It's a quiet night tonight...

I don't know whether to be grateful, or bored.  My cell phone hasn't been bouncing around on my desk tonight (I use silent on vibrate when working).  Email is fairly quiet insofar as there are no glaring, the-world-is-going-to-end-if-you-don't-respond-to-my-email-right-now, emergencies that need my attention.  I have a few bits and pieces to deal with from a couple of advertising networks and whatnot, but all in all, things are quite peaceful.  Here's hoping it is not the calm before the storm.

There have been some very interesting conversations going on, in the background, regarding the malicious banner advertisements that have been the focus of attention on this blog in recent times.

For example, as far as I am concerned, it is a *glaring* deficiency on the part of Macromedia/Adobe that there is no way for the end user to stop a malicious Flash advertisment from hijacking them.  Unlike Web browsers, which have various security "zones" and other menu options where you can turn off active content, Flash does not provide that ability. 

Realistically, what can the end user do to avoid malicious banner advertisments?  Uninstall Flash?  Yeah, but that kills everything Flash related.  Block all advertisements using a HOSTS file or similar?  This is not fool-proof (yes, that's right, the HOSTS file is sometimes ignored as I have learned from a fascinating discussion on a private security based mailing list), and then there is the ethical dilema of web sites losing income from banner advertisements - you see, every tradesman is entitled to his wage, even if his "trade" is writing content for whatever web site, but that wage should not be earned in such a way that places a client (even a freeware client who doesn't actually pay anything) at risk.  Remember, there is no such thing as a free lunch, and, in the end, the web sites that are hit by the malicious banner advertisements as as much of a victim as we are. 

Do we set IE's security settings for the Internet Zone so high that it "breaks the web"?  The end result of *that* protocol is that your users, if they can, will add all of the sites that they know and love to IE's Trusted Sites Zone, and you and I know what will happen if a web site in the Trusted Sites Zone is hit by a malicious banner advertisement.  If the user is running the Trusted Sites Zone in its default settings, then the PC will be 0wned.

Some people are saying that the current outbreak of malicious banner advertisements will kill online advertising - and they may be right at least insofar as Flash based advertisements are concerned, if we can't get this under control.

I honestly believe that avoiding all advertising is the wrong way to go.  Some say that if something is free then it not only has no monetary value, it has no other value.  But, for those of you that think that, did you read Vlad's blog post about the issue of free content? It puts across, quite succinctly, why we need to provide some sort of financial support to those who provide free support and content.   I ask you, do you want my blog to remain as it is, or do you want it to end up like this one, teetering under the weight of crappy advertising?   Please, let me never get to the stage where I am willing to host advertisements that say "Do not click here unless you are 18".

 You see, I flat out refuse to ask for monetary support from the Web sites or companies that I help.  I don't care if they are AOL, or MSN, or Yahoo, or Google, or Sensis, or ESPN, or Akamai.  All I care about is protecting users who view their advertisements, and getting the malicious advertisements out of circulation.

BTW, you may have seen Wayne's post about me ... guess how much was donated to my Paypal account after that missive was published... nothing, nada ... a big, fat, zero.  Wayne's verbatim response, when I told him about the zero donations, was "Yup - I figured - sorry that your efforts amount to nothing.  I can understand if you want to give up - I would too."

"your efforts amount to nothing" .. they are harsh words.  But I won't give up.  Maybe "they" are right.  Maybe I am a fool to keep doing this, for free, getting up at 4.00am, going to bed at midnight or later, and not charging a cent for my efforts.  I look at my credit card debt and get so tired - but then I take a phone call from an advertising network or computer naivette asking or help  and I just keep going - sometimes they are old and naive - sometimes they are young and naive - but I just can't leave them to cope as best they can.  Even when the big advertising networks phone.. I don't see the megarich conglomerate... I see the naive Mom and Dad and all I want to do is protect them.

So, I am going to go to bed and get my 4 hours of sleep.  I am going to shove my credit card debt in a conveniently deep desk drawer, and if the phone rings tomorrow because somebody wants help with a high traffic web site that has been hit by malicious advertisements, then I will find the bad guys and I will get them shut down.  And when the bad adverts are shut down I will smile, shoo my visitor out of my home, or my web site, and go on to the next task.

Let the you-are-not-wothy-to-be-an-MVP-or-even-breathe-on-the-ground-on-which-I-tread flames commence....

 

Published Tue, Dec 4 2007 21:18 by sandi
Filed under:

Comments

# re: It's a quiet night tonight...

Tuesday, December 04, 2007 9:51 AM by A Reader

Keep up the good fight!  Anyone working on these issues deserves recognition and support.

For right now, my temporary solution is Firefox and Flashblock.  Inconvenient, but better than cleaning up WinFixer.

# re: It's a quiet night tonight...

Tuesday, December 04, 2007 10:01 AM by Mobilemover

Wow!  I'm impressed!  A sincere blogger person with enough knowledge and experience that behooves one to keep reading;

and reply with something useful.  

    I'm a computer tech, been one for about 12yrs now, just mainly working on hardware/software thingy's.  I even owned and operated a service center once and I can relate somewhat to your delimma over the ever grown spam/banner ads/popups/and url

redirects......it's insane!

     I've been a little slow to upgrade to everything that MS offers; I still use Win98SE, or WinXP Pro with all the flash and dash bloatware turned off.  I still have IE 6.0, and won't change to IE 7 unless they come up with a better way to make it more user friendly without compromising the built in security.

I do keep a great firewall,anti-virus,anti-spam, all purpose utility that has never failed me in 5yrs of usage; I hate Norton, McAfee and all the other so called fix all/cure all programs that seem to promise much but deliver little.

    However, you touched on one thing that just drives me crazy because I dont understand how it all works; and that is the spam attacks that come against my software firewall, or web browser in the form of those annoying flash pop ups.

      I wish that I could capture some hidden information on the original sending ip address of those directly responsible so that I could send them a nasty blaster worm virus or something similar that would totally shut down their evil empire of Spam....etc etc.

I'm not mean enough really to do that...but still, the thought has

occurred to me to wreck vengeance.

      Oh well,  I guess I'll just go back to playing Asteroids and keep reaching for that High score............heh heh heh.

                  Have fun!

                                MM

# re: It's a quiet night tonight...

Tuesday, December 04, 2007 12:21 PM by Mike Nolet

Sandi,

First off let me commend you for your efforts here.  As is clear form my lack of posting on the issue on my own blog, I quickly grew tired of shouting out to a world that didn't seem to care or respond.  Thank you for taking the torch and running with it -- both identifying the ads & working with folks.

Second -- I'm not quite sure why you don't accept compensation for helping networks.  As long as you do this in an open, honest way that doesn't compromise your work there is no reason you shouldn't get paid for some of the work you do.

Last -- I agree that removing advertising will only have negative effects.  Money drives people, and if people can't make money from blogging or producing great sites then many would stop.  Some, like yourself, may continue to blog for other reasons.  Whether it's networking, reputation building, or perhaps charity.  Take your own blog for example -- you could put advertising and potentially make a couple hundred dollars a month, really nothing special.  On the other hand, you can also leverage your blog as a reputation builder to gain consulting contracts with advertising networks to help them remove malicious ads.  The latter at $200/hr and a couple hours a week would net you much more than advertising.

Thanks, and keep on trucking =).

-Mike

# re: It's a quiet night tonight...

Tuesday, December 04, 2007 6:14 PM by sandi

@Mike

Re your second point, I must admit, they've never offered payment, but that's fair enough.  More often than not they haven't asked for my help - 99 times out of a hundred it will be a victim web site that has contacted me, or a visitor to said site, and sometimes a reporter for an online news site, and all I have done is gather evidence of the problem and pass it to the appropriate parties. It would go down like a lead balloon if, when I approached the advertising network, I wrote "hey, you have a malicious banner advertisement on your network - here's the proof and here's an invoice for my time".  It just ain't me ;o)

I hope you get back in the saddle and start blogging about errorsafe etc soon.  You know a heck of a lot more than me about the inner working of the online advertising world, (and you sure as heck are better at decompling and examining the creatives themselves).  Now that discussion is ramping up about how to address the problem as an industry, your input would be far more valuable than mine.

Sandi &c.

# re: It's a quiet night tonight...

Tuesday, December 04, 2007 7:37 PM by Bob

I wish I knew what to say. I would hope that the issue you have taken on is coming more to the forefront and you will get the appreciation you deserve.

The best I can do is thank you, bless you, and happy holidays.