Slashdot Mirror


ISPs Inserting Ads Into Your Pages

TheWoozle writes "Some ISPs are resorting to a new tactic to increase revenue: inserting advertisements into web pages requested by their end users. They use a transparent web proxy (such as this one) to insert javascript and/or HTML with the ads into pages returned to users. Neither the content providers nor the end-users have been notified that this is taking place, and I'm sure that they weren't asked for permission either."

69 of 434 comments (clear)

  1. Suprise! by dotHectate · · Score: 5, Funny

    It's not like we pay them for our internet access or anything.

    Oh wait, we do... crap.

    --
    Patience is a virtue, but haste is my life.
    1. Re:Suprise! by Qzukk · · Score: 5, Funny

      I thought my ISP was doing this but when I called to complain the helpful tech support person told me that the sites I was visiting must have added new ads to them, since they would never do such a thing. Thanks for reassuring me, John!

      So, slashdot, why are you running 50 ads at the top of every page? I thought when I subscribed I wouldn't have to see these anymore, but since you don't have a friendly guy I can call to talk to about it, I'll have to assume you're trying to screw me over here.

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    2. Re:Suprise! by pipatron · · Score: 5, Funny

      Don't worry! Your Free Market(tm) will take care of this! You can always chose not to have internet, or lay your own fiber! Completely realistic options. It's not my fault you can't afford that. You should have started an ISP just like everyone else!

      --
      c++; /* this makes c bigger but returns the old value */
    3. Re:Suprise! by tha_mink · · Score: 5, Insightful

      Reminds me of how back when cable TV started up the idea is that you were paying for more channels and you wouldn't have to deal with ads. Looks like some things never change.

      Actually, I'm more pissed as a content provider then I am as a consumer. How dare they! If I wanted advertising on my content, I'd put it there, and get paid for it. For me, this is totally stealing from content providers and not just annoying to consumers. I mean, isn't that like making money off of other peoples content? Wouldn't that be more like a telephone company forcing you to listen to an add before you place or receive a call? Imagine....

      Phone rings and you pick up....

      (You) - Hello? (Automated Hell) - Hello, this is A-T-And T, we have a call for you, but first, we'd like you to enjoy a message from our sponsors...
      (You) - Click!

      Fuck that! Stealing content...bullshit.
      --
      You'll have that sometimes...
    4. Re:Suprise! by Hognoxious · · Score: 2, Funny
      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    5. Re:Suprise! by OnlineAlias · · Score: 5, Interesting

      I am pissed that they are even addressing my http stream through proxy. Technically, that is eavesdropping my session. Not to mention that just looking for the place to insert the ad will most certainly screw up many web applications. Once an ISP crosses this line there is no limit on what they can do. Things like feeding you a bogus SSL cert while making it appear perfectly legit and decrypting your traffic, redirecting entire web sites, blocking content without your knowledge...it goes on and on. The ISP even having this information in their logs starts a huge slippery slope.

      Everyone, immediately call a lawyer and run away from any ISP that does this. You have been warned.

    6. Re:Suprise! by speaker+of+the+truth · · Score: 4, Funny

      It seems to be more and more common to see games in PC and console games I'd be asking for a refund if this weren't the case!
      --
      Using openSUSE instead of Windows since 9th of October, 2007 and liking it.
    7. Re:Suprise! by BrokenHalo · · Score: 2

      So, slashdot, why are you running 50 ads at the top of every page?

      What ads? I don't see any. That's what Adblock is for.

    8. Re:Suprise! by phoenix321 · · Score: 2, Interesting

      I'm pretty sure, SSL was created *especially* to combat man-in-the-middle attacks. Inserting data in http streams at ISP level is no different than intercepting packets at TCP level and crafting some forgery in them.

      I don't think you can use bogus SSL certs, IF you already use your own.

      So my first and only advice to this "crisis" is

      --> Use SSL-only web hosting for even the most basic set of pages. ---

      With SSL-encrypted traffic no other node or ISP can ever know what's inside your packets and can therefore not eavesdrop on your connection or place ads inside.

      I'm very glad some ISPs are dumb enough to start this crap, because now everyone will learn the semi-hard way how the internet is working, what makes it vulnerable and why encryption can be beneficial for everyone. When ISPs are dumb enough to drive the masses to SSL-encrypted everything, the/a/our snoopy government is severely hampered.

      All we need is one for-free certification authority and everyone can use a public SSL cert to lock out any and all intruders with less than 10-percent-NSA computing power devoted to them.

      Maybe we even get the second part of SSL, the client certificates off the ground.

    9. Re:Suprise! by kalidasa · · Score: 3, Interesting

      Funny, I was under the impression that there was a lawsuit about some Microsoft technology that added links to other content providers' pages that argued that the practice was a violation of copyright (because by altering your content, they are in effect creating their own derivative work without your permissions). Couldn't you just slap them with a DMCA takedown notice?

    10. Re:Suprise! by N7DR · · Score: 4, Interesting
      I tell you, I am highly ticked off that, at least where I live, there's no way to get a broadband ISP who promises to deliver one thing: a pipe. That's all I want: a pipe. I can't be alone. Just give me a pipe and leave me to use it the way I want to. Don't filter my e-mail. Don't redirect my DNS queries. Don't disallow traffic to/from ports. Don't block pings. Just give me a pipe. What's so hard about that? Good grief, if you want to, you can even charge me extra.

      I am almost always against laws (which are often worse than the ill they are trying to right), but it seems to me that there ought to be some sort of regulation that requires ISPs (since they are mostly effectively monopolies) to offer a transparent pipe for those who want to avoid all their obnoxious practices.

    11. Re:Suprise! by Timothy+Brownawell · · Score: 5, Insightful

      Clearly you're not familiar with CALEA. They not only log your traffic, they store all the packets so the courts can request them later.

      Um, how? Even a 10Mbit pipe is 108GB / day. So how much bandwidth does a typical ISP use, and where do they get enough storage to remember it all?

    12. Re:Suprise! by tylernt · · Score: 2, Informative

      If all you want is a pipe, I suspect that your last refuge will be setting up up a tunnel to a datacenter. Assuming hosting and colocation companies don't start this crap too, you can SSH into your shared server or colo host and your traffic will originate from there, effectively making your hosting provider your new ISP.

      Additional cost, additional latency... but at least you'll have a real internet connection again.

      --
      DRM 'manages access' in the same way that a prison 'manages freedom'
    13. Re:Suprise! by Tim+C · · Score: 4, Informative

      Like creating a derivative work? This is taking someone else's work in transit from server to client, inserting other content into it, then sending this modified version on to the client instead.

      This isn't like creating a derivative work, it is creating a derivative work. They're even profiting from it, as they're selling the ad space thus created.

    14. Re:Suprise! by swillden · · Score: 2, Insightful

      To have a man-in-the-middle, all you need is a certificate signed by an authority that your computer trusts. The ISP can surely get that.

      Not quite. The cert also needs to contain the name of the host that you're connected to, otherwise your browser is going to complain. Is your ISP going to be able to get a cert issued to them with the hostname "www.bankofamerica.com"? Unlikely.

      However, what the ISP could do is just strip the SSL protection. The SSL channel would be in effect between the remote server and the ISP's proxy server, but the data would be unencrypted between the proxy server and your computer.

      I can't see anyone actually doing that, though, so I suspect that HTTPS traffic is and will be safe from this ad-insertion crap.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    15. Re:Suprise! by gnuman99 · · Score: 4, Insightful

      No. This is NOT GeoCities. GeoCities added adverts to the websites you hosted with them. You knew EXACTLY what they do in return for "free" webspace. This is like getting a colo box so you can reach your customers better (ie. not relying on the shared webhost), make sure you have clean pages to attract customers then some fucker comes along and sticks adds on *your* page without *your* permission.

      What GeoCities does is OK. The content provider has to agree.

      What some ISPs do in return for free internet is OK too (add popups or whatever) - at least that what used to happen. In this case customers KNOW that the popups are from the ISP. But popups *must* be separate from the webpage, not in it.

      But if you come along and *insert* ads on my pages and thus benefit from my work, I have no choice but to sue. That is copyright violation. Period. They are costing the content provider money.

    16. Re:Suprise! by Reaperducer · · Score: 4, Insightful

      Yes they have. It's called "product placement", and it's getting more invasive.
      More invasive? Time to go back to the history books, Sonny.

      Things used to be much worse. Advertisers would have their logos splashed all over TV shows and movies. On TV news they would be on the anchor desks, in the backgrounds, even on the clothes the anchors would wear.

      There's a great exhibit in the Old Louisiana State Capitol that is an old TV news set from the 50's. The news was called something like "The Esso Seven O'Clock News" and there's a big Esso logo on the front of the desk, and I think one on the microphone as well as other places.

      Quite an eye-opener. At least modern product placement is subtle. I think we're just getting more sensitive to it.
      --
      -- I'm old enough to have lived through six different meanings of the word "hacker."
    17. Re:Suprise! by usurper_ii · · Score: 3, Funny

      And let's just say that the ISP could save every packet from every user on the ISP...let's just think of the size of that porn collection. Think about...huge quantities of porn; a vast sea of it. The amount of porn that most slashdotters can only dream about.

    18. Re:Suprise! by Alef · · Score: 2, Interesting

      But if you come along and *insert* ads on my pages and thus benefit from my work, I have no choice but to sue. That is copyright violation. Period. They are costing the content provider money.

      There was actually a case in Sweden last year where the directors Claes Eirksson and Vilgot Sjöman successfully sued Sweden's largest commercial TV station TV4 after it had shown two of their films with interruptions for commercials. In the ruling the court concluded that the interruptions were an infringement of the moral right of the creators, since the station didn't have an express permission to insert them. I imagine a similar argument could be made for web sites.

    19. Re:Suprise! by innocent_white_lamb · · Score: 2, Interesting

      I own a movie theatre. My exhibition contracts with the studios and distributors specifically prohibit the interruption of a film for any reason other than technical problems or an emergency.
       
      (What's an emergency? Well, I've had the police show up to arrest someone in my theatre, I've had a fire right in front of my door, and that kind of thing. Other than that sort of stuff, and power failures and break-downs, the show must go on.)

      --
      If you're a zombie and you know it, bite your friend!
    20. Re:Suprise! by mysidia · · Score: 2, Interesting

      The ISP can't really be making a derivative work in the case, because they're not creating a work at all, said ISPs would just be inserting advertising over your connection, while instructions are being transmitted, that effect browser software. Prior to its display in end-user browser window, there is no fixed form or medium, no work, just electronic pulses of 1 and 0.

      Chances are the advertising inserted would be random/varying every page load, so the only "copy" of said "derivative work" made in a fixed form is the one in an end user's browser window and possibly a file cached by the web browser. And effectively, end user is the party that has created the work by choosing the environment in which to browse to that web site. Since the only "copy" of the web site is of a temporary nature and is for personal use, it is not likely that infringement has occured.

      You as user of the service are creating the work. Every time you connect to a website, you are receiving a series of messages from your ISP that are used by your web browser to construct a derivative work.

      In case the ISP adds advertising to the user's connection stream; this is not stealing from the content provider, any more than the manufacturer brand logo on the front of your TV while watching a movie is stealing, OR a web browser that includes a Google advertisement fixed in the top right corner of the screen is stealing, for its search feature (Even as you are browsing msn.com), it is merely a cost of service for the end user, and a consequence of allowing users access without any control over their access technology, or knowledge about other material that might happen to be displayed on their screen simultaneously with your content.

      Since the content provider is relying on end-users ISP for delivery of the work, the content maker has two choices: either (1) accept the terms of the network and deliver content through, OR (2) don't hand the content off to said network for delivery.

      Certainly if the content isn't served up in the first place, it can't be sent along with advertising. If the content IS sent along, then permission to display it is implied, unless other terms have been negotiated.

      Most content providers on the internet implicitly and blindly pick (1) by allowing users to freely access their content, without restricting the technology users utilize to access content, or restricting browser features such as denying access to bookmarks OR the back button, both of which have a possibility to create 'derivative works' of a sort -- most webmasters allow nearly any ISP and a variety of web browsers to be used to access their material, despite all the variations which they have no control over.

      And even if those web browsers happen to be setup to display advertising (possibly for a competing site) within a toolbar just above the web page, in another frame, window icon, etc.

      It's their choice, but as a result, they also lose the ability to prevent others from profiting (albeit indirectly) from their content.

      Very little content on the Internet is limited based on user's ISP or environment. There simply is no guarantee for webmasters, that additional features will not be aggregated with the content.

      Note however, a content provider can certainly control the terms of access: this would be done by only allowing access to the work from ISPs with an agreement to not add additional advertising.

      Exactly what you will see depends somewhat on your screen resolution, available fonts, your number of available colors, window manager, operating system themes/skins, your web browser, and the methods the web browser makers chose to use in rendering pages. Whether new advertising is added or not, you almost always get a derivative work when you browse a website.

      Presumptively if the ISP does insert advertising, you as end user have consented to it by accepting a Terms of Service that includes notice that the connectivity service may

  2. What about code validation? by throup · · Score: 5, Interesting

    I know this won't be everyone's primary concern, but what happens to all of those pages carefully crafted to adhere to a specific standard eg HTML 4.01, XHTML 1.1 or whatever else you may choose? Surely, unless these uninvited contributions also adhere to that specific standard, we have no hope of producing standards-compliant documents.

    1. Re:What about code validation? by dascandy · · Score: 3, Interesting

      Turn that around and you could sue them for "destruction of property" for wrecking your pages, "violation of contract" for not giving you webhosting or something similar.

    2. Re:What about code validation? by Jamu · · Score: 4, Interesting
      I had that with my old ISP (Virgin.net). I wrote a simple webpage in HTML 4.01, checked it was valid with W3C's Markup Validation Service, and then uploaded it. When I checked it there was script just after the html element but before the head. Not what I wanted to see on a page that not only asserted I knew something about writing HTML, but also had the W3C validation link at the bottom.

      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
      <html><s cript src="http://www.virgin.net/js/random_ad.js" language="javascript"></script>
      <!-- Document is valid. However, Virgin.net inserts a <script> element here -->
      <head>
      <...
      --
      Who ordered that?
    3. Re:What about code validation? by Ant+P. · · Score: 3, Informative

      I found something funny with using XHTML 1.1. Certain free hosting sites are totally oblivious to its existence, so if you rename all your pages to *.xhtml their injected ads magically disappear.

    4. Re:What about code validation? by suv4x4 · · Score: 2, Funny

      I know this won't be everyone's primary concern, but what happens to all of those pages carefully crafted to adhere to a specific standard eg HTML 4.01, XHTML 1.1 or whatever else you may choose? Surely, unless these uninvited contributions also adhere to that specific standard, we have no hope of producing standards-compliant documents.

      If I pour a lethal dose of highly radioactive material over you, you'll sue me since the green skin glow doesn't match your clothes, wouldn't you.

    5. Re:What about code validation? by Bogtha · · Score: 2, Informative

      When I checked it there was script just after the html element but before the head.

      The problem was not the placement of the <script> element. While the <head> element is mandatory in HTML 4.01, its opening and closing tags are optional. All you had to do was delete your opening <head> tag. Everything after the opening <html> tag but before your closing </head> tag would be assumed to be in the <head> element.

      The real problem was that they didn't specify the mandatory type attribute for the <script> element, which results in an invalid document, and that they used the deprecated language attribute, which cannot appear in a valid Strict document.

      --
      Bogtha Bogtha Bogtha
    6. Re:What about code validation? by Bogtha · · Score: 4, Insightful

      Unfortunately, Internet Explorer is also oblivious to XHTML 1.1's existence, which means you'll be turning away the majority of your visitors (assuming typical demographics).

      --
      Bogtha Bogtha Bogtha
  3. On the one hand... by niceone · · Score: 3, Insightful

    On the one hand I'd be really annoyed* if my ISP did this to me, on the other hand maybe there are some people who wold prefer ads and a cheaper monthly fee?

    And on the third hand... isn't this going to break a whole bunch of websites? I'm having a hard time imagining how they could do it without major side effects.

    (* I'd be wanting to stuff a few ads up their HTTP stream, I can tell you)

    1. Re:On the one hand... by Dutch_Cap · · Score: 4, Funny

      And on the third hand... isn't this going to break a whole bunch of websites? I'm having a hard time imagining how they could do it without major side effects.

      Don't worry, I'm sure it's been thoroughly tested with Internet Explorer.

    2. Re:On the one hand... by bruns · · Score: 5, Insightful

      From my experience (I've worked at and built enough ISPs) that even if they find a way to potentially reduce the customers cost per month (ie: through ads), they won't pass the savings to the customer - ever.

      Why? Profit. It's a great motive.

      --
      Brielle
  4. I've seen this at least a year ago by wtanaka · · Score: 3, Interesting

    http://wtanaka.com/node/62

    It was especially annoying when the ad insertion code didn't quite work right and caused web pages to break.

  5. I've known about this for a while... by Saint+Aardvark · · Score: 5, Informative

    When I worked at the helpdesk of a small ISP, we were approached by this company to see if we were interested in letting them test their ad-inserting proxy server on our customers. I protested that it was scummy and might lead to legal trouble (I was guessing) over changing pages in-flight, but my bosses didn't listen. That was back in 2002 or 2003, and I left shortly after to take another job. No idea what's going on there now.

    I'm moving to a new ISP since my current one has started blocking port 25 in and out. I run my own mail server, so I appreciate that Uniserve's TOS explicitly allow servers (clause #19). However, they also explicitly say that they insert ads:

    65. UNISERVE shall have the right, without notice, to insert advertising data into the Internet browser used by a UNSERVE customer, and transferred to a UNISERVE customer over UNISERVE's network, so long as this does not involve UNISERVE establishing the identity of the customer to whom such data is sent.

    Needless to say I'm not happy about that, but in Vancouver my choices are limited: Telus (who'll censor web pages if they belong to a union striking against them), Shaw, or a handful of small ADSL ISPs that all seem to be much the same. Uniserve seems the best of a bad bunch.

    1. Re:I've known about this for a while... by Mr.+Slippery · · Score: 5, Insightful

      However, they also explicitly say that they insert ads:

      As a content provider, I didn't give them any licence to create derivative works. Creating versions of my pages with ads, is clearly creation of a derivative work.

      But of course, it's much more important for copyright law to prevent me from copying a CD for a friend, then to prevent some large ISP from violating my moral rights by whoring out my content.

      --
      Tom Swiss | the infamous tms | my blog
      You cannot wash away blood with blood
    2. Re:I've known about this for a while... by Thing+1 · · Score: 2, Insightful

      Can they insert ads into an https stream? Let's everyone just start using that protocol.

      --
      I feel fantastic, and I'm still alive.
    3. Re:I've known about this for a while... by KiahZero · · Score: 3, Informative

      U.S. Copyright law is about a utilitarian bargain between content creators and content consumers - in exchange for creating the content, the creators are given a limited monopoly on certain actions. Moral rights don't really have a foundation in American law.

      --
      I'm a lawyer, but not yours. I wouldn't represent someone who thinks taking legal advice from Slashdot is a good idea.
  6. Belkin sucks! by Werrismys · · Score: 5, Interesting
    One belkin ADSL modem actually did this. Every couple of days or couple of thousand port 80 request it displayed their ad instead.

    They later issued a new firmware that disabled this. But not before I had issued them a "fuck off" feedback. I have never bought another belkin product since and I strongly urge no-one else to do so either. Fuck them.

    --
    'Once scientists, even the dim-witted social scientists, get muzzled, the Western Civilization is finished.' - oldhack
  7. Links to Belkins suckiness (Re:Belkin sucks! ) by Werrismys · · Score: 4, Informative
    Belkin hardware sucks: http://www.google.fi/search?hl=fi&q=belkin+router+ adware

    Yes I know their hardware sucks for other reasons also.

    --
    'Once scientists, even the dim-witted social scientists, get muzzled, the Western Civilization is finished.' - oldhack
    1. Re:Links to Belkins suckiness (Re:Belkin sucks! ) by FrostedWheat · · Score: 2, Interesting

      I second that. We had a KVM of Belkin in the office ... it acheaved a level of suckiness I've rarly seen in the computer world. Most days it would just stop working, or the keyboard would stop working and a few times got into an endless loop switching between computers. How hard can it be to make a KVM? In the end it was easier setting up two keyboards, mice and screens :-/

      When I bought one for home I went out of my way to get a non-Belkin model, ended up with some no-name brand and it works flawlessly. Cheaper too.

  8. Opt Out Link by cybermage · · Score: 5, Informative

    The company that runs the box the ISP installed provides an opt-out option. Go to this page and click opt-out.

    I think their behavior with this product is reprehensible. Pass the link on to anyone you know who is affected and encourage them to call their ISP and complain every day until it's removed. If all their call center does is get complaints, they'll reconsider whether it's making them any money.

  9. Data corruption by gilesjuk · · Score: 3, Interesting

    This is one angle to pursue, you have requested a page and the page you receive has been altered by the proxy, therefore "corrupted" the data.

    If this continues then someone can write a plugin for Firefox to stop the adverts.

  10. Time to rebuild the freenets. by Anonymous Coward · · Score: 3, Interesting

    Back at the start of the net, many people started to build their own little networks (e.g. the "freenets", which existed long before freenet) and make connections with their neighbours. This activity was wiped out when ISPs started providing service at less than cost in order to build their business, making freenets not worth the investment. Now we are back at the stage where ISPs are trying to make money and messing up the service. It's time to restart building those networks and move off the commercial ISPs. Does anybody know any good places to start this? I'm ready to interconnect with my neighbours. How do we arrange sensible cheap long distance interconnectivity?

    What about freenetworks.org? Are Wifi Coops any good? Any others?

  11. Copyright Bonanza by Doc+Ruby · · Score: 5, Insightful

    The content in my pages is copyright implicitly, even if I don't register or even declare it in the pages. The right my ISP has to copy it is only for the purpose of publishing it in the transaction I have explicitly permitted: publishing it on URL requests.

    If my ISP copies it for any other purpose, like inserting ads, or copies it into (or as) some other context, like an ad page, it's violating my copyright.

    Every copyright violation - every page - makes them liable for a fine. That can really stack up, and costs a lot more than each page view generates in ad revenue.

    Unless I've signed away my copyright in some contract with the ISP. Which I personally haven't. Nor should you.

    If you have retained your copyright, and your ISP violates it, you should look forward to them handing over their business ownership to pay the damages. Email your lawyer from your other account and get the ball rolling. Why should corporate copyright holders have all the fun?

    --

    --
    make install -not war

    1. Re:Copyright Bonanza by kailoran · · Score: 2, Interesting

      The right my ISP has to copy it is only for the purpose of publishing it in the transaction I have explicitly permitted: publishing it on URL requests.

      A proxy makes a copy for reasons other than publishing the content in the current transaction, so (nitpicking) it would mean it is ilegall.

      Anyway. I'm not sure if copyright should be the law preventing this, I'd much rather have it illegal under some sort of privacy or wiretapping law. I mean, UPS doesn't stick adverts inside mail, and what the ISP is doing is pretty much equivalnt to slapping an advert on the second page of a book they deliver.

    2. Re:Copyright Bonanza by Courageous · · Score: 2, Insightful

      A proxy makes a copy for reasons other than publishing the content in the current transaction, so (nitpicking) it would mean it is illegal.

      Nitpicking, anything between the end user and you is a system of relays. The law already has provisions for this, going back things like radio, where the transmissions have to be rebroadcast over many hops.

      The "unlicensed derivative work" angle is interesting; I could see how that argument, if made, could get traction in a court.

      C//

  12. Copyright infringement by Anon+E.+Muss · · Score: 3, Interesting

    The customers of these asshole ISP's may not be able to stop them, but web site owners might. HTML code is frequently copyrighted. Injecting Javascript into a web page creates an unauthorized derivative work. Some webmaster needs to start sending DMCA takedown notices to ISP's using these ad injection proxies.

    --
    The key sequence to access my Slashdot bookmark in Firefox is Alt-B-S. I don't believe this is a coincidence.
  13. Phone service providers are doing this too by suv4x4 · · Score: 5, Funny

    So if you mom is suddenly very excited on the phone about the latest washing powder or insists that you shave only with 5-blade Gillette for best results, you should know better.

  14. There should be legal questions by erroneus · · Score: 3, Insightful

    These ISPs are modifying the content of another source. They alter the format or content or appearance of the requested data or information. Potentially, they endanger the quality of the service being provided on the other end. This is an offense against net neutrality.

    Content providers who earn income from their own web activity should be among the first to file suit against these ISPs. I imagine network TV companies would be VERY offended if advertisments were inserted over, in or around their own presented material and web based business should be expected to have the same offense taken.

  15. Re:ISP comparisons need to note this by Anon+E.+Muss · · Score: 3, Informative

    Hit them where it hurts: right where people are deciding which ISP to go with.

    That only works if there is actual competition. In most large cities, customers have only two choices. They can go with cable modem service from Some Big Cable Company or DSL service from Some Big Telecom Company. Both usually suck. People living in smaller communities often have no choice at all.

    --
    The key sequence to access my Slashdot bookmark in Firefox is Alt-B-S. I don't believe this is a coincidence.
  16. Smells to me... by Kjella · · Score: 3, Interesting

    ...like a copyright infringment. The ISP takes the work, creates a derivate, then distributes that derivate to you. Clearly the page is distributed as a whole even though it's made up of parts, you'd certainly relate porn ads to a company if they appeared on that company's webpage which means it's absolutely not its own work. It's like a book club embedding ad pages in the books before shipping them to members.

    Distribution is an exclusive right of the copyright holder.
    That they change the content means all paragraph 512 limitations are out the window.
    The fair use test (commercial, creative work, almost whole work (all the non-ad content), kills ad revenue) is a 0-4 slam dunk against.

    So tell me exactly, what's protecting the ISP from an "allofmp3" style lawsuit for a few trillion, since every web page is a $150,000 lawsuit in itself? Whoever in the legal department who approved this should be terrified.

    --
    Live today, because you never know what tomorrow brings
  17. Go Somewhere Else? by Joel+Rowbottom · · Score: 2, Interesting

    Ok, mod me down for this if you will, but why not just vote with your feet and go to a different ISP?

    In these days of webmail and portable email addresses/domain names, why don't more people do this? It's still a buyer's market, and there's still lots of mom-and-pop ISPs who'll be glad of your business.

    All the talk of 'taking legal action' smacks to me as being what's typically wrong with the entire attitude of everyone today. Compensation culture and all that - where there's blame there's a claim.

    --
    Smegma.
    1. Re:Go Somewhere Else? by name*censored* · · Score: 2, Interesting
      >>Ok, mod me down for this if you will, but why not just vote with your feet and go to a different ISP?

      Not always feasible - for one thing, many many areas have a limited number of ISPs available in their area - some rural regions may only have access to one broadband provider. Also, big companies only understand one type of complaint, and that's litigious type of complaint. If everyone moves to the only other ISP in town, this *other* ISP will destroy the first, and then immediately start putting ads right in content, now that the first ISP can't stop it. Thirdly, nearly every ISP (can anyone name an exception?) locks you into an xyz-month contract, which costs you an arm and a leg to get out of. If you're locked into this contract (which likely allows for this kind of thing, it'd be too massive an oversight of theirs to make), then there's very little you can do that won't result in them getting large gobs of cash, EXCEPT sueing the pants off them (or at least making them pay through the nose to defend from a class action suit). I'm against the ridiculously amount of litigation in modern society too, but sometimes it's best to fight fire with fire.
      --
      Commodore64_love: I don't comprehend people who're so frightened of death that they'll bankrupt themselves to stay alive
  18. Don't just stand for it! by GFree · · Score: 2, Funny

    Exercise your GOD-GIVEN RIGHT to stop using the offending ISP take your business elsewhere and.

    Failing that, exercise your GOD-GIVEN RIGHT to walk into the ISP's main offices with an automatic shotgun.

    I figure that either way, you're not gonna be using that ISP any longer.

  19. Fair play. by OgGreeb · · Score: 2, Funny

    We should start sending multi-page advertisements with our ISP payments embedded in the middle, to monetize the untapped revenue stream available when the ISPs want to get paid.

    --
    -- Gary Goldberg KA3ZYW 301/249-6501 AIM:OgGreeb Digital Marketing Inc., Bowie, MD //www.digimark.net/
  20. How to take advantage of this by IdahoEv · · Score: 5, Interesting

    It would seem pretty straightforward to document uses of your website to sell ads, so that you could sue ISPs for copyright violation. This seems pretty straightforward to me.

    1) Generate a unique id for every webpage transmitted. php's uniq() function would be fine. Embed it in the page.
    2) Generate a checksum before transmitting the page. Save the id and the checksum, perhaps in a mysql database, when transmitting the page.
    3) Embed a javascript that can compute the checksum of the document at the user's end. Have it transmit the checksum back to the server.
    4) If the checksum doesn't match, have the javascript transmit the content of the page and it's headers, and perhaps even a traceroute, back to the server.
    5) Server stores all of the above in a "pages corrupted in transmission" log.

    Log analysis should then give you a list of ISPs who have consistently corrupted your pages, details on what they inserted, and documented # of violations with date and time. You can take this documentation to the court and say "Look! Earthlink/Megapath/AT&T/Whoever has illegally copied my website to market their own advertisements 12,432 times in the last year!". Demand remuneration.

    6) Profit!
    7) Reduce ISP's willingness to fsck with other people's content and thereby make the world a better place.

    8) (Optionally) Have your own javascript strip their ad and/or put a banner at the top that notes "Your ISP has attempted to illegally insert their own advertising into our website, thereby making money off you and me without either of our permission. We strongly suggest you switch internet service providers." -- try to get user pressure on the ISP.

    I'm about to head out on a 10-day vacation. When I get back, if one of y'all hasn't written this yet I'll start on it myself.

    --
    I stole this sig from someone cleverer than me.
    1. Re:How to take advantage of this by Nimey · · Score: 3, Informative

      How about people like me who have the Adblock extension?

      Of course, I also have Noscript, so I'd not even register in your scheme.

      --
      Hail Eris, full of mischief...

      E pluribus sanguinem
  21. Re:ISP comparisons need to note this by Alain+Williams · · Score: 3, Insightful
    Ah, one way in which competition is better in the UK. You can be broadband off a cable company (if you subscribe) or over the British Telecom 'phone lines - in which case you have dozens of ISPs to choose from.

    I may not often agree with Gordon Brown: but him objecting to Sarkozy's attempt to remove 'competition' as a basic tenet of the EU was 100% correct. Protectionism, in the long term, hurts all consumers.

  22. Ads == harassment by Tom · · Score: 2, Interesting

    Some time soon, we will cross the line where my opinion becomes a majority opinion: That any and all unasked for advertisement is harassment and should carry criminal penalties accordingly. Double the punishment if it masquerades as something else (i.e. fake grassroots campaigns, product placement, etc.)

    Alternatively, lift all restrictions on advertisement. Then we'd at least have nude girls and hardcore porn on every wall and window, instead of beer and washing powder.

    --
    Assorted stuff I do sometimes: Lemuria.org
  23. Absolutely insightfull.. by mario_grgic · · Score: 2, Insightful

    and I am not joking. Since it is often said that we should not worry about net neutrality issues at all and that "free market" and competition will take care of any issues.

    --
    As the island of our knowledge grows, so does the shore of our ignorance.
    1. Re:Absolutely insightfull.. by jopsen · · Score: 2, Insightful

      The free market is a good thing... BUT it needs be controlled in order to stay free! The market forces will NOT take care of these issues... Most normal people/non-geeks would not be able to understand how replacing ads would be possible... THEY wont care... There are millions of other issues that the customers are worried about... This won't even make it to the mainstream news, Why? because it would take 30 minutes to explain the problems to average Joe... Besides there's not really much he can do anyway! The problem is that only experts/geeks and other people who have a great technical insight will ever care about these issues... And if we let the free market control everything, then customers will be confused because there suddenly is 10.000 different issues he must address when he chooses ISP... The average customer will not care about these issues, and in the end it'll all be about who's best at marketing... And since we all know Micosoft is the best at marketing, the conclusion must be: If we let the free market forces control everything, the world will only consist of Microsoft and companies with similar business practice... So we must control the free market in ability to keep it free.

    2. Re:Absolutely insightfull.. by sumdumass · · Score: 2, Interesting

      I know the point you guys are trying to make but your doing it poorly. The Internet and Internet access isn't a free market. Making it so only places anyone attempting to compete at a disadvantage.

      Internet service and network service providers for the Internet have for the long time been a protected monopoly. Sure there was dial up service that anyone could start, but that was the only last mile option they had for the longest of time.

      Now, to understand the net neutrality correctly, what the service providers are attempting to do is sell you service at one price while promising a certain speed and then fail to deliver that service or that service at the speed you paid for unless the other company pays some free for this privilege. In any free market, that is fraud in it's basic carnation and should be illegal. With not preserving net neutrality, we are attempting to make that fraud legal. This isn't a way a free market would operate.

      So to make it a free market, you would have to declare the interconnect hubs that service the major and minor networks a public utility and only allow the cost of maintaining them to be charged for content passing over them. You would do this in the same way they do with telephone/power lines and DSL. You would then have to stop the ISPs from deliberately deceiving the consumer by claiming certain speeds and then degrading it based on other fees from the website you are visiting. Now, you would have a level playing field and the consumer would pick plans based on the reliability and delivery of the service the ISP delivers. And when they don't get what they want, another company can open up and give it to them without being railroaded intro bankruptcy. But we won't have that because it isn't what the ISPs and network owners want. They want to deceive the consumer and not deliver the promised speeds based on funds paid or not paid by the sites you are visiting. And they can only do this because they have built an infrastructure up in a government granted monopoly for several decades.

      So, while on the surface, you and the GP have a point, your neglecting to point out that it isn't fair at the moment so it cannot be worked out along the lines of a fair market. Maybe something can be done, I doubt it. And because of this, Net neutrality cannot be treated as a fair market scenario. Now, if you will excuse me, the Lawrence Welk show just came on and I have to find the remote.

  24. Use a proxy... by skeftomai · · Score: 2, Informative

    Why not just run your internet through your own proxy and remove the ads? Sure, it may be a bit slower, but surely it could be done with something like Privoxy on top of Squid.

  25. Re:Actually, It Will by enrevanche · · Score: 2, Insightful

    Actually the free market is alive and well, the supply of lawyers has never been better.

  26. DNS hijacking does allow defeat of SSL by jmorris42 · · Score: 3, Insightful

    > To have a man-in-the-middle, all you need is a certificate signed by an authority that your computer trusts. The ISP can surely get that.

    Give this man a cookie, or at least a mod point.

    Once they manage to get your browser loaded up with a CA they control it is game over. Imagine, you type www.chase.com into your browser. Remember, THEY also operate your DNS. They resolve www.chase.com to an address they control and generate a certificate linking www.chase.com to that IP. Meanwhile their proxy server connects to the real https://www.chase.com/ and retrieves the homepage. Then their faked out server reencrypts the content and their inserted ad and sends it on to your browser which displays it with the lock intact.

    This is what the various secure DNS proposals are intended to address. DNS hijacking allows almost any abuse in the higher layers.

    --
    Democrat delenda est
  27. Bluecoat does it for businesses that was to block by mailman-zero · · Score: 2, Informative
    Here is an explaination of how Bluecoat allows businesses to create a deliberate man in the middle so it can block content on SSL encrypted sites. It's a frightening Internet we do business in.

    http://directorblue.blogspot.com/2006/07/think-you r-ssl-traffic-is-secure-if.html

    From the site:

    If you use SSL at work in ways designed to elude acceptable-use filters (e.g., WebSense) or to secure applications like telephony and file-sharing, you may want to re-think that proposition.

    A series of products, among them Blue Coat's SSL Proxy, provide SSL-cracking capabilities to organizations interested in shutting down SSL violations of policy.

    In effect, Blue Coat's SSL Proxy breaks any SSL traffic its been configured to intercept.

    When a connection request is made by the browser, it passes through the Blue Coat proxy on its way to the real SSL server. The response from the destination SSL server includes a certificate. This certificate is designed to (a) irrefutably identify the server; and (b) secure the communications between client and server. To do so, the cert wraps the server's public-key, which is tied to the domain name (or, less likely, IP address) of the server.

    The real server's cert, though, is intercepted by the proxy on its way back to the browser.

    Before the proxy passes the certificate through, it unwraps the public key and then re-wraps it in an "emulated certificate" (I'll go ahead and call it a spoofed cert, which I think is more accurate). This spoofed cert is then returned to the client browser. The client thinks everything is on the up-and-up and -- after it verifies the spoofed cert -- it establishes the encrypted tunnel.

    The tunnel, though, is now terminated at the proxy server. The proxy itself has established a second tunnel to the real destination SSL server.

    The proxy can now inspect the cleartext traffic, block the traffic, or pass it on to other devices for their use (more about this later), and otherwise fiddle with it prior to sending it down the second encrypted tunnel to the real SSL server.
    --
    Let's play video games with mailmanZERO
  28. We log everything by Anonymous Coward · · Score: 2, Interesting

    We log everything - we're a global streaming media website not an ISP, and what we log is media player events for statistical analysis purposes - and it chews up 70 to 120 gigabytes per day at our current rate. This costs us about $1200 a month in my disk and server budgets. Which is a relatively small number in my total monthly IT budget. We've been running for just under 11 months now and haven't had to dump anything, but I can see us starting to purge the oldest log records within the next 6 to 12 months.

  29. Like CleanFlicks by mrcaseyj · · Score: 2, Interesting
    This ISP add insertion also reminds me of a case between the Utah based CleanFlicks company and Hollywood movie studios. The Mormons in Utah and many other people wanted cleaner movies, so CleanFlicks started taking DVDs from customers and giving the customers back an edited version of the DVD with the sex and violence and other objectionable stuff taken out. The studios won a lawsuit, I think, partly on the grounds that CleanFlicks was violating their copyrights by selling derivative works that didn't maintain the artistic integrity of the originals.


    One of the problems CleanFlicks had was that they were actually making unauthorized edited copies of the DVDs, even though they required a genuine copy of the DVD to be turned over to them for destruction. Another company, ClearPlay, was also sued after they took a different strategy to avoid the copying problem. ClearPlay made DVD players that just played regular DVDs, but the DVD player cut out portions of the movie as it played, based on a file downloaded from ClearPlay onto a USB flash drive which was then plugged into the DVD player. However according to Wikipedia, the ClearPlay suit didn't make it to a verdict before Congress passed a law explicitly making it legal. I doubt the law applied to inserting adds in web pages though.


    The similarity of these situations is that theoretically the ISP customer is asking (by agreeing to the ISP terms of service) for the adds to be inserted in the web pages, just as ClearPlay customers are asking for the bad parts to be removed.


    This is also similar to software that removes the adds from web pages. A web page without the adds is like a derivative work, created by the viewer, with the assistance of the add block software.

  30. As a website owner.... by Matt+Apple · · Score: 2, Insightful

    ...This is infuriating and a little frightening. Not only are they junking up my webpage and possibly offending my readership(with the content of the ads) but they are leaving my readers with the impression that I'm behind it all! If I was the owner of a Christian chat site and they inserted a "Wanna hook up?" style dating ad I would be mortified.

    But what really worries me is what else are they doing with this technology? Could they programmatically swap out my Adsense Publisher ID with theirs? Could they change the links on my homepage to point to their spam sites? Could they put words in my mouth e.g. my readers suddenly find me favorably reviewing "Male Enhancement" products on my homepage?

  31. Re:The free market is not magic by jmorris42 · · Score: 2, Insightful

    > There is a reason the rich get richer, and the poor get poorer, and it has nothing to do with government control.

    Too bad that is mostly a myth in the US. Our rich don't tend to be inherited wealth, somebody earns it (usually by merit) and their desendents piss it away in a generation or two. And the poor don't get poorer, our standard of living is increasing in all social classes. Is it even fair to use the word 'poor' to describe teh less well off in the US when the #1 health problem for the 'poor' is obesiety? Go to the third world and get back to me once you see what poverty looks like.

    You are making a common mistake, assuming people are 'poor' because they don't have much money. More often than not they don't have any money because they are poor. 'Poor' is a state of mind. Poor people don't value education, fail to plan for their future, manage money poorly, have expensive and destructive vices (drugs, booze, tobacco, gambling) that leave them unable to save/invest and other traits that lead to them occupying the lower positions on the social ladder. If you took a hundred people from all social strata and tossed them on an island with exactly equal resources, within a year the existing pecking order would re-emerge virtually unchanged. A couple of frat boy trust funders would be unable to reattain their old position and a couple of the less well off might react well to the stress and rise. But overall the majority would stay unchanged.

    Yes it is offtopic but this sort of economic illiteracy is rampant on slashdot so every once in awhile I try to correct one of you government educated types.

    > The market fails to allocate resources efficiently in the case of natural monopoly, imbalance of information, and externalities.

    There are only a few 'natural monopolies' most ultimatly being trackable to government action. But yes, even the great free market economists agree that it is proper role of a legitimate government to protect against monopoly. Imbalance of information tends to sorrect itself, especially with this new fangled Internet thingie. And yes, externalities can be a proper role for the government of a Free People to regulate, within reason.

    > There is a reason all countries gave up laissez faire: it didn't work, and led to horrible, horrible abuses.

    Yes, 'all right thinking people' around the turn of the century fell into the delusion that socialism was the future. We still haven't counted all of the bodies resulting from that madness. Name one socialist country that, at a minimum, didn't turn into an economic basket case? Most ended up with mass graves and eventually a tyrant being deposed from his iron throne. Do I really need to enumerate the list? Even Europe is finally waking up and smelling the marketplace. A Free market is like a Representitive form of government, pretty much the worst system you can think of....with the exception of every other system tried.

    That is until you actually understand them, then they are both beautiful. And inseperable. Eliminate one and the other will surely wither and die. Let one become well established and the other will follow. The Soviets learned this, China will soon enough. Free Markets are the only way for a Free People to deal with one another.

    A hundred years ago, when we had a more Newtonian mechanical view of the universe it was at least a defensible position to argue for a planned economy, safe in the delusion that a system as complex as a modern economy could be comprehended by any group of 'experts' well enough to make all of the decisions in an enlightened and efficient way. Hyack pretty much demolished all that back in the 1950's. And since his work we have learned a lot more about emergent systems, chaos theory, general economic theory, such that an educated, enlightened person can no more believe in socialsm than they can believe in the tooth fairy. That and the millions of bodies that resulted from every attempt at a planned economy should be enough to convince even the less mentally adept. Pretty simple actually, Socialism == mass graves, poverty and guards shooting people trying to flee tyranny. Liberty and Free Markets == prosperity, happiness and people trying to get INTO your country.

    --
    Democrat delenda est