Slashdot Mirror
Click Here To Infect Your PC!
Email me for FREE viruses writes "Just how many people would click an ad saying "Is your PC virus-free? Get it infected here!"? According to the security researcher who ran that very ad on Google for 6 months, 0.16% (409 of 259,723) would click on it. 98% of those people were running Windows. The Google Adwords campaign cost $23 in total, which works out to $0.06 per infection had the site actually been malicious."
At a click rate of 0,16% - about one in 600 - I have to wonder if not a fairly large portion is simple click errors. You intend to click on some other link nearby on the page but by mistake click that one instead. There's several kind of interaction slips just like that that we do in other circumstances after all.
Trust the Computer. The Computer is your friend.
It's news that at least 0.16% of people are idiots? Actually I'm shocked the number was this low. This is actually good news.
You want to know who isn't running Firefox 2.x? They spell it "definately" and "rediculous".
Not exactly.
$0.06 per infection attempt, which is obviously not the same thing.
May Peace Prevail On Earth
And of that tiny percentage how many were Windows users taking the fairly safe bet that the ad didn't do what it said?
Hell, if I saw that link I'd click on it for sure. Well, I might drop to Cygwin and use lynx "just in case", but there's no way I'd not investigate such a link.
I once explained that browser security is almost entirely determined by the user. This proves it. I wouldn't trust that 0.16% with a pocket calculator, let alone a computer!
You can't write code or design software that will secure "stupid." Firefox and Linux are certainly easier to secure, and they have a better security model, but they aren't idiot proof.
If those folks were using an abacus, they'd probably get their head stuck in it! <G>
--
Toro
Maybe people clicking this link are not so dumb.
I would say that people clicking "Click here to check if your PC is virus-free !" are more stupid.
Personally, I wouldn't have clicked the "get infected", but I understand curious people who would because they are confident in their protection and this is kind of joke. When I see "Get your PC infected !", I think "no way, nobody can want this, must be a joke or something".
Of course, being confident in one's protection and using Windows IS stupid...
i was reading that more as "no, that was not linux users clicking the link for fun". i mean, i would click on such a link ;)
Rich
Pretty much reflects total market share almost 1:1. When 90% of the consumer market uses MS as their OS, is it terribly surprising that 85% of consumer *morons* use it?
--
Toro
Worst-case for a virus-infected windows-machine ? Complete reinstallation. A day lost, hell make it "toss away $1000 machine".
Worst-case for std ? Death.
Not really comparable.
Or how many people thought ' it cant happen to me, as im protected ', but were still curious what the page was about.
---- Booth was a patriot ----
Virus scanners create a false sense of security.
.exes from "FREE!!!!!!!!!" sites, use Internet Explorer, etc.
<user> I have Norton. My computer is now immune to all viruses.
(one week later)
<user> I have a virus, can you fix it?
I've seen people many times think that because they had Norton or McAfee, that they could do whatever they want without having to worry about getting a virus and act reckless. Open every attachment they get in email, downloading and running random
"The Federal Reserve is a fraudulent system."--Lew Rockwell
End The FED. -
I wasn't talking about virus scanners, I was thinking more along the lines that it's very unlikely that the ad did what it said it would do, and much more likely it was study or a joke -- people would guess that before clicking it.
no, worst case is all of your data compromised, potentially financial/personal etc....
it is possible that this would be worse than death for some (unlikely, but possible)
Why should I have to work to protect my browser? Or my computer while just *going* to a web site.
There's such a huge jump in logic there that it just befuddles me that 'configuring properly' is required to use the internet.
No computer/browser is perfect, but it just makes basic sense to use a computer/browser that starts at a very secure state and allows you to open it up if you want/need. Rather than the other way around.
<bad car analogy> It's like having to put rear view mirrors on your car after you buy it. </bad car analogy>
There are two types of people in the world: Those who crave closure
And then, if and only if it looks safe, you can use wget http://somesite.someisp.cc/some/long/filename.ext to download it for investigation.
Je fume. Tu fumes. Nous fûmes!
The tester did not take into account that his/her ad will also appear on 3rd party websites which the owner stands to make money from. There are many groups that take advantage of ads being displayed on their own 'ring of websites' and will generate fraud clicks no matter what the title/description of the ad displayed.
Example:
Joe runs a website. Joe decides he wants some income for his website and signs up for Google Adsense which displays contextual Google ads on his website. Google gives Joe a percentage of the revenue (30-40%?!-google doesn't tell exactly how much.) Joe decides to get some of his friends to click on his ads to boost his monthly revenue. Joe makes more money, and the ad gets more clicks. Advertisers have no idea that Joe is falsely generating clicks and will happily pay Google for the clicks, which in turn Google pays Joe his dividends as well.
Now if the tester turned off the ability to have his ads displayed on 3rd party websites, then the test would carry a bit more ground.
I'm not saying people aren't dumb enough to click on the ad, I'm just bringing up a valid point that exists in web advertising everywhere, especially Google (even they will tell you that their fraud systems will catch the persons 100% of the time - lol)
h
Valkyrie is about to die! Wizard needs food -- badly!
No, its more like buying an aftermarket parachute because the breaks are defective.
Anonymous cowards don't need karma, and first posts don't need high visibility. I see it more as a mod point that got wasted for no good reason than an opportunity to reward someone for posting goatse.