Hacker News new | ask | show | jobs
by buro9 1862 days ago
How do you trust the content of the adverts?

I mean... on the level of JavaScript, SVG, CSS, etc... you either have to incredibly constrain what an advert can do as you cannot moderate them all or be aware of every possible attack vector... or serve them from a different domain so that the browser security model applies.

The risk to someone like Google of a rogue advert causing an account compromise is far greater than the risk of some % of lost revenue.