| Both sides previous revisionPrevious revision | |
| roadmap [2026/10/08 12:10] – Assessed row: Malicious web content written 2026-10-08. Authored by Claude karel.kubicek.claude | roadmap [2026/10/08 12:19] (current) – Assessed row: privacy:pii_leakage written. Authored by Claude. karel.kubicek.claude |
|---|
| |
| ^ Proposal ^ Disposition ^ | ^ Proposal ^ Disposition ^ |
| | | PII leakage to third parties | **Written 2026-10-08** as [[privacy:pii_leakage|Privacy:PII leakage]]. Never queued: chosen by Karel in the 2026-09-22 gap pass on a full-text candidate count of **218** (≥ 5 hits of the ''pii_leakage'' family of ''gap_probe_fulltext_20260922.mjs'' in ''paper.norm.txt''; 76 web, 96 from 2024–2026), flagged there as noisy. The count re-runs exactly; the noise is as described and larger. Over whitespace-collapsed ''paper.cols.txt'' the regex gives **226**, of which **13** are in the page's population — **5.8%** precision, **65.0%** recall; 4 of its top 20 are language-model PII papers, and its largest classes are mobile apps (61), attacks (27), user studies (24) and language models (20). The page's population is **20** papers from a hand audit of **314** candidates from three probes (**6.4%** precision), against an inclusion rule written before the first count; a second reader re-adjudicated 97 exclusions (two moved in) and a full-text reading of every included paper moved three to context. The boundary the row asked about is settled: **5** of the 20 are cited on [[Privacy:Email tracking]], which keeps the address as an identifier; this page owns personal-data leakage in general. Four of the five spine candidates are in the population; //Investigating sources of PII used in Facebook's targeted advertising// (PETS 2019) is context — what a platform does with PII it already holds. No paper in the population is a health-sector study: that literature is in medical journals and workshops outside the seven venues, and the page cites it as such. | |
| | Super-app mini-programs (WeChat, Alipay, Douyin, QQ, Baidu) | **Written 2026-09-27** as [[design:mobile_and_app_measurement:mini_programs|Design:Mobile and app measurement:Mini programs]], the first child of [[Design:Mobile and app measurement]]. Never queued: chosen by Karel in the 2026-09-22 gap pass on a full-text candidate count of **37** papers (21 from 2024–2026) with at least ten full-text hits of "mini-program" or "WeChat". The count re-runs exactly. The page's population is **16** papers that measure mini-programs or their host framework — 13 as the main object — hand-verdicted from a **57**-paper candidate set. The gap rule contains **15** of them: **40.5%** precision, **93.8%** recall; 19 of its 22 false hits use no mini-program vocabulary at all (WeChat as a messenger, payment method, login target or dataset owner). The ecosystem's own vocabulary (mini-program, mini-app, super app, app-in-app) at ≥ 3 hits finds all 16 at 53.3% precision. The first paper is from 2020, and 10 of 16 are from 2024–2026. | | | Super-app mini-programs (WeChat, Alipay, Douyin, QQ, Baidu) | **Written 2026-09-27** as [[design:mobile_and_app_measurement:mini_programs|Design:Mobile and app measurement:Mini programs]], the first child of [[Design:Mobile and app measurement]]. Never queued: chosen by Karel in the 2026-09-22 gap pass on a full-text candidate count of **37** papers (21 from 2024–2026) with at least ten full-text hits of "mini-program" or "WeChat". The count re-runs exactly. The page's population is **16** papers that measure mini-programs or their host framework — 13 as the main object — hand-verdicted from a **57**-paper candidate set. The gap rule contains **15** of them: **40.5%** precision, **93.8%** recall; 19 of its 22 false hits use no mini-program vocabulary at all (WeChat as a messenger, payment method, login target or dataset owner). The ecosystem's own vocabulary (mini-program, mini-app, super app, app-in-app) at ≥ 3 hits finds all 16 at 53.3% precision. The first paper is from 2020, and 10 of 16 are from 2024–2026. | |
| | Messaging groups and channels (Telegram, WhatsApp, Discord) | **Written 2026-09-27** as [[design:platforms:messaging_channels|Design:Platforms:Messaging channels]], the second child of [[Design:Platforms]]. Never queued: chosen by Karel in the 2026-09-22 gap pass on full-text candidate counts of **40 / 41 / 13** papers naming Telegram / WhatsApp / Discord at least ten times (case-sensitive; 23 / 18 / 8 of them from 2024–2026). The counts re-run exactly. The page's population is **26** papers that collect data from inside groups, channels or servers — 9 as their main dataset — hand-verdicted from a **147**-paper candidate set. The gap rule's union of **76** papers contains **23** of them: **30.3%** precision, **88.5%** recall. WhatsApp's count is the weakest, **4 of 41**, because a paper naming WhatsApp ten times is usually about its encryption, its users or its traffic; 21 of the 26 are Telegram papers and none predates 2019. Account enumeration through contact discovery (4 papers) became a pointer section on the page, not a second page. | | | Messaging groups and channels (Telegram, WhatsApp, Discord) | **Written 2026-09-27** as [[design:platforms:messaging_channels|Design:Platforms:Messaging channels]], the second child of [[Design:Platforms]]. Never queued: chosen by Karel in the 2026-09-22 gap pass on full-text candidate counts of **40 / 41 / 13** papers naming Telegram / WhatsApp / Discord at least ten times (case-sensitive; 23 / 18 / 8 of them from 2024–2026). The counts re-run exactly. The page's population is **26** papers that collect data from inside groups, channels or servers — 9 as their main dataset — hand-verdicted from a **147**-paper candidate set. The gap rule's union of **76** papers contains **23** of them: **30.3%** precision, **88.5%** recall. WhatsApp's count is the weakest, **4 of 41**, because a paper naming WhatsApp ten times is usually about its encryption, its users or its traffic; 21 of the 26 are Telegram papers and none predates 2019. Account enumeration through contact discovery (4 papers) became a pointer section on the page, not a second page. | |
