News for hackers. Stuff that matters.
Re:Ask HN: Companies of one, what is your tech stack? by Fornax96 on Wednesday August 25, 2021 @12:49PM (#28303867)
Do you happen to be using an iphone? The malicious ads seem to be targeting iphones specifically. I can't reproduce it myself but I have told my advertiser about it.

I have some leverage here since I'm one of their largest publishers.

Re:Ask HN: Companies of one, what is your tech stack? by tyingq on Wednesday August 25, 2021 @12:50PM (#28303881)
Nope, Android. I tried reloading a few times, and the page is normal most of time. So it must be only when a specific ad runs?

Edit: Played around with it a bit. I think (not sure), some of the stuff is coming from this in the page source, near the bottom.

  <script type="text/javascript" src="//optyruntchan.com/400/4189877" data-cfasync="false" async="async"></script>
  </script>
Re:Ask HN: Companies of one, what is your tech stack? by tyingq on Thursday August 26, 2021 @07:40AM (#28313563)
Note that is actually in the page, is NOT the ad, and couldn't have been injected by the ad.

It looks troublesome to me, as I don't see it on other similar pages on your site that also have ads.

Edit: Confirmed. Added "optyruntchan.com" to my local hosts file as 127.0.0.1. The page still has the ad at the bottom, but all the popups, overlays, redirects, are gone.

Re:Ask HN: Companies of one, what is your tech stack? by Fornax96 on Thursday August 26, 2021 @11:41AM (#28316349)
It's not like pixeldrain has been hacked or anything. I have been serving ads for this company for almost a year. It's just that they decided to serve full screen ads all of a sudden without consulting me.

I have removed them completely for now. I'll just be operating at a loss until I find an alternative ;-(

Re:Ask HN: Companies of one, what is your tech stack? by tyingq on Thursday August 26, 2021 @03:33PM (#28319512)
Ah, okay, sorry. I didn't see that piece of javascript on any other user-created pixeldrain pages, and it isn't involved in the ad at the bottom/center of the page. So, it did seem out of place to me. I can't even tell where it would place an ad.
Re:Ask HN: Companies of one, what is your tech stack? by Fornax96 on Friday August 27, 2021 @03:53AM (#28325345)
No problem. I base the ads I show on the size of the file that's being downloaded. Larger files cost more bandwidth so they get more intrusive ads. But I don't want the ads to be so intrusive that they drive users away of course.

Normally these ads would show up as little floating windows in the bottom right corner.

Re:Ask HN: Companies of one, what is your tech stack? by dormento on Thursday August 26, 2021 @03:50PM (#28319731)
I took a look at the script, it looks _hella_ shady. Some sort of packing I've never seen.