<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Malware Spy Network Targeted Israelis, Palestinians</title>
	<atom:link href="http://krebsonsecurity.com/2012/11/malware-spy-network-targeted-israelis-palestinians/feed/" rel="self" type="application/rss+xml" />
	<link>http://krebsonsecurity.com/2012/11/malware-spy-network-targeted-israelis-palestinians/</link>
	<description>In-depth security news and investigation</description>
	<lastBuildDate>Sat, 25 May 2013 21:24:21 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>By: meh</title>
		<link>http://krebsonsecurity.com/2012/11/malware-spy-network-targeted-israelis-palestinians/comment-page-1/#comment-127486</link>
		<dc:creator>meh</dc:creator>
		<pubDate>Thu, 15 Nov 2012 16:10:00 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=17421#comment-127486</guid>
		<description><![CDATA[Its a good discussion, and a valid point.  Anybody following his guidelines won&#039;t see the ads anyway, seems like they could be structured differently where they would benefit both parties a lot better way.  Flash has a bad track record and it is a bit hypocritical that Brian is using it on his site, would seem more in line with his goals to have a page with recommended products or services that are presented without flash.  

As for the article, it is interesting but not the first to handle targeted spying on that part of the world, definitely represents a shift in the direction our nation&#039;s will go to that relies less on a physical carpet bombing of earlier wars and does a virtual carpet bombing instead.]]></description>
		<content:encoded><![CDATA[<p>Its a good discussion, and a valid point.  Anybody following his guidelines won&#8217;t see the ads anyway, seems like they could be structured differently where they would benefit both parties a lot better way.  Flash has a bad track record and it is a bit hypocritical that Brian is using it on his site, would seem more in line with his goals to have a page with recommended products or services that are presented without flash.  </p>
<p>As for the article, it is interesting but not the first to handle targeted spying on that part of the world, definitely represents a shift in the direction our nation&#8217;s will go to that relies less on a physical carpet bombing of earlier wars and does a virtual carpet bombing instead.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Neej</title>
		<link>http://krebsonsecurity.com/2012/11/malware-spy-network-targeted-israelis-palestinians/comment-page-1/#comment-127353</link>
		<dc:creator>Neej</dc:creator>
		<pubDate>Thu, 15 Nov 2012 00:00:27 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=17421#comment-127353</guid>
		<description><![CDATA[I&#039;m really not sure how that figure was calculated (feel free to go and look at the citation, I haven&#039;t got the time) but it&#039;s not typical of a well run ad placement campaign.  I suspect the figure was arrived at by using impressions as a whole across the board in which case it&#039;s not a surprise considering the explosion of pages that&#039;s occurred not least SEO efforts creating pages on Web 2.0 properties.

I earn my living largely by creating and managing PPC campaigns and conducting media buys.  A typical CTR on a on well run Adwords campaign is 2-3% - and indeed Google encourages higher CTR by materially punishing those advertisers with low CTR (your bid price goes up to achieve the same number of impressions vs entities bidding on the same triggers).

There has not been a drop in Google&#039;s revenue from Adwords revenue which currently sits at over $100 million ... per day.

Bottom line is advertising online is not dying by a long shot.]]></description>
		<content:encoded><![CDATA[<p>I&#8217;m really not sure how that figure was calculated (feel free to go and look at the citation, I haven&#8217;t got the time) but it&#8217;s not typical of a well run ad placement campaign.  I suspect the figure was arrived at by using impressions as a whole across the board in which case it&#8217;s not a surprise considering the explosion of pages that&#8217;s occurred not least SEO efforts creating pages on Web 2.0 properties.</p>
<p>I earn my living largely by creating and managing PPC campaigns and conducting media buys.  A typical CTR on a on well run Adwords campaign is 2-3% &#8211; and indeed Google encourages higher CTR by materially punishing those advertisers with low CTR (your bid price goes up to achieve the same number of impressions vs entities bidding on the same triggers).</p>
<p>There has not been a drop in Google&#8217;s revenue from Adwords revenue which currently sits at over $100 million &#8230; per day.</p>
<p>Bottom line is advertising online is not dying by a long shot.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dennis</title>
		<link>http://krebsonsecurity.com/2012/11/malware-spy-network-targeted-israelis-palestinians/comment-page-1/#comment-127099</link>
		<dc:creator>Dennis</dc:creator>
		<pubDate>Wed, 14 Nov 2012 01:19:07 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=17421#comment-127099</guid>
		<description><![CDATA[How is it Brian started this discussion talking about an international spy network and now it&#039;s dissolved into the good-bad-and-ugly of using Flash? Use it or not, we could care less, but try to keep the discussion on-topic. If you want to send Brian a comment about his advertising practices why don&#039;t you use his freely-available email address and be done with it.

And if you don&#039;t see the ads because you&#039;re blocking them (like most of us) why don&#039;t you consider clicking on the PayPal Donate button and sending some coin to Brian so he&#039;ll keep posting his excellent and unique content. I&#039;m going to do it right now, why don&#039;t you join me!]]></description>
		<content:encoded><![CDATA[<p>How is it Brian started this discussion talking about an international spy network and now it&#8217;s dissolved into the good-bad-and-ugly of using Flash? Use it or not, we could care less, but try to keep the discussion on-topic. If you want to send Brian a comment about his advertising practices why don&#8217;t you use his freely-available email address and be done with it.</p>
<p>And if you don&#8217;t see the ads because you&#8217;re blocking them (like most of us) why don&#8217;t you consider clicking on the PayPal Donate button and sending some coin to Brian so he&#8217;ll keep posting his excellent and unique content. I&#8217;m going to do it right now, why don&#8217;t you join me!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ron</title>
		<link>http://krebsonsecurity.com/2012/11/malware-spy-network-targeted-israelis-palestinians/comment-page-1/#comment-127071</link>
		<dc:creator>Ron</dc:creator>
		<pubDate>Tue, 13 Nov 2012 23:24:25 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=17421#comment-127071</guid>
		<description><![CDATA[OK, you review your flash ads personally and approve that they are &quot;safe&quot;.  I&#039;m willing to concede that you know more about the specific mechanics of flash attacks and your word is good enough for me.

BUT, that means I have to install Flash to support your site through advertising.  I do know for a fact that I CAN&#039;T trust other sites, and the simplest defense is to not allow FLASH in my primary browser. 

Yes, I do have a browser installation to view flash items when I want to, but, I do not use it for day to day browsing.  So I don&#039;t see your flash ads, and I therefore you lose potential click-thru revenue. Sorry, but my simplistic approach to security is more important to me than me denying you 2cents (or whatever ...) worth of advertising revenue.]]></description>
		<content:encoded><![CDATA[<p>OK, you review your flash ads personally and approve that they are &#8220;safe&#8221;.  I&#8217;m willing to concede that you know more about the specific mechanics of flash attacks and your word is good enough for me.</p>
<p>BUT, that means I have to install Flash to support your site through advertising.  I do know for a fact that I CAN&#8217;T trust other sites, and the simplest defense is to not allow FLASH in my primary browser. </p>
<p>Yes, I do have a browser installation to view flash items when I want to, but, I do not use it for day to day browsing.  So I don&#8217;t see your flash ads, and I therefore you lose potential click-thru revenue. Sorry, but my simplistic approach to security is more important to me than me denying you 2cents (or whatever &#8230;) worth of advertising revenue.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Uzzi</title>
		<link>http://krebsonsecurity.com/2012/11/malware-spy-network-targeted-israelis-palestinians/comment-page-1/#comment-127067</link>
		<dc:creator>Uzzi</dc:creator>
		<pubDate>Tue, 13 Nov 2012 23:03:10 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=17421#comment-127067</guid>
		<description><![CDATA[&quot;The average click-through rate of 3% in the 1990s declined to 0.1%-0.3% by 2011.&quot; (Wikipedia.org/wiki/Click-through_rate)

Today maybe ads are more an instrument of SEO... (I prefer sponsorship - and no, Flash isn&#039;t an option if the audience includes iOS or Chrome users...)]]></description>
		<content:encoded><![CDATA[<p>&#8220;The average click-through rate of 3% in the 1990s declined to 0.1%-0.3% by 2011.&#8221; (Wikipedia.org/wiki/Click-through_rate)</p>
<p>Today maybe ads are more an instrument of SEO&#8230; (I prefer sponsorship &#8211; and no, Flash isn&#8217;t an option if the audience includes iOS or Chrome users&#8230;)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: M E Wood</title>
		<link>http://krebsonsecurity.com/2012/11/malware-spy-network-targeted-israelis-palestinians/comment-page-1/#comment-127022</link>
		<dc:creator>M E Wood</dc:creator>
		<pubDate>Tue, 13 Nov 2012 19:12:33 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=17421#comment-127022</guid>
		<description><![CDATA[As an elderly female user of the internet, actually since Windows 98, I have Flash turned off because with my computer on Windows Vista and also for reasons best known to newspaper sites it takes longer to load a page where the flash player advertisements are judged suitable for my delectation. Most are entirely unsuitable but that is another matter.]]></description>
		<content:encoded><![CDATA[<p>As an elderly female user of the internet, actually since Windows 98, I have Flash turned off because with my computer on Windows Vista and also for reasons best known to newspaper sites it takes longer to load a page where the flash player advertisements are judged suitable for my delectation. Most are entirely unsuitable but that is another matter.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nathan</title>
		<link>http://krebsonsecurity.com/2012/11/malware-spy-network-targeted-israelis-palestinians/comment-page-1/#comment-126864</link>
		<dc:creator>Nathan</dc:creator>
		<pubDate>Tue, 13 Nov 2012 02:36:56 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=17421#comment-126864</guid>
		<description><![CDATA[Neej,  

  I would agree in most circumstances it is unlikely. However if anyone has a grudge against Brian specifically (hmm, how many people has he painted the connection to X or Y with his articles that they wouldn&#039;t have liked known?) -- This is a fairly cheap and very easy way to exact some revenge.  The code (as a developer) is very, very simple (around 4 lines to redirect to another site) and it all depends on how much damage &quot;I&quot; as the bad guy wants to do.    The simplist and cheapest way is the first flash add has a date bomb half way into the month.  Doesn&#039;t matter how many times Brian views it -- it won&#039;t trigger anything bad until mid-month.    

I&#039;m not worried about myself; I&#039;m already paranoid about security on my computer and run with several things like noscript, ghostry and requestpolicy, etc.   :-)     

     But I happen to hope Brian will stick around for a long time and don&#039;t want to see him take any hits that he could have easily prevented.  Very much like we recommend boot disks or dedicated computers for financial stuff.   It can easily be prevented...

Nathan]]></description>
		<content:encoded><![CDATA[<p>Neej,  </p>
<p>  I would agree in most circumstances it is unlikely. However if anyone has a grudge against Brian specifically (hmm, how many people has he painted the connection to X or Y with his articles that they wouldn&#8217;t have liked known?) &#8212; This is a fairly cheap and very easy way to exact some revenge.  The code (as a developer) is very, very simple (around 4 lines to redirect to another site) and it all depends on how much damage &#8220;I&#8221; as the bad guy wants to do.    The simplist and cheapest way is the first flash add has a date bomb half way into the month.  Doesn&#8217;t matter how many times Brian views it &#8212; it won&#8217;t trigger anything bad until mid-month.    </p>
<p>I&#8217;m not worried about myself; I&#8217;m already paranoid about security on my computer and run with several things like noscript, ghostry and requestpolicy, etc.   <img src='http://krebsonsecurity.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' />      </p>
<p>     But I happen to hope Brian will stick around for a long time and don&#8217;t want to see him take any hits that he could have easily prevented.  Very much like we recommend boot disks or dedicated computers for financial stuff.   It can easily be prevented&#8230;</p>
<p>Nathan</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Neej</title>
		<link>http://krebsonsecurity.com/2012/11/malware-spy-network-targeted-israelis-palestinians/comment-page-1/#comment-126841</link>
		<dc:creator>Neej</dc:creator>
		<pubDate>Tue, 13 Nov 2012 00:59:37 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=17421#comment-126841</guid>
		<description><![CDATA[I suspect you are one of these users that never clicks on ads (or probably sees them to click on in the first place) - good for you -but given the arrangements here concerning the displaying of ads I doubt very much that the campaigns being run by the advertisers are unprofitable or that Brian is getting a CTR rate tending to nothing.

The reason I say this is because (my guess) this isn&#039;t a property where entities would pay for non-performing ads (read losing money) to stop competitors running their ads on the same property - this often happens in some verticals on larger properties such as relevant SE results pages.  And I&#039;d also expect Brian to stop running with these same ads and try something else if they aren&#039;t at least profitable.

Oh and in some circumstances Flash/banners will outperform text by a country mile BTW but it comes down to circumstances.]]></description>
		<content:encoded><![CDATA[<p>I suspect you are one of these users that never clicks on ads (or probably sees them to click on in the first place) &#8211; good for you -but given the arrangements here concerning the displaying of ads I doubt very much that the campaigns being run by the advertisers are unprofitable or that Brian is getting a CTR rate tending to nothing.</p>
<p>The reason I say this is because (my guess) this isn&#8217;t a property where entities would pay for non-performing ads (read losing money) to stop competitors running their ads on the same property &#8211; this often happens in some verticals on larger properties such as relevant SE results pages.  And I&#8217;d also expect Brian to stop running with these same ads and try something else if they aren&#8217;t at least profitable.</p>
<p>Oh and in some circumstances Flash/banners will outperform text by a country mile BTW but it comes down to circumstances.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Neej</title>
		<link>http://krebsonsecurity.com/2012/11/malware-spy-network-targeted-israelis-palestinians/comment-page-1/#comment-126839</link>
		<dc:creator>Neej</dc:creator>
		<pubDate>Tue, 13 Nov 2012 00:19:17 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=17421#comment-126839</guid>
		<description><![CDATA[You could also just stop using the internet since attacks could, in theory, happen while you are using it.

Or you could just accept that the scenario you just painted is possible but very unlikely due to the number of hoops an attacker would have to jump through.]]></description>
		<content:encoded><![CDATA[<p>You could also just stop using the internet since attacks could, in theory, happen while you are using it.</p>
<p>Or you could just accept that the scenario you just painted is possible but very unlikely due to the number of hoops an attacker would have to jump through.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Uzzi</title>
		<link>http://krebsonsecurity.com/2012/11/malware-spy-network-targeted-israelis-palestinians/comment-page-1/#comment-126817</link>
		<dc:creator>Uzzi</dc:creator>
		<pubDate>Mon, 12 Nov 2012 22:04:44 +0000</pubDate>
		<guid isPermaLink="false">http://krebsonsecurity.com/?p=17421#comment-126817</guid>
		<description><![CDATA[Leaving alone the fact that no one can be forced to install and use flash. And admiting that click-rates tend to 0,000% (nothing), I still hope for the mug, the poster, the book and the dvd. ;-)

On the other hand if Ads still rely on flash they&#039;ve still to learn something from Google... so much text-ads... how uncool, Google must be stupid. oO]]></description>
		<content:encoded><![CDATA[<p>Leaving alone the fact that no one can be forced to install and use flash. And admiting that click-rates tend to 0,000% (nothing), I still hope for the mug, the poster, the book and the dvd. <img src='http://krebsonsecurity.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> </p>
<p>On the other hand if Ads still rely on flash they&#8217;ve still to learn something from Google&#8230; so much text-ads&#8230; how uncool, Google must be stupid. oO</p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Performance optimized by W3 Total Cache. Learn more: http://www.w3-edge.com/wordpress-plugins/

Page Caching using memcached (User agent is rejected)
Database Caching 8/25 queries in 0.006 seconds using memcached
Object Caching 398/420 objects using memcached

 Served from: krebsonsecurity.com @ 2013-05-25 17:32:54 by W3 Total Cache -->