https://www.measuretheweb.org/ 2026-10-18T16:13:19+00:00 https://www.measuretheweb.org/ https://www.measuretheweb.org/_media/wiki/dokuwiki.svg text/html 2026-10-08T20:50:38+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/provenance/privacy/pii_leakage?rev=1791492638&do=diff Provenance: privacy:pii_leakage Working log behind Measuring PII Leakage to Third Parties. Every page in the provenance: namespace mirrors a content page's id exactly; this one audits privacy:pii_leakage. Corpus-wide caveats (venue coverage, the selection funnel, provisional venue-years) are on text/html 2026-10-08T20:49:34+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/provenance/privacy?rev=1791492574&do=diff Provenance: privacy Working log behind privacy. Corpus-wide caveats: corpus. Joint sitting log, freeze, and review table: design. No bibliography keys of its own. No ~~DISCUSSION~~. Run: 2026-08-27. Item cursor-drain-ns-overviews (item 182, run 67). Creating: privacy text/html 2026-10-08T20:49:32+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/provenance/roadmap?rev=1791492572&do=diff Provenance: Roadmap Working log for roadmap. That page publishes paper counts, so it carries a log like any other: the probe, its unedited output, what the counts do and do not mean, and the decisions taken against them. 1. Where the counts come from scripts/gap_probe_roadmap.mjs text/html 2026-10-08T20:49:29+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/privacy/javascript?rev=1791492569&do=diff Analysing and Classifying JavaScript Most of what a privacy measurement wants to know about a page is decided by its JavaScript. The cookie was written by a script. The request was issued by a script. The fingerprint was taken by a script. So sooner or later a study has to answer a question of the form text/html 2026-10-08T20:49:27+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/programming/registration?rev=1791492567&do=diff Automating Login and Registration to Websites Logged-out is the default crawl in this literature. Of the 857 web crawls in this corpus, 553 (64.5%) are labelled none (did not authenticate), 204 (23.8%) do not say, and the schema marks 81 (9.5%) as some kind of login or registration. That 81 is a mixed bag: lab scanners of applications the authors control, one social-network account, marketplace cookies, and eleven papers the schema simply mislabelled. The figure this page publishes is the text/html 2026-10-08T20:49:24+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/programming/interaction?rev=1791492564&do=diff Interaction with Websites page.goto(url) returns, and then you have a decision to make. Almost every result a web measurement publishes is a count of things observed after that moment — cookies set, requests issued, scripts loaded, banners shown — and every one of those counts depends on what the crawler did next. Load and leave? Follow a link? Follow twenty? Scroll to the bottom? Click the button that loads the ads? Log in? text/html 2026-10-08T20:49:21+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/privacy/server_side_tracking?rev=1791492561&do=diff Measuring Server-Side Tracking Server-side tracking (SST, also server-side tagging) moves the reporting half of a tracker off the user's device. The browser still collects the data, but instead of sending it to google-analytics.com or facebook.com/tr text/html 2026-10-08T12:19:46+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/roadmap?rev=1791461986&do=diff Roadmap What this wiki has decided to write next, and what it has decided not to write. Both halves are here on purpose: on a site where every page names its own population, “we looked and there is not enough literature yet” is a finding, and it should be recorded once rather than rediscovered by every gap pass. text/html 2026-10-08T12:19:44+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/privacy/email_tracking?rev=1791461984&do=diff Email Tracking and Message-Channel Measurement You are about to measure something that arrives in a mailbox or on a handset: a tracking pixel in a newsletter, whether an unsubscribe link works, how much spam a filter lets through, what an SMS scam campaign looks like. This page is about the text/html 2026-10-08T12:19:42+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/privacy?rev=1791461982&do=diff Privacy This namespace is for classifying what a crawl observed on the privacy axis — requests, cookies, scripts, fingerprints, syncing, consent records — and for the two ways the instrument can be lying to you: the tracking request never leaves the site ( text/html 2026-10-08T12:19:30+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/privacy/pii_leakage?rev=1791461970&do=diff Measuring PII Leakage to Third Parties You want to know whether a website hands a visitor's personal data — a name, an email address, a phone number, a postal address, a password, a search term, a health condition, a wallet address — to a company other than the one running the site. A landing-page crawl cannot see a value leave: nothing personal is on the page until someone types it, logs in, searches or buys, and when it leaves it is often hashed, encoded, split or compressed. What a measureme… text/html 2026-10-08T12:16:17+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/provenance/security/malicious_web_content?rev=1791461777&do=diff Provenance: security:malicious_web_content Working log behind Malicious web content: cryptojacking, exploit kits, malvertising and skimmers. Corpus-wide caveats (venue coverage, the selection funnel, provisional venue-years) are on corpus and are not restated here. Citations use the shared bibliography; the 22 entries this run added are listed under text/html 2026-10-08T12:16:14+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/security/malicious_web_content?rev=1791461774&do=diff Malicious web content: cryptojacking, exploit kits, malvertising and skimmers You are about to measure malicious code that websites, ads or redirect chains serve to the people who visit them — an exploit page, an in-browser miner, an ad that ends in a malware download, a script that copies a payment form, a compromised library on a CDN. Three decisions decide what your number means, and the literature you will cite makes all three harder than it looks: text/html 2026-10-08T12:11:19+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/provenance/security?rev=1791461479&do=diff Provenance: security Working log behind security. Corpus-wide caveats are on corpus. Citations use the shared bibliography; this page adds no keys of its own. Run: 2026-08-27. Corpus: 5,859 extracted papers, 7 venues, 2010–2026, data/extract/run1. Item: drain wiki-measuretheweb text/html 2026-10-08T12:10:39+00:00 karel.kubicek.claude (karel.kubicek.claude@undisclosed.example.com) https://www.measuretheweb.org/security/headers?rev=1791461439&do=diff Security headers This page is for a student who is about to crawl HTTP response headers — CSP, HSTS, X-Frame-Options, SRI, Trusted Types, COOP/COEP — and needs to know which of those are still a measurement, which figures the seven-venue corpus actually contains, and what a landing-page GET will miss. It is not a tutorial on what a header does. For script-level XSS instrumentation see text/html 2026-07-23T04:46:28+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.measuretheweb.org/?image=wiki%3Adokuwiki.svg&ns=wiki&rev=1784781988&tab_details=history&media_do=diff&do=media <img src="https://www.measuretheweb.org/_media/wiki/dokuwiki.svg?w=500&amp;h=500&amp;tok=c20f2b" alt="dokuwiki.svg" loading="lazy" width="500" height="500" /> text/html 2025-01-07T17:45:35+00:00 karelkubicek (karelkubicek@undisclosed.example.com) https://www.measuretheweb.org/?image=privacy%3Aprivacy_cookies_cookieblock_vs_cookiepedia.png&ns=privacy&rev=1736271935&tab_details=history&media_do=diff&do=media <img src="https://www.measuretheweb.org/_media/privacy/privacy_cookies_cookieblock_vs_cookiepedia.png?w=500&amp;h=500&amp;tok=fc904a" alt="privacy_cookies_cookieblock_vs_cookiepedia.png" loading="lazy" width="500" height="500" /> text/html 2025-01-03T17:08:56+00:00 admin (admin@undisclosed.example.com) https://www.measuretheweb.org/?image=wiki%3Aprivacy%3Aprivacy_adgraph_performance_lists_iqbal2020_adgraph.png&ns=wiki%3Aprivacy&rev=1735924136&tab_details=history&media_do=diff&do=media <img src="https://www.measuretheweb.org/_media/wiki/privacy/privacy_adgraph_performance_lists_iqbal2020_adgraph.png?w=500&amp;h=500&amp;tok=8dc038" alt="privacy_adgraph_performance_lists_iqbal2020_adgraph.png" loading="lazy" width="500" height="500" /> text/html 2025-01-03T17:07:20+00:00 karelkubicek (karelkubicek@undisclosed.example.com) https://www.measuretheweb.org/?image=privacy%3Aprivacy_adgraph_performance_lists_iqbal2020_adgraph.png&ns=privacy&rev=1735924040&tab_details=history&media_do=diff&do=media <img src="https://www.measuretheweb.org/_media/privacy/privacy_adgraph_performance_lists_iqbal2020_adgraph.png?w=500&amp;h=500&amp;tok=d3576d" alt="privacy_adgraph_performance_lists_iqbal2020_adgraph.png" loading="lazy" width="500" height="500" /> text/html 2025-01-02T17:13:57+00:00 karelkubicek (karelkubicek@undisclosed.example.com) https://www.measuretheweb.org/?image=design%3Awebsite_ranking_list_popularity_scheitle2018.png&ns=design&rev=1735838037&tab_details=history&media_do=diff&do=media <img src="https://www.measuretheweb.org/_media/design/website_ranking_list_popularity_scheitle2018.png?w=500&amp;h=500&amp;tok=f313a7" alt="website_ranking_list_popularity_scheitle2018.png" loading="lazy" width="500" height="500" />