this post was submitted on 14 Sep 2023
294 points (99.7% liked)

Privacy

32159 readers
397 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

cross-posted from: https://lemmy.ml/post/4912712

Most people know at this point that when searching for a popular software package to download, you should be very careful to avoid clicking on any of the search ads that appear, as this has become an extremely common vector for distributing malware to unsuspecting users.

If you thought that you could identify these malicious ads by checking the URL below the ad to see if it directs to the legitimate site, think again! Malware advertisers have found a way to use Google's Ad platform to fake the URL shown with the ad to make it appear like a legitimate ad for the product when in fact, clicking the ad will redirect to an attacker controlled site serving malware.

Don't click on search ads or, even better, use an ad-blocker so that you never see them in the first place!

all 19 comments
sorted by: hot top controversial new old
[–] Cheradenine@sh.itjust.works 79 points 1 year ago* (last edited 1 year ago) (2 children)

Don't use google search, if you do, do not follow 'sponsered' links. Not only may they be malware, as in this case, but google will be tracking you.

It's truly amazing that google gives no fucks whatsoever when it comes to ads, yet their threat security team is one of the best in the business.

After works drinks must be fun...

[–] lobut@lemmy.ca 19 points 1 year ago

I remember my coworkers (who were devs) Google searched Firefox to download and hit the first link which was an ad. It was a German version of Firefox with spyware.

Our IT department caught it but I was sorta surprised my coworkers hit the link as opposed to the first search term. That ad was active for a long time though ... I think years.

[–] RestrictedAccount@lemmy.world 14 points 1 year ago (1 children)

Google tracked the other links too.

So there’s that

[–] TWeaK@lemm.ee 17 points 1 year ago

Google tracks you everywhere, particularly with captcha. If you block connection to google.com and gstatic.com then half of the internet won't work.

[–] Semi-Hemi-Demigod@kbin.social 39 points 1 year ago

I can't believe we've gotten to the point where running random code on your computer isn't just considered normal, we also think blocking said random code is bad for business.

[–] Melody@lemmy.one 24 points 1 year ago (1 children)

I've been using a SearXNG locally-hosted instance using WSL/Podman. Behind a VPN of course; and also using TrackMeNot to generate a steady slow stream of garbage searches to block general query tracking.

I'm loving it to bits; as I don't have bullshit in my search results and I immediately find what I need; as I can query all the engines I want.

[–] Render@sh.itjust.works 1 points 1 year ago (1 children)

Is it easy to self host SearXNG? What is the minimum requirements needed to self host?

[–] Melody@lemmy.one 1 points 1 year ago* (last edited 1 year ago)

I don't know the exact requirements but I'm literally running a locally hosted one on a much more previous generation CPU (i7-7820HK) and I appear to be using no more than 4GB of ram including Podman Desktop, WSL and the Docker image itself not seeming to consume that much RAM.

I don't feel as if you could possibly lack the system resources needed to do it comfortably if you have at least 12GB of ram (for locally hosting on Windows 10) or 4GB of ram (Any flavor of Linux probably, if you wanna throw an old PC or rPi/rPi-like at it.)

You should look closely at https://github.com/searxng/searxng and find out what the exact requirements could be by asking the maintainers.

[–] Catsrules@lemmy.ml 22 points 1 year ago

Just another +1 reasons to use ad block.

[–] Jaysyn@kbin.social 21 points 1 year ago (2 children)

Ecosia plants trees while Google gives you tech-disease.

[–] Devjavu@lemmy.dbzer0.com 17 points 1 year ago (2 children)

Man I would love it if Ecosia actually had decent search results. Well, guess I'll have to donate for trees.

[–] TWeaK@lemm.ee 10 points 1 year ago (1 children)

Ecosia uses Bing, so it's probably good for porn. Google has gotten worse lately anyway, so half the time adding a !g bang doesn't actually help.

[–] Devjavu@lemmy.dbzer0.com 3 points 1 year ago

Yeah Ecosia probably uses the free google api and not the paid one. I use SearX. Wonderful little search engine.

[–] halcyondays@midwest.social 11 points 1 year ago

Seen a few mentions of ad blocking, but I’ll throw one more option out there - DNS servers that block malware and c2 domains. I use quad9 as the upstream for my pihole, but cloudflare’s 1.1.1.2 is an option as well.

[–] ebits21@lemmy.ca 7 points 1 year ago (1 children)

Use pihole. If I accidentally click a google ad they don’t work anyway.

[–] spam@kbin.social 3 points 1 year ago

I have them blocked in the host file on my router

[–] kitonthenet@kbin.social 6 points 1 year ago

But I was assured by IT pros that responsibility to stop phishing tested ultimately on the user!