Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I actually found an issue that gave me real pause:

My Mother's Windows laptop had malware so I used a free version of Malwarebytes to clean it up. When I opened up my Linux based laptop and logged into Facebook, the very first advertisement was for Malwarebytes. I have never seen a virus ad or basically any other software advert before.

I've never logged into anything using my name or email on her laptop. Amazon's Alexis was listening in the background but I never said "Malwarebytes" outloud. I did talk out loud about viruses. My phone was off because I forgot my charger. My Mother's phone was also off.

I ruled out Alexis for a variety of reasons. I can think only one possibility. Google Chrome, which we both use, is the mostly likely culprit. Chrome could have accessed the camera when I downloaded Malwarebytes, used facial recognition and shared that data with Facebook. Web pages are sandboxed but Chrome itself has complete access to hardware.



> I actually found an issue that gave me real pause: My Mother's Windows laptop had malware so I used a free version of Malwarebytes to clean it up. When I opened up my Linux based laptop and logged into Facebook

Its simple: as Mother's laptop & your laptop connected to the same router IP/LAN, Facebook may recognize all PCs as "family" and decide to drop similar ads to all in the house; alternatively if your Facebook profiles connected as "family relationship", ads may enter from back door.

0-day issue you missed to fix firstly: replace Windows to Linux on Mother's PC right before connect it to the Internet.

Next issue was your try to "fix Windows" using "freeware antivirus app".


Thanks for clarifying that. Yes were on the same wireless network, so we probably all received Malwarebytes adverts. I did think of that family connection: Facebook probably realizes I fixed her computer without any detective work at all. Mom can't run Linux. The Malwarebytes free version (expires in 30 days) actually does a good job. I'm probably going to buy her a copy because she's 82 and doesn't understand she should say no to malicious Chrome extensions or other junk. In this case, the malware got her credit card number and some charges in San Francisco showed up, which the CC company was smart enough to decline.


> I'm probably going to buy her a copy

I may not teach here, but that would be just ugly temporary workaround... but not fix.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: