Bad Flaw in Local Online Advertising Company
I was alerted to very very bad flaw when I was blog hopping around. It seems that a local online advertising company (Local ADCO) has been exposed by a blogger. Of all the bugs in a production system, this is the first time I came across this.
Local ADCO is a company that advertise on blogs. There are publishers/bloggers and advertisers where the publishers will place a certain piece of code on their blog/website to show the advertisers ads. Of course, if you are familiar with online advertising, the publisher earn a certain amount of money and the advertisers will gain traffic to their website. Both parties wins.
Now, this particular blogger was doing his usual stuffs, logged in to his account and check his stats. I joined Local ADCO since the beginning of their start up so I do know what he is talking about in his blog. There is this particular stats field in the system where it shows you what keyword people has been searching for to reach your blog. The search keywords here are not very useful at all. It has only 5 last searched keyword which isn’t enough in my opinion. In blogger keyword stats, he saw that there was a link that came from the administrative side of the Local ADCO.
Out of curiosity he click on the link and he expected to be prompted for a user name and password. A shock he got as he not only he doesn’t need to enter any password, it direct him to the administrative dashboard. For someone who doesn’t work for the Local ADCO being able to access the administrative account, this is a serious flaw. I think over and over how he can access it so easily. Anyway, he click on all the available tabs there is in the administrator account.
There was another surprise for him. In one page, he saw a list of bloggers and their earnings from placing their code. He could see how much he has earn for a particular period, for a particular advertiser. In fact, he could see everyone earnings all together there. About the earnings, he did mention that some bloggers who have lower ranking, has earnings more than him, in the mid range of 3 digits. When I saw the pictures I can’t believe it too. Yes, there were snapshots capture by him and pasted all over his blog. Even one quite famous blogger who has a higher ranking and band has low earnings too. The band here has something to do with the earnings. In the picture, there were quite a few with band 0 earning more than 3 digits whereas those with higher band has just about 2-digits earnings. Seems like something wrong with their distribution of the advertisers money.
I just can’t believe that the Local ADCO has such serious security flaw. Luckily for them that the blogger didn’t do anything in the administrator panel. By the way, the blogger in mention here had deleted his post. It seems that he was threaten by the founder of the Local ADCO that he will be sued if he didn’t remove his post. I wonder how many people have read his post. Rather than threatening people, they should just concentrate on fixing their mess up problem. They have yet to launch their latest version which they promise to be out in October.
NN
huhu…cam kenal jer orang dia..
[...] Dan jika ada link-link berkaitan menda semalam yang ada sesapa tulis, tolong-tolong ler bagitau, dan aku akan paste kat sini. Hari nie, yang aku tau cuma blog Animes tulis mengenainya. Bad Flaw in Local Online Advertising Company [...]
memang pun. local online advertising company pun tak banyak.
I pun dah join awal awal..
who is tat so lucky to hit the jackpot lol… i guess hiring the two might be the problem lol…
[...] Dan jika ada link-link berkaitan menda semalam yang ada sesapa tulis, tolong-tolong ler bagitau, dan aku akan paste kat sini. Hari nie, yang aku tau cuma blog Animes tulis mengenainya. Bad Flaw in Local Online Advertising Company [...]
irene, it is not nice to mention names…
but seems like some people does know who i’m talking about NN.
I know which company you are referring. I was asking who is the one that found out that flaw. *LOL* And now you are the one that split the name out hahaha… You are not nice.
ntah..sape yerk animes…? hehe
irene…. split wat name? i don’t see anything that regards to names in my previous comment.
the one that found the flaw is very near you. look down under…
Hahaha.. I mean spilt lar… typo… U so obvious say the name out in your reply though not fullname but so obvious hahaha…
Hahaha… Ooo… So that guy… so lucky to get the jackpot hahaha… Oh well… You know la… where those programmers previously work at. Hahaha… They bring the problem over to new company also hahaha… Do you think hiring them is a good idea? HAHAHA… So bad lar me 
apa lagi buang le kalau dah tau cara busuk mereka
ahaha… spilt it out…its that so obvious?
does that local adco now goes by that?
about where their programmers, that flaw might have been there since the startup… who knows….
don’t be so bad and naughty
i don’t think the advertisers would do much as long as they are getting the impression they want. its only the bloggers are short changed for their ads space.
heh… like that also got. Should hv more secure system.
searching for the pictures now… will post it when i find them..
fahmisah… not so soon. cashout first then dump…
cashout first ? right now how many u have earned ? or u just as low as others (cheated) ?
since 20 May 2007 till now only got RM45.72 left RM4.28. if only there are more ads I can cash out faster but from what we saw, all revenue were distributed elsewhere…
[...] the Malaysian blogsphere lately about one of the blog advertising companies. It all started with an innocent click to a link that led to their control panel which is not secured at all!! *HORROR* However, I’m [...]
patutla aku nyer ad tak kluar2..
tengok, ads dah tak keluar keluar ni… dah dekat satu bulan ni takde ads. dah bagi semua kawan kawan ia orang je..
nafneng suxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
haha… ada tengok update baru? tu ada sneak peak 2.0 untuk selected bloggers and advertisers.
nak jadi tester tu, sent email kat samantha.wong[@]nuffnang[.]com
http://www.nuffnang.com.my/
didin, why are you promoting nuffnang on my blog?
got share ah? ahahaha….