So we're all aware of services like CoinAd, but what if someone took advantage of that? Imagine if someone had a video game on facebook or something and had people fill out a CAPTCHA before they could play... couldn't someone really just ajax a separate, custom server that curl'd coinAd, kept the session alive, passed the image generated by google to the user, have them fill it out, then pass the answer back to coinAd, and inserting their own BTC address? Couldn't someone decieve people into giving them a BTC charity?
I know it's "limited" to one address per hour per user or whatever, but if you played it smart, you could have thousands of addresses and make thousands of users with thousands of email addresses. You could even shard the servers around the world so that you won't have one ip address. Heck, I bet you could even put it on the user's own computer in an with display:none!
Although coinad's rate is only .00005 BTC (~1/1000th of $0.01), but if you get 20,000 users on your facebook game, you'd make $100.
What I'm saying is, is it illegal to take advantage of this (technically speaking) give-away? ;)