News for hackers. Stuff that matters.

A comment on Google AdWords Exploit Seen in the Wild. Parent comment

Re:Google AdWords Exploit Seen in the Wild by cesarb on Wednesday May 08, 2019 @01:25PM (#19861035)
At least Thunderbird seems to do that: when an email has an <a> tag with text that looks like a URL but doesn't match the href, it throws the "this email is probably a scam" bar above the message.
[ Parent | on HN ]
Re:Google AdWords Exploit Seen in the Wild by amenod on Wednesday May 08, 2019 @02:50PM (#19861764)
...which then marks all these newsletters as scams, since the link usually first points to analytics site?
[ Parent | on HN ]
Re:Google AdWords Exploit Seen in the Wild by layoutIfNeeded on Wednesday May 08, 2019 @05:58PM (#19863401)
Sounds to me it’s working as intended.
[ Parent | on HN ]
Re:Google AdWords Exploit Seen in the Wild by chipperyman573 on Wednesday May 08, 2019 @08:31PM (#19864272)
Sure but regular users will see it and think "this message means nothing, I got an email I know was from my bank the other day and I saw the banner there, too!"
[ Parent | on HN ]
Re:Google AdWords Exploit Seen in the Wild by kevin_thibedeau on Wednesday May 08, 2019 @03:23PM (#19862008)
They should just collect stats on their own servers.
[ Parent | on HN ]
Re:Google AdWords Exploit Seen in the Wild by Godel_unicode on Wednesday May 08, 2019 @11:06PM (#19865025)
This might come as a surprise to you, but every company doesn't have infinite developer time to reinvent things which already exist.
[ Parent | on HN ]
Re:Google AdWords Exploit Seen in the Wild by boomlinde on Thursday May 09, 2019 @03:38AM (#19866149)
Then they should be held accountable for their choice not to vet ads they send to their users. If this was enforced legally, a bunch of companies would suddenly be able to invest the "infinite time" required to register a damn click.
[ Parent | on HN ]
Re:Google AdWords Exploit Seen in the Wild by Godel_unicode on Thursday May 09, 2019 @04:44PM (#19872250)
That's obviously not the hard part.
[ Parent | on HN ]
Re:Google AdWords Exploit Seen in the Wild by boomlinde on Friday May 10, 2019 @05:49AM (#19876391)
"The hard part" can still be outsourced to a third party without resorting to redirection chains, either by sending the click information to them on the server-side or by sending it client side using a script.

Either way, "the hard part" is generally undesirable to users because it compromises their privacy in order to manipulate them.

[ Parent | on HN ]