Wait what, so there is no content disarm between companies making ads, and the publishers? They can literally push whatever they want? Wild.
replyEdit:
the TFA answers: "Advertisers or DSPs may run HTML and JavaScript code when an ad is shown to the user." Its wild! I thought the ads are sanitized, go through a CDR of sorts, and whatever javascript is permitted is authored by ad networks, not the buyers. Sheesh. Thats just RCE.
I was looking for this comment. I'm wondering the same. Are ads just iframes that could have js? Therefore this is basically a zero click js (is this the first?) that just happens to be distributed via ads?
reply> Wait what, so there is no content disarm between companies making ads, and the publishers? They can literally push whatever they want? Wild.
replyRTB (real-time bidding) does not incentivise publishers to care about what ads are actually being shown to individual users, so long as CPM is maximised.
Did you AI generate this? The wording looks suspicious and sure enough, it's flagged by pangram as AI.
replyI found it to be an excellent, easy-to-read summary.
replyWhich is what AI is RLHF'd to do, but using AI, much less undisclosed AI is against HN guidelines.
reply> Don't post generated text or AI-edited text. HN is for conversation between humans.
Agreed it's against the guidelines as written but the interpersonal exchange is no different than someone quoting a blog post (and then not linking to it, to be fair). Something like this doesn't feel strictly bad, assuming disclosure and a link to the chat, sources included.
reply