哈尼的柴油门:检测与欺骗测试者
Honey's Dieselgate: Detecting and Tricking Testers

原始链接: https://www.benedelman.org/honey-detecting-testers/

在VPT博客的一篇文章中,我展示了重要的研究,表明Honey不仅违反了联盟网络“冷静期”规则,还通过在认为用户可能是测试者时表现良好来掩盖这些违规行为。Honey甚至会检查用户的cookies,查看其是否登录过联盟网络管理控制台——这些控制台被网络合规人员、商家和联盟伙伴广泛用于管理活动。如果用户登录过,他很可能是一名测试者,这暴露了Honey尽可能多地违反规则,同时避免被抓的目标。详情:Honey的“柴油门”:检测和欺骗测试者。

黑客新闻 新 | 过去 | 评论 | 提问 | 展示 | 招聘 | 提交 登录 Honey的柴油门:检测和欺骗测试者 (benedelman.org) 6点 由 Leftium 1小时前 | 隐藏 | 过去 | 收藏 | 1评论 ChrisArchitect 1小时前 [–] [重复] 讨论:https://news.ycombinator.com/item?id=46438522 回复 指南 | 常见问题 | 列表 | API | 安全 | 法律 | 申请YC | 联系 搜索:
相关文章

原文

In a post on VPT’s blog, I present significant new research showing Honey not just violating affiliate network “stand-down” rules, but hiding those violations by behaving properly when there is reason to think a user could be a tester.  Honey goes as far as checking a user’s cookies for other domains to see whether the user has logged into affiliate network management consoles — widely used by network compliance staff, merchants, and affiliates to manage campaigns.  If a user has logged in there, he’s probably a tester — revealing Honey’s goal of breaking the rules as much as possible, without getting caught.

Details: Honey’s Dieselgate: Detecting and Tricking Testers.

联系我们 contact @ memedata.com