upvote
reply
Wow I am surprised to see this.

I created a tool that automatically follows ads to try to find scams.

But that was usually reserved to typosquat domain ads or ads on porn websites. I didn't know scammers used normal page ads too.

I know tech support scams used to use google search ads, but I don't think they do that as much anymore, so maybe they have moved onto things like adsense.

These scammers usually do IP address checks to check for residential IP before showing the scam, and some also do some basic fingerprinting checks, so that is how they get past detection. That said, it shouldn't be too difficult for google to do some better checks if they actually cared.

reply
Yep. I Agree. I believe it's a question of economics, not technical challenges.

Google is absolutely smart enough to make these attacks un-economical. IMO they are unwilling to incur the loss in revenue this would involve (false positives, banned resellers etc).

reply
Another major issue is google safe browsing whitelists many of these subdomains that the attackers like to host their scam pages on.

As a result, even though "Enhanced" safe browsing can use Gemini Nano to do client side detection of scams and then flag it in google safe browsing for everyone, the entire domain and all subdomains are whitelisted, so that detection never seems to actually fire. https://blog.google/security/using-ai-to-stop-tech-support-s...

I'm not sure which domains this applies to, but it seems to apply to most of the domains that these scammers actually like to use.

reply
> These scammers usually do IP address checks to check for residential IP before showing the scam, and some also do some basic fingerprinting checks, so that is how they get past detection.

Same issue with spam sms in my country: I think they geo-locate it so submitting the link to safe browsing project takes way too long

reply
>They have been putting thousands of scam adverts on our website…

Is it your website or theirs? YOU are the one putting such ads there as YOU have chosen a sketchy ad company (google).

reply
The problem is the scummy adsense ads don't hurt Google's reputation. Outside the techie crowd people don't know the ads are from Google.
reply
That seems fixable. When people include this JS garbage, have a header/title/etc stating that this is Google's professional opinion. Bake it into a library offering enough other features that a large number of people are inclined to use it.
reply
The only people that would care are already using adblockers and not seeing these ads anyway.
reply
hmm could you explain more?
reply
- The big problem is that malicious ads are being displayed without appropriate attribution

- Add that attribution -- blame Google (or, supposing the ads are good, credit Google; a good header goes a long way toward swaying people's opinions)

- But it doesn't matter if a single website appropriately attributes Google's highest/lowest-quality ads. The last step (speculative and hand-wavy) is to incorporate that behaviour in some sort of software more people want to use. If you're fighting alone then you'll lose. If you can convince more people that appropriately crediting Google's advertising successes and blaming their malicious failures is advantageous, you'll (by definition) have more traction in the anti-megacorp-endorsed scams and other life-altering consequences.

reply
hmm thought this was about adwords JS 'intelligently' reading page contents, and when it finds such attribution with some special tags, filters out certain ads...

well thought I was getting some actual useful tip

reply
Couldn't this be a browser extension?
reply
Probably, but then only the people with that extension would see the note.

If people are going to learn to install an extension, it should be UBlock Origin. That will solve more problems than attributing scam ads.

reply
The second you load JS onto your page, you lose that ability, you know that, right? the scammy ads aren't limited to that tiny little box you designate for ads. Advertisers work around that limitation pretty easily, and you should also probably read AdSense terms of service before doing too much to blame google. Some of the language will surprise you.
reply
Such as? Provide the relevant context that you're referring to as suprising.
reply
When you put it like that, it seems like it's too dangerous to offer that kind of access! Maybe Google shouldn't sell it.
reply
It doesn't practically matter whether the ads are from google. They're shown on a third party site, not using google won't get rid of them, only not using that site will (or installing an adblocker...). Users very reasonably blame the site, who have direct agency to remove the ads.
reply
IIRC this dilemma was one of the things that was driving the Google antitrust case that unfortunately will not result in divorcing search from ads.
reply
Agree it's reasonable. I removed the ads :P
reply
Calls from law enforcement is laud and clear: BigTech is not doing enough to fight fraud, war and other crimes, they make money from criminals.

Nobody’s yet cared enough to sue them, or their managers at ICC yet. However, eventually an ambitious lawyer will try to make the case, especially if fraud and human trafficking continues to grow like it is.

reply
> at ICC yet.

Want to take bets on whether the US gov wades in if that happens?

The US gov is directly antagonistic to the ICC and will undermine them whenever possible. This would present them another chance.

reply
It does in the sense that they're losing business, as people describe in this thread. But I get your point, Google seems to be enjoying the profits more than the harm to their reputation. If it gets bad enough, maybe they'll rethink.
reply
They're losing business that they don't want. Silicon Valley culture has embraced saying no, firing clients and customers, choosing the right audience, etc. This even fits into finding product-market fit. You don't try to please everyone, and find a well-defined segment. So to Google it might not seem like it's getting bad at all. To them, maybe the trash took itself out, they got rid of that annoying customer who complains about their marketplace, whereas they appreciate the quiet reporting of an ad that's against the ToS...
reply
deleted
reply
deleted
reply
I suppose the obvious question is: Are you actively profiting from Adsense?

If yes, then ... you are profiting from ... that shite. You must be OK with that and it does sound like you are actively complicit with it, despite your protestations.

If you really think that Adsense is awful and might damage your brand then dump it and don't whine on HN!

OK, that's probably a bit unfair because you are dealing with a monopoly with no recourse to arbitration. That's your real problem.

reply
Read their last sentence again.
reply
“AdSense has got to go” should include OP’s use if they truly believe that. That’s what the person you’re responding to is saying.
reply
"Had to go". Past tense. It's not ambiguous. The only correct interpretation of that sentence is they did get rid of it.
reply
deleted
reply
Classic example of victim blaming. Not the company generating the ad, not the company approving it, but the person who is trying to block it, and then ACTUALLY did stop using Adsense.
reply