Folks, this stuff only works because of browser fingerprinting.

Google couldn't do this before, because letting the ad-displaying website sit between them and the user meant the websites could defraud google like crazy.

This idea isn't new. What's new is that browser fingerprinting got good enough that google can catch fraudful customers by sending fingerprinting scripts through their proxy and watching what comes back.