Popups, redirects or "open in app" interfering with diyAudio pages

Status
This old topic is closed. If you want to reopen this topic, contact a moderator using the "Report Post" button.
Switches things on and off again
Joined 2000
Paid Member
Since some time the diyaudio homepage loads very slow. Using firebug it showed that many different websites are loaded.
Any idea what has been changed the last weeks?
Attached a picture showing some of the loaded websites.
Can anybody confirm my findings?

BR, Toni

Hi ASTX,

What you've uploaded looks like a header bidding waterfall. This is interesting because:

  1. If you are a paid up diyAudio member, and you have ads turned off (you said in your first post "My account has disabled ads!"), you shouldn't be seeing any ads at all. However I just checked the code on the site, I realize that I have made a mistake when I implemented our new ad code. The banners are hidden, but the main call to the ad server is not. I can see that while the ad slots are not displayed, there is still a call made to our ad server (which of course is futile, as there are no banners to insert ads into). I am going to now go and fix this bug, so that if you have ads turned off, there is absolutely no calls made to our ad server. This fix should be live in about 10 minutes.
  2. We trialled header bidding waterfalls several months ago, and like you, agreed they were horrible (adding tens or hundreds of page requests per page load). Based on member feedback (and our own) we abandoned that direction within a few days of trialling it, and have not used header bidding since then and for the benefit of members, will not be entertaining it again in the future. Our priority is a good, clean, safe experience for our members over and above any revenue concerns. I want to make that very clear.
  3. We recently moved to a new ad tech partner who is helping us implement a server-bidding architecture. The whole point of this is that there's only one call made (by the server, to another server). This is fast, clean, neat, and secure. This clearly isn't what you're seeing (even though I'm guessing you're not seeing any banners). Anyway, this is odd behaviour and I have reached out to our ad tech partners to find out why this is happening. It might even be to my own stupid coding mistake as mentioned above.
  4. Lastly, due to some other issues with people reporting bad ads, 3 days ago we stripped back all our 3rd party advertising to the "barest of bones", and all anyone (even if they have ads turned on) should be seeing is a small bundle of calls to Google's AdX platform right now, not a header-bidding waterfall.

Let me make this bug fix and please advise if this is still going on.

EDIT: Bug fix made.
 
Last edited:
Switches things on and off again
Joined 2000
Paid Member
Updates:
  1. The bug fix suggested above has been made. Paid-up members who turn ads off won't see any more ad related javascript at all.
  2. It seems that currently we are (were) in fact running some kind of header-bidding waterfall. This is not what we signed up for with our ad tech partner, in fact, we signed up with them specifically to avoid adding a large number of page requests to each page load. I'm not sure what's going on here but I have reverted back to our old code for the time being and the number of page requests (including all images, scripts, etc) has dropped back to 65 (normal) instead of ~200 and everything is back to "normal".
Thanks for reporting this. I'm glad it helped me fix that bug, and also alerted me to this much more important issue of us somehow switching into using an advertising waterfall. I will post an update when I know more details.

Ok, now as to other people in this thread discussing phone and desktop malware etc, yes it's entirely possible that you have installed an extension or app that is causing your phone or computer related issues. Or previous malware install / exploit. Unfortunately there isn't much I can do to help debug that, if that's the case. My advice is to be very choosy with what extensions you install into your browsers as many are compromised. Certainly, anything from Google / Android is something to be very wary of as they've proven to have incredibly lax standards for screening the millions of apps in the Google Play App Store, eg:

 
Last edited:
Member
Joined 2011
Paid Member
Dear Jason,

load time is significant better and only a few non-diyaudio links are viewable for my ads-free account. Of course google still tracks my requests and skimresources knows everything I do here :D.

Thank you for removing the ads waterfall! :)

BR, Toni
Code:
__http://www.diyaudio.com/forums/forum-problems/315210-malware-diyaudio-homepage-loads-websites.html (HTTP/1.1 200 OK 436ms)
__http://files.diyaudio.com/forums/clientscript/vbulletin_important.css (HTTP/1.1 304 Not Modified 18ms)
__http://files.diyaudio.com/min/css/css2.css (HTTP/1.1 304 Not Modified 24ms)
__http://files.diyaudio.com/min/js/vb7.js (HTTP/1.1 304 Not Modified 42ms)
__http://files.diyaudio.com/forums/clientscript/tcattd_imageresizer.js (HTTP/1.1 304 Not Modified 48ms)
__https://www.googletagservices.com/tag/js/gpt.js (HTTP/2.0 304 Not Modified 60ms)
__http://files.diyaudio.com/min/js/hs2.js (HTTP/1.1 304 Not Modified 44ms)
__http://files.diyaudio.com/forums/clientscript/vbulletin_post_loader.js (HTTP/1.1 304 Not Modified 50ms)
__http://files.diyaudio.com/forums/vault/resources/css/cache/d46fbf711359c8cc407815c4e8f6da02c1e888d7.css (HTTP/1.1 304 Not Modified 53ms)
__http://www.google.com/coop/cse/brand (HTTP/1.1 302 Found 59ms)
__http://files.diyaudio.com/forums/clientscript/vbulletin_css/style-2cecccb0-00010.css (HTTP/1.1 304 Not Modified 52ms)
__http://files.diyaudio.com/forums/clientscript/vbulletin_multi_quote_mod2.js (HTTP/1.1 304 Not Modified 20ms)
__http://files.diyaudio.com/forums/clientscript/vbulletin_textedit.js (HTTP/1.1 304 Not Modified 24ms)
__http://files.diyaudio.com/forums/clientscript/vbulletin_quick_edit.js (HTTP/1.1 304 Not Modified 28ms)
__http://files.diyaudio.com/forums/clientscript/vbulletin_quick_reply.js (HTTP/1.1 304 Not Modified 30ms)
__http://files.diyaudio.com/forums/clientscript/vbulletin_ajax_threadrate.js (HTTP/1.1 304 Not Modified 32ms)
__http://s.skimresources.com/js/<removed>.skimlinks.js (HTTP/1.1 304 Not Modified 40ms)
__http://files.diyaudio.com/forums/vault/resources/js/y/yui/yui-min.js (HTTP/1.1 304 Not Modified 40ms)
__http://files.diyaudio.com/forums/vault/resources/js/base.js (HTTP/1.1 304 Not Modified 39ms)
__http://files.diyaudio.com/forums/vault/resources/js/vb3/base.js (HTTP/1.1 304 Not Modified 46ms)
__http://files.diyaudio.com/forums/vault/resources/js/editor.js (HTTP/1.1 304 Not Modified 49ms)
__http://files.diyaudio.com/forums/vault/resources/js/vb3/editor.js (HTTP/1.1 304 Not Modified 53ms)
__http://files.diyaudio.com/forums/vault/resources/js/bbcode.js (HTTP/1.1 304 Not Modified 57ms)
__http://files.diyaudio.com/forums/vault/resources/js/vb3/bbcode.js (HTTP/1.1 304 Not Modified 66ms)
__http://files.diyaudio.com/forums/clientscript/vbulletin_editor.css (HTTP/1.1 304 Not Modified 27ms)
__https://adservice.google.com/adsid/integrator.js (HTTP/2.0 200 OK 35ms)
__https://securepubads.g.doubleclick.net/gpt/pubads_impl_168.js (HTTP/2.0 200 OK 0ms)
__https://cse.google.com/coop/cse/brand (HTTP/2.0 200 OK 33ms)
__http://files.diyaudio.com/forums/images/diy/backgroundwaves.jpg (HTTP/1.1 304 Not Modified 58ms)
__http://files.diyaudio.com/forums/images/diy/misc/navbits_start.gif (HTTP/1.1 304 Not Modified 28ms)
__http://files.diyaudio.com/forums/images/diy/misc/navbits_finallink_ltr.gif (HTTP/1.1 304 Not Modified 28ms)
__http://files.diyaudio.com/forums/images/diy/misc/menu_open.gif (HTTP/1.1 304 Not Modified 33ms)
__http://files.diyaudio.com/forums/images/diy/buttons/reply.gif (HTTP/1.1 304 Not Modified 38ms)
__http://files.diyaudio.com/forums/images/statusicon/post_old.gif (HTTP/1.1 304 Not Modified 41ms)
__http://files.diyaudio.com/forums/images/statusicon/user_online.gif (HTTP/1.1 304 Not Modified 56ms)
__http://files.diyaudio.com/forums/images/diy/misc/flags/Austria.gif (HTTP/1.1 304 Not Modified 61ms)
__http://www.diyaudio.com/forums/images/diy/circlestar2.gif (HTTP/1.1 304 Not Modified 156ms)
__http://www.diyaudio.com/forums/images/icons/icon1.gif (HTTP/1.1 304 Not Modified 160ms)
__http://www.diyaudio.com/forums/attachments/forum-problems/647397d1511431195t-malware-diyaudio-homepage-loads-websites-diyaudio_malware-png (HTTP/1.1 304 Not Modified 309ms)
__http://files.diyaudio.com/forums/images/diy/buttons/report.gif (HTTP/1.1 304 Not Modified 64ms)
__http://files.diyaudio.com/forums/images/diy/misc/progress.gif (HTTP/1.1 304 Not Modified 67ms)
__http://files.diyaudio.com/forums/images/diy/buttons/edit.gif (HTTP/1.1 304 Not Modified 70ms)
__http://files.diyaudio.com/forums/images/diy/buttons/quote.gif (HTTP/1.1 304 Not Modified 83ms)
__http://files.diyaudio.com/forums/images/diy/buttons/multiquote_off.gif (HTTP/1.1 304 Not Modified 92ms)
__http://files.diyaudio.com/forums/images/diy/buttons/quickreply.gif (HTTP/1.1 304 Not Modified 110ms)
__http://files.diyaudio.com/forums/images/diy/misc/flags/United%20States.gif (HTTP/1.1 304 Not Modified 119ms)
__http://files.diyaudio.com/forums/images/statusicon/user_offline.gif (HTTP/1.1 304 Not Modified 132ms)
__http://files.diyaudio.com/forums/images/diy/misc/flags/Norway.gif (HTTP/1.1 304 Not Modified 147ms)
__http://www.diyaudio.com/forums/attachments/forum-problems/647592d1511527911t-malware-diyaudio-homepage-loads-websites-screenshot_2017-11-24-07-50-41-jpg (HTTP/1.1 304 Not Modified 290ms)
__http://www.diyaudio.com/forums/attachments/forum-problems/647593d1511527911t-malware-diyaudio-homepage-loads-websites-screenshot_2017-11-24-07-50-31-jpg (HTTP/1.1 304 Not Modified 298ms)
__http://files.diyaudio.com/forums/images/diy/misc/flags/Thailand.gif (HTTP/1.1 304 Not Modified 153ms)
__http://files.diyaudio.com/forums/images/smilies/xeye.gif (HTTP/1.1 304 Not Modified 179ms)
__http://files.diyaudio.com/forums/images/diy/buttons/viewpost.gif (HTTP/1.1 304 Not Modified 187ms)
__http://files.diyaudio.com/forums/images/diy/misc/flags/Australia.gif (HTTP/1.1 304 Not Modified 192ms)
__https://www.google-analytics.com/analytics.js (HTTP/2.0 304 Not Modified 30ms)
__http://files.diyaudio.com/forums/images/editor/removeformat.gif (HTTP/1.1 304 Not Modified 25ms)
__http://files.diyaudio.com/forums/images/editor/separator.gif (HTTP/1.1 304 Not Modified 25ms)
__http://files.diyaudio.com/forums/images/editor/bold.gif (HTTP/1.1 304 Not Modified 30ms)
__http://files.diyaudio.com/forums/images/editor/italic.gif (HTTP/1.1 304 Not Modified 34ms)
__http://files.diyaudio.com/forums/images/editor/underline.gif (HTTP/1.1 304 Not Modified 38ms)
__http://files.diyaudio.com/forums/images/editor/color.gif (HTTP/1.1 304 Not Modified 46ms)
__http://www.diyaudio.com/forums/clear.gif (HTTP/1.1 304 Not Modified 186ms)
__http://files.diyaudio.com/forums/images/editor/menupop.gif (HTTP/1.1 304 Not Modified 52ms)
__http://files.diyaudio.com/forums/images/editor/createlink.gif (HTTP/1.1 304 Not Modified 61ms)
__http://files.diyaudio.com/forums/images/editor/insertimage.gif (HTTP/1.1 304 Not Modified 75ms)
__http://files.diyaudio.com/forums/images/editor/quote.gif (HTTP/1.1 304 Not Modified 80ms)
__http://files.diyaudio.com/forums/images/editor/resize_0.gif (HTTP/1.1 304 Not Modified 85ms)
__http://files.diyaudio.com/forums/images/editor/resize_1.gif (HTTP/1.1 304 Not Modified 87ms)
__http://files.diyaudio.com/forums/images/editor/switchmode.gif (HTTP/1.1 304 Not Modified 24ms)
__http://files.diyaudio.com/forums/images/diy/logo-violet.png (HTTP/1.1 304 Not Modified 69ms)
__http://files.diyaudio.com/forums/images/gradients/gradient_tcat.gif (HTTP/1.1 304 Not Modified 24ms)
__http://files.diyaudio.com/forums/clientscript/highslide/graphics/zoomin.cur (HTTP/1.1 304 Not Modified 317ms)
__http://files.diyaudio.com/forums/images/gradients/gradient_panelsurround.gif (HTTP/1.1 304 Not Modified 85ms)
__http://files.diyaudio.com/forums/images/gradients/gradient_panel.gif (HTTP/1.1 304 Not Modified 79ms)
__http://files.diyaudio.com/forums/images/diy/buttons/printer.gif (HTTP/1.1 304 Not Modified 18ms)
__http://files.diyaudio.com/forums/images/diy/buttons/sendtofriend.gif (HTTP/1.1 304 Not Modified 26ms)
__http://files.diyaudio.com/forums/images/diy/buttons/subscribe.gif (HTTP/1.1 304 Not Modified 27ms)
__http://files.diyaudio.com/forums/images/diy/buttons/addpoll.gif (HTTP/1.1 304 Not Modified 37ms)
__http://files.diyaudio.com/forums/images/rating/rating_5.gif (HTTP/1.1 304 Not Modified 49ms)
__http://files.diyaudio.com/forums/images/rating/rating_4.gif (HTTP/1.1 304 Not Modified 45ms)
__http://files.diyaudio.com/forums/images/rating/rating_3.gif (HTTP/1.1 304 Not Modified 52ms)
__http://files.diyaudio.com/forums/images/rating/rating_2.gif (HTTP/1.1 304 Not Modified 54ms)
__http://files.diyaudio.com/forums/images/rating/rating_1.gif (HTTP/1.1 304 Not Modified 58ms)
__http://files.diyaudio.com/forums/images/diy/buttons/collapse_thead.gif (HTTP/1.1 304 Not Modified 64ms)
__http://files.diyaudio.com/forums/images/diy/buttons/collapse_tcat.gif (HTTP/1.1 304 Not Modified 66ms)
__http://p.skimresources.com/px.gif (HTTP/1.1 200 OK 68ms)
__http://p.skimresources.com/px.gif (HTTP/1.1 200 OK 72ms)
__http://r.skimresources.com/api/ (HTTP/1.1 302 Moved Temporarily 34ms)
__http://files.diyaudio.com/forums/yui_loader.php (HTTP/1.1 301 Moved Permanently 160ms)
__http://files.diyaudio.com/forums/images/gradients/gradient_thead.gif (HTTP/1.1 304 Not Modified 26ms)
__http://r.skimresources.com/api/ (HTTP/1.1 302 Moved Temporarily 37ms)
__http://r.skimresources.com/api/ (HTTP/1.1 200 OK 33ms)
__http://www.diyaudio.com/forums/yui_loader.php (HTTP/1.1 304 Not Modified 144ms)
__http://r.skimresources.com/api/ (HTTP/1.1 200 OK 74ms)
__https://www.google-analytics.com/collect (HTTP/2.0 200 OK 21ms)
__https://js-agent.newrelic.com/nr-1059.min.js (HTTP/2.0 200 OK 0ms)
__http://files.diyaudio.com/forums/clientscript/highslide/graphics/outlines/drop-shadow.png (HTTP/1.1 304 Not Modified 27ms)
__http://files.diyaudio.com/forums/clientscript/highslide/graphics/zoomout.cur (HTTP/1.1 304 Not Modified 148ms)
__http://tpc.googlesyndication.com/safeframe/1-0-14/html/container.html (HTTP/1.1 200 OK 0ms)
__https://securepubads.g.doubleclick.net/static/3p_cookie.html (HTTP/2.0 200 OK 0ms)
__http://files.diyaudio.com/forums/clientscript/highslide/graphics/loader.gif (HTTP/1.1 304 Not Modified 26ms)
__https://bam.nr-data.net/1/<removed> (HTTP/1.1 200 OK 130ms)
__http://www.diyaudio.com/forums/attachments/forum-problems/647397d1511431195-malware-diyaudio-homepage-loads-websites-diyaudio_malware-png (HTTP/1.1 304 Not Modified 141ms)
__http://www.diyaudio.com/forums/attachments/forum-problems/647592d1511527911-malware-diyaudio-homepage-loads-websites-screenshot_2017-11-24-07-50-41-jpg (HTTP/1.1 304 Not Modified 141ms)
__http://www.diyaudio.com/forums/attachments/forum-problems/647593d1511527911-malware-diyaudio-homepage-loads-websites-screenshot_2017-11-24-07-50-31-jpg (HTTP/1.1 304 Not Modified 141ms)
 
Okay, this is not being triggered by a virus on my phone, and there are no extensions for chrome on Android. I am 1000% sure of this. It is triggered by bad ads. It was only happening on diyaudio... No other web sites (that I visit).

That said, it does not appear to be happening anymore. Perhaps it is related to the change in advertising content.

I was running chrome developer tools on Windows, browser set to a Nexus 5, and could see the ads popping up in the console.

Anyway, I am glad it seems to be fixed.
 
Switches things on and off again
Joined 2000
Paid Member
Thanks Brian. I have spoken to our ad tech partner and they seem to be as confused as I am about how we ended up having a remnant waterfall live on diyAudio. Not just that, but we were meant to be in "safe mode" at the moment, using just Google AdExchange (a more exclusive/premium version of Adsense available only larger sites). So, again, thanks for the bug reports. I will post an update when I know more.
 
Switches things on and off again
Joined 2000
Paid Member
I'd like to thank everyone for last week reporting these problems. Your feedback was really valuable.

First of all, I want to make clear that your security is my #1 priority. We need to keep the wheels of the forum running, so we need ad revenue, but not at the cost of frustrating our member or worse, potentially exposing them to malware. As a result of your feedback last week we totally disabled 3rd party ads until a solution could be found.

Our ad tech partners had been mulling a solution to this issue for some time with a company called Confiant (co-incidentally the same people who wrote the above blog post quoted by PRR). To explain it simply, Confiant offers a "malware scanner" for ads, to ensure anything dodgy is blocked before being served and never gets past their "gatekeeper".

I'm very happy to announce that about 48 hours ago we re-launched using their technology. From now on, every single ad impression from 3rd parties will be passed through Confiant to ensure that they are scanned.

Barry - based on what I have been told, it should be impossible for such a "open in app" redirection to make it through Confiant. Perhaps it came from another source (such as Google). It's possible "one slipped through the net", but this makes it even more important from now on to get the details of any such occurrence (which should now be as rare as a blue moon - we're paying for this protection and it should work well).

  1. If you think the action of clicking a link is opening the popup, please follow the steps below to try and capture the ad code that was on the original page.
  2. If you think the new page that is loaded is causing the behavior, please try to capture the ad code from the new page
  3. If you are able to copy the URL from the status bar in your screenshot, that would be great (I know sometimes these things take focus away from the URL bar and make it impossible to copy that information)
  4. Please advise your config (OS, Browser)

How to report a bad bad:
  1. Take a screenshot of the ad (or redirect / app in this case)
  2. Hover your mouse over the ad. Right-click on the ad and select "inspect". Take a screenshot of the code snippet that appears highlighted.
  3. Using ctrl+F (PC) or command+F (Mac) and search for "[sovrn] Banner". If you find a match, take a screenshot of any code snippets that appear (if any).
  4. Send screenshots to badads@diyaudio.com. This will go straight to myself and I will take immediate action to permanently block that advertiser / network and find out how they got through.
 
Last edited:
Hi Jason;

The “open in app” redirect hit me four times to get to this page. The screen freezes at this point and all I can do is go back and reopen the page until it lets me through.

I never open the popups here or anywhere for that matter. It happens just navigating from thread to thread on just multi way for instance.

I am on an iPhone 6s.

I will see if I can glean any information.

Thanks again.
Barry.
 
Last edited:
This is all I am able to see;

The redirect opens a box in the middle of the screen that says Open in “App Store?”

The box at the top of the screen that tells me where I am only says data.

The screen seems inactive if I try to use the buttons that say yes or cancel.

I tried to send the screen to myself and what it is trying to send is:

data:text/html;base64.PCFETONUWBFIGhOb...

Thats all I can see.

When I try to send it to me I get a wont send error, use a proper 10 digit number. What it looks like it is trying to use is this number:

+1(1)(216)116-11

If I send it to “notes”, nothing shows up.

This is all I can see from here. If you have further suggestions for me I will be glad to help.

All the best,
Barry.
 
Just like to report that since my first and second run in's with redirection, I have had no further problems on a PC running Win 7 and IE 11.

I spent an Hour possibly two reading through "6L6's" Excellent guide to building the "Pass F5" last night, so lots of pages and lots of photos, but all went without a hitch.
 
Switches things on and off again
Joined 2000
Paid Member
Well, I'm not sure what to make of this. I've just been advised by our ad tech partners that they made a big mistake in requesting me to switch them back on / miscommunication in their chain of command. They didn't actually have Confiant turned on for us yet. I have now reverted to our old system and switched them off. Sigh. Obviously, it's impossible for me to give you accurate information when I am not given accurate information myself, and Barry (and everyone else) I sincerely apologize for this error.
 
I got the “Open in App” redirect over and over again this morning after a week of diy bliss.

Just the same as I have described before.

Can I donate and just turn it all off? The adds I mean? The site is unusable to me when it is like this. It took me eight or nine attempts to get here.

If I am the only user having trouble just tell me.

Thank you, sincerely.

Barry.
 
Switches things on and off again
Joined 2000
Paid Member
Hey guys. I have spoken with our ad tech partner, and we have agreed that the present situation is untenable and based on your feedback, it appears that Confiant, which should have been the "Holy Grail", doesn't appear to be working. It's possible it is, and there is another cause of the issue, but it's incredibly hard to debug this kind of thing.

I have gone back to our old system (vanilla Google Adsense) and that's where we'll stay for the foreseeable future. My focus needs to be on upgrading the site to XenForo 2 (which is now finally released) and providing the best experience possible for diyAudio visitors. Anything other than that is counter productive.

Barry - yes, if you donate (any amount) using the donation link on diyAudio, you get a "donation star" under your name and various other benefits including the ability to turn off ads.
 
Status
This old topic is closed. If you want to reopen this topic, contact a moderator using the "Report Post" button.