vordmeister - 6:35 pm on Nov 22, 2009 (gmt 0)

Agreed rash. I've always accepted it was easy to change hidden fields in forms. Didn't know quite how easy until I looked up this Tamper addon. All external data needs validating server side.

I would have thought that if Adsense isn't following your recommendations then it's entirely their own problem. Seems an odd reason for a ban, and more a reason for saying "thanks for pointing out the great big hole in our security".

We all program failure modes into our server side validation. Mine are intended to catch errors and confuse hackers. I have a lot of fun with them.

It seems Adsense might be going for the normal Google approach of guilty until proven innocent (without actually having any real options for proving innocence).

Odd if I can have fun, but Google needs to get all paranoid.