News for hackers. Stuff that matters.
Re:Can Ads Be GDPR Compliant? by britneybitch on Sunday January 08, 2023 @09:20AM (#34299286)
The article makes a big assumption that ads cannot exist without privacy violations, but that's simply not true. Print ads have existed for longer than the internet, and they're chosen based on the content, not the reader. If I'm reading an article about guitars, show me an ad for a guitar or pedal or amp. Easy. That would already be better than 99% of today's "targeted" ads.
Re:Can Ads Be GDPR Compliant? by tobr on Sunday January 08, 2023 @09:29AM (#34299365)
I wonder if you read the part about fraud detection?
Re:Can Ads Be GDPR Compliant? by diffeomorphism on Sunday January 08, 2023 @09:41AM (#34299456)
That argument is somewhat flimsy though. It is only a problem if you want to pay per view. If you just pay for "show it for one week" as in print then there is no issue.
Re:Can Ads Be GDPR Compliant? by emodendroket on Sunday January 08, 2023 @09:46AM (#34299493)
But in print it is knowable how many copies are going out, isn't it?
Re:Can Ads Be GDPR Compliant? by ceejayoz on Sunday January 08, 2023 @09:50AM (#34299528)
Even that can be fiddled.

USAToday used to do it via deals with hotels to put one outside your room. Boom, extra copies!

Re:Can Ads Be GDPR Compliant? by ghaff on Sunday January 08, 2023 @10:07AM (#34299683)
Yeah although ad buyers of any sophistication knew going in that a lot of certain newspapers were hotel copies (though arguably a lot of people read those), trade rags vs. consumer subscriptions, general vs. niche, etc. and took that into account.

They still didn't have a great idea of how effective they were a lot of the time of course.

Re:Can Ads Be GDPR Compliant? by emodendroket on Sunday January 08, 2023 @09:52AM (#34299551)
Printing a newspaper at least costs a bit more money and there's a decent chance someone will read the copy of the paper in their hotel room. Fake Web traffic could easily dwarf real traffic.
Re:Can Ads Be GDPR Compliant? by googlryas on Sunday January 08, 2023 @09:50AM (#34299537)
Advertisers would want to know something akin to circulation numbers before paying for placement though. And they would want to be reasonably confident those numbers aren't pumped by fraud.

Maybe the web needs something like Nielsen ratings, where Verified real users voluntarily submit their browsing to help advertisers determine watch time.

Re:Can Ads Be GDPR Compliant? by jefftk on Sunday January 08, 2023 @10:04AM (#34299663)
I talk about this at the end of the post as well. I think a ratings panel approach doesn't apply well to the web because the web is so fragmented. (In a good way! I like that there are lots of independent sites!)

Unless you had something like 10% of real users or a super representative 1% I think you'd have a big problem with getting realistic numbers outside huge sites.

Re:Can Ads Be GDPR Compliant? by ghaff on Sunday January 08, 2023 @10:03AM (#34299655)
Yes. But even if you pay for a month placement on a given site, the ad buyer is still going to want an estimate of how many legitimate viewers see/saw your ad.

It probably works better on things like podcasts but the bottom line is that you can't really trust me to tell you how many viewers my site had without some fraud detection mechanisms in place. (And even then fraud is apparently pretty rampant.)

Re:Can Ads Be GDPR Compliant? by Saris on Sunday January 08, 2023 @10:35AM (#34299926)
I may be missing something, but why? Wouldn't the buyer just look at how many people arrived at their website from the ad?
Re:Can Ads Be GDPR Compliant? by ghaff on Sunday January 08, 2023 @10:43AM (#34299990)
How do you know those clicks are people? (You can measure just conversions but that's a much higher bar for measuring an ad and a direct conversion may not even be your objective.)
Re:Can Ads Be GDPR Compliant? by jefftk on Sunday January 08, 2023 @10:43AM (#34299996)
Bots can click through like any other visitors. They won't buy stuff, though, so if you're placing ads for people to directly take an expensive action ("performance advertising") you're mostly ok. Brand advertising, though, is very dependent on fraud detection because it doesn't have this clear connection.

There's more about this near the end of the post.

Re:Can Ads Be GDPR Compliant? by tobr on Sunday January 08, 2023 @11:26AM (#34300412)
Do you think it’s possible to measure how many people are coming from an ad on a specific site and buying something, without also resorting to illegal tracking?
Re:Can Ads Be GDPR Compliant? by jefftk on Sunday January 08, 2023 @05:12PM (#34303767)
That's a good point. I think a shopping site might be able to succeed in arguing that they had a legitimate interest in tracking how people arrived on their site, but possibly not. On the other hand, if half of your visitors consent to tracking that's enough to have a pretty good sense of the value you're getting from each source.
Re:Can Ads Be GDPR Compliant? by Xelbair on Sunday January 08, 2023 @10:46AM (#34300026)
>But even if you pay for a month placement on a given site, the ad buyer is still going to want an estimate of how many legitimate viewers see/saw your ad.

yes, you might WANT that. but you do not NEED that. Remember that ad's isn't only effective when clicking on it, but also by spreading visibility of your offer/product.

you could easily use sites visitor count as a estimate for monthly pricing. And frankly without all tracking there would be no incentives to fake click on ads at all, so you could get your own tracking on your own side.

Re:Can Ads Be GDPR Compliant? by ghaff on Sunday January 08, 2023 @11:16AM (#34300304)
If I can't tell with some degree of assurance whether you have 1K viewers per month or 1M viewers per month (never mind uniques), I'm probably not going to pay for ad on your site.
Re:Can Ads Be GDPR Compliant? by orangeoxidation on Sunday January 08, 2023 @09:48AM (#34299511)
Print can charge for ad placement, not impressions. But that's only possible because the number of subscribers, size and number of print runs, circulation are well known and hard to fake stats.

The web cannot do that without tracking...

Re:Can Ads Be GDPR Compliant? by contravariant on Sunday January 08, 2023 @10:04AM (#34299659)
Depends what you call tracking. Just like a newspaper company knows how many copies they distribute a website would know how many copies they've sent over the line.

You might not trust them but I don't see why you'd think a newspaper would have a harder time claiming they've made more copies than they have.

Re:Can Ads Be GDPR Compliant? by jefftk on Sunday January 08, 2023 @10:09AM (#34299695)
Sending out a newspaper is much more expensive than sending out a pageview. If a million bots visit my site everyday I can point at server logs showing very high numbers of pageviews, but you wouldn't want to use that to pay me!

Now, you could say don't do business with people who are trying to defraud you, but one of the more impressive things about the ad ecosystem is that it works without advertisers and publishers trusting each other. I can sell the space on my site and advertisers don't need to figure out how much to trust me in particular.

It's easy to have ad fraud that's plausibly deniable and maybe even not on purpose. Let's say you're a publisher and you want more people to come to your site. You look around and you find someone who says they run a newsletter and would be willing to include links to your stories for a small fee. When you multiply out the cost per visitor this looks like a pretty good deal; you say yes. This traffic turns out to be entirely bots, but you can't tell because we got rid of ad fraud detection.

Re:Can Ads Be GDPR Compliant? by dmitriid on Sunday January 08, 2023 @10:49AM (#34300061)
> but one of the more impressive things about the ad ecosystem is that it works without advertisers and publishers trusting each other. I can sell the space on my site and advertisers don't need to figure out how much to trust me in particular.

For a person who worked in ads you are surprisingly oblivious to how both Facebook and Google defrauded advertisers and publishers.

- Facebook Lied About Video Metrics and It Killed Profitable Businesses https://www.ccn.com/facebook-lied-about-video-metrics/

- Google Hit With $268 Million Fine Over Unfair Ad Practices https://gizmodo.com/google-hit-with-268-million-fine-over-un...

Ad industry should burn in the fires of hell.

Re:Can Ads Be GDPR Compliant? by klvino on Sunday January 08, 2023 @11:52AM (#34300675)
There was a second flaw in the premise between print publishers and websites. Some print publishers inflate circulation numbers when attempting to sell ad space in an attempt to make the ad space appear more valuable.

Similar double-selling of television ads take place as well. A network ad may run in the network feed and will appear in the network affidavit logs as having run. Local affiliates supercede network feeds all the time and in some of those cases they do so during a network ad pod and run station-sold ads. Consumer sees only one of the TV ads but both get reported as run.

Fraud in advertising isn't something new or isolated to the online medium.

Re:Can Ads Be GDPR Compliant? by ghaff on Sunday January 08, 2023 @10:20AM (#34299781)
Ignore the headline which is completely unsupported by anything in the story but circulation numbers are audited, e.g. by an organization called BPA. https://www.photonics.com/Articles/The_Magazine_Industrys_Di...

Doesn't mean there isn't fraud but someone can't really make up circulation numbers out of whole cloth.

Re:Can Ads Be GDPR Compliant? by contravariant on Sunday January 08, 2023 @10:41AM (#34299974)
Sure, but if anything that shows that newspaper companies can't be trusted to report accurate numbers if there is no oversight whatsoever.

All I'm saying is that the same logic holds for websites and that tracking people is a needlessly paranoid and harmful solution to the problem when it can be solved with trust, contracts and auditing.

Re:Can Ads Be GDPR Compliant? by ghaff on Sunday January 08, 2023 @10:51AM (#34300073)
>it can be solved with trust, contracts and auditing

I actually agree with you. And large businesses in particular are both audited and do internal audits all the time. It's not that they and their employees are all untrustworthy but audits can both catch mistakes and send a signal that people are watching.

There are probably other mechanisms to do fraud detection. But, as your comment suggests, they may be more heavyweight and therefore might exclude most smaller sites.

Re:Can Ads Be GDPR Compliant? by jefftk on Sunday January 08, 2023 @05:15PM (#34303814)
I don't see how audits work well in this situation. I wrote more about what ad fraud can look like in this comment [1] and I don't see how an audit would catch "as a publisher, one of our traffic sources is sending us bots instead of real visitors".

[1] https://www.lesswrong.com/posts/dFgfQTo4DRZG5t8Ap/can-ads-be...

Re:Can Ads Be GDPR Compliant? by kzrdude on Sunday January 08, 2023 @09:59AM (#34299612)
Big sites (newspapers) could do it the same way - maybe independent reach surveys could be the data that they use to back up their web ad pricing.
Re:Can Ads Be GDPR Compliant? by ghaff on Sunday January 08, 2023 @10:36AM (#34299940)
I think that's one of the points though. Big sites can back up their digital reach claims such as by using third parties. But if vetting yourself for advertisers was to become a requirement, advertisers just might not bother with small sites. Though admittedly Google makes money off small sites--but I bet most of those small sites don't make enough to make note of.
Re:Can Ads Be GDPR Compliant? by jefftk on Sunday January 08, 2023 @10:45AM (#34300011)
Google's vetting of small sites is pretty minimal. Instead they use fraud detection: vetting the traffic itself.
Re:Can Ads Be GDPR Compliant? by ghaff on Sunday January 08, 2023 @10:59AM (#34300145)
Right. Which is the point both of us are making I think. If you can't do some minimum floor of fraud detection more or less transparently and cheaply, you fall back on more heavyweight mechanisms and probably screen out any site that isn't "big."
Re:Can Ads Be GDPR Compliant? by emodendroket on Sunday January 08, 2023 @09:38AM (#34299432)
The argument is specific to electronic ads.
Re:Can Ads Be GDPR Compliant? by lucideer on Sunday January 08, 2023 @09:46AM (#34299495)
It isn't.

What the ad industry refers to as "fraud detection" is just abuse of a monitoring system they didn't have access to in print (pay per view/click) - print ads were still deemed effective even without assurance of per-individual revenue. There's no reason electronic ads couldn't've been treated the same - the only difference is advertisers have been allowed to develop surveillance to gain granular revenue insights (and anything abusing that system of surveillance is labelled "fraud")

Ad fraud is only legitimately "fraud" if you accept the pervasive surveillance it's "defrauding" is legitimate to begin with.

Re:Can Ads Be GDPR Compliant? by emodendroket on Sunday January 08, 2023 @09:51AM (#34299542)
I don't see how you figure. If I pay to put an ad in the New York Times, the circulation is not a secret. If I pay to put an ad in some Web site (or, worse, thousands of Web sites I don't know about in advance) then I have no insight whatsoever into how many impressions I'm getting if we decide it's illegitimate to try and measure traffic.
Re:Can Ads Be GDPR Compliant? by lucideer on Sunday January 08, 2023 @10:05AM (#34299673)
You can measure traffic anonymously or pseudonymously without violating GDPR. Monitoring of traffic for a website owner is inarguably legitimate interest if even just for DOS protection. The tracking discussed in this article is not about traffic measurement, it's much deeper individual tracking.

Also...

> the circulation is not a secret

Isn't it? Like yes, there's a published figure, but is it verifiable?

If we're discussing potential for "fraud" here, I don't really see how there's any difference between online and print circulation.

Re:Can Ads Be GDPR Compliant? by PaulDavisThe1st on Sunday January 08, 2023 @10:18AM (#34299766)
For print circulation, there are two choices: the publisher can report their actual numbers or they can participate in fraud (by lying about it). The latter has real legal consequences attached to it. They might bet on never being found out; I am guessing that most do not.

For online "circulation", there are three choices: the two given above, plus the possibility that the "actual numbers" (e.g. generated from server logs) do not reflect what they appear to (ie. bot visits). This is "problem" that tracking seeks to fix, by avoiding a "circulation data source" (page visits) that isn't (and cannot be) reliable.

Re:Can Ads Be GDPR Compliant? by emodendroket on Sunday January 08, 2023 @11:00AM (#34300158)
Not only that. I’m potentially publishing across many sites I haven’t verified. A well known newspaper seems unlikely to engage in outright fraud, but someone I don’t even know, why should I trust them?
Re:Can Ads Be GDPR Compliant? by lucideer on Sunday January 08, 2023 @11:54AM (#34300702)
Bot visits need incentives. There's two:

1. the current incentive where individual brands can defraud ad exchanges' pay-per-x systems. Without pay-per-x this incentive disappears.

2. publishers defrauding advertisers. This has similar cost & risk ratios online as either misreporting numbers or bulk-buying papers does in real life. There's also very little tangible difference between the ability of authorities or legal agents to enforce honest reporting of numbers online and in print. The two scenarios are eminently comparable.

Ultimately, removing pay-per-x brings online ads and the ability to defraud advertisers down to a level of equivalence with print.

Re:Can Ads Be GDPR Compliant? by PaulDavisThe1st on Sunday January 08, 2023 @09:11PM (#34305895)
There is no honest reporting of numbers online without some sort of tracking.
Re:Can Ads Be GDPR Compliant? by jefftk on Sunday January 08, 2023 @10:21AM (#34299792)
> Monitoring of traffic for a website owner is inarguably legitimate interest if even just for DOS protection.

Even in cases where the GDPR allows data collection for one purpose, that does not mean you can apply your collected data or analysis for a different purpose.

Re:Can Ads Be GDPR Compliant? by lucideer on Sunday January 08, 2023 @12:27PM (#34301034)
IANAL but I don't think that's what's happening here: the gp was referring to circulation figures. DOS-protective measures need insight on individual bad actors but only derived aggregate figures are needed for circulation. That's not something covered by GDPR in any way - it's extremely explicit in defining what types of data points relating to "natural persons" it covers.
Re:Can Ads Be GDPR Compliant? by jefftk on Sunday January 08, 2023 @05:20PM (#34303868)
I think what you're proposing is:

1. Collect data for DOS-prevention purposes.

2. Analyze it afterwards in aggregate for advertising purposes.

Except you can't do #2 without turning #1 into "collect data for DOS-prevention and advertising purposes", which goes beyond your legitimate interest in collecting the data.

I agree that #2 should be allowed if you'd do #1 anyway, but this isn't how the GDPR works.

Re:Can Ads Be GDPR Compliant? by weird-eye-issue on Sunday January 08, 2023 @09:42AM (#34299466)
Yeah it's easy and is exactly how ads were first implemented. Go do some research on the history of Google Adsense

Well big surprise: They don't perform as well. Don't you think there is a reason the ad industry went in the direction it did?

Re:Can Ads Be GDPR Compliant? by ceejayoz on Sunday January 08, 2023 @09:48AM (#34299506)
Now that they’re not allowed to go that direction, though, the old way looks more appealing.
Re:Can Ads Be GDPR Compliant? by weird-eye-issue on Monday January 09, 2023 @02:04AM (#34307638)
Strange way of saying they have no other option
Re:Can Ads Be GDPR Compliant? by ceejayoz on Monday January 09, 2023 @06:12AM (#34309099)
“No ads” is another option. See the title of the article up top of this discussion.
Re:Can Ads Be GDPR Compliant? by logifail on Sunday January 08, 2023 @09:52AM (#34299553)
Surely no CEO would actually struggle to choose between legal and poorly-performing vs illegal and better-performing?
Re:Can Ads Be GDPR Compliant? by youngtaff on Sunday January 08, 2023 @11:50AM (#34300655)
Who says personalised ads are better performing?

The companies who make the real money out of ads are ad tech vendors, with publishers often picking up the scraps

It’s not suprising that people who’ve worked in personalised ads often promote them as the only way to fund the internet

Re:Can Ads Be GDPR Compliant? by logifail on Sunday January 08, 2023 @02:14PM (#34302074)
> Who says personalised ads are better performing?

I deliberately made my comment more generic, this isn't just about ads.

Any senior manager worth his or her salt knows that staying on the right side of the law is significantly more important than supporting any dubious "product improvement" which is on the wrong side of the law.

Re:Can Ads Be GDPR Compliant? by jefftk on Sunday January 08, 2023 @05:18PM (#34303846)
> Who says personalised ads are better performing?

https://twitter.com/garjoh_canuck/status/1318989360407236609 summarizes the studies on this, and this comment [1] gives additional context.

[1] https://www.lesswrong.com/posts/dFgfQTo4DRZG5t8Ap/can-ads-be...

Re:Can Ads Be GDPR Compliant? by youngtaff on Monday January 09, 2023 @06:15AM (#34309116)
Garrett's thread and the studies in it are often rolled out as evidence that personalised ads perform better and so losing the ability to harvest data that supports personalised ads would be bad for the web

Looking how the data was collected in the studies and where it comes from then Google, FB and other adtech vendors feature strongly (and they can't be considered neutral sources)

In the ad market there are three participants - advertiser, publishers, ad networks.

The last group keep telling us we need them for a health internet, while being completely opaque but making billions creaming off their cut of advertising revenue (there don't seem to be any reliable figures on how much they actually take but an old Guardian study found that sometimes they were getting less than 10% of the revenue the advertiser actually spent - Guardian have brought ad sales in house since)

Alternatives such as category based advertising are often not discussed other than to say 'if personal ads go then the spend is likely to be re-directed towards category based ads'

Even Google while claiming personalised ads are better seems to rely on category based ads for the revenue from search ads (see the CMA report)

IME working alongside various publishers it's often that case that directly sold category based ads are way more profitable for the publishers

Given thread like https://twitter.com/nandoodles/status/1582434737813348352 (and others) I'm deeply skeptical of claims ad tech companies make

Re:Can Ads Be GDPR Compliant? by judge2020 on Sunday January 08, 2023 @09:42AM (#34299471)
A large factor is whether or not there are any contextual ads at all for the content being viewed. Sure, random sites with amazon product lists might benefit from letting Google Ads scrape their page then show ads related to the products, but random forums and game sites might not have any contextual ads that would sell.

For example, dotapicker.com (which allows you to see counter-pick viability in Dota 2) runs ads but they're either ads of web-based video games that shows a lot of skin and have very vague wording to skirt Google Ads guidelines (about a quarter of the time), or random product and services related to my overall browsing history, eg. Amazon/Etsy/Ebay/etc or B2B services like Monday.com.

Contextual ads definitely work where they can, which is why google.com ads are all contextual to your search, but it expands available ad real-estate to run targeted ads in places that otherwise would get no clicks.

Re:Can Ads Be GDPR Compliant? by soneil on Sunday January 08, 2023 @09:47AM (#34299505)
There's a decent amount that can still be done cleanly. You can count how many impressions were served vs how many clicked through. You can use campaign slugs to measure which sites sent more, or how effective different ads were. You can serve different ads to different geographic regions, and as you said - different pages ..

Almost everything we currently decide when you visit a page, the only real concession is that it's scoped to the current page, rather than every page that we know you've visited.

I'm honestly not convinced our current idea of targeted ads actually works. Continually showing me links to a product I bought someone for Christmas a month ago isn't remotely clever, despite being precisely targeted. "People shopping for guitars on Saturdays are more likely to convert to sales, than people shopping while they should be working" does not require storing PII, and is (hypothetically) more useful than "If you bought a guitar last week, surely you're more likely to buy a guitar this week".

Re:Can Ads Be GDPR Compliant? by JTBooth on Sunday January 08, 2023 @10:46AM (#34300027)
My friend has been at Facebook forever - apparently new hires often show up and say "I just bought a vacuum cleaner, why do you think I need a new one?" and the strategy of not showing you that ad gets tried over and over, and never actually improves clicks. Friend also doesn't have an explanation, apparently there are just people out there, who look just like you and me, but buy their vacuum cleaners two at a time a week apart. Mystery.
Re:Can Ads Be GDPR Compliant? by soneil on Sunday January 08, 2023 @11:22AM (#34300380)
If not showing repeat vacuums does not improve clicks, I'd be very curious if it reduces clicks either.

It seems like what you posit is only a mystery if we take it on faith that targeting works. Once that faith is lost, you can also approach it from the angle that if showing them something we think they want is just as effective as something we know they don't want, you're actually proving that "what we think they want" isn't working either.

I mean, given "we know you've bought a vacuum cleaner" and "we think you'd like a kettle" - if ads for either are equally effective, either there's a lot more people collecting vacuums than either of us would have expected - or we're entirely wrong about the kettle. And it seems to me that our blind faith in targeted advertising leads us to wonder why people want so many vacuums.

Re:Can Ads Be GDPR Compliant? by jefftk on Sunday January 08, 2023 @05:09PM (#34303730)
I don't think it's a mystery. Ad targeting usually doesn't know which people have just bought a vacuum, just that someone has been looking at vacuums recently. People who have been looking at vacuums are far more likely than the typical person to buy one, so it's not surprising that it would be worth showing them an ad reminding them that they can buy one from you. Especially with higher margin products like mattresses or cars.

But how do we explain how there are also advertisers like Amazon who do know that you just bought a vacuum from them and still show you more ads for it? Since Amazon is in a position to run principled A/B tests on whether showing these ads leads to sales that otherwise wouldn't have happened, and they are the kind of organization I'd expect to get this right, this part I am willing to accept without external evidence. It's probably that the likelihood of additional purchases of the same item, for yourself or others, is high enough, combined with that the cost of advertising to you is low enough.

Re:Can Ads Be GDPR Compliant? by marcosdumay on Sunday January 08, 2023 @11:02AM (#34300172)
That's what happens when you are so bad at predicting a thing that any noise overwhelms your signal.

People sending stuff they brought back and buying something else exist, and also people buying for their friends. But if you had an actually good prediction of their behavior, you wouldn't need to proxy it by "brought a vacuum recently".

Yet, companies insist that failure is a feature, and that their local maximum is the best possible world. And will keep harming advertisers, viewers and society to keep their position at that peak.

Re:Can Ads Be GDPR Compliant? by whazor on Sunday January 08, 2023 @04:50PM (#34303536)
I agree. There is a lot of folklore amongst advertisers. Also, the companies serving the ads, do not care whether the advertisement achieves it's purpose, they only care about the goal they get paid for. Next, there is the rat race between advertisers, outbidding each other on certain users. The house always wins.

Removing PII will hopefully hurt the greedy ad serving companies most. Though I am scared they will find workarounds.

Re:Can Ads Be GDPR Compliant? by stevesearer on Sunday January 08, 2023 @09:52AM (#34299549)
My website https://officesnapshots.com does this.

Our niche is office design content and we sell advertising primarily to office furniture manufacturers. The ads are hosted by us and are sold directly.

Re:Can Ads Be GDPR Compliant? by jefftk on Sunday January 08, 2023 @10:15AM (#34299739)
This approach definitely works, and I agree you can do it without any tracking. All that's needed is that the furniture manufacturers can tell how much of their purchases are coming via your site.

But this is also not a model that can support a very large fraction of the existing web. Most sites aren't built from the ground up to have this kind of highly commercial tie-in.

Re:Can Ads Be GDPR Compliant? by stevesearer on Sunday January 08, 2023 @10:21AM (#34299801)
Monetizing a general news website would definitely be quite hard with this model.

*edit: that said there is a local news website in my city that has local ads for local services and businesses.

Our specific case is weird in that contract furniture is mostly purchased through dealers so tracking sales isn’t as straightforward.

Re:Can Ads Be GDPR Compliant? by Semaphor on Sunday January 08, 2023 @01:20PM (#34301571)
We partially do something similar. I wrote an adserver that mainly serves contextual ads. We also serve consent-requiring ads if given, but with an adblocker (a bespoke adserver for a smallish site rarely gets blocked) or no consent, we serve HTML ads based on context.
Re:Can Ads Be GDPR Compliant? by morelisp on Sunday January 08, 2023 @09:58AM (#34299600)
> Print ads have existed for longer than the internet, and they're chosen based on the content, not the reader.

What they are chosen based on is much closer to the reader than the content. Publishers have collected reader demographics for decades. Ads have been targeted at audiences as long as there have been ads. What has changed is the expected reach, recency, and individualization of the targeting information. But they have never targeted based on the content, except as a proxy for audience for immature publications/media.

Re:Can Ads Be GDPR Compliant? by fortran77 on Sunday January 08, 2023 @10:10AM (#34299702)
I also wonder if these really targeted ads are cost effective. If ads were run as they used to be positioned in Newspapers and Magazines, a simple area of the screen that was set aside for an advertiser, with no targeting, no tracking, and performance measured simply by "impressions" and "clickthroughs" would they work at all? It would be much better for the users. (I'm always amazed at how unusable the websites of my local TV stations are with the adblocker off. Popups and blinking things everywhere, and the page just keeps changing out from under me.)
Re:Can Ads Be GDPR Compliant? by tzs on Sunday January 08, 2023 @11:45AM (#34300597)
It's not a question of whether or not they can exist. It's a question of whether or not they can be effective enough that the advertisers will pay enough for them to provide enough revenue to keep the site afloat.

Someone reading a print article is probably a much stronger signal that they are interested in things related to the article or the topic of the publication than is someone reading an article on a website.

If some random site runs an article about, say, a meteor shower you probably can't infer that the reader has more than a passing interest in astronomy. Even of a site that is focused on astronomy runs such an article they are still likely to get a lot of casual readers, such as people who heard on the news about an upcoming meteor shower and Googled to find more information.

If on the other hand Sky & Telescope runs an article about a meteor shower in their printed magazine it is probably a safe bet that most people reading that have a fairly serious interest in astronomy.

If I were trying to sell astronomical equipment I'd probably be willing to pay a lot more to run an ad in Sky & Telescope than I'd pay to run the same ad on a "free but with ads" astronomy website and I'd pay even less to run it on some non-astronomy site that happens to be running an astronomy article.

I think this largely invalidates most of the "it worked for print so it will work on the web" arguments I've seen except maybe for websites with well enforced paywalls.

Re:Can Ads Be GDPR Compliant? by bryanlarsen on Sunday January 08, 2023 @12:11PM (#34300874)
You're trading one evil for another. If your primary revenue source is guitar manufacturers, how likely are you to write an honest guitar review?