PPCDefender – Mostly Harmless
I stumbled upon Willie Crawford’s blog and noticed a post about PPCDefender – a piece of software that is supposed to stop programs that try to spy on competitors PPC campaigns. Some notable examples of the “competition spy” variety are GCDetective and AdSpyPro.
I’m not impressed by PPCDefender. Software like AdSpyPro lets you find profitable keywords, ad copy and products. PPCDefender only makes a feeble attempt to protect one of these – the product, or more precisely the landing page. Someone using PPC spy software could still as easily discover your profitable keywords and ads.
PPCDefender is a simple PHP script that achieves some level of “protection” by only allowing visitors who came from Google to see the page. This is done by checking what URL they came from – the “referer” URL feature that most web browsers support. Repeat visitors will also be admitted because PPCDefender creates a cookie to identify them. An experienced programmer could easily spoof the referer URL (or the cookie) and make PPCDefender think the spy script is legitimate visitor. There are also other ways to defeat the “defender” but I won’t describe them here as it would get very technical soon.
And yes, the PPCDefender script is of course “encrypted” and anyone trying to overcome it would have to spend days reverse-engineering it, wouldn’t he? No, not really. The encryption (actually obfuscation) is trivial and it wouldn’t take more than half an hour for someone with enough PHP experience to crack it.
PPCDefender in it’s current form is only a temporary annoyance that the PPC spy programmers could solve in less than a day. The defenders author promises to keep up to date with competition spy software evolution and update PPCDefender as needed… we’ll see how that goes. I suspect he won’t have much success.
If you’re really paranoid…
If you really want to protect your AdWords ads from scripts like GCDetective you could change the Display URL and/or the Target URL for each ad frequently (at least once a day). I haven’t tried to reverse-engineer PPC spy software but I think it probably uses the URL(s) to identify each ad. PPC spies aim to find ads that run for a long time and if the URL changed often it would look like they are different ads every day. For an even more reliable protection you could slightly change the ad text, display URL, target URL and the product link on the landing page and identifiable portions of the page (like title, etc). This process can be automated with some effot but is it worth it?
I think for the anti-intelligence tools this will be a losing fight overall.
White Shadow :: Jun.26.2007 :: Reviews :: 6 Comments »