Slashdot Mirror


User: FireballX301

FireballX301's activity in the archive.

Stories
0
Comments
182
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 182

  1. Re:I work in online advertising on Inside the Booming, Unhinged, and Dangerous Malvertising Menace · · Score: 3, Interesting

    No, the ads just move out of ad spaces into 'native' space, embedded with content and interspersed into feeds and streams. That's what all those sponsored articles and stuff are, and it's really terrible. Don't get me wrong, I'm not particularly pro-advertising, but I see polite, safe ads that are placed into their own corner of a page as a good compromise in order to avoid the corruption of actual page content. I've seen (and run) enough high quality content sites that can't pay for their own hosting or bandwidth, and it sucks to see them go away.

  2. I work in online advertising on Inside the Booming, Unhinged, and Dangerous Malvertising Menace · · Score: 5, Informative

    But I agree with the general premise. It's just that the picture generally gets complex - let me explain.

    The way an ad gets served is this. Places that show ads (websites, mobile websites, in-app ad spaces) are inventory. Inventory is of varying quality - an ad on the front page of the NYT is costly, whereas an ad on housewiferecipes.com or something is dirt cheap. Small sites sell their inventory to brokers, who pack it up with other sites to sell on advertising exchanges (the firm I work for runs one of these exchanges).

    On the other side of the issue, advertisement costs money. A firm wanting to run ads will contract with an online media agency, which will create an ad and then find inventory to place the ad in. The firm commits to spending X amount of money for Y amount of impressions (hits), so if the agency can find inventory that performs (hits whatever ad metrics required, such as 'time in ad' or 'number of clicks') while being dirt cheap, it pockets the rest. If multiple agencies bid on the same inventory, the price of that inventory goes up (and the website runner makes more money), so it's a game of scooping up cheap inventory on random sites at the times they're cheap.

    Typically, a given source of inventory (a site) will contract out to a large number of brokers in order to guarantee that at least one of them will, upon request, be able to serve an ad in the space. 90% of ad networks vet their ads to run clean, because running a malware ad is essentially a death sentence if you ever want to run any kind of premium ad (the ones that make you a lot of money) or buy premium ad space (lots of premium advertisers will specify they only want premium space, like the front page of the NYT). Above-the-board ad networks will run clean, vet their stuff, and charge a higher exchange fee, whereas unscrupulous networks (many based in eastern europe) will charge a lower fee and let all sorts of shit go through.

    What does this mean? An attacker with a crafted ad that can beat cheapo mal-detection can buy cheap inventory on a shady network, intentionally outbid other people and pay a minor premium for that cheap inventory, and get their ads wherever they want. The ad network will get shut down if it was really egregious (since running a malware ad can theoretically open you to litigation from other advertisers on your network), but for every network that shuts down there's another that can pop up promising minimal overhead and minimal vetting.

    The only real market solution is to whitelist a certain number of ad networks, and have sites commit to only running ads from those ad networks, but this segments the internet into the haves (premium inventory, high quality sites, premium ad networks, premium ads, all expensive) and the have nots (mom and pop sites with mediocre inventory that nobody visits because of the chance of getting cancer from the shit networks they have to run). Beyond that, this problem is unlikely to go away - it's simply too easy to game the system and put whatever you want into many adspaces.

  3. On iOS platforms. on Swift Vs. Objective-C: Why the Future Favors Swift · · Score: 5, Insightful

    The future favors Swift only because Apple is going to phase out use of ObjC. That's it. Arguing about languages is silliness when Apple will likely force you into using Swift for iOS9 compatibility in the next 12 months.

  4. Re:This is a legal matter. on Ask Slashdot: Dealing With VoIP Fraud/Phishing Scams? · · Score: 1

    Well yes, if they don't respond, actually file the lawsuit. Nothing is more useless than an empty threat.

  5. This is a legal matter. on Ask Slashdot: Dealing With VoIP Fraud/Phishing Scams? · · Score: 4, Interesting

    Refer to L3's legal department, threaten to file suit against them if they won't give up the identity of the sub-carrier's customer. They will cough it up immediately, or you will get a nice payout for civil fraud.

  6. Job security and your title on Laid Off From Job, Man Builds Tweeting Toilet · · Score: 4, Insightful

    I think if the words 'Evangelist', 'Maven', or 'Prophet' are anywhere in your job title, you probably don't actually have a job, you just have people giving you money at regular intervals.

  7. "there's not much to indicate difficulty" on The Ways Programming Is Hard · · Score: 5, Insightful

    Only complete idiots/tools think this way about any profession. Brick laying looks easy, but I wouldn't trust someone who's never picked up a trowel in their life before to put up a brick wall. Anyone 'outside the profession' should only be concerned that the code works, is maintainable, and is to spec, along with passing a security audit.

  8. Re:What's the problem? on Online Retailers Cruising Tor To Hunt For Fraudsters · · Score: 1

    Sure, in which case you would have to be an idiot to use a personal card. Load a throwaway debit card or buy and use BTC. Anonymizing services do not help if you declare your identity at the other end

  9. What's the problem? on Online Retailers Cruising Tor To Hunt For Fraudsters · · Score: 3, Interesting

    If you use your card online, you're telling the retailer who you are and where you generally are, and having them do their homework is nothing but a good thing. Making people go through more verification steps if red flags are thrown is nothing but a good thing. If you use Tor and then buy something with a personal credit card or debit card, you're doing it wrong.

    If you want to stay anonymous, load a pre-paid debit card and jump through the anti fraud hoops. Nobody said staying off the grid was going to be easy.

  10. Re:How are they identified? on SF Airport Officials Make Citizen Arrests of Internet Rideshare Drivers · · Score: 1

    I'm sure they have cameras recording plates of people who enter and exit the airport, and they'll flag people for suspicious activity (going to the airport more than 2 or 3 times a day, for example) and ask them what they're doing. If they admit ridesharing it's off to the pen

  11. Won't work. on English Schools To Introduce Children To 3D Printers, Laser Cutters, Robotics · · Score: 2, Interesting

    I was at a 'technology literate' middle school when Lego Mindstorms came out, and the school bought a few of them for the school computer club so people could 'program' and 'debug' the RCX robots. It was good fun, but all it taught to kids was a very rudimentary concept of program flow.

    If you want to make kids tech literate, you deconstruct something they use in their every day lives, when they're old enough to be capable of it. A good example would be a high school course focusing on high level full-stack design - here's twitter, here's how their servers look like in a very simple way, here's their API, let's do a 2 month project to make a frontend. Or let's make our own mini twitter just for our class, here's a sql server and we can write the backend together over a month or so. That sort of thing would both engage kids and give them useful experience.

  12. Nope on AOC's 21:9 Format, 29" IPS Display Put To the Test At 2560x1080 · · Score: 4, Informative

    Having two discrete monitors that you can easily lock windows to is what I want. I consider the dividing line between the monitors a good organizational assist.

    That being said, I miss 5:4 and 4:3 monitors and want them back, because having to set up widescreens vertically defeats the point. two 4:3 monitors give me the horizontal area I want without consuming my entire desk, but it's difficult to find good ones at a reasonable price.

  13. Don't bother. on Ask Slashdot: Inexpensive SOHO Crime Deterrence and Monitoring? · · Score: 5, Insightful

    Buy business insurance, do what the insurance adjuster wants you to do, and don't do anything more.

    If you don't have or can't afford business insurance, then you should question whether your business is viable or not, especially if a poorly timed robbery can put you under.

  14. Just ship with a low-draw driver on Will EU Regulations Effectively Ban High-End Video Cards? · · Score: 5, Interesting

    Have the driver that ships with the card be designed to stay under the draw cap so the card is still in regulation, and the manufacturer can just offer the normal drivers on the site for people to download.

    Naturally anyone who cares will install the real driver, so the law-breaking is on the part of the consumer, not AMD or Nvidia. Seems like a simple workaround as long as you can say 'it's the consumer breaking the law, not us'

  15. "Reliably better" on Unbreakable Crypto: Store a 30-character Password In Your Subconscious Mind · · Score: 4, Interesting

    How many standard deviations above 'random guessing' are we talking about? Over how many trials? And 2 weeks is fine, but what about 6 months to a year?

    I still prefer 80+ character passphrases lifted from song lyrics whenever possible. If you know the song well enough it's impossible to crack, and the search space is still large among people who know you like that particular song

  16. Load balancing and an experienced sysadmin on Ask Slashdot: Experience Handling DDoS Attacks On a Mid-Tier Site? · · Score: 4, Insightful

    The load balancer to take the brunt of the attack and distribute traffic to multiple mirrors, and the sysadmin to watch the attack and start blacklisting IP ranges. Your service provider should have some kind of service in place unless you got the cheapest of cheap hosting solutions.

    With that being said, hiring a third party ddos mitigator is entirely a cost benefit analysis that should be done on your end. Can whoever's providing your hosting now provision some extra servers and some harried sysadmins to keep you floating? See if you can ask for additional service support from your current provider.

  17. That's kind of a stretch. on Maingear Touts New Rig As "Planet's Greenest Gaming PC" · · Score: 3, Insightful

    Those parts are outdated for anyone who cares to be on the 'bleeding edge' in gaming, and anyone who doesn't can build their own version of that rig at about half the price (ignoring the form factor).

    Given the probable lifetime energy savings of that $800 box over the $400 DIY job, plus the base environmental costs of building all those parts, you're essentially spending money to have someone else make you feel better.

  18. Just an ED troll on $74k Judgment Against Craigslist Prankster · · Score: 1

    As a general rule, taking trolling into real life and then going 'LOL I TROLL U IRL' after you act like a jackass will get you hit by the real life equivalent of a ban.

    There's a strange subculture that validates this kind of douchebaggery in the name of 'epic win', and I'm unsure if any of them are past the mental age of 15.

  19. Clever, actually on Microsoft Unveils Windows 7 File-Sharing Beta · · Score: 4, Interesting

    All the benefits of ftp without the bandwidth cost of a fileserver. My question is whether there's a way to cap the amount of files that can be requested from you, in order to keep your monthly up limit from being clobbered.

  20. Or, instead of feeding the patent troll on Lawmakers Debate Patent Immunity For Banks · · Score: 5, Insightful

    They can cashier the USPTO Commissioner, appoint a new one, and order a comprehensive review.

    A billion dollars. Talk about misuse of taxpayer funds.

  21. Re:hmm on UK ISPs To Start Tracking Your Surfing To Serve You Ads · · Score: 1, Insightful

    Presumably there's an alternative to Google search. Not so for some regional ISPs, where it's either them or dial-up.

  22. Classy, very classy on UK ISPs To Start Tracking Your Surfing To Serve You Ads · · Score: 4, Insightful

    All you have to do is also lower prices, and you'll see how many 'citizens' are willing to sell their privacy.

    And it's interesting how three big ISPs banded together like this. It's almost like they're trying to shut out alternatives...

  23. Another conspiracy theorist blogger on WoW Database Site Sells For $1 Million · · Score: 5, Insightful

    From wowhead's press release, they were explicitly told that neither ZAM or its parent companies controlled IGE or other gold-selling operations, and that no gold-selling ads would appear on wowhead.

    Ultimately, as long as no gold selling ads appear, the wowhead user won't see a difference, and the wowhead staffers pocket a good chunk of change. Whether ZAM in fact does own IGE or support chinafarmers isn't relevant as long as it's properly compartmentalized away from wowhead.

  24. So. on The Drawbacks of Anonymous Surfing · · Score: 4, Insightful

    This 'reporter' didn't know that he had to sacrifice a bit of convenience in order to maintain web anonymity?

    What a useless article. You mask your IP and use proxies if you want to become *untraceable*. And this guy's crying about how he has to remember his passwords for every site. Bloody lout.

  25. Re:GPS reciver? on GPS Map Viewer for PSP Released · · Score: 2

    The map data is downloaded onto the PSP through its USB port, like anything else.