News for hackers. Stuff that matters.
Re:An iframe from googlesyndication.com tries to access the ... by foota on Sunday December 19, 2021 @11:01AM (#29614899)
Is this just click bait? I don't know the intricacies of Google's ad serving, but is this not just someone (e.g., an ads customer) slipping a request for camera and mic access into an ad script? But the title seems to suggest Google is doing something malicious here.
Re:An iframe from googlesyndication.com tries to access the ... by hyperman1 on Sunday December 19, 2021 @11:10AM (#29614991)
Isn't Google supposed to vet whatever ads they send into the world?

I don't know if this looks any better if Google is negligent/incompetent instead of malicious.

Re:An iframe from googlesyndication.com tries to access the ... by dubbelboer on Sunday December 19, 2021 @12:51PM (#29616264)
They don't vet anything, anyone can execute any code on tpc.googlesyndicatio.com. See: https://blog.dubbelboer.com/2016/06/10/embed-into-tpc-google...
Re:An iframe from googlesyndication.com tries to access the ... by kadoban on Sunday December 19, 2021 @11:09AM (#29614979)
Why the _hell_ should a Google ads customer be able to "slip" in a request for camera and mic? That that is even possible is a large problem.
Re:An iframe from googlesyndication.com tries to access the ... by CrazyStat on Sunday December 19, 2021 @11:14AM (#29615043)
Allowing an ads customer to "just" slip a request for camera and mic access into an ad script is malicious.
Re:An iframe from googlesyndication.com tries to access the ... by ehnto on Sunday December 19, 2021 @11:17AM (#29615074)
Negligent, I wouldn't call it malicious but I would call it negligent.
Re:An iframe from googlesyndication.com tries to access the ... by CrazyStat on Sunday December 19, 2021 @11:44AM (#29615427)
The first time google served malicious JS on behalf of a customer was negligent. Maybe the second and third and fourth and fiftieth times too.

It's not 2003 anymore, we're far past negligence at this point.

Re:An iframe from googlesyndication.com tries to access the ... by oblak on Sunday December 19, 2021 @11:06AM (#29614945)
You're right. Google would never compromise anyone to make some money. Never
Re:An iframe from googlesyndication.com tries to access the ... by smt88 on Sunday December 19, 2021 @11:03AM (#29614920)
Why does it matter whether Google did it or Google spread it around the world? It is equally repulsive behavior on their part.
Re:An iframe from googlesyndication.com tries to access the ... by authed on Sunday December 19, 2021 @06:02PM (#29619459)
> Is this just click bait?

It is not. It sounds like something that should have been taken care of by Google at least 10 years ago.

Re:An iframe from googlesyndication.com tries to access the ... by bogwog on Sunday December 19, 2021 @01:48PM (#29616960)
> But the title seems to suggest Google is doing something malicious here.

Aren’t they? They’re quite literally distributing malware.

Re:An iframe from googlesyndication.com tries to access the ... by johncena33 on Sunday December 19, 2021 @11:26AM (#29615192)
Well, it's HN. HN has become a FUD machine.
Re:An iframe from googlesyndication.com tries to access the ... by dang on Monday December 20, 2021 @02:48PM (#29629278)
"When disagreeing, please reply to the argument instead of calling names. 'That is idiotic; 1 + 1 is 2, not 3' can be shortened to '1 + 1 is 2, not 3."

"Please don't sneer, including at the rest of the community."

https://news.ycombinator.com/newsguidelines.html