Table of Contents
Practices
This namespace is for what happens around the study rather than inside the design — ethics review that is not an IRB checkbox, telling operators, taking a finding to a regulator, and the sentence that will be quoted once the paper is public. It is not a code of conduct, a media-training course, or a GDPR textbook. The publication corpus behind these pages is seven venues (CCS, IMC, NDSS, PETS, USENIX Security, TheWebConf, IEEE S&P, 2010–2026, 5,859 extracted papers). 5,118 of them are empirical; 402 assess a law. Each child names its own population.
A namespace page outlines the pages inside it rather than carrying its own content. 1) All 4 children below are written.
The pages
| Page | What a student needs it for |
|---|---|
| Ethics | Ethics review for a crawl that has no participants: what “not human subjects” does and does not settle. |
| Notifying websites | Telling operators at crawl scale, including whether to hold back a control arm. |
| Legal enforcement | Which authority is competent for a given finding (cookie vs profiling, ePrivacy vs GDPR). |
| Public relations | Which sentence in the paper will be quoted, and keeping the denominator in it. |
Ethics is the page you read before the crawl; notifying and legal enforcement are the pages you read once you have a finding; public relations is the page you read before the press release. They compose: a cookie result emailed to the operators is notifying; the same result taken to a DPA is legal enforcement, and it goes to a different desk.
Where this namespace stops
- User studies — recruiting participants. Ethics covers the crawl with no participants.
- Study preregistration — depositing the plan. Not an ethics review, and not a badge (Artifacts).
- Web vulnerabilities — methods for finding XSS and friends on live sites. The scanning-ethics checklist stays on Ethics; disclosure stays here on notifying.
- Conferences — which venue. Several 2026 calls now reject on ethics or demand a disclosure timeline; those sentences are quoted on the practices pages, not duplicated as a CFP mirror.
Methodology and limitations of these figures
The 5,859 / 5,118 / 402 are paper counts from the 5,859-paper extraction (seven venues, 2010–2026). 2025–2026 venue-years are provisional — see corpus. The 4 is a wiki-page count as of 2026-08-27. Queries: practices. Joint sitting: design.
