News for hackers. Stuff that matters.
Re:Steganography Based Ad Payload That Drops Shlayer Trojan ... by criddell on Thursday January 24, 2019 @03:41PM (#18992715)
> I'd beg to ask what you're selling me if you're unable to show me what I'm getting for my ad spend

How could we tell you that? You know better than anybody what your revenue numbers are. A billion impressions isn't worth anything if it doesn't affect anything you measure.

Re:Steganography Based Ad Payload That Drops Shlayer Trojan ... by ddebernardy on Thursday January 24, 2019 @04:12PM (#18993010)
> How could we tell you that?

As you just said: a billion impressions aren't worth anything if it doesn't affect anything you measure. And that's the whole problem in the ad industry. Are you buying ads to:

- Build your brand/awareness/mailing list?

- Get marketing qualified leads that your sales will handle?

- Get sales for your SaaS without going through sales?

- Something else?

Each of these require different type of tracking - views, clicks, actions. More importantly though, each is subjected to ad fraud. And simple text/image ads won't let you detect the latter to weed it out of your stats.

And the event you're thinking "so? as long as your ROI is positive you're fine" the answer is no, it's not good, because it incites more fraud and the budget might have been better spent on content marketing or other efforts.

Re:Steganography Based Ad Payload That Drops Shlayer Trojan ... by tracker1 on Thursday January 24, 2019 @06:09PM (#18993991)
And none of that requires JS to be delivered to the browser beyond the script that loaded the ad itself. The ad networks should pass whatever appropriate data to each other, not the browser.