Linked by Thom Holwerda on Sat 28th Jul 2007 11:07 UTC
Permalink for comment 259160
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
News
Linked by Thom Holwerda on 05/21/13 22:06 UTC
Linked by Thom Holwerda on 05/21/13 21:45 UTC
Linked by Thom Holwerda on 05/21/13 15:53 UTC
Linked by Thom Holwerda on 05/20/13 22:43 UTC
Linked by Thom Holwerda on 05/20/13 21:50 UTC
Linked by Thom Holwerda on 05/19/13 23:15 UTC
Linked by Thom Holwerda on 05/19/13 23:11 UTC, submitted by Drumhellar
Linked by Thom Holwerda on 05/18/13 21:06 UTC
Linked by Thom Holwerda on 05/18/13 7:37 UTC
Linked by fran on 05/18/13 1:38 UTC
More News »
Sponsored Links



Member since:
2006-03-13
I really hate that mentality. Ads are your form of payment for this and other websites and services.
Unfortunately, ads are something else, a security threat. Any Web site a person visits can be potentially dangerous. If the site isn't malicious, there is also the possibility of someone taking elements of it over, the better to capture at least some of the site's readers.
The risk increases when you add third party content, as each third party offers something to commandeer. Images can have Javascript in the tags that call them. The images themselves can be used to trigger buffer overflows. Many ads are loaded via Javascripts from third party servers. Flash adds and cookies offer significant privacy concerns. Flash also has had some major security issues on all platforms.
Microsoft frequently responds to a security issue in Internet Explorer by suggesting we visit only "trusted sites." Unfortunately, as OSNews has learned the hard way, any Web site that makes use of third party content cannot be considered trusted.
The OSNews staff may already have asked the question: Does the revenue they receive from advertising offset the risk of multiple visitors suing them for infecting their machine? The continued presence of ads from Doubleclick indicates at least a tentative "yes" for now, but if the staff isn't nervous, they should be.
For the users, it's a question of minimizing risk. At the very least one should browse with third party Javascripts blocked. Unfortunately, Firefox with Noscript is the only way I know to do this gracefully. I use the Adblock Plus extension with element hider, and Flashblock. I also throw in a huge hosts file for good measure. I subscribe to updatable block lists.
No, OSNews' ads aren't all that annoying, but I don't block ads because they annoy me. I block because they are a security risk. Browsing is a potentially dangerous activity, and the safety and security of my data comes first.
Is it better for this site to be around with ads, or not to be around at all?
I hope there there are other alternatives. I'm not sure what they might be, but having enough other people expose their computers to potential attack so I can view OSNews content isn't very satisfying.