Thread · 2 tweets · 12 Jan 2021

Not so much the ad server as the ad itself. Basically, code in the ad can go "if (thingsLookSafe) then doBadThing()". That means that when the ad server runs tests on it, it looks safe and well-behaved, but when it gets a shot it can act badly.

So more like a customer at the bar was acting all nice and friendly, buying rounds, waiting for a drunk to exit and pounce.