Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Wednesday December 27 2017, @09:43PM   Printer-friendly
from the snake-and-the-mongoose dept.

The PDF contains the full paper (14 pages), but also includes the following abstract:

Abstract—Millions of people use adblockers to remove intrusive and malicious ads as well as protect themselves against tracking and pervasive surveillance. Online publishers consider adblockers a major threat to the ad-powered "free" Web. They have started to retaliate against adblockers by employing anti- adblockers which can detect and stop adblock users. To counter this retaliation, adblockers in turn try to detect and filter anti-adblocking scripts. This back and forth has prompted an escalating arms race between adblockers and anti-adblockers.

We want to develop a comprehensive understanding of anti- adblockers, with the ultimate aim of enabling adblockers to bypass state-of-the-art anti-adblockers. In this paper, we present a differential execution analysis to automatically detect and analyze anti-adblockers. At a high level, we collect execution traces by visiting a website with and without adblockers. Through differ- ential execution analysis, we are able to pinpoint the conditions that lead to the differences caused by anti-adblocking code. Using our system, we detect anti-adblockers on 30.5% of the Alexa top- 10K websites which is 5-52 times more than reported in prior literature. Unlike prior work which is limited to detecting visible reactions (e.g., warning messages) by anti-adblockers, our system can discover attempts to detect adblockers even when there is no visible reaction. From manually checking one third of the detected websites, we find that the websites that have no visible reactions constitute over 90% of the cases, completely dominating the ones that have visible warning messages. Finally, based on our findings, we further develop JavaScript rewriting and API hooking based solutions (the latter implemented as a Chrome extension) to help adblockers bypass state-of-the-art anti-adblockers.

The conclusion is as follows:

We presented a differential execution analysis approach to discover anti-adblockers. Our insight is that websites equipped with anti-adblockers will exhibit different execution traces when they are visited by a browser with and without an adblocker. Based on this, our system enables us to unveil many more (up to 52×) anti-adblocking websites and scripts than reported in prior literature. Moreover, since our approach en- ables us to pinpoint the exact branch statements and conditions involved in adblocker detection, we can steer execution away from the anti-adblocking code through JavaScript rewriting or hide the presence of adblockers through API hooking. Our system can bypass a vast majority of anti-adblockers without causing any site functionality breakage (except one with Javascript rewriting).

We anticipate escalation of the technological battle between adblockers and anti-adblockers — at least in the short term. From the perspective of security and privacy conscious users, it is crucial that adblockers are able to keep up with anti- adblockers. Moreover, the increasing popularity of adblocking has already led to various reform efforts within the online advertising industry to improve ads (e.g., Coalition for Better Ads [5], Acceptable Ads Committee [2]) and even alternate monetization models (e.g., Google Contributor [6], Brave Payments [4]). However, to keep up the pressure on publishers and advertisers in the long term, we believe it is crucial that adblockers keep pace with anti-adblockers in the rapidly escalating technological arms race. Our work represents an important step in this direction.

I found it an interesting read, although I accept that the whole 14 pages might be a little too heavy for some.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 1) by r_a_trip on Thursday December 28 2017, @10:17AM (2 children)

    by r_a_trip (5276) on Thursday December 28 2017, @10:17AM (#615054)

    You don't understand copyright. The only thing copyright does is prohibit duplication and further distribution of those copies for a specified time on a work. Altering a work for personal use after the sale has no bearing on copyright. As long as that work is not multiplied and sold on, copyright has no teeth. So rip away.

  • (Score: 2) by tangomargarine on Thursday December 28 2017, @04:17PM

    by tangomargarine (667) on Thursday December 28 2017, @04:17PM (#615146)

    In the same way that after the web server sends me the data, I am free to do with it what I want. They're just complaining that I have a program to do it automatically for me before I see the original version.

    --
    "Is that really true?" "I just spent the last hour telling you to think for yourself! Didn't you hear anything I said?"
  • (Score: 2) by arcz on Friday December 29 2017, @04:53AM

    by arcz (4501) on Friday December 29 2017, @04:53AM (#615441) Journal

    You say he doesn't understand copyright, but go read 17 U.S. Code § 106 (2) and tell me if you understand copyright as well as you think you do...