Find Out Which Companies Are Tracking You with This New Tool
DecryptAds exposes advertising and data tracking entities.
1The Dark Side of Ad Data Tracking
Websites and mobile apps disclose companies that collect user data and display ads in ads.txt and app-ads.txt files. However, this information is often hidden within large ad platforms. DecryptAds scrapes this data and makes it accessible to everyone. For example, espn.com was found to have 143 ad partners and 19 data brokers.
2How DecryptAds Works
DecryptAds continuously scans files like ads.txt, app-ads.txt, and sellers.json published by websites and apps. These files specify which companies can display ads or collect data. The service cross-references this data to visualize the ad ecosystem tracking users. It is particularly useful for identifying sources of malicious ads.
3Privacy and Security Use Cases
DecryptAds approaches adtech from a security perspective. The service helps track down malware-spreading ads, identify ad networks in adversarial nations, and detect AI-generated fake websites. It flags adtech companies based in 'geo-risk' areas like China and Russia with conspicuous warnings.
4High-Risk Advertising Partners
DecryptAds revealed that espn.com works with four ad firms based in Russia, China, or the UAE. Between Digital, despite listing a New York address, is flagged as a Russian company. Its publisher offers are processed through Alfa Bank, a sanctioned Russian bank. Between Digital collects ad data on ~55,000 websites.
5Risks on Military News Sites
Top U.S. military news sites (armytimes.com, defensenews.com, etc.) allow Between Digital and firms in the UAE and Panama to serve ads and track users. This poses significant privacy risks, especially for sensitive user data collection.
6Opera Browser’s Chinese Ties
The Opera browser has been majority-owned by Chinese firm Kunlun Tech since 2016. While its operational HQ remains in Norway, this raises concerns that user data may be subject to Chinese laws. DecryptAds helps monitor data collection by such companies.
7Data Broker Registration Laws
California, Oregon, Texas, and Vermont have passed laws requiring data brokers to register if they buy/sell consumer data. DecryptAds found nearly half of espn.com’s data brokers collect visitor geolocation data, while three admit collecting device fingerprints and sensitive personal information.
8Problems in the Ad Supply Chain
DecryptAds highlights integrity issues in the ad supply chain, such as broken cross-references between files, cloned declaration sets, and bid paths absent from publishers’ authorized-seller lists. Edwards notes these files have gone largely unpoliced for years.
9Between Digital’s Dual Role
Between Digital is listed as both publisher and reseller on ~2/3 of its portfolio. Edwards says this creates opportunities to direct client spend to owned properties, risking conflicts of interest. The firm’s practices undermine trust in the ad ecosystem.
10Lack of Oversight in Adtech
Edwards emphasizes that ads.txt and app-ads.txt files have seen little oversight for years, allowing bad actors to manipulate the system. DecryptAds fills this gap by helping users understand which companies collect their data and serve ads.
11What It Means for Users
DecryptAds helps users discover which companies track them. Ads from geo-risk areas pose significant privacy and security threats. The service empowers users to recognize these risks and take necessary precautions.
12The Need for Transparency in Ad Tech
DecryptAds brings transparency to the ad ecosystem, helping users understand how their data is used. It plays a critical role in detecting malicious ads and data collectors. Such tools are becoming increasingly vital for protecting digital privacy.
Original article: Krebs on Security — Yeni Araçla Hangi Şirketlerin Sizi Takip Ettiğini Öğrenin