News for hackers. Stuff that matters.
Re:Restaurant Delivery Payment-Skimming Campaign by ModernTimes on Friday November 06, 2026 @03:12PM (#50397758)
None of this would work if Google Adsense didn't allow scam ads on their system. But they do, millions every day (I deal with this every day on my websites, Google don't care).
Re:Restaurant Delivery Payment-Skimming Campaign by ModernTimes on Friday November 06, 2026 @03:21PM (#50397903)
It fact it's my personal opinion that the entire Google Adsense management team should be investigated under the RICO Act. They are making vastly more from illegal income than the mafia did in the 1970s.
Re:Restaurant Delivery Payment-Skimming Campaign by bvcp on Friday November 06, 2026 @04:25PM (#50398742)
i gave up reporting scams to meta and google, you get the distinct impression they are in on it when you get a response saying “we looked into it and it was fine”
Re:Restaurant Delivery Payment-Skimming Campaign by toomuchtodo on Friday November 06, 2026 @05:43PM (#50399490)
Report them to the FTC and your attorney general.
Re:Restaurant Delivery Payment-Skimming Campaign by hoppyhoppy2 on Friday November 06, 2026 @10:17PM (#50401299)
Your state's attorney general's office, yes, definitely - many have a consumer protection division or whatever.

I'd have trouble believing that U.S. Attorney General Todd Blanche would care very much, but I guess it wouldn't hurt to try.

Re:Restaurant Delivery Payment-Skimming Campaign by bnmathm on Friday November 06, 2026 @05:57PM (#50399625)
Cloudflare is no better, maybe worse. They forward your complaint & PI on to the offending site's registered owner and to whichever (gray or black hat) host it's served from. In my experience, there is nothing you can do to convince Cloudflare to do anything other than be a middleman for the complaint, yet they offer a layer of protection for the nefarious activities.

Even when I've been able to track down hosts, registrars, etc for scraped duplicates of sites, and report to all and Google, Microsoft Safety Scanner, etc -- nobody acts (or certainly not in any reasonable enough time to be useful).

In one case the scammer was using our own logo served directly from a source we could replace with Cloudflare rewrites. So the hijacked logo became "THIS IS A SCAM SITE" while we replaced the one on production.

Re:Restaurant Delivery Payment-Skimming Campaign by brian_cunnie on Friday November 06, 2026 @08:11PM (#50400644)
> nobody acts

I act. I receive about 5 takedown notices every day--the curse of running an open source DNS service (nip.io/sslip.io).

I've received over 1,000 takedown requests, but none came from Cloudflare or Google. Most of them come from Netcraft, Phishlabs, and doppel.com.

Re:Restaurant Delivery Payment-Skimming Campaign by arcfour on Friday November 06, 2026 @08:45PM (#50400824)
> Cloudflare is no better, maybe worse. They forward your complaint & PI on to the offending site's registered owner and to whichever (gray or black hat) host it's served from.

This is literally false. They are one of the few hosts I have dealt with that actually does NOT do this. Their abuse reporting form even has check boxes that are optional to forward it to the underlying host and the owner. If you leave them unchecked they don't forward anything.

I don't know where you got your information from but it's quite literally the opposite of reality.

Now, whether or not they actually act on it depends on whether they are proxying the site or merely providing authoritative DNS. If they are just providing DNS they will continue to provide it and deny your report and I think that's stupid and frustrating. If they are proxying it they will put up a block page in front of it which is meh.

Re:Restaurant Delivery Payment-Skimming Campaign by mitxela on Friday November 06, 2026 @10:48PM (#50401441)
A large company's report system is designed to distract you from complaint paths that work and are expensive for the company to deal with (lawsuits) and make you complain to /dev/null instead.