• 1 Post
  • 176 Comments
Joined 6 months ago
cake
Cake day: January 10th, 2024

help-circle






  • The ad doesn’t actually deliver the malware, just directs people to a malicious download that mimics the Arc Browser. Users then have to follow onscreen instructions to install the malicious application in a non-standard way that allows it to bypass built-in protections in macOS to make it harder to install unsigned apps.

    I’m curious how successful this campaign would be. It requires a lot of bad behavior by the victim to succeed. First, they’d have to decide to download a new web browser just from one banner ad, without doing any research on the browser; just click the link in the ad to go directly to the malicious download and install it directly from there. Second, they’d have to convince the user to right-click and select “Open” instead of simply double-clicking the installer or dragging it to the Applications folder like every other Mac application; otherwise the OS blocks it. I’m sure there are users dumb enough to do either step, but the subset of users dumb enough to do both steps and be on macOS and see this ad, I’m thinking they might only nab a few hundred victims tops, if that. I suspect this might be a proof of concept more than anything; probably most of the downloads were security researchers or potential customers testing it out. It sounds like the security researchers were following the malware seller, then found the ad, not the other way around. And of course, the ad has been taken down by Google now.

    Like most other large advertising networks, Google Ads regularly serves malicious content that isn’t taken down until third parties have notified the company. Google Ads takes no responsibility for any damage that may result from these oversights. The company said in an email it removes malicious ads once it learns of them and suspends the advertiser and has done so in this case.

    Earlier in the article they said Google had “vetted” the company that bought the ad. It seems their process sucks and this policy is a cop-out, and all of that just to net Google, what, a couple bucks on this short-lived fraudulent campaign?







  • I think a perfect example of this is email. We used to pay for email; it came with our Internet service. Then they started offering free email services that would show banner ads in a webpage. Kind of annoying but good for people who didn’t have regular access to email in the dialup days, or eventually we realized it was convenient so we didn’t have to change our email everywhere each time we changed our ISP. Then Google started actually scanning our emails to give more relevant ads. They were less obtrusive, but we were giving up more, but we also got a lot more email storage in return and it seemed okay. Now most people use a free email for their primary. Our ISP (probably) still offers an email address with a small storage option, but who still uses that? People gradually gave it up without realizing what they gave up. Now it seems like you have to pay even more on top of your Internet access to actually get email privacy.


  • From the article:

    The disease is distinct from irritable bowel syndrome (or IBS) although some of the symptoms overlap.

    I also have IBS, although as a diagnosis it feels more like a catch-all for when there’s clearly a problem but they’ve ruled out more serious diseases like ulcerative colitis. I have other friends with the same diagnosis as me but very clearly different triggers, symptoms, and things that help, so it seems like we really have some different diseases. That said, I’ve seen some significant improvement in the past few years thanks to a combination of medicines. Not a cure, but less bad days and flare-ups often don’t last as long. I actually saw an as the other day for a completely different medication than any I currently take, so if you haven’t talked to your gastroenterologist about treatment options since before the pandemic it might be worth checking in.