Playable Ads: What REALLY are they?
summary
Uses a man‑in‑the‑middle proxy on a Raspberry Pi with an installed certificate to intercept Unity Ads auction JSON (device fields, cached ad hashes) and the returned HTML/JavaScript which are Unity‑exported web games not hidden miners. Replaces icons and images successfully, fixes video size/headers to stop black screens, and forces rewards by serving a one‑second video replacement to skip ads. Discovers the Unity Ads mraid URL turns any video into a playable, but cannot fully remove the playable timer; brute‑forcing IDs is infeasible (hundreds of millions).
AI-written summary · about
chapters (9)
- 0:00Start
- 0:18Who Am I
- 1:01Roll Call
- 8:17Example of a Playable Ad
- 10:31Angry Birds Dream Blast
- 20:24Playable Ads
- 23:34What What Are Playable Ads
- 34:19Replacing the Game Icon
- 34:49Palm Reading Game
related talks
24mHacking Playable Ads: What REALLY are they?
16mBeyond the surface: uncovering hidden threats in online ads
10mWeaver: Inserting Ads in a Live Stream
30mTaming the World’s Largest Trojan Horse
21mThink outside the server
19mWhich mobile fraud solution is right for you?
55mModern Malvertising ...
21mPERCIVAL: Making In-Browser Perceptual Ad Blocking Practical with Deep Learning