Stanford University computer scientist Jonathan Mayer was recently Web browsing at a U.S. airport when he noticed there were too many online advertisements.
The website for Stanford, for example, displayed a pop-up ad for a 60 percent discount on jewelry. The Federal Communications Commission website appeared to be advertising ladies' boots.
An example of an ad said to be injected over the FCC's website while on an AT&T free airport Wi-Fi hotspot. Screenshot.
"The web had sprouted ads," wrote Mayer on his blog. "Lots of them, in places they didn't belong."
The Wi-Fi hotspot he was using at Dulles Airport near Washington, D.C., is run by AT&T, he said. Before boarding, Mayer wrote he analyzed the Web traffic to figure out exactly what was happening.
The hotspot was interfering with non-encrypted Web traffic and displaying on pages that were not affiliated with the website. It's often referred to as "injecting" ads and is a somewhat controversial practice.
As with many things involving the Internet, nothing free is really free. Mayer points out that there's an incentive for AT&T to try to get some income off the back of a free service, "but this model of advertising injection is particularly unsavory."
The practice exposes a person's browsing activity "to an undisclosed and untrusted business," he wrote.
Mayer wrote that the terms of service for AT&T’s hotspot do not mention RaGaPa or that ads are injected.
RaGaPa, based in Sunnyvale, California, claims to be a pioneer in in-browser content insertion technology, according to its website.
A data sheet on its hotspot monetization technology says the company can do precise location and profile-based ad targeting as well as overlay ads over any website.
Customers can either use a RaGaPa appliance for injecting ads, or use its cloud-based product, which routes users’ hotspot traffic through the company’s servers.
In order to inject ads, RaGaPa monitors a person's Internet browsing. Screenshot.
Mayer contends injecting ads in this way is harmful to users. For example, it can tarnish websites and their content since the ads aren’t marked as coming from the Wi-Fi service.
Also, "it introduces security and breakage risks, since website developers generally don’t plan for extra scripts and layout elements," he wrote.
Sign up for CIO Asia eNewsletters.