IPM Research
Exploiting Lax Form Validation For Infinite Panera Brownies
The MyPanera Rewards Program is broken. By using bot automation, we show you how to get free brownies for life.
Mass Ghost-Carting a Battery on Etsy
Etsy makes it easy to sell products - what happens when bots induce fake demand on those products at scale?
Manufacturing the Hottest Empty Lot on Redfin
Is it possible to manipulate Redfin’s property listings to make properties sell faster and above market rate?
Customer Support Request Flooding on Drift
Conversational chat support can help companies engage customers - what happens when those systems are flooded with bad-faith requests?
Karma + Post Farming on /r/WallStreetBets for Stock Market Profit
If /r/WallStreetBets manipulates the market, who manipulates /r/WallStreetBets?
Manipulating View Counts on YouTube
YouTube’s creator view of video view-counts is broken, and YouTube is vulnerable to ad fraud.
Understanding the Cost-Complexity Curves of Automating Online Behavior
Faking traffic takes work - how much work should fraudsters put into faking it?
Does Deplatforming Collapse the Cost of Misinformation?
Deplatforming works. But does it also make manipulating the deplatformed easier?
Analytics Poisoning: A Short Review
Platforms like Google Analytics are part of the fundamental infrastructure of the modern web. It’s also easily manipulable by widely available tools.