HN2new | past | comments | ask | show | jobs | submitlogin

It's also illegal in many jurisdictions (e.g. in the US, viewed as a scheme to defraud advertisers by generating invalid clicks that cause financial harm, by depleting their budgets and push them to spend for fake traffic), but in practice it's way easier to just blacklist that IP / user.

The big networks filter such traffic, the small networks benefit from it.

https://www.reddit.com/r/legal/comments/1pq6kgp/is_it_legal_...

You may also get accidentally get your own website blacklisted or moved to a lower RPM tier, or provoke shadow-ban websites that you like to visit, or... generate more ad revenue for them.





Don't tell me I'm not allowed to click buttons you put in my face.

Any jurisdiction where this is supposedly illegal, it hasn't been court tested seriously.*

Per your link: "What you're describing is essentially the extension AdNauseam. So far they have not had any legal troubles, but they technically could." That stance or an assertion it's not illegal is consistent throughout the thread, provided you aren't clicking your own ads.

"The industry" thinks you shouldn't be allowed to fast forward your own VCR through an ad either. They can take a flying .. lesson.

* Disclaimer: I don't know if that's true, but it sounds true.


Telling me this is illegal has made me want to download it more. “IT IS ILLEGAL TO ATTACK THIS NONCONSENSUAL SPAM SIR”

Some years ago I was by chance listening to a radio program about advertising. They interviewed a marketing guy and he insisted that it was illegal for you to visit the bathroom or the kitchen while the ad was running (on TV or on the radio). Completely nuts.

That reminds me of the time I was flipping through TV channels and stopped in on TBN to see what color Jan's hair was going to be. Instead, I found Paul preaching about how anyone watching his programming and NOT sending him donations was stealing from him.

>Don't tell me I'm not allowed to click buttons you put in my face.

No, the illegal-ness doesn't come from the clicking, it comes from the fact you're clicking with the intention of defrauding someone. That's also why filling out a credit card application isn't illegal, but filling out the same credit card application with phony details is.


The intent isn’t to defraud. The intent is to curb their uninvited data collection and anti-utility influence on the internet.

You’re not defrauding anyone if you have your extension click all ads in the background and make a personalized list for you that you can choose to review.

The intent is convenience and privacy, not fraud.


>The intent isn’t to defraud. The intent is to curb their uninvited data collection and anti-utility influence on the internet.

How's this any different than going around and filling out fake credit applications to stop "uninvited data collection" by banks/credit bureaus or whatever?

>The intent is convenience and privacy, not fraud.

You're still harming the business, so my guess would be something like tortious interference.

https://en.wikipedia.org/wiki/Tortious_interference


In a credit application there is a signature and binding contract. If I fill in false information knowingly, the intent is clear and written.

If you send me an unsolicited mailer with a microchip that tracks my eyes and face as I read it, you’ve already pushed too far. To then claim my using a robot to read it for me is fraud ignores the invasion of privacy you’ve already instituted without my express consent (digital ads are this).

It’s not fraud if it’s self-defense from corporate overreach.


>In a credit application there is a signature and binding contract. If I fill in false information knowingly, the intent is clear and written.

At best that gets you off the hook of fraud charges, but not tort claims, which are civil, and don't require intent.

>It’s not fraud if it’s self-defense from corporate overreach.

There's no concept of "self-defense" when it comes to fraud, or torts.


I am super curious how far this goes. If, hypothetically, I wore some sort of glasses that kept facial recognition from identifying and tracking me at my local grocery store, would that constitute a civil infringement in the future?

What about extensions that skip embedded ads in a YouTube video? Is that tortuous interference with the view counter that creators use to market their reach?


>How's this any different than going around and filling out fake credit applications to stop "uninvited data collection" by banks/credit bureaus or whatever?

It's so different that it can't even be compared. There's nothing similar there.

>>The intent is convenience and privacy, not fraud.

> You're still harming the business, so my guess would be something like tortious interference.

No, you're not harming the business. You're simply not following the business idea of the "business". Anyone can have a business idea of some type. Not a single person on earth has any obligation to fulfill that business idea. But somehow some people believe the opposite.


> No, the illegal-ness doesn't come from the clicking, it comes from the fact you're clicking with the intention of defrauding someone. That's also why filling out a credit card application isn't illegal, but filling out the same credit card application with phony details is.

You might technically be right. But I'd recommend contacting EFF, if, somehow, installing AdNauseam brings you into legal trouble.

On the realm of search engines and ad networks I love to remind people that Google took out "don't be evil" from their motto and pressured anyone within US jurisdiction to remove Page and Brin's appendix #8 (at the least it's removed from their original school of Stanford).

8 Appendix A: Advertising and Mixed Motives https://www.site.uottawa.ca/~stan/csi5389/readings/google.pd...


http://infolab.stanford.edu/pub/papers/google.pdf

stanford.edu, and the appendix is there. In fact on the link you gave the appendix is cut short - looks like an OCR/copying issue but then at a glance it doesn't seem to happen elsewhere which is a little suspicious. I'm not sure what you're talking about.


I must have somehow missed that one; glad that ancient site without HTTPS is still up. Here are the two top results I get from searching for it from Stanford[0][1], and you can see that this section of the appendix is missing. Google's also has it missing[2]. So no, I don't think I'm crazy.

[0] http://ilpubs.stanford.edu:8090/361/1/1998-8.pdf

[1] https://snap.stanford.edu/class/cs224w-readings/Brin98Anatom...

[1] https://research.google/pubs/the-anatomy-of-a-large-scale-hy...


Just clicked on your first link. The appendix is there? Page 18 of the PDF.

Touché! I recant my conspiratorial thinking. Though I still think it's odd that the other sources I posted don't have it; one is what's actually being taught in Stanford courses and the other is Google's own hosting of their founders' paper.

Even if they are wrong:

1: Ad companies are not going to go after individual users, rather they would target the maker of any such plugin

2: If they did go after an individual user, they would have to prove damages, and an individual is unlikely to do more than a few bucks of wasted ad spend for a company, not even a rounding error, making the legal cost and political cost of targeting the person running the script enormous compared to the potential return from anything other than a grand slam nuclear judgement in their favor.


1) The makers of this plugin are from EFF, and thus have the time and resources to combat litigation.

2) Yep! And as mentioned in other threads, it would give the users on their ad platform more money but degrade the quality of their ad platform.

I was just alarmed by how many people are not only okay with, but defending, the current state of ad tech. I think it's a noble effort to go against the grain and withstand any potential legal trouble to subvert it as it seems there's no recourse to be made in the courts unless an entity has the aforementioned time and money to fight it in the courts.


What if someone unironically wants to automatically click all the ads to support the websites they visit

You'd be doing way more harm than good. The battle between ad networks and unscrupulous website owners using bots to fake ad clicks has been going on forever.

Some sort of Robinhood of advertising, taking from the big, to give to the small

Ads pay in different forms. Some pay per click (PPC), some pay per thousand impressions (CPM).

Clicking with the intention of helping doesn't help. Only clicking with genuine interest helps.


I don't think the question was about whether this would actually help the advertisers. (I suspect it was rhetorical.) Of course the defense will now be harder to execute for anyone who reads this thread.

Even one of the users here above mentions the malicious intent:

> I hate advertisers so I'm gonna get back at them by making them pay more.


> it comes from the fact you're clicking with the intention of defrauding someone.

You're defrauding nobody. People purchase visibility and clicks when they purchase advertising. not conversions or sales.


>People purchase visibility and clicks when they purchase advertising. not conversions or sales.

Again, you're ignoring intent in all of this. It's not illegal to default on a loan, or even to refuse to pay it back (eg. bankruptcy), but it is illegal to take out a loan with the specific intent to not pay it back (eg. if you know you're planning on declare bankruptcy right afterwards).


Whats the case in EU? Any idea?

>Don't tell me I'm not allowed to click buttons you put in my face.

To be fair, you put it in your own face, by visiting the site...


I mean, (not to you, as we go in the same direction, in general), just block it.

The goal of Adnauseam was to hurt Google, and other big adnetworks, from what I understand.

By blocking:

    -> Advertiser is not harmed
    -> For the adnetwork: No ad revenue
    -> Publisher is not harmed
    -> Pages load faster
--> Google is earning less (if this is part of your ideological fight) and you get rewarded with a better experience, and you are legally safe

==

With fake clicks:

    -> Advertiser is harmed
    -> Publisher is harmed
    -> Adnetwork is okayish with the situation (to a certain point)
-> You hurt websites and products that you like (or would statistically like)

--> Google is accidentally earning more revenue (at least temporarily, until you get shadow-banned), your computer / page loads slows down and you enter a legally gray area.

(+ the side-note below: clicking on every ads leak your browsing history because in the URL there is a unique tracking ID that connects to the page you are viewing)


"-> Publisher is not harmed"

How? Publishers do need revenue and this can deprive them of this income.


Fair enough. I took the principle that revenue = 0 if no conversion, but in reality this is not true at all.

You're not clicking the button, you're sending a known fraudulent request saying the ad was clicked, when the ad was not clicked

I still wonder about that. I don't have a contract with the advertiser to provide genuine data back about what ads I've clicked and what I haven't. The website operator does have such a contract and so cannot hire a bot farm to spam click the ads.

If it's something that's been held up in court already then of course I have to accept it, but I can't say the reason seems immediately intuitive.


There's a very general law that says something about using a computer to cause money to move

>I don't have a contract with the advertiser to provide genuine data back about what ads I've clicked and what I haven't.

Charges of fraud doesn't require a contract to be in place. That's the whole point of criminal law, it's so that you don't need to add a "don't screw me over" clause to every interaction you make.


How is that a fraud, when I don't get any money from the scheme?


By this logic, vandalism would be fraud too.

Vandalism involves making material misrepresentations?

Damaging property cost money to fix.

Where's the misrepresentation?

An AI agent did it. Obviously I can't be expected to watch over all the things it does.

Wrong. There is no law saying you cannot click every link on a website within your browser. It would not only be impossible to prove but also entirely wrong interpretation of existing laws.

Now if you had an AdWords account and ran a botnet that visited your property and clicked ads, that’s fraud.


>It would not only be impossible to prove

I mean if you had an extension that did it I don't see why it would be impossible. And with an extension for that purpose it shows intent.


Back up a bit. AdNauseam and similar tools are not illegal. The only real avenues would be violation of ToS, fraud, computer abuse or similar. For an individual running this on their home PC for their own use it would be a real challenge for anyone of any size to prove harm.

Now like I already said, if you are running a botnet clicking on your ads that is entirely a different story.

So tell us what does having the extension installed prove?


click fraud consists of the person who runs a website themselves clicking, running bots to click, paying someone else to click, etc ads on their own website. it becomes fraud first because they have contractually agreed not to do that, and second because they are materially benefiting from it. an unaligned third party clicking (etc) on ads has neither of those conditions being true, and hence isn't fraud or otherwise illegal.

Doubtful.

If you intentionally loop-download large files or fake requests on websites that you don't like, in order to create big CDN charges for them, then what ?

Without reaching the threshold of Denial of Service, just sneakily growing it.

Nobody benefits, except for the weird idea of the pleasure of harming people, still illegal.


You are just wrong on many levels and keep repeating the same mistruths.

Doubtful

Not doubtful at all. He literally laid out the definition of click fraud for you.

As someone who ran ads on web sites as far back as 1995, that has been the term the industry has used forever.

Replying with a dismissive "doubtful" demonstrates that you don't know what you're talking about.


Yes, doubtful it is not fraud, just because you didn’t sign a contract does not prevent it from being fraud.

And it is fine to use the terms click fraud when you conduct artificial clicks with the intent:

Examples:

https://integralads.com/insider/what-is-click-fraud/#:~:text...

One of the top leading company of traffic filtering is literally using these words to describe that.

Other users even 10 years ago:

https://hackernews.hn/item?id=13328628

+ sources from court:

> The opinion states: “click fraud” can occur when “either a (natural) person, automated script, or computer program, sometimes referred to as a `bot,’ simulates the click activity of a legitimate user by clicking on the Program Data displayed, but without having an actual interest in its subject matter or content.”

Etc


You're all over this thread spreading misinformation. AdNauseam has been around since 2014. It is specifically banned in the Chrome store so Google knows of it's existence. If you check the wikipedia page you'll see that they have landed in the press and taken multiple actions against the extension. https://en.wikipedia.org/wiki/AdNauseam

Usually when it's brought up people say it doesn't work or try to spread fear that it is illegal. Google banning them but taking no action otherwise indicates to me and the thousands who use it that it is in fact effective and Google has no other recourse other than their control over the most popular browser.


It's also illegal in many jurisdictions (e.g. in the US

Never in the history of HN has a [citation] been so [needed].

And from an actual lawyer, not just some rando cosplaying M&A in his mom's basement.


Could be interesting to get your perspective

I disagree. I'm neither a lawyer nor a legal expert, and I don't pretend to be either on the internet.

A plugin that does pre-fetch is illegal?

A "scheme to defraud advertisers", how infuriating.

Advertisers are stealing my time and attention. Why is this not illegal also then?


Seriously? What laws catch it out?

You deliberate harm and financial damage using a computer bot. Almost all countries have provisions where you can be sued for any type of damage you cause and be asked to repair it (a minima at the civil level).

Big ones detect it, so they don't care to sue. Small ones benefit, so they don't sue.

This is your main protection, there is nothing to squeeze from a single guy. Even if you get him to pay you back the fraud, then what ? It costs more in legal fees.

Still, it's such an odd concept to self-inflict yourself such; it's way better to just block the ads than to be tagged as a bot and get Recaptcha-ed or Turnstiled more frequently.


How did I cause financial damage? I didn't charge anybody anything. I didn't pay anybody anything. I agreed to no terms and conditions

With your logic this is legal:

> One public Firebase file. One day. $98,000. How it happened and how it could happen to you.

https://www.reddit.com/r/googlecloud/comments/1kg9icb/one_pu...

"It's just a script that makes a loop, I didn't charge anybody anything, I didn't pay anybody anything. I agreed to no terms and conditions".

It's a very harmful practice to intentionally try to hurt companies, when you can just block what you don't like.


> It's a very harmful practice to intentionally try to hurt companies, when you can just block what you don't like.

I say tit for tat. They're intentionally trying to harm me, spying on me, maybe infecting my computer, mining crypto with my CPU, or wasting my network bandwidth. They could just not do that and there wouldn't be any concern about reciprocity


> I say tit for tat.

Does your say have any relevance here in terms of what the law is? Are you a state judge tasked with interpreting the law? Where's the tit-for-tat clause?


Okay but hurting consumers by tracking everything they do is totally okay?

Companies aren’t people. Fuck companies.


This is not ok I totally agree with you, but still, I would rather just block the ads, and not buy their products or support them.

There is a side-effect in terms of privacy: you send a fake click request every single time, you also actually disclose to adnetworks which page you are visiting and incidentally your whole browsing history (not through referrers, but because click URLs have a unique click IDs to match).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: