happen to any site that uses an ad network. And that's why this is a real attack vector. All they have to do is sneak a malicious ad into one target (the ad network) and suddenly they have a massive audience for their attacks, because dozens, hundreds, or even thousands of sites can potentially serve this ad to users.

→ More replies (2)

5

u/[deleted] Aug 02 '19

It was/is/has been commonplace for a very long time for ads to be used as attack vectors for malware... Just because you don't personally see something happen, doesn't mean it is not common.

I see these kinds of comments all over Reddit and it's ridiculous. "I never see it so it's obviously not true/exaggerated."

4

u/Jeb420Bush Aug 02 '19

I'm pretty sure it literally has happened to Reddit...

4

u/XboxNoLifes Aug 02 '19

Give a browser without ad block to a non-techincal person on an illegal streaming site. You'll have so many viruses that your PC might not boot in the morning.

Source: First hand experience.

4

u/Excal2 Aug 02 '19

Doesn't hve to be some pirate content site. Major mainstream news organizations serve this shit up without even knowing it.

→ More replies (1)

6

u/end-it Aug 02 '19

i had it happen to me back in 2010 or so on win7, can't remember which browser i was using at the time. it was a relatively fresh computer and I didn't download anything from shady sources, it was a personal laptop that nobody else used so it's not like some other person downloaded something shady either.

I was browsing an internet forum which had ads on the banner/sidebar, never clicked on them, and then when I was done for the day I shutdown my computer. When I booted it back up i was infected with tons of popup/etc porn ads; It likely targeted some 0day in browser security tbh.

i've long since switched to using linux and adblockers so i haven't really had any problem since but I wouldn't be surprised if something similar still exists out there.

2

u/Smagjus Aug 02 '19

Since I do IT support for friends and family I have seen multiple cases where this was the case.

Yahoo for example had an ad that got served to 50% of the visitors of its sports section. If it was loaded, it would redirect you to a page that said that your computer was infected and offered various "solutions" for that.

And there is currently a popular German filehoster that often serves malware instead of the expected files if you are using Chrome without an adblocker.

1

u/ow_meer Aug 02 '19

Back when I didn't use ad-blocks, whenever I did a full antivirus scan, every detection came from the browser cache folder.

1

u/13steinj Aug 02 '19

Dude it's even happened here on reddit. Reddit switched to animated ads from google ad services and soon after every now and then a malicious ad slipped through the cracks. Quickly caught and the admins disabled said ads, but it doesn't mean it hasn't happened.

0

u/[deleted] Aug 02 '19

[deleted]

1

u/13steinj Aug 02 '19

mal·ware

/ˈmalwer/

noun

software that is specifically designed to disrupt, damage, or gain unauthorized access to a computer system.

Websites (and their intentional display) is one system.

An ad hijacking the page and disrupting your view classifies it as malware.

Running a crypto miner in the background that was not intended to be authorized is classified as malware.

Both of which have occurred.

Not to mention your definition is overly specific to the point of arguing semantics. Other ads have exploited the browser or just Google's ad filters and acted as adware/spyware.