Re: [Full-disclosure] hacking FB Ads

[You Got Pwned <yougotpwned6@xxxxxxxxxxxxxx>]

This is interesting!
Can you please post some logs (User Agent/ IPs)?

Cheers

2012/8/2 Ivan .Heca <ivanhec@xxxxxxxxx>

> interesting bit of research
>
> “A couple months ago, when we were preparing to launch the new Limited
> Run, we started to experiment with Facebook ads. Unfortunately, while
> testing their ad system, we noticed some very strange things. Facebook was
> charging us for clicks, yet we could only verify about 20% of them actually
> showing up on our site. At first, we thought it was our analytics service.
> We tried signing up for a handful of other big name companies, and still,
> we couldn’t verify more than 15-20% of clicks. So we did what any good
> developers would do. We built our own analytic software. Here’s what we
> found: on about 80% of the clicks Facebook was charging us for, JavaScript
> wasn’t on. And if the person clicking the ad doesn’t have JavaScript, it’s
> very difficult for an analytics service to verify the click.
>
> What’s important here is that in all of our years of experience, only
> about 1-2% of people coming to us have JavaScript disabled, not 80% like
> these clicks coming from Facebook. So we did what any good developers would
> do. We built a page logger. Any time a page was loaded, we’d keep track of
> it. You know what we found? The 80% of clicks we were paying for were from
> bots. That’s correct. Bots were loading pages and driving up our
> advertising costs.”
>
>
> http://techcrunch.com/2012/07/30/startup-claims-80-of-its-facebook-ad-clicks-are-coming-from-bots/
>
>
> http://blog.alexanderhiggins.com/2012/07/31/latest-facebook-scandal-widespread-advertising-fraud-156521/
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/