I know we said we’d never mention MyBlogLog again, but that was before this discovery.

Maybe all the recent MBL exploits recently didn’t bother you. Maybe they seemed trivial. I don’t think people should feel the same way about this one. This isn’t even an exploit, but something that MBL is actively doing with their blog widget. If you’re not interested in the long technical version, skip to the bottom.

The first thing that happens when the browser loads the MyBlogLog javascript is the loading of another javascript file.

document.write(‘scr+ipt language=”javascript” src=”http://track3.mybloglog.com/js/jsserv.php?mblID=2006112922074849″>

I started looking at this code, and I noticed something odd. Why were the urls to google adsense and YPN servers in the code? This is the piece that caught my attention. Notice that it’s ripped from a Mint plug-in that tracks ad click stats.

//start IFrame ad tracking
//from http://www.digitalmediaminute.com/article/1715/adsense-click-pepper
var m_px=0,m_py=0,m_as_frms=new Array(),is_ie=document.all?true:false;
function m_as_init() {
var ad=document.getElementsByTagName(‘iframe’);
for(var i=0;i-1){
m_as_frms[m_as_frms.length]=new Array(ad[i], ‘http://pagead2.googlesyndication.com’, ‘Google AdSense’);
if(is_ie){ad[i].onfocus=m_trk_as;}
} else if(ad[i].src.indexOf(‘ypn-js.overture.com’) > -1) {
m_as_frms[m_as_frms.length]=new Array(ad[i], ‘http://ypn-js.overture.com’, ‘Yahoo! Publisher Network’);
if(is_ie){ad[i].onfocus=m_trk_as;}
} else {}
}

Upon further investigation, it looked like the MBL was tracking clicks and reporting them back. But this couldn’t be possible. So I made a test page. On it, I placed the MBL widget, an adsense block, and a link.

I loaded up the page, turned ieHTTPHeaders on, and clicked my external link. This is what I found at the top of my header log:

GET /tr/urltrk.php?t=2&u=http%3A//www.alnk.org/mybloglogsucks&
te=will%20mybloglog%20track%20this%20link%3F&i=2006090110210818
&now=1172264766637&d=20070223
&db=&v=N2007022315034055 HTTP/1.1
Accept: */*
Referer: http://www.dellanave.com/test.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
 5.1; SV1; .NET CLR 1.1.4322; Alexa Toolbar)
Host: track2.mybloglog.com

OK, so they’re tracking external links. Well this kinda makes sense, as they try to build a picture of who is browsing who’s communities. What about if I click the adsense ad though?

GET /tr/urltrk.php?t=2&u=http%3A//pagead2.googlesyndication.com
%23160x600&
te=Google%20AdSense%20%28160x600%29&i=2006090110210818&
now=1172264934262
&d=20070223&db=&v=N2007022315034055 HTTP/1.1
Accept: */*
Referer: http://www.dellanave.com/test.php

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
 5.1; SV1; .NET CLR 1.1.4322; Alexa Toolbar)
Host: track2.mybloglog.com

The bottom line is that MyBlogLog is tracking AdSense and YPN clicks too. (Update: They do show you ads clicks in MBL Pro. Not having Pro does NOT stop the tracking from loading.) Who else gets this data? I don’t know about you, but I’d rather keep my ad click stats to myself. So in your own word Eric, “On what planet is that not a bannable offense?”.

There’s more as always, but I think this is enough for one day (or year). I think I’ve assured I’ll never be hired by Yahoo!

Here’s a link to the javascript for when they pull it or change it:

MyBlogLog Tracking Javascript

MyBlogLog Ad Tracking Video

By Jeremy Schoemaker

Jeremy "ShoeMoney" Schoemaker is the founder & CEO of ShoeMoney Media Group, and to date has sold 6 companies and done over 10 million in affiliate revenue. In 2013 Jeremy released his #1 International Best selling Autobiography titled "Nothing's Changed But My Change" - The ShoeMoney Story. You can read more about Jeremy on his wikipedia page here.

76 thoughts on “MyBlogLog Tracks Your Visitors Ad Clicks”
  1. Jeremy, wow, just wow man. Good job, I wonder if this was added before or after the sale of the company. It would be interesting to find out.

  2. I’m not a very tech-savvy guy, but last I checked MyBlogLog Pro showed my Adsense clicks. You can even filter your outgoing links clicked by “Ads”. Did I miss something or are you talking about something else altogether?

  3. I just joined MyBlogLog a few days ago so I still have the free “MyBlogLog Pro”

    They aren’t “hiding” it by any means. They show it pretty plainly. I can see “Google AdSense,” the Size of the ad and what time someone clicked on it.

    Of couse I can track things like that on my own w/o their help. So I won’t be paying for the “Pro”

    Just wanted you to be aware that they aren’t trying to be sneaky and hiding the data from people. (IMHO)

  4. […] this private information to third parties. If you want to read his technical analysis you can visit his post or see this […]

  5. […] here is the train as it stands: Shoemoney > Marketing Pilgrim > Wolf Howl > First Page Fitness > […]

  6. But it was still “publicly” displayed. Everyone gets a trial MBL Pro account and can see that the Adsense is tracked. I don’t get what the dealio is.

  7. *waits 10 minutes for MyBlogLog representative to say “Ohhh we don’t track those, nope, your doing something wrong”*

    Taking widget off my blog as I type this.

  8. Dude, you are being lame. Of course they track this data, it’s one of the selling points of the Pro version. By tracking all your click data, when you do sign up they have all the interesting historic data for you to analyze.

    Sour grapes on your part.

  9. I did not post my url because I don’t want to get banned but I have used YPN and mybloglog. It clearly shows clicks on my YPN ads that YPN never pays me for.

    Sounds to me like they are getting themselves in trouble.

  10. 10 million down the tubes….

    I took it down from my site even before this, because I saw absolutely zero value other than the novelty.

  11. […] Maybe they seemed trivial. I don’t think people should feel the same way about this one.” read more Shizzalize […]

  12. […] much for a widget. Turns out they are using it to track Adsense data to get a edge. (video included)read more | digg story Share and Enjoy:These icons link to social bookmarking sites where readers can share […]

  13. […] Shoemoney today blogged on MyBlogLog tracking but really this is old news to those of us who have been using it. The real question is the clicks that YPN is not paying for and now they have confirmed it themselves through MyBlogLog. Netbusiness as well as this and this has picked it up also. […]

  14. […] problems, noted blogger Shoemoney noticed some “hacks” and got banned. Now he’s done a little more digging and noted that because MyBlogLog tracks what links your blog’s users click on, that means […]

  15. it seems like there is a “Holy war” going on with Shoemoney and MyBlogLog… what a way to fill up a blog… geeezzz

  16. This is a pretty common practice. I can think of half a dozen sites off the top of my head that do this, and any competent developer with a few hours on their hands can pull it off. This is a blatant example of making a mountain out of an ant hill.

  17. This may end up being the final blow leading to MLB’s demise.

    Very unethical stuff, Yahoo.

    -Zaid

  18. Gathering the data is acceptable. What they do with it from there is what could be incredibly unethical.

    This privacy policy wouldn’t make my feel good about it: “Generally, MyBlogLog does not share personal information about you with other people or nonaffiliated companies without your consent except to provide products or services you’ve requested and in the following circumstances”

  19. How many of those are owned by the 2nd biggest contextual ad publisher?

    And what does how long it takes to implement have to do with it? I could do it in 15 minutes, does that make me a super star?

  20. Hmm, if they track *every* click, why would they exclude ad clicks? Also, I’ve compared the MBL click data and AdSense click reports, and MBL is generally missing ad clicks by an order of magnitude, so if there’s anything malicious that could be done with MBL logs, they would probably tweak the click-counting techniques first.

  21. […] Yahoo may not care at this point, with Google AdSense clearly dominating the online revenue market.read more | digg story Bookmark: These icons link to social bookmarking sites where readers can share and […]

  22. […] MyBlogLog tracks your visitors Ad Clicks even if you’re not using their pro features – via Shoemoney […]

  23. […] Your Google AdSense Data & MORE Filed under: Uncategorized — recar @ 5:17 am Yahoo Tracking Your Google AdSense Data & MORE Yahoo has a widget called MyBlogLog which (they recently purchased for 10 million dollars). People […]

  24. […] more details on how MyBlogLog tracks Adsense Ad clicks, visit Schoe’s blog. Tags: Yahoo!, Google, Adsense, MyBlogLog var container_id = “tsoh_container”; var […]

  25. […] first post I read, MyBlogLog Tracks Your Visitors Ad Clicks, Shoemoney showed that the MyBlogLog javascript specifically called out Adsense and YPN clicks.  […]

  26. Haha… yes because they lost your little piece of the internet, the whole 10 million is going down the tubes. Don’t be a tard, they’ll still get great data out of this and any company including google would do the same.

    You can take off your tinfoil hat now.

  27. […] MyBlogLog has come under fire during recent weeks due to numerous hacks and exploits found with their software, and now another issue is being raised by popular blogger ShoeMoney in regards to MyBlogLog tracking ad clicks. […]

  28. It is not surprise that MBL did track on external link, it even shows the adsense click from my site. Although it is not a details data, I guess this data will send back to their site as well. I have experience to see some of the adsense click.

  29. […] genaue Beschreibung wie MyBlogLog die Klicks auf AdSense- und Overture-Anzeigen trackt, gibt es bei ShoeMoney. Ich finde das schon ein bischen erschreckend. Jetzt macht der Zukauf aber wenigstens Sinn. Warum […]

  30. Yeah, I’m done with MBL. Deleted everything, and removed scripts.

    You have to be careful.

  31. The *only* reason I use MyBlogLog is because I want to track my external clicks, including Adsense clicks.

    I really don’t give a damn about their stupid “blog communities” which are completely worthless to me.

    The day MBL stops offering exernal click stats is the day I stop using their service.

  32. I don’t think anything wrong here because Mybloglog is supposed to track every links you click. It may need a special processing in order to track the clicked links from Adsense or Yahoo Ads.

  33. […] so that publishers wouldn’t have to touch a thing. Coincidentally, MyBlogLog (Yahoo) is also tracking information on Google AdSense — how many clicks Google AdSense ads are receiving (on webpages […]

  34. […] so that publishers wouldn’t have to touch a thing. Coincidentally, MyBlogLog (Yahoo) is also tracking information on Google AdSense — how many clicks Google AdSense ads are receiving (on webpages […]

  35. […] a parlarne perché su ShoeMonkey è stato sollevato un grosso interrogativo sui dati che raccoglie questo widget: oltre al traffico […]

  36. […] algumas leituras para fazer este post, encontrei aqui, onde Jeremy Shoemaker (veja sua foto com um cheque de mais de 132 mil dólares do Adsense) detalha […]

  37. […] After showing my friend the picture of Jeremy holding that big check, the next thing to do was to show him Jeremy’s Shoemoney blog. That was the time I found this posting on MyBlogLog. […]

  38. I signed up for a mybloglog account, but now I think maybe I shouldn’t have. What action does the user take to let them put their hooks in like that?

  39. Another reason not to put MyBlogLog on any of my blogs. My Adsense stats belong to me. I don’t want them knowing my business.

  40. Simply having the code to place their widget on your page will allow them to do this. As far as I’m concerned its a security flaw that you can drive a freight ship through. I’m wondering what kind of exploit a person could create if they going the trust of the public and everyone places that widget on their page? Foreign code shouldn’t be able to do that since it didn’t come from the place of origin that the page came from.

  41. I’m getting data from Ad clicks, but they don’t agree with the affiliate marketing stats. For instance (just using easy numbers), my AdSense impressions reports shows 10, but my MBL stats show it was clicked 20 times. What gives?

  42. It’s just me or does this count as a violation on the Adsense Policy, as it allow MyBlogLog to know click-through rates, that by 7(b) from the Terms and Conditions we all agree on joining adsense is disclosurable?

    With this don’t all the MyBlogLog users that are using the widget are putting themselves in a vulnerable position to become “terminated” by Google?

    themage.

  43. Myblog has been x-ray’d by Shoemoney! LOL Found all the secrity bugs, found all their tracking code, found everthing.

  44. […] Using MyBlogLog get you banned from Adsense? I first read it over at 901am and then at ShoeMoney that MyBlogLog tracks our visitors Ad clicks Are you using Adsense and MyBlogLog together? […]

  45. […] mucho tener mi perfil asociado a mi “paseo” por toda la blogosfera. Y viendo un reporte de que MyBlogLog podría estar siguiendo y guardando los datos de clicks en publicidad me pone un poco más […]

  46. i’m not sure what i’m thinking right now . . . do I want to keep my bloglog or not . . . part of me says why they hell now since i have no traffic from my ads, so yahoo can do anything they want . . . but in the future, they’re going to know too much about the site and can manipulate ad pricing . . or something like that

  47. […] so that publishers wouldn’t have to touch a thing. Coincidentally, MyBlogLog (Yahoo) is also tracking information on Google AdSense — how many clicks Google AdSense ads are receiving (on webpages […]

  48. I have found that MBL is really starting to do stupid stuff to get members on their free side to go to the Pro side. Stuff like not allowing but one update of a screenshot of your community. givemeafrigginbreak.com. What if you have a better one produced? You have to pay $25 to get it updated?

  49. […] More info here to […]

  50. […] For all the nitty gritty, including all the technical evidence that backs it up can be found here. […]

  51. […] Here is some shocking information: you put a MyBlogLog widget on your page, and it reports back ALL ad clicks on your page to its server. In summary, MyBlogLog is tracking AdSense and YPN clicks too. So Yahoo knows the clickthrough rates of your ads. The details are at shoemoney. […]

  52. » MyBlogLog, tracking et Yahoo! - ocarbone.free.fr - membre de la communauté Talend says:

    […] des publicités Google AdSenses et les siennes. Besoin d’infos techniques ? Cliquez ici […]

  53. […] it’s well know that the MBL widget tracks a lot of what users do on your site. Some folks have gone as far as to say that real reason Yahoo purchased MyBlogLog […]

  54. […] revealed today (for the last time! really) that MyBlogLog tracks Adsense and YPN ads. Soon after, Jensense […]

  55. […] MyBlogLog allows you to consult the statistics of access for your blog, that is it keeps trace of your visitors, their clicks… in particular regarding clicks on advertising. The information happens to be very interesting for Yahoo as they can compare the use of Google AdSenses’ advertising with theirs. Technical advice about it? Click here! […]

  56. […] MyBlogLog Tracks Your Visitors Ad Clicks […]

Comments are closed.