I am interested in y'all's take: is enterprise-level Ad blocking a good security practice? I'd say, yes absolutely, now that Google & Doubleclick are serving malware.

@ben_smash
Definitely.
Unfortunately I am hardly even in a position to mandate this.

At my previous contract in a council we were re-designing everything, and went with Chrome (sadly) and uBlock Origin, which was great news.

We also used the Checkpoint Adverts URL category to block them too.
All public bodies should be doing something similar, there are no valid reasons not to.

In the UK, if you're a public body, you can sign up for this #NCSC service for free, which doesn't block adverts, but helps to block malware: https://www.ncsc.gov.uk/information/pdns

Hopefully there are services like this in other countries.

Protective Domain Name Service (PDNS)

Protective DNS is a recursive DNS resolver which prevents access to domains known to be malicious.

@chewie I'd love to just use an Adblock DNS provider, honestly. Unfortunately someone in marketing insisted they be able to view ads and... I guess that means the entire org gets 'em, now. Frustrating.

@ben_smash

Does that mean that you can officially blame them when someone gets hacked due to an infected ad ?? that would be nice :)

Yes, marketing departments are frustrating in multiple ways.

They always remind me of the Dilbert episode where they decide to get a marketing department and cracks start appearing in the building etc :)

@chewie I would love to see Alphabet take some responsibility for the havoc their platforms are responsible for in cyberspace. Plagarism & misinfo on Youtube, an endless stream of phishing from gmail and malvertising on Google search. I know feds have their hands full and their priorities are opaque but it would be cool to see the FTC step in and do something more than issue a light fine.

@ben_smash
Yes quite, and there's way of flagging stuff as being spammy or wrong in their search.

I don't use it for search any more, although I do use youtube, as there is a lot of decent stuff on there, and a lot of crap on rival platforms, although peertube is getting better, and the latest version sounds pretty nice.