Amazon WorkSpaces Adds Multi-Factor Authentication (MFA) Support PCoIP Zero Clients

Amazon WorkSpaces now supports multi-factor authentication when users access their WorkSpaces from PCoIP Zero Clients running the PCOIP firmware version 6.0.0 (or newer). This allows administrators to require an additional factor of authentication when users are accessing their WorkSpaces from a PCoIP Zero Client device. This update also removes the need to use the PCoIP Connection Manager to connect to WorkSpaces, making it easier for you to use PCoIP Zero Clients in your organization.  
Quelle: aws.amazon.com

Myspace Looked Like It Was Back. Actually, It Was A Pawn In An Ad Fraud Scheme.

Myspace — the iconic social network of the early 2000s — seemed to be experiencing a resurgence this summer when millions of visitors flocked to its new video page, potentially generating a wave of ad revenue for the site’s troubled parent company, Time Inc.

But Myspace shut the page down this week after a BuzzFeed News investigation revealed that the surge in traffic came primarily from suspect sources that racked up fraudulent ad impressions. Myspace says it was completely unaware of and didn’t profit from any fraudulent traffic or impressions, and that the video page in question was hosted and managed by a partner and not by Myspace itself.

“Myspace did not agree to, participate in or condone any ad fraud activity,” said Daniella Krieger, the VP of marketing and communications for Viant, the Time Inc. subsidiary that acquired Myspace in 2011 for $35 million.

The fraud on the Myspace video page was part of a larger scheme that also found a home on GateHouse Media, a publisher of more than 600 local newspapers in 36 states. The video pages hosted on roughly 150 of its websites also saw a surge in suspect traffic and associated fraudulent ad impressions. GateHouse told BuzzFeed News it was not aware of any fraud being committed, and like Myspace it said the video pages in question were operated by a partner.

This is the latest in an ongoing catalog of fraud in programmatic advertising that continues to shake confidence in the digital media industry. Last week a BuzzFeed News investigation revealed that ad industry insiders profited from a network of “zombie websites” that used special code to trigger an avalanche of fraudulent views of video ads. The growing awareness of ad fraud among brands and agencies is causing major advertisers to pull back budgets and demand more accountability from their partners. Industry leaders expect more than $16 billion to be stolen by fraudsters this year alone.

Prior to being shut down this week, the Myspace video page — trendingvideos.myspace.com — streamed videos licensed from reputable publishers. But for months the ad fraud investigators at Social Puncher, a consulting firm, worked with BuzzFeed News reporters to track and document significant amounts of suspicious traffic being referred to that page as well as other publishers.

Once on the page, this traffic triggered automatic redirects and page refreshes that generated massive amounts of video ad impressions without any human involvement. It’s similar to how the “zombie websites” generated ad revenue, and represents a new form of ad fraud that researchers say can rack up impressions quickly and under the radar.

Audience data from web analytics firm SimilarWeb shows that between May and the end of September, trendingvideos.myspace.com received 9.7 million visits that generated over 450 million pageviews. That video page did not exist prior to April.

Fraud detection vendor DoubleVerify also independently identified the same scheme being run on Myspace and GateHouse subdomains as part of a separate investigation, and the company shared its findings with BuzzFeed News.

Alain Begun, the vice president of marketing for GateHouse, told BuzzFeed News the company is in the process of shutting down the relevant video pages on its websites and was only made aware of the issue last week when DoubleVerify warned ad exchanges about the traffic on them.

“Fraud follows the money.”

“We take any alleged impropriety very seriously and have been engaged in discussion with our programmatic exchange partners,” he said.

The focus on video ads in this scheme reinforces how important video has become for publishers — and how it can cause them to launch questionable products in the hunt for video impressions and revenue. Thanks to higher ad rates for video and an appetite for the format among brands, many publishers have enacted a so-called pivot to video strategy to capture the audience and ad dollars available. And so have fraud operations, according Wayne Gattinella, the CEO of DoubleVerify.

“Fraud follows the money. Video CPMs [cost per thousand impressions] are much higher than display, so [fraudsters are] clearly focused on where the larger dollars go,” he told BuzzFeed News. This particular fraud operation is designed “to capitalize on this incredible demand for video,” he said.

Myspace and GateHouse both point to audience vendors, video platform partners, and external malicious actors as those accountable for any fraud taking place on the video subdomains. The partners in turn say their traffic was verified by reputable verification companies and that they too are unaware of any fraud taking place, or any system that triggers automatic redirects or similar behavior.

But Social Puncher, DoubleVerify, and a third independent ad fraud researcher separately documented the malicious automatic redirects and refreshes taking place on these websites. Social Puncher alone recorded more than 200 hours of video of ads being fraudulently displayed on the Myspace and GateHouse subdomains. This footage often shows multiple video players playing at once on a single page, redirects happening between different websites without any user action, and/or editorial content being cut off by automated page refreshes in order to display more ads. All of the aforementioned activity is fraudulent because it takes place without any human activity.

“You’ve got websites that are getting some sort of inbound traffic and then this begins a cycle of autoplaying videos with ad pages refreshing and sometimes redirecting to other pages,” Roy Rosenfeld, DoubleVerify’s VP of product management, told BuzzFeed News.

This video shows what the experience looked like on the Myspace subdomain:

View Video ›

video-player.buzzfeed.com

Social Puncher recorded ads being shown during fraudulent sessions for major brands such as Coca-Cola, Fios (Verizon), State Farm, Hershey’s, the Home Depot, Chase, and at least 14 brands belonging to Procter & Gamble, such as Tide and Always.

Social Puncher

Krieger of Myspace told BuzzFeed News the trending videos subdomain was set up and hosted by a company called ScreenRush in order to test driving paid traffic to the site. The traffic was to be sourced from a website called Swagbucks that enables people to earn reward points for engaging in activities such as watching online videos.

“We contracted to purchase a limited test of traffic specifically from Swagbucks through a company called ScreenRush,” said Krieger, adding that the video subdomain “was natively hosted by ScreenRush and integrated into the Swagbucks site.”

Myspace’s goal was to pay less to acquire traffic from Swagbucks than it would earn by showing those people video ads.

This week BuzzFeed News and Social Puncher provided Myspace with information, including data from SimilarWeb, showing that hundreds of millions of pageviews had been generated on the video site from sources other than Swagbucks.

“After reviewing all of the information you provided combined with our own internal review, we have suspended the test with Swagbucks and ScreenRush, effective immediately,” said Krieger.

Similar to Myspace, Begun told BuzzFeed News that Tout, an online video platform, operates the video subdomains attached to roughly 150 of its websites. Begun said GateHouse is in the process of ending its relationship with Tout.

“We’ve been working to wind down our relationship with Tout for close to a year based on player performance issues and a poor user experience including slow load times which affected overall page load times,” he said.

As part of the relationship with Tout, GateHouse earned revenue from the ads being shown in the Tout video player. Begun said the traffic on the Tout video pages was low, as was the resulting revenue. Both GateHouse and Myspace say they were not aware of any significant spikes in traffic on these pages.

“We aren’t privy to how traffic is driven to those pages,” Begun said. “That’s probably a question better fielded thru Tout.”

“Nobody wants to disclose or be responsible for where the money of these advertisers went.”

In statements to BuzzFeed News, Tout and ScreenRush both say the traffic coming to the video pages they manage is verified by multiple reputable traffic verification companies, and they too deny any knowledge of, or participation in, fraud.

“We work closely with our publishing partner sites, brand safety vendors and multiple 3rd party verification services to confirm that Tout inventory consists of real users and is of premium quality,” wrote Trinh Bui, Tout's vice president of client services, in an email to BuzzFeed News.

Tout said it sourced some traffic for the GateHouse websites through ScreenRush, making the latter the only source of paid traffic for both Myspace and GateHouse video pages.

The finger-pointing between publishers and partners once fraud has been uncovered is common in the industry, according to Vlad Shevtsov, the director of investigations for Social Puncher. His company has been publishing fraud investigations at SadBotTrue.com for more than a year.

“Nobody wants to disclose or be responsible for where the money of these advertisers went,” Shevtsov told BuzzFeed News.

In order to execute the scheme, the suspicious traffic flowing to the video pages on Myspace and GateHouse sites was directed to special URLs that download code, which tells a web browser how long to stay on the page, when to refresh to start new ads, or when to trigger a redirect to another site in the fraud scheme so it can show video ads. The result was that the pages generated a massive number of video ad impressions with no human interaction. That’s fraud, according to definitions from the Media Rating Council, the key industry body.

The scheme is set up so a regular user visiting the websites in question is not exposed to the automatic redirects. A visitor to trendingvideos.myspace.com, for example, was shown a normal video player that displays ads only after the editorial content is completed. This is where the real traffic from Swagbucks or other reward sites was directed, researchers say.

“No user would actually spend time looking at that. A human being will not sit through this.”

But when the special URL is accessed on these subdomains, the experience is completely different. BuzzFeed News used URLs identified by Social Puncher and DoubleVerify to trigger the redirect scheme. In one case, the browser was redirected to trendingvideos.myspace.com where a video ad began to play. Over the ensuing minutes, ads played for Gillette, Spectrum (multiple times), the University of Phoenix, and for the upcoming Thor movie from Marvel Entertainment. The page automatically refreshed to show another ad before editorial content played, in effect creating a near-constant loop of ads. At times, more than one video played at the same time, further increasing the money being stolen.

“No user would actually spend time looking at that,” said Rosenfeld of DoubleVerify. “A human being will not sit through this.”

At the core of the scheme is technology that enables it to eliminate the need for human activity or even complicated bots in order to trigger ad impressions. Once a page is loaded the sites go on autopilot and rack up ad views in a constant loop until being redirected, or until a browser crashes.

It’s the same on GateHouse sites. Social Puncher and DoubleVerify separately analyzed the traffic flowing to the video subdomains on these sites and found they are benefitting from the same fraudulent traffic as Myspace. These video pages are in some cases responsible for the vast majority of traffic going to the entire site, though GateHouse says it does not factor this traffic into its audience reporting. (Myspace also said it did not install analytics tracking on its video subdomain due to the fact that it was controlled by ScreenRush.)

Still, the traffic is being measured by external analytics services. For example, the videos.salina.com page for the Salina Journal in Kansas is currently responsible for 92% of its total traffic, according to data from SimilarWeb.

Alexa, another web analytics service, shows a similar percentage. The chart showing the site’s Alexa traffic rank also illustrates how a recent surge in traffic to the video page led the Salina Journal to become one of the top 5,000 most-visited sites in the US:

Alexa

To put that into perspective, Salina has a population of just under 50,000 people, according to US Census data.

In the case of Myspace’s trending videos page, the influx of new traffic helped the site temporarily reverse an ongoing decline in its traffic rank:

Alexa

Notably, the vast majority of this new traffic to Myspace came from desktop users, which had previously made up a minority of Myspace’s visits. These new visitors also watched a huge number of videos and, by extension, ads on the videos page.

SimilarWeb found that from its launch to the end of September the average visitor to trendingvideos.myspace.com spent over 23 minutes and viewed more than 58 pages. To put that into perspective, SimilarWeb’s data for YouTube shows the average user spends 20 minutes and views an average of just under 10 pages. This means the Myspace video page run by ScreenRush almost instantly became more addictive than YouTube in terms of average time spent, and caused people to view more than five times the average number of pages.

Along with the high session time and number of pages viewed, SimilarWeb found that these new desktop visitors were referred from the same group of websites, and accounted for close to 100% of Myspace's referral traffic from May to September.

These sites had not previously referred significant traffic to Myspace. As a result, they provided the path that ad fraud researchers and BuzzFeed News followed to identify where the traffic is coming from. This helped determine whether it was the result of humans engaging with Myspace and other sites, or fraudulent traffic according to industry standards.

Prior to May, Myspace’s biggest sources of referral traffic were Wikipeda and PeekYou, an online people-search tool. “They were responsible for an average of 27% of the site's referral traffic between September and April,” according to a SimilarWeb report for BuzzFeed News. (Roughly half of Myspace’s total traffic comes from search, and another close to 30% of visitors go directly to Myspace.)

But in June and July, Wikipedia and PeekYou only accounted for a tiny percentage of all referral traffic because this new network of referral sites suddenly began throwing millions of desktop visitors and pageviews at the Myspace video page. (The company told BuzzFeed News its internal traffic logs and comScore reports did not reflect this increase in referral traffic. As noted, the video page was operated by ScreenRush and did not have Myspace analytics tracking installed.)

BuzzFeed News / SimilarWeb

The biggest group of these new referrers is more than 20 online arcade websites that were registered on similar dates and are clones of one another. They offer the same games and largely use the same website template, albeit with different colors. The source code of each site also includes the same boilerplate text in the description, “Welcome to SiteGenerator.” This shows they were all created using the same product.

Social Puncher

Traffic rank data from Alexa also shows that many of the arcade sites share identical patterns, suggesting they are receiving the exact same visitors at the exact same times, which researchers say is a telltale sign of fraudulent traffic. (Identical Alexa traffic rank patterns were also present in the sites exposed by BuzzFeed News last week.)

Social Puncher

Quelle: <a href="Myspace Looked Like It Was Back. Actually, It Was A Pawn In An Ad Fraud Scheme.“>BuzzFeed

Here's How Facebook Will Soon Let You See Who Paid For Political Ads

Facebook plans to make political advertisers register for the program, and will track down anyone trying to avoid inclusion.

Almost a month ago, Facebook CEO Mark Zuckerberg promised in a Facebook Live video that the company would require a new level of transparency for political ads. This came in response to outcry over the company’s disclosure that Russian trolls bought more than 3,000 ads on the platform.

Almost a month ago, Facebook CEO Mark Zuckerberg promised in a Facebook Live video that the company would require a new level of transparency for political ads. This came in response to outcry over the company's disclosure that Russian trolls bought more than 3,000 ads on the platform.

The known Russian troll factory spent more than $100,000 to buy the ads before and after the 2016 election. A portion of the ads were targeted by interest or geography, meaning that only the people who fit the ad parameters could see them in their News Feed.

After initially keeping them private, Facebook recently handed over the ads over to congressional investigators. And today it announced the specifics of how it plans to change the way political sponsored posts will be shown in the News Feed, and the information they will disclose.

Facebook: zuck

Facebook also announced a new measures that will affect all non-political sponsored posts. Every page will soon have a “View Ads” option that will enable you to see the current campaigns it has running.

Facebook also announced a new measures that will affect all non-political sponsored posts. Every page will soon have a "View Ads" option that will enable you to see the current campaigns it has running.

This starts rolling out in Canada next month, and will eventually move to the US and other markets. This general ads page will only show current campaigns. But a Facebook executive said the company plans to build an archive for election ads.

“However, when we expand to the United States we plan to begin building an archive of federal-election related ads so that we can show both current and historical federal-election related ads,” wrote Rob Goldman, Facebook's VP of Ads, in a blog post provided to BuzzFeed News in advance.

The post said that Facebook's efforts to change political sponsored posts will begin in the US for the 2018 federal election cycle. It will then be rolled out in other countries. The election ad archive will be collected into four year cycle

Facebook

Once rolled out, political sponsored posts will carry a “Political Ad” label under the name of the page that placed it. There will also be an “i” icon you can click to reveal more information about the entity that paid for the ad.

Once rolled out, political sponsored posts will carry a "Political Ad" label under the name of the page that placed it. There will also be an "i" icon you can click to reveal more information about the entity that paid for the ad.

Facebook

Once clicked, the “i” icon pops up a card of information about the purchaser, gives you a link to view their other ads, or enables you to follow them.

Once clicked, the "i" icon pops up a card of information about the purchaser, gives you a link to view their other ads, or enables you to follow them.

One big question is how Facebook will determine what is and isn't a political ad.

“As part of the documentation process, advertisers may be required to identify that they are running election-related advertising and verify both their entity and location,” Goldman wrote.

After a page is verified as a political advertiser, its ads will show the additional information about who they are, and their ads will go into a database of all election ads for that election. Facebook will also enable people to search and see how much money is being spent by the advertiser, the number of ad impressions being generated, and information about how ads were targeted.

As for pages that try to avoid being part of the political ads program and tracking, Facebook is planning to track them down.

“For political advertisers that do not proactively disclose themselves, we are building machine learning tools that will help us find them and require them to verify their identity,” Goldman wrote.

The company has not said whether it will roll out similar transparency features for sponsored posts on Instagram, which it also owns.

Facebook

Quelle: <a href="Here's How Facebook Will Soon Let You See Who Paid For Political Ads“>BuzzFeed

MetLife Uses Docker Enterprise Edition to Self Fund Containerization

MetLife is a 150 year old company in the business of securing promises and the information management of over 100M customers and their insurance policies. As a global company, MetLife delivers promises into every corner of the world – some of them built to last a lifetime. With this rich legacy comes a diverse portfolio of IT infrastructure to maintain those promises.
In April, Aaron Aedes from MetLife spoke about their first foray into Docker containerization with a new application, GSSP, delivered through Azure. Six months later, MetLife returns to the DockerCon stage to share their journey since this initial deployment motivated them to find other ways to leverage Docker Enterprise Edition [EE] within MetLife.
Jeff Murr, Director of Engineering for Containers and Open Source at MetLife spoke in the Day 1 DockerCon keynote session about how they are looking to scale containerization with Docker as they scale . He states that new technology typically adds more cost and overhead to an already taxed IT budget. But the Docker Modernize Traditional Apps [MTA] Program presented an opportunity to reduce the costs of their existing applications.
The MTA project at MetLife started with a single Linux Java-based application that handled the “Do Not Call / Opt out” process, a simple but important application in handling the customer experience. The app was containerized with Docker EE in a single day and they immediately saw improvements in the time to deploy and scale the application in addition to the amount of resources the app now required as a Docker EE container.

The Business Case for Traditional Apps in Docker EE
After a successful MTA POC, Jeff’s team looked at the rest of their application landscape to find other applications that were candidates for modernization.. Of the almost 6,000 applications at MetLife, 593 of them (roughly 10%) used the same technology stack as the application from the MTA POC. The resulting analysis projected a 66% total cost savings for those 593 applications. This savings represents not only the infrastructure efficiency gains but also the time saved in maintaining and supporting the application — for their US operations only. This represents tens of millions of dollars in savings for MetLife – and it all started with a single application.

“The do-not-call app wasn’t an exciting app – it is pretty exciting now.” Jeff Murr, MetLife

For Jeff’s team, this project has created a repeatable model to offer to the various application teams within MetLife whether the applications are Windows or Linux. Docker EE created a unique opportunity where the disruption itself is self-funded while providing a platform to innovate at scale. With Docker and by migrating to the cloud,MetLife is able to   flip the 80/20 maintenance-to-innovation ratio on its head.
Begin Your Journey
Companies looking to get started with Docker Enterprise Edition can take some tips from the experience at MetLife with both containerizing an existing application as well as building and deploying new microservices. The key is to start small and incrementally innovate with one app, one technology stack at a time and ease the operational changes over time, establish a pattern, rinse and repeat.

To learn more about Docker Enterprise Edition:

Learn more about Docker EE
Try Docker EE for free and view subscription plans 
Register for the Modernize Traditional Apps Digital Kit
Sign up for upcoming webinars

Hear it from the customer! Learn how @MetLife used #Docker Enterprise Edition to reduce the costs…Click To Tweet

The post MetLife Uses Docker Enterprise Edition to Self Fund Containerization appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/