Most anti-ad fraud vendors can't do the IP packet analysis trick since they use ELB to help control their costs/scale.

All the other techniques require JavaScript and/or AS3 and are thus subject to modification by these kinds of sophisticated attackers. The only real way to do JavaScript in these cases is to change it often enough and run enough parallel versions that the attacker cannot keep up.

Aah, they were doing it for the last 10 years or so. People who are serious into botting have software that basicaly runs the browser in a vm.

The level of programming skill in the "industrial scale botting" community is high. Top tier botters can easily get into +$100k club if they were doing whitehat stuff.

I am a developer with these types of skills, but was mainly testing for a pet project scraping data. What are you referring to with the "whitehat stuff" to get in the 100k+ (/day) club?

>What are you referring to with the "whitehat stuff" to get in the 100k+ (/day) club?

Bot detection, ad auditing, antifraud systems

Absolutely. As a lead dev for a video ad company, I can tell you that we pay big money for skilled security and anti fraud guys.

I reversed engineered (out of curiosity) the JS/AS code of > 10 solutions of this nature. Wrote bypasses for many (locally, for fun). How do you make whitehat 100K+/day with these skills?