Since when do people pay ad money to push their cve’s?