Skip to main content
Advertising

Originally published May 19, 2014 at 5:58 AM | Page modified May 19, 2014 at 8:02 AM

  • Share:
             
  • Comments (0)
  • Print

Senate: Firms must protect against malicious ads

The Senate warned Google, Yahoo and other leading technology companies Thursday they need to better protect consumers from hackers exploiting their lucrative online advertising networks or risk new legislation that would force them to do so.


Associated Press

advertising

WASHINGTON —

The Senate warned Google, Yahoo and other leading technology companies Thursday they need to better protect consumers from hackers exploiting their lucrative online advertising networks or risk new legislation that would force them to do so.

In a new investigative report, the Senate Permanent Subcommittee on Investigations said hackers in some cases are infecting computers using software or programming commands hidden inside online advertisements. It suggested tougher U.S. regulations or new laws that could punish the ad networks in addition to prosecuting the hackers.

Yahoo's chief information security officer, Alex Stamos, on Thursday described ways that Yahoo tries to protect Internet users, such as blocking deceptive ads that mimic operating system messages to trick users. He called the problem "a top priority for Yahoo."

"We successfully block the vast majority of malicious or deceptive advertisements with which bad actors attack our network, and we always strive to defeat those who would compromise our customers' security," Stamos said.

Google's George Salem, a senior product manager, called the problem "badware," and said Google was working diligently but sometimes reluctant to publicly discuss its efforts.

"Our goal is to stay one step ahead of mal-vertisers and not tip them off to our activities," Salem said.

The subcommittee highlighted a December 2013 incident in which an Internet user visited a mainstream website and had all of her personal information stolen via an ad on Yahoo's network. Even worse: She didn't have to click on it to deliver a virus that gobbled up her information. And as many as 2 million others may have been exposed to the attack.

The online advertising industry has grown complicated "to such an extent that each party can conceivably claim it is not responsible when malware is delivered to a user's computer through an advertisement," the Senate report said.

The panel said it found no evidence that Google or Yahoo's ad networks are more vulnerable to malware attacks than other major ones. It said the industry as a whole remains vulnerable to such forms of attack.

Several bills in Congress aimed at strengthening Internet privacy and security have stalled, and there currently is no federal data-privacy law for Internet companies. One measure, the 2011 Commercial Privacy Bill of Rights Act, would have allowed the Federal Trade Commission to require security measures for sites that collect personal information.

___

Follow Jack Gillum on Twitter at http://twitter.com/jackgillum



Free 4-week trial, then $99 a year for unlimited seattletimes.com access. Try it now!

News where, when and how you want it

Email Icon

The Seattle Times wins top award for multimedia storytelling

The Seattle Times wins top award for multimedia storytelling

Our Sea Change series received a prestigious 2015 DuPont-Columbia award for showcasing the power of storytelling on the Web. Experience the report here.

Advertising

Advertising

Career Center Blog

Career Center Blog

Looking for joy on the job


Advertising
The Seattle Times

The door is closed, but it's not locked.

Take a minute to subscribe and continue to enjoy The Seattle Times for as little as 99 cents a week.

Subscription options ►

Already a subscriber?

We've got good news for you. Unlimited seattletimes.com content access is included with most subscriptions.

Subscriber login ►
The Seattle Times

To keep reading, you need a subscription upgrade.

We hope you have enjoyed your complimentary access. For unlimited seattletimes.com access, please upgrade your digital subscription.

Call customer service at 1.800.542.0820 for assistance with your upgrade or questions about your subscriber status.

The Seattle Times

To keep reading, you need a subscription.

We hope you have enjoyed your complimentary access. Subscribe now for unlimited access!

Subscription options ►

Already a subscriber?

We've got good news for you. Unlimited seattletimes.com content access is included with most subscriptions.

Activate Subscriber Account ►