
ISP's have long sought to monetize their consumer's "Internet experience"—there's a reason why Bellsouth/AT&T will offer to set your homepage to www.bellsouth.net when you install the company's software instead of, say, CNN—but certain internet service providers have apparently gone too far in their search for additional revenue streams. According to Dan Kaminsky and Jason Larsen (PPT) and as reported by the Washington Post, certain ISPs have turned the responsibility of ad streaming over to a third-party vendor, Barefruit, who managed to bungle the job.
Qwest, Verizon, and Earthlink have all contracted with a company named Barefruit to handle their advertising interests.
And by doing so they are exposing users to cross-scripting exploits.
You're in Easy Mode. If you prefer, you can use XHTML Mode instead. |