full-disclosure - Re: hacking FB Ads

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAAwCHGWf2nYor94qqFpfue53rxjZ3KpHbw2_eV4MZcg8HryVwQ@mail.gmail.com>
Date: Thu, 2 Aug 2012 11:46:54 +0200
From: You Got Pwned <yougotpwned6@...glemail.com>
To: "Ivan .Heca" <ivanhec@...il.com>
Cc: full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: hacking FB Ads

This is interesting!
Can you please post some logs (User Agent/ IPs)?

Cheers

2012/8/2 Ivan .Heca <ivanhec@...il.com>

> interesting bit of research
>
> “A couple months ago, when we were preparing to launch the new Limited
> Run, we started to experiment with Facebook ads. Unfortunately, while
> testing their ad system, we noticed some very strange things. Facebook was
> charging us for clicks, yet we could only verify about 20% of them actually
> showing up on our site. At first, we thought it was our analytics service.
> We tried signing up for a handful of other big name companies, and still,
> we couldn’t verify more than 15-20% of clicks. So we did what any good
> developers would do. We built our own analytic software. Here’s what we
> found: on about 80% of the clicks Facebook was charging us for, JavaScript
> wasn’t on. And if the person clicking the ad doesn’t have JavaScript, it’s
> very difficult for an analytics service to verify the click.
>
> What’s important here is that in all of our years of experience, only
> about 1-2% of people coming to us have JavaScript disabled, not 80% like
> these clicks coming from Facebook. So we did what any good developers would
> do. We built a page logger. Any time a page was loaded, we’d keep track of
> it. You know what we found? The 80% of clicks we were paying for were from
> bots. That’s correct. Bots were loading pages and driving up our
> advertising costs.”
>
>
> http://techcrunch.com/2012/07/30/startup-claims-80-of-its-facebook-ad-clicks-are-coming-from-bots/
>
>
> http://blog.alexanderhiggins.com/2012/07/31/latest-facebook-scandal-widespread-advertising-fraud-156521/
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/