News for hackers. Stuff that matters.

A comment on Google will warn users when sites contain social engineering ads.

Re:Google will warn users when sites contain social engineer... by tyingq on Tuesday April 12, 2016 @02:11PM (#11482042)
From the article: "Others pretend to be “Download” or “Play” buttons, as if clicking them would provide access to the video content or stream the user had wanted. "

These are actively being served through Google Adsense, right now.

Here's a few example, live sites, where I see "Download" buttons in an ad, in a context that would be confusing.

http://www.getpaint.net/index.html

http://downloads.tomsguide.com/PaintNET,0301-4883.html

http://filehippo.com/download_paint.net/

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by JohnTHaller on Tuesday April 12, 2016 @03:02PM (#11482521)
I see fake download buttons, full screen ads, ads opening new windows/tabs, and ads opening Google play automatically from Adsense on a regular basis. I gave up reporting them years ago.

I only see them when using chrome on Android these days. I generally use Firefox with an ad blocker on both windows and Android to combat it. I disable on some sites to support them, donate where I can, subscribe to YouTube red/Google music, etc to be sure I support content.

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by kbenson on Tuesday April 12, 2016 @03:45PM (#11482913)
> ads opening Google play automatically from Adsense

Are you sure they are ads, and not the site redirecting you based on your useragent? I've had some sites that have apps do that, but I've never had an add automatically direct me to the Play store before.

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by JohnTHaller on Tuesday April 12, 2016 @04:32PM (#11483316)
It debuted when Google added the ability to do direct link ads to Google Play. And it's been on larger sites that use Google AdSense to fill excess inventory.
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by spiderfarmer on Wednesday April 13, 2016 @02:55AM (#11486266)
Yes. I ran into this problem with one of my websites. Turns out, a lot of websites in NL were having the same problem. I guess it's coming through one of the thousands of other advertising networks that are using the Adsense auction.

It's still happening now and then, so Google is fixing the problem in the wrong place.

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by jimrandomh on Tuesday April 12, 2016 @03:33PM (#11482819)
It's really weird that Google isn't dealing with them. Maybe they're geotargeting everywhere-but-Mountain-View or something? Malware ads on AdSense are neither uncommon nor subtle, but Google's acting like they're not there.
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by vox_mollis on Tuesday April 12, 2016 @03:51PM (#11482963)
It's really weird that Google isn't dealing with them

It's never "weird" for a company to choose not to attack its own revenue base.

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by dmihal on Tuesday April 12, 2016 @05:53PM (#11483903)
Except Google knows that low-quality ads are driving people to ad-blockers
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by spiderfarmer on Wednesday April 13, 2016 @02:56AM (#11486277)
Exactly. Adsense had this problem in the Netherlands and it turned a lot of my visitors to ad blockers, even though advertising on my website was meant to be subtle.
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by ori_b on Tuesday April 12, 2016 @02:47PM (#11482377)
> These are actively being served through Google Adsense, right now.

There should be a button to report them. Please report them.

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by yrro on Tuesday April 12, 2016 @05:43PM (#11483836)
There's no reporting option for 'abusive/fraudulent'. And reporting ads doesn't result in a reduction in the number of fake download adverts that I see. Blocking all ads does. I choose the latter.
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by tyingq on Tuesday April 12, 2016 @03:00PM (#11482503)
Sure. But it's just funny that Google's approach is to mark these sites with big red warnings when Google itself is the source of the actual problem.
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by duaneb on Wednesday April 13, 2016 @12:34AM (#11485764)
The ads are the actual problem. It's entirely possible this is a stopgap solution while they flag the client for manual auditing (or whatever)—manual auditing doesn't scale, so I suspect this is going to be more successful at preventing abuse in the short term.
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by ocdtrekkie on Wednesday April 13, 2016 @02:37AM (#11486203)
The problem is that Google has built most of it's products and business around the concept that they can automate away manual intervention. I think they are quickly starting to discover how faulty that concept is.

Some of the "AI" startups that mix automated intelligence with human fallback have probably got it much more right: Sometimes, you need people.

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by duaneb on Wednesday April 13, 2016 @09:55AM (#11488138)
Regardless, I think the warning is better than no warning. Again, we don't know the process behind the scenes.
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by ocdtrekkie on Wednesday April 13, 2016 @11:44AM (#11489168)
If Google believes any of their ads on the page are questionable, Google should simply not display those ads.
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by ori_b on Tuesday April 12, 2016 @04:03PM (#11483099)
Yep. But spam detection and flagging is a hard problem. Google tries to detect and flag malicious creatives and stop them from serving, but it's not perfect. (I've touched that subsystem in a past life).
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by tyingq on Tuesday April 12, 2016 @04:30PM (#11483301)
If their system finds a site displaying a misleading ad, and it's a google ad...

Why is the action to flag and penalize the site? Why would the action not be "google stops showing that ad"?

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by ori_b on Tuesday April 12, 2016 @06:05PM (#11483979)
When it's detected on the ad serving side, the action is "google doesn't show that ad". This is not something that a user will generally notice.
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by dgacmu on Wednesday April 13, 2016 @01:46AM (#11486023)
Consider the likely interaction: (a) Spammer tries to figure out a twist on the ad that makes it through the inappropriate ad filters. They keep at this until they get an image or wording that works. (b) Slightly different system goes and tries to find malicious sites. It detects a site where the spammer managed (a) successfully, because it uses some different methods of identifying the bad stuff.

I don't find this kind of result surprising at all, particularly given how big Google is. If the site safety team is different from the don't-show-evil-ads team, it's almost an inevitable result, at least, in some point in the evolution of the system(s) and processes involved. It does point out some improvements that are needed.

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by tyingq on Wednesday April 13, 2016 @06:14AM (#11486990)
I still don't get it. It's like the city randomly testing drinking fountains for lead, then issuing penalties to businesses, when the city municipal supply is the issue. Sure, shut down the water, but don't penalize victims.

That same scraper that's flagging the site can see the adsense block, see that image url for the offending image is "googlesyndication.com/some/image", etc. As far as I can tell, enough info to map directly back to the entity paying for the ad to show.

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by mikeash on Tuesday April 12, 2016 @04:12PM (#11483160)
Is there? I see two buttons, one that opens a page describing Google Ads, and one that lets me hide it. After hiding an ad, it asks me what was wrong, and gives me the option of Repetitive, Irrelevant, or Inappropriate. None of those seem to fit with reporting abuse.
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by zipwitch on Tuesday April 12, 2016 @11:44PM (#11485573)
Sure! Would you mind fixing my revenue generator for free while you're at it?
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by tiglionabbit on Tuesday April 12, 2016 @08:11PM (#11484688)
How do you report them? I see an ad with a fake download button right now. http://i.imgur.com/qJs2CO7.png

Edit: I found the feedback form: https://support.google.com/adwords/troubleshooter/4578507

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by return0 on Tuesday April 12, 2016 @04:07PM (#11483125)
Yeah google either is not doing a good job here, or they should state whether they have a relaxed stance on that.
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by ProAm on Tuesday April 12, 2016 @02:44PM (#11482350)
Where do you see the button the www.getpaint.net? This is all I see and it looks legit [1]

[1] http://imgur.com/S8iV9cX

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by patja on Tuesday April 12, 2016 @02:52PM (#11482420)
I think you are blocking ads. I am too and that's what I see. From a device not blocking ads this is what I see:

http://imgur.com/yZDK7og

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by tyingq on Tuesday April 12, 2016 @02:57PM (#11482472)
It's also tricky because ad bids come and go, Google does personalization, etc. But, I see what you see pretty reliably if I use an incognito window (no personalization).
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by ProAm on Tuesday April 12, 2016 @02:55PM (#11482461)
Yep definitely blocking ads. That is insanity without. 8|
[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by putaside on Tuesday April 12, 2016 @03:04PM (#11482539)
A new trick is to use so many trackers that it won't fit on the screen when listing them all:

http://i.imgur.com/AauOwVB.png

(This is from a site which detects adblockers, and begs you to turn it off, because it's killing their business model)

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by newjersey on Tuesday April 12, 2016 @03:32PM (#11482813)
I swear imgur redirected me to an album page earlier.

But now https://i.imgur.com/AauOwVB.png it works. Strange.

Ads like the paint.net ad runs afoul of

> Mimicking site content, news articles, or text ads

> Google doesn't allow ads that mimic publisher content or layout, or news articles and features. Ads may also not contain screenshots of Google AdWords text ads or otherwise simulate an AdWords text ad in any way.

https://support.google.com/adwordspolicy/answer/176108?hl=en

[ Parent | on HN ]
Re:Google will warn users when sites contain social engineer... by putasidemobile on Tuesday April 12, 2016 @03:57PM (#11483028)
It showed me an album page on Android too. And a Google ad for a free to play Flappy Bird clone (called Flappy Bird).

Clicking on the ad I was greeted with a landing page, with tiny gray jpeg letters telling me that this free game service costs only 5 Euro a week (automatic renewal). The company behind it, Mobster Ltd. leads me to a dead end on Cyprus and a whole lot of internet complaints.

So please do not click that link or Google may be forced to block imgur. Sorry.

[ Parent | on HN ]