Select Page

Welcome to the Data Blog 🤖

Thoughts on User Data, Privacy & the Global Data Supply Chain

Do you enjoy niche data supply research and trying to stay on top of various user data news and privacy laws? Check out some of the content below or follow Zach Edwards on Twitter for up-to-date ramblings.

Who fixes cached search results? An odd Facebook user vulnerability

There are numerous coding practices and server setups that can result in unexpected cached pages -- pages that shouldn't be able to be served to another user. One of the most-abused page caching features is "search index caching" -- aka using a website's search feature to inject your own content/domains/spam into a permanently cached version of that page, so that other users who stumble across that page via Google or other means, they could see content on the search result page input by...

Advertising & Analytics Red Team: Attribution Attacks via Facebook’s “fbclid” Parameter

As someone who has been working on enterprise digital stacks for over 12 years and building analytics stacks for over 7 years, I've broken my fair-share of client websites with malformed javascript. It happens to pretty much every analytics professional *on accident* at semi-regular intervals --  but there are very few organizations that have teams trying to take down the data layer on a daily basis *on purpose* - an Advertising & Analytics Red Team. When was the last time you heard about...

Whitehat ad fraud test: Hijacking the default Shopify Google Analytics pixel and hiding the errors

Here's a short video explaining the scope of this vulnerability and my initial test: I recently came across a website that I won't name that had a very interesting problem -- certain pages had almost no 3rd party javascript firing, but they had dozens of javascript pixels hardcoded and the pages were setup to fire additional javascript via tag managers. Something was broken, but it was broken in a weird way... A few javascript pixels *were firing* and firing without any errors. After...

Facebook‘s Ongoing VIP-User Data Exfiltration Vulnerability via Adobe’s Marketo Software & Why…

Facebook removed auto-fill functionality on forms that used Adobe’s Marketo “mkt_tok” value and took other steps to protect Facebook users from one-token-user-authentication user data exfiltration risks. Update: On January 29, 2019, I heard back from Facebook (27-days after I initially published this research) and they informed me they had taken action with Adobe to turn off auto-fill functionality on their forms based on the mkt_tok URL parameter. Facebook’s about-face on this type of URL...

Shopify vs. Amazon: Which One Tanked Pavlok’s Sales 34%? | Guest Post from Maneesh Sethi

This a guest post from Maneesh Sethi, Founder, and CEO of Pavlok (https://www.pavlok.com), an innovative company that creates wearables and technology designed to help people break bad habits and change their behavior for the better. Victory Medium and Pavlok have worked together for a number of years - this original a/b test was conducted nearly 18 months ago in Spring 2017, but we decided to embargo the results due to competitors attempting to model Pavlok's industry-leading strategies...

Visibility is Inclusion : Why Global Metadata Standards Need Inclusivity Frameworks & Public Feedback on the IAB ID-Level Data Segment Taxonomy

A couple weeks ago I submitted submitted public feedback on the IAB Tech Lab's proposed ID-Level Data Transparency Standards. IAB's Taxonomy sets forth new metadata standards for online advertising being deployed later this year. In other words, the Taxonomy is poised to define how advertisers identify and define audiences. These new audience standards are a game-changer - a new kind of standardization for online ads that aims to change the way audiences are organized on a global scale....

Zach Edwards on UpNext Podcast with Gabriella Mirabeli

Written by Maggie Lawson Thank you, Gabriella Mirabelli, for having Zach Edwards, founder of Victory Medium, on your show and thank you for all your thought leadership around online advertising and digital marketing! Take a listen to their interview about the Cookie Exchange, the global data supply landscape, advertising monopolies and more! Check out her post on LinkedIn here:  Or listen to the full podcast here.

Ken Auletta & Frenemies

Written by Maggie Lawson Anyone who is interested in the advertising business at all will soon know Ken Auletta’s name if they don’t already. Auletta has written the Annals of Communication column for The New Yorker since 1992 and he is the author of 11 books, including his newest book, Frenemies: The Epic Disruption of the Ad Business (and Everything Else). Frenemies is a very interesting book in which Auletta uncovers the real world of advertising and marketing, who are both under...

The Cookie Exchange — How GDPR Created a New Market for Pseudonymized Cookies

6/6/18 Update — Click here to watch a summary video of this proposal — the video is 45 minutes long but attempts to explain some of the more complicated details. Thanks for watching and reading and all the feedback! GDPR goes into effect today, May 25th, 2018, and creates a massive shift in global expectations for user privacy. Users have made it clear that the state of advertising and tracking is unacceptable, publishers are going broke, and the market continues to swing more and more out of...

Why Would Google’s Artificial Intelligence Director Leave for Apple?

Apple, Google and Amazon are currently locked in an epic quest over the following multi-trillion dollar question: which company will be the first to maintain 99% accuracy for speech recognition from Natural Language Processing (NLP) in any and every scenario and context, for every language, dialect and slang? Google AI vs Apple AI vs Amazon AI Beyond just accurate intent and entity matching, there is another race in speech recognition — the race to organize and categorize audio dark...

Our Data Studio Dashboards

We're proudly building some beautiful and insightful Data Studio reports that combine all advertising and website data into clean and filterable pages.  Click here to view a demo Google Data Studio report using dummy Google Analytics and advertising data.  Reach out to us at contact@victorymedium.com if you're looking to jump into the dashboards game and flatten out the data in your organization. 

Integrating Organizing Tactics into Data.World

Data.World intends to organize all of the world’s data, but they still need to deploy distributed organizing strategies. The goal of Data.World has broadly been described as attempting to house all of the data for the entire world. It’s a great vision and something that needs to exist. If they’re going to be successful organizing and updating massive amounts of data, they will need tens of thousands of volunteers helping with the mission. There are plenty of online organizations that are ideal...

Gymboree makes kids clothes & used the same ecommerce software for the last 13+ years …they’re now…

How often should a billion-dollar legacy retail brand upgrade their online ecommerce infrastructure? Gymboree, a 40+ year-old children’s clothing company with over 1,300 physical stores (under several brand names) has taken the all-too-familiar steps to initiate bankruptcy proceedings to restructure the company — news reports indicates that 300–400 stores will close under the restructuring. It’s clear based on this physical retail restructuring that the company is making tough decisions about...

Facebook will dominate external ads because of better tracking and revenue for advertisers

The Wall Street Journal is reporting Facebook is about to launch video ads on their Instant Articles tech stack. This should come as no surprise -- in April 2015, Facebook filed a patent to combine a unique content network + video advertising. Business Insider had a fascinating take on how this could change the advertising market. It's been the writing on the wall for a year now! ...  No big surprise, Facebook has taken the steps to dominating external ads! http://t.co/8MwZ6hYLTs...