User Tools

Site Tools


provenance:design:platforms

Provenance: Research of Specific Large Platforms

Working log behind platforms. Every figure on that page has its query here, with its own denominator; every fold has its alias rules and its unmapped residue printed in full; every external claim has the URL, the verbatim quote and the fetch date, including the ones that could not be verified. Corpus-level caveats — the seven-venue scope, the provisional 2025–2026 slice, field-by-field stability — are on corpus and are not restated here.

This is a working log, not prose. It is written for somebody checking a number.

The run

Date 2026-08-27
Corpus data/extract/run1/extractions.jsonl, 5,859 extracted papers, 7 venues (CCS, IMC, NDSS, PETS, USENIX Security, TheWebConf, IEEE S&P), 2010–2026
Full text available 5,855 of 5,859 papers have paper.cols.txt
Page status created, not extended. Neither design:platforms nor any of the four promised sub-pages existed; confirmed against node scripts/sitemap.mjs and node scripts/dw.mjs pages
Scripts added scripts/plat_fold.mjs, scripts/platforms_report.mjs, scripts/platforms_fulltext.mjs, scripts/platforms_named_probe.mjs, scripts/platforms_audit.mjs, scripts/platforms_quotecheck.mjs
Bibliography 24 new entries appended to bibliography; one candidate key (cheng2020_dangerous) was already present with the same DOI and was reused rather than duplicated
Model Claude Opus 5 for the corpus work, page and this log; two Claude Sonnet sub-agents for external fact-finding (platform access status; DSA and case law), then every load-bearing claim re-fetched by the main agent
Discussion block No ~~DISCUSSION~~ on this page, by the convention that comments belong on the content page. This is the first provenance page written in this run; the decision is recorded here rather than assumed

Scope and judgement calls

  • Why a parent page and not four company pages. start promised design:platforms plus Facebook, Twitter, TikTok and Amazon sub-pages. We wrote the parent and no sub-pages, and removed the four red links. The evidence is the audit table below: TikTok is 4 genuine papers, Amazon's candidate set is 36% precise and splits into two unrelated objects, and the Twitter/X body was produced almost entirely by an access route that no longer exists. The reasoning is published on the content page under Should There Be Facebook, Twitter, TikTok and Amazon Pages? so a future editor can overturn it on evidence rather than re-deriving it.
  • Why the page is organised by access route, not by company. What transfers between platform studies is the route in and the denominator it implies; what goes stale fastest is a company's current API surface. Organising by company would have guaranteed the page was wrong within a year.
  • A reasonable person could disagree about Twitter/X. 142 candidates at 73% precision is the largest coherent body in the corpus and would support a page. We judged that a page about a closed API is a history page, and folded the transferable material (metered APIs, dataset reuse, the visibility-score work) into the parent. If the DSA route opens X data again, that judgement should be revisited.
  • One page the evidence supports is not on the promised list: ad-transparency archives as a measurement instrument (69 papers, a live regulatory driver, real two-sided error characteristics). It is named on the content page as a candidate but deliberately not linked, so the page does not create a fresh red link while removing four.
  • What we did not put on the page. US scraping case law. Both sub-agents returned consistent accounts of hiQ v LinkedIn and the Bright Data cases, but neither could read a primary opinion (CourtListener and Justia returned 403; the SCOTUS and Ninth Circuit PDFs did not parse). Publishing case outcomes on a methods wiki from law-firm summaries alone is exactly the failure mode this process exists to prevent, so the page says the position is moving, points at the one decision we did verify against a primary source (the Commission's X decision), and tells the reader to talk to their institution. See Rejected below.

The inclusion rule

Fixed before the first figure was computed.

A paper counts as measuring platform P if P is matched, with role subject, in at least one of four signals:

  1. title
  2. population[].sourceList
  3. detection[].phenomenon
  4. tools[].name where usedOrMentioned is used or produced

Roles that do not count: recruitment, infrastructure, mlservice, ranking, operator, benchmark, falsepos.

Paper-level correction: for a paper with at least one participants tuple, a sourceList match alone does not count — a qualitative study lists its recruitment channels there.

How the fold got to that rule: six iterations, each of which moved a headline number

This is the most useful thing on this page. Each step below produced a number that looked publishable and was wrong.

# What we did What it produced Why it was wrong
1 substring match on population[].sourceList only Amazon 176 papers 51 papers give their population as the bare string Alexa — the retired top-sites ranking list — and ~110 as Amazon Mechanical Turk. Neither is Amazon-the-platform.
2 added role rules (recruitment, infrastructure, mlservice, ranking) Amazon subject 57, ranking 475, recruitment 110 Better, but the ranking rule required a qualifier (Alexa top, Alexa 1M). Bare Alexa still fell through to subject. Fixed by making any unqualified Alexa the ranking list unless it names a skill, a voice device or the skill store.
3 recall check: matched paper titles against the sourceList verdict TikTok fell to 2 sourceList badly under-recalls. The TheWebConf 2024 TikTok feed study gives its population as custom bot accounts and never names TikTok there. Widened to four signals.
4 four signals, first cut Amazon 923 papers Bug in platforms_report.mjs: it accepted any tag plat_fold.tagsOf() returned, and tagsOf returns the role rather than filtering on it. So every Mechanical Turk and EC2 mention counted. Fixed by filtering role === 'subject' at the call site.
5 four signals + role filter 1,072 platform-subject papers; Twitter/X 165, Meta 186 Qualitative studies list Twitter as a recruitment channel in sourceList — e.g. "professional networks, Reddit, Twitter, Slack, and Upwork" and "LinkedIn, Upwork, Discord, Slack, Twitter". A lexical rule cannot separate those reliably.
6 added the paper-level participants correction 897 platform-subject papers; Twitter/X 142, Meta 151 This is what is published.

Numbers 176, 923 and 1,072 are recorded here because all three would have read as authoritative on a page.

Every query, with its denominator

Full unedited output of node scripts/platforms_report.mjs:

platforms_report-output.txt
==============================================================================
design:platforms — report script
corpus: 5859 extracted papers, 7 venues, 2010-2026
==============================================================================
 
## Denominators
all extracted papers                                  5859
platforms includes 'other-online-service'             2429  (41.5% of all)
platforms includes 'web'                              1622  (27.7% of all)
ran a crawl (crawlConfig or studyType, per OVERVIEW)         1120  (19.1% of all)
drew a study population                               5712
named >=1 large platform as SUBJECT of measurement    897  (15.7% of the 5712 that drew a population)
 
## Papers measuring a named large platform (role=subject), of 5712 papers that drew a study population
rank  papers   share  family
   1     323    5.7%  Google (Play/Search/Ads)
   2     151    2.6%  Meta (Facebook/Instagram/WhatsApp)
   3     142    2.5%  Twitter/X
   4      72    1.3%  Amazon
   5      63    1.1%  YouTube
   6      63    1.1%  Reddit
   7      56    1.0%  Apple App Store
   8      50    0.9%  WeChat/Weibo/QQ
   9      24    0.4%  Telegram
  10      17    0.3%  Yelp
  11      16    0.3%  LinkedIn
  12      11    0.2%  Flickr
  13      10    0.2%  Steam
  14      10    0.2%  Mastodon
  15       8    0.1%  Discord
  16       8    0.1%  Netflix
  17       7    0.1%  TikTok
  18       7    0.1%  Twitch
  19       6    0.1%  eBay
  20       3    0.1%  Airbnb
  21       3    0.1%  Spotify
  22       2    0.0%  Uber
  23       1    0.0%  Snapchat
 
## The four platforms [[start]] names, by the ROLE the name plays in population.sourceList
   (sourceList only — a paper can still be a subject paper via title/phenomenon/tool,
    which is why "subject" here is lower than the ranking above.)
family                                 subject  recruit  infra  mlsvc  ranking  operator
Meta (Facebook/Instagram/WhatsApp)         63       54      1      0        0         2
Twitter/X                                  84       34      0      0        1         0
TikTok                                      0        2      0      0        0         1
Amazon                                     39      179     23      3      412         0
 
## Per-year paper counts, role=subject (2025-2026 provisional: see literature:corpus)
year	corpus	Google (Play	Meta (Facebo	Twitter/X	Amazon	YouTube	Reddit	Apple App St	WeChat/Weibo
2010	119	1	4	2	0	4	0	0	0
2011	116	1	3	6	2	4	0	0	1
2012	151	2	7	9	2	0	0	0	1
2013	125	12	7	8	1	0	0	2	1
2014	166	15	7	3	1	0	0	2	0
2015	190	17	6	4	1	1	0	2	0
2016	182	15	6	5	0	2	1	1	0
2017	231	17	4	3	0	1	0	0	1
2018	254	15	7	5	3	3	2	0	0
2019	402	30	13	17	4	2	6	3	5
2020	404	24	14	8	8	2	5	4	5
2021	379	28	7	9	4	1	2	5	5
2022	546	33	9	16	8	8	5	12	7
2023	719	34	19	16	14	7	8	10	9
2024	690	21	11	10	9	9	10	4	3
2025	770	33	20	13	9	11	18	7	9
2026	415	25	7	8	6	8	6	4	3
 
## Twitter/X and Meta as subject, 3-year buckets, as a share of that bucket's corpus
bucket      corpus   Twitter/X          Meta               TikTok
2010-2012      386    17 ( 4.4%)    14 ( 3.6%)     0 ( 0.0%)
2013-2015      481    15 ( 3.1%)    20 ( 4.2%)     0 ( 0.0%)
2016-2018      667    13 ( 1.9%)    17 ( 2.5%)     0 ( 0.0%)
2019-2021     1185    34 ( 2.9%)    34 ( 2.9%)     0 ( 0.0%)
2022-2024     1955    42 ( 2.1%)    39 ( 2.0%)     5 ( 0.3%)
2025-2026*    1185    21 ( 1.8%)    27 ( 2.3%)     2 ( 0.2%)
* 2025-2026 is provisional: CCS 2026 and IMC 2026 have not been held, and
  IEEE S&P 2026 / WWW 2026 abstracts are not in OpenAlex, so selection under-covers them.
 
## How the 897 platform-subject papers obtained the data (temporal.mode, paper-counted, multi-valued)
  existing-dataset      383  42.7%
  live-crawl            346  38.6%
  active-probing        224  25.0%
  passive-collection    170  19.0%
  web-archive            17  1.9%
  (no stated mode)       60  6.7%
  EXCLUSIVE split of the same 897 papers:
    existing-dataset ONLY (no primary collection)   208  23.2%
    primary collection ONLY (no existing dataset)   453  50.5%
    both                                           175  19.5%
    any primary collection                         628  70.0%
 
## Did they use the platform's official API, or scrape? (tools[].name over the 897 platform-subject papers)
  names an API-shaped tool           236  26.3%
  names a scraping/automation tool   157  17.5%
  both                                48  5.4%
  neither (no tool named for it)     552  61.5%
  NB: this is a keyword split over free-text tool names, not an enum. Report as a ranking.
 
## The login wall: crawlConfig.authentication
  platform-subject papers with a crawlConfig object (260)
    none                145  55.8%
    not-stated           89  34.2%
    account-registration   22  8.5%
    manual-login          4  1.5%
    -> states a value: 171/260 = 65.8%
  all papers with a crawlConfig object (1080)
    none                689  63.8%
    not-stated          301  27.9%
    account-registration   45  4.2%
    manual-login         27  2.5%
    automated-login      17  1.6%
    sso                   1  0.1%
    -> states a value: 779/1080 = 72.1%
 
## Rules of engagement: robots.txt and ethics review
  platform-subject papers with a crawlConfig object (260): says anything about robots.txt: 14  5.4%
  all papers with a crawlConfig object (1080): says anything about robots.txt: 51  4.7%
  platform-subject empirical papers (841): states an ethics-review outcome: 273  32.5%
  all empirical papers (5118): states an ethics-review outcome: 1728  33.8%
 
## Artifact availability (artifacts.availability), platform-subject empirical papers vs all empirical
  platform-subject empirical (841)
    public                    381  45.3%
    none-mentioned            332  39.5%
    absent                     42  5.0%
    promised-not-yet-available   38  4.5%
    on-request                 21  2.5%
    restricted                 17  2.0%
    explicitly-withheld        10  1.2%
  all empirical (5118)
    public                   2439  47.7%
    none-mentioned           1964  38.4%
    absent                    264  5.2%
    promised-not-yet-available  240  4.7%
    on-request                 86  1.7%
    restricted                 73  1.4%
    explicitly-withheld        52  1.0%
 
## Study size (population.n on the platform-subject tuple), where stated
  Twitter/X                             tuples with n: 189  min 4  median 90332  max 8700000000
  Meta (Facebook/Instagram/WhatsApp)    tuples with n: 116  min 6  median 43953  max 118000000000
  Amazon                                tuples with n:  65  min 1  median 1880  max 80000000
  TikTok                                tuples with n:   0  min -  median -  max -
 
## detection[] tuples carrying a prevalence, on the platform-subject papers
  papers with >=1 detection tuple with a non-null prevalence: 866  96.5% of 897
 
## Laws assessed on platform-subject papers
  platform-subject papers that assessed a law: 96  10.7%
    GDPR                         62
    CCPA                         19
    COPPA                        17
    ePrivacy Directive           4
    CalOPPA                      3
    Digital Services Act (DSA)   3
    Children's Online Privacy Protection Act (COPPA) 2
    Computer Fraud and Abuse Act (CFAA) 2
    FERPA                        2
    LGPD                         2
 
## Fold audit
  distinct population.sourceList strings matching a platform token: 1174
    role=subject          515 distinct strings
    role=ranking          331 distinct strings
    role=recruitment      295 distinct strings
    role=infrastructure    26 distinct strings
    role=operator           4 distinct strings
    role=mlservice          2 distinct strings
    role=falsepos           1 distinct strings
  full string-by-string assignment: node scripts/platforms_report.mjs --dump
 
## Named access routes on the 897 platform-subject papers (tools[] used/produced, paper-counted)
  platform REST/search API (any platform)     230   25.6%   2010:4 2011:10 2012:7 2013:6 2014:2 2015:6 2016:5 2017:5 2018:6 2019:20 2020:13 2021:18 2022:29 2023:22 2024:27 2025:30 2026:20
  Twitter/X streaming or search API            91   10.1%   2010:2 2011:6 2012:4 2013:4 2014:1 2015:3 2016:2 2017:1 2018:2 2019:8 2020:5 2021:7 2022:12 2023:11 2024:8 2025:8 2026:7
  Tweepy / twarc / twitter client lib           1    0.1%   2019:1
  Facebook/Meta Graph or Marketing API          7    0.8%   2012:1 2013:1 2019:1 2020:1 2022:1 2024:1 2025:1
  Meta / Facebook Ad Library                    5    0.6%   2020:1 2022:1 2023:2 2024:1
  CrowdTangle                                   5    0.6%   2022:1 2023:1 2025:2 2026:1
  Pushshift (Reddit archive)                   13    1.4%   2020:1 2022:2 2023:4 2024:4 2025:2
  Reddit API / PRAW                            14    1.6%   2022:2 2023:2 2024:1 2025:6 2026:3
  YouTube Data API                             18    2.0%   2010:1 2011:2 2015:1 2018:1 2019:1 2021:1 2022:2 2024:3 2025:2 2026:4
  TikTok API / TikTok-Api                       1    0.1%   2024:1
  Instagram API / scraper                       6    0.7%   2017:1 2018:1 2020:1 2022:1 2024:1 2025:1
  generic browser automation                   80    8.9%   2014:3 2015:2 2016:1 2017:7 2018:2 2019:7 2020:5 2021:7 2022:8 2023:13 2024:6 2025:12 2026:7
  custom scraper / crawler                     86    9.6%   2010:2 2011:2 2012:1 2013:3 2014:2 2016:1 2017:2 2018:3 2019:9 2020:8 2021:4 2022:13 2023:10 2024:8 2025:10 2026:8
  NB: free-text tool names, matched by regex. Rankings only, never a precise share.
 
## What the 897 platform-subject papers measure (detection.phenomenon, folded into families, paper-counted)
  spam / abuse / fraud accounts                  79  8.8%
  misinformation / content moderation            42  4.7%
  advertising / targeting / ad delivery          70  7.8%
  tracking / third-party data flows             109  12.2%
  privacy settings / user disclosure             35  3.9%
  recommendation / personalisation / feed        24  2.7%
  account security / hijacking / auth            63  7.0%
  deletion / data subject rights / compliance    30  3.3%
  network / infrastructure performance           98  10.9%
  app / store / SDK analysis                     79  8.8%
  RESIDUE: papers with detection tuples matching no family above: 415  46.3%
  residue sample (first 15 phenomena):
    [IMC 2010] Graph-characteristic estimation accuracy
    [CCS 2010] coordinated malicious wall posts
    [IMC 2010] UMTS RRC state transitions and timers
    [IMC 2010] YouTube data-center locations
    [WWW 2010] TOC diversity and accuracy
    [CCS 2011] search-result cloaking
    [CCS 2011] malware in trending-term results
    [IMC 2011] YouTube uploader population
    [IMC 2011] Total number of YouTube videos
    [IMC 2011] segment transmission delay
    [IMC 2011] URL propagation cascades
    [USENIX 2011] search-redirection attacks
    [CCS 2012] giant connected component
    [CCS 2012] malware infection
    [IMC 2012] Facebook gifting application activity
 
## Cross-page reconciliation: how many papers name "Alexa" in a stated population source?
  papers with >=1 stated population sourceList                       5492
  ... of which at least one tuple has a web unit                     1143
  name "Alexa" in any stated sourceList (no role filter)             486
  ... and have a web-unit population tuple                          464   <- comparable to design:website_selection's 463
  assigned role=ranking by plat_fold.mjs (what this page publishes)  412
  The gap is the role rule: Alexa-as-skill-store strings are diverted to
  role=subject, and a string naming several lists is tagged per platform.
  Neither number is wrong; they answer different questions.

Full unedited output of node scripts/platforms_fulltext.mjs (full-text keyword probes over the 897 platform-subject papers, with the whole corpus as the comparison set):

platforms_fulltext-output.txt
# platform-subject papers: 897 (from platforms_report.mjs --keys)
# of those, with paper.cols.txt on disk: 897
 
## ratelimit  /rate[- ]?limit(ed|ing|s)?\b/i
   platform-subject: 107/897 = 11.9%   |   all papers with text: 563/5855 = 9.6%
   [IMC 2010] … e when user-ids are sparsely populated (low hit-to-miss ratio) and queries are subject to resource constraints (e.g., queries are rate-limited in Flickr, Livejournal [26], and Bittorrent [18]). In a P2P network like Bittorrent, a client can randomly sample pee …
   [IMC 2011] … er hour did you also see a drop in the overall number of ID's that you saw per hour. If yes then this might mean that YouTube was rate limiting your crawler, leaving open the possibility that you have not seen all the uploaders. Reviewer #2 Strengths: While si …
   [IMC 2011] …  user may never query the directory node so frequently (every 3s). I'm actually surprised that Skype does not enforce any kind of rate limiting on this. As mentioned by the authors, there's an even stronger assumption (which is more like a bug) -- Even though  …
   per year (hits/platform-subject with text): 2010:1/11 2011:5/18 2012:2/25 2013:4/29 2014:3/30 2015:5/28 2016:2/24 2017:3/30 2018:5/35 2019:9/80 2020:9/67 2021:7/53 2022:8/99 2023:9/115 2024:7/83 2025:15/108 2026:13/62
 
## tos  /terms of service|terms of use\b|acceptable use policy|\bToS\b/i
   platform-subject: 134/897 = 14.9%   |   all papers with text: 455/5855 = 7.8%
   [IMC 2010] … y test. Clicking the malicious link directs the victim to a site that asks them to provide their cellphone number and agree to a "terms of service" before they can see the results of the love compatibility test. If the victim proceeds, she is automatically sig …
   [IMC 2011] … mpaign. A second form of spam-as-a-service includes programs that specialize in the sale of Twitter accounts, violating Twitter's Terms of Service [25]. A number sites including xgcmedia.com and backlinksvault.com purport to register accounts with unique email …
   [NDSS 2013] … th pro- files in Table 2. Legitimate users have more photo albums and profile photos, while Sybils have more censored pho- 100 12 tos. The "News-Feed" column shows the average number of items in the first 5 chronological pages of each user's newsfeed. On Faceb …
   per year (hits/platform-subject with text): 2010:1/11 2011:1/18 2012:0/25 2013:1/29 2014:4/30 2015:3/28 2016:5/24 2017:2/30 2018:8/35 2019:5/80 2020:10/67 2021:11/53 2022:11/99 2023:16/115 2024:16/83 2025:24/108 2026:16/62
 
## sockpuppet  /sock[- ]?puppet/i
   platform-subject: 14/897 = 1.6%   |   all papers with text: 26/5855 = 0.4%
   [WWW 2012] … roup of reviewers, we mean a set of reviewer-ids. The actual reviewers behind the ids could be a single person with multiple ids (sockpuppet), multiple persons, or a combination of both. We do not distinguish them in this work. Before proceeding further, let u …
   [CCS 2019] …  USA ishtiaque@cs.toronto.edu carbunar@gmail.com ABSTRACT Black Hat App Search Optimization (ASO) in the form of fake reviews and sockpuppet accounts, is prevalent in peer-opinion sites, e.g., app stores, with negative implications on the digital and real live …
   [WWW 2019] … onference on Web Science. ACM, 249-258. [24] Srijan Kumar, Justin Cheng, Jure Leskovec, and VS Subrahmanian. 2017. An army of me: Sockpuppets in online discussion communities. In Proceedings of the 26th International Conference on World Wide Web. International …
   per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:1/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:3/80 2020:0/67 2021:0/53 2022:1/99 2023:3/115 2024:1/83 2025:3/108 2026:2/62
 
## donation  /data donation|donated (their )?data|data[- ]donating/i
   platform-subject: 6/897 = 0.7%   |   all papers with text: 25/5855 = 0.4%
   [WWW 2019] … Voter on Twitter. In ACM Conference on Human Factors in Computing Guardian. http://bit.ly/2DluqbV, 2012. Systems (CHI), 2017. [3] Data donation - German Parliamentary Election 2017. http://bit.ly/2t9QcLf, 2017. [24] T. Libert. Exposing the Invisible Web: An An …
   [PETS 2023] … nt to gather data from a wider range of sources, such as direct observations of privacy management behavior (e.g., through TikTok data donations). Based on our findings, future research could develop and systematically test privacy interventions based on the B …
   [WWW 2024] … ld traces dataset, obtained by Zannettou et al. [24], was collected after obtaining explicit consent from the participants before data donation. Also, the video metadata collection focuses on publicly accessible videos at the time of data collection (i.e., we  …
   per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:1/80 2020:0/67 2021:0/53 2022:0/99 2023:1/115 2024:1/83 2025:1/108 2026:2/62
 
## captcha  /CAPTCHA/i
   platform-subject: 62/897 = 6.9%   |   all papers with text: 313/5855 = 5.3%
   [IMC 2010] … counts. These Sybil accounts are "fake" in the sense that they do not represent a real person. Despite the use of mechanisms like CAPTCHAs, account registration is still relatively easy to automate, and attackers can potentially create a large number of accoun …
   [IMC 2011] … ellers reveal a fledgling market where spammers with content to advertise can obtain access to Twitter accounts without requiring CAPTCHA solvers or other tools to enable automated account creation. 6. SPAM CAMPAIGNS In this section, we explore five major spam …
   [CCS 2012] …  order to mitigate attack damage and to prevent new attacks. Notable examples of such restrictions include aggressively requiring CAPTCHA tests every now and then (not just for account creation), and limiting the number of outgoing emails [3]. Unfortunately, s …
   per year (hits/platform-subject with text): 2010:1/11 2011:2/18 2012:3/25 2013:4/29 2014:3/30 2015:3/28 2016:0/24 2017:4/30 2018:3/35 2019:1/80 2020:1/67 2021:5/53 2022:9/99 2023:6/115 2024:7/83 2025:7/108 2026:3/62
 
## researchapi  /research(er)?[- ]api|academic (research )?(product )?track|Academic API|Meta Content Library|Researcher Platform|TikTok Research/i
   platform-subject: 8/897 = 0.9%   |   all papers with text: 11/5855 = 0.2%
   [CCS 2022] … line of SpamHunter. Tweet collector. Our pipeline starts from collecting users' tweets. For this purpose, we utilized the Twitter Academic API 1 , which allows us to search for tweets using complicated query terms. We then composed a query as below to find spa …
   [WWW 2022] … ue warning labels (Appendix, Figure 4). Having obtained the ids of Trump's tweets, we used the full-archive endpoint of Twitter's researcher API, and collected the reply count to each of these tweets. We also collected a stratified sample of the actual replies …
   [IMC 2023] … nitial tweet (con- much lower than their performance against self-hosted phishing taining the phishing link), we used the Twitter Academic API [6] attacks (74.2% coverage and median response time of 51 minutes). to check if the tweet had been deleted at regula …
   per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:0/80 2020:0/67 2021:0/53 2022:2/99 2023:1/115 2024:1/83 2025:3/108 2026:1/62
 
## dsa  /Digital Services Act|Article 40(\(|\s|,)/
   platform-subject: 15/897 = 1.7%   |   all papers with text: 31/5855 = 0.5%
   [CCS 2023] … orbidden, or restricted. In particular, we examine the Children's Online Privacy Protection Rule (COPPA) in the U.S. [23] and the Digital Services Act, a new Regulation voted on 19 October 2022 at the European Union level [46]. The COPPA Act does not prohibit  …
   [IMC 2024] … l advertising policies across 16 European Union countries. Leveraging a comprehensive dataset provided by Meta under the European Digital Services Act, encompassing all ads targeting EU countries, our analysis exposes shortcomings in Meta's ad moderation. In p …
   [WWW 2024] … 14, 22]. In response, policymakers stepped in to address these growing concerns. In fact, the recently passed EU legislation, the Digital Services Act (DSA) [5] emphasizes the importance of algorithmic transparency and calls for audits of algorithmic feeds. He …
   per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:0/80 2020:0/67 2021:0/53 2022:0/99 2023:1/115 2024:2/83 2025:4/108 2026:8/62
 
## crowdtangle  /CrowdTangle/i
   platform-subject: 5/897 = 0.6%   |   all papers with text: 6/5855 = 0.1%
   [USENIX 2022] … IP code). • We retrieve manually curated Explore lists [86] containing political, government, media, and issue-related pages from CrowdTangle [29] (matched on page ID). • We enumerate the most common Facebook page categories for pages within the previous data  …
   [IMC 2023] … er services, we documented a rising trend in these attacks over a two-year period. Using the official Twitter API [95] and Meta's CrowdTangle [13], we compiled 3.1 million URLs from Twitter and 1.4 million URLs from Facebook that contained distinct second-leve …
   [WWW 2025] … or messages containing specific election-related keywords (see Appendix A). Facebook data was collected through (the now defunct) Crowdtangle, which offered access to public posts of groups and pages. For X, we gather publicly available information, including  …
   per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:0/80 2020:0/67 2021:0/53 2022:1/99 2023:1/115 2024:0/83 2025:2/108 2026:1/62
 
## adarchive  /Ad Library API|(Facebook|Meta|Google|Twitter|TikTok|X)['\u2019]?s? (Ad|Advert\w+) (Library|Archive)|Ad(vert\w+)? Transparency (Cent|Report|Tool)|Political Ad(vert\w+)? (Library|Archive)/
   platform-subject: 14/897 = 1.6%   |   all papers with text: 18/5855 = 0.3%
   [PETS 2020] … site of "Tom's Hardware Guide-IT Pro" app has more than 10 million unique monthly visitors. 4.3 Misuse Detection Using Facebook's Ad Transparency Tool CanaryTrap also uses Facebook's ad transparency tool [75] as the monitoring channel to detect potential misus …
   [USENIX 2020] …  Internet Behavioral Advertising Practices. In Proc. WPES, 2010. [43] Jeremy B. Merrill and Ariana Tobin. Facebook Moves to Block Ad Transparency Tools - Including Ours. ProPublica, January 28, 2019. https: //www.propublica.org/article/facebook- blocks-ad-tran …
   [WWW 2020] … ystem that shows the ads identified as related to politics. We noticed that not all political ads we detected were present in the Facebook Ad Library for political ads. Our results emphasize the importance of enforcement mechanisms for declaring political ads  …
   per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:0/80 2020:4/67 2021:0/53 2022:3/99 2023:4/115 2024:1/83 2025:0/108 2026:2/62
 
## pushshift  /Pushshift/i
   platform-subject: 31/897 = 3.5%   |   all papers with text: 35/5855 = 0.6%
   [IMC 2018] … d via a voting system based on the up- and down-votes users cast. We gather images from Reddit using publicly available data from Pushshift [62]. We parse all submissions and comments1 between July 1, 2016 and July, 31 2017, and extract 62M posts that contain  …
   [WWW 2019] …  2000. Community Building on the Web: Secret Strategies for Successful [5] Baumgartner, J. 2018. Reddit repository. https://files.pushshift.io/reddit/ [Online; Online Communities (1st ed.). Addison-Wesley Longman Publishing Co., Inc. accessed 02-November-2018] …
   [WWW 2019] … 6AnAnarchive archiveofofReddit Redditposts postsand andcomments commentsisispublicly publiclyavailable availableatathttps://files.pushshift. https://files.pushshift. be where influenced) online by real-world discussion external spread could events e.g., market …
   per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:1/35 2019:3/80 2020:3/67 2021:1/53 2022:3/99 2023:5/115 2024:5/83 2025:9/108 2026:1/62
 
## dsar  /right of access|subject access request|\bDSAR\b/i
   platform-subject: 14/897 = 1.6%   |   all papers with text: 52/5855 = 0.9%
   [USENIX 2020] … es are rarely available, prior work focuses heavily on abstract opinions about hypothetical scenarios. We leverage data subjects' right of access to data collected about them (recently strengthened by laws like GDPR and CCPA) to take a more comprehensive and e …
   [PETS 2022] … ). process such requests. 23 (55%) companies do not pro-In terms of processing sensitive data of children vide any information on subject access requests. Regard- i. e., minors, under the age of 13 years ("Processing of ing data retention, 16 (38%) companies d …
   [PETS 2023] … th these principles by opers comply with the provisions of the CCPA that require them posting privacy policies and responding to "subject access requests" to provide consumers with accurate privacy notices and respond (SARs) from consumers (known as "verifiabl …
   per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:0/80 2020:1/67 2021:0/53 2022:2/99 2023:2/115 2024:3/83 2025:3/108 2026:3/62
 
## apikey  /API (key|credentials|token)|developer account|elevated access/i
   platform-subject: 55/897 = 6.1%   |   all papers with text: 151/5855 = 2.6%
   [CCS 2012] … ossible red flags. Bouncer runs every application on their cloud in an attempt to detect hidden, malicious behavior, and analyzes developer accounts to block malicious developers. Bouncer does not fully solve the security and privacy problems of Android. First …
   [NDSS 2013] … nline social networks of the size of Twitter with moderate hardware requirements. 6.1 Data Collection Twitter Dataset We obtained elevated access to Twitter's streaming and RESTful API services. This allowed us to collect around 10% of all public tweets throug …
   [NDSS 2015] … cting the fairness of peer voting (Section III-B2) and resulting in false negative. To eliminate such polluting apps, we take the developer account into consideration, ensuring that the developer of every peer app is different from the one of the primary app.  …
   per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:1/25 2013:1/29 2014:0/30 2015:1/28 2016:1/24 2017:3/30 2018:2/35 2019:4/80 2020:3/67 2021:7/53 2022:5/99 2023:5/115 2024:4/83 2025:13/108 2026:5/62
 
## paidtier  /paid tier|Basic tier|Pro tier|Enterprise tier|API pricing|monthly (tweet|post) read/i
   platform-subject: 4/897 = 0.4%   |   all papers with text: 13/5855 = 0.2%
   [USENIX 2020] … to prove a product's legitimacy. Responders also discussed the benefits and drawbacks of specific products, including whether the paid tiers of some tools were worth purchasing. Location tracking and audiovisual recording. We saw many instances of responders r …
   [USENIX 2025] … d the limitations imposed by the "Basic" tier, payment. At the same time, Bob was ultimately the person which restricts the total monthly tweet read limit to 10,000 that the attacker had to socially engineer to perform the trans- and lacks access to streaming  …
   [NDSS 2026] … location. The free version of this API-intended for non-commercial use-is only available over HTTP [85], with HTTPS restricted to paid tiers. We further categorized URLs using the same string-matching technique described in Section V-C to identify those associ …
   per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:0/30 2015:0/28 2016:0/24 2017:0/30 2018:0/35 2019:0/80 2020:1/67 2021:0/53 2022:0/99 2023:0/115 2024:0/83 2025:1/108 2026:2/62
 
## antibot  /anti-?(bot|scraping|crawl\w*)|bot (detection|mitigation|management)|Cloudflare|DataDome|PerimeterX|Akamai Bot|Distil Networks/i
   platform-subject: 94/897 = 10.5%   |   all papers with text: 666/5855 = 11.4%
   [USENIX 2010] … on, L. Zhou, [25] F. Yu, Y. Xie, and Q. Ke. Sbotminer: Large scale search L. Zhang, and P. Barham. Vigilante: End-to-end contain- bot detection. In International Conference on Web Search ment of Internet worms. In the 12th ACM Symposium on and Data Mining (WSD …
   [IMC 2013] … the age 4.5 Estimating the Measurement Effort restriction due to the COPPA law), it is indeed possible to obtain Most OSNs employ anti-crawling techniques to protect the data a core set from the search function including students distributed of their members a …
   [WWW 2015] … 5 Detecting unique identifier cookies 5 https://aws.amazon.com/ec2/ 6 8 Our traceroutes were configured to use a single probe per CloudFlare, for example, claims to use anycasting as part of hop with a maximum of 25 hops. their content delivery network: https: …
   per year (hits/platform-subject with text): 2010:1/11 2011:0/18 2012:0/25 2013:1/29 2014:0/30 2015:1/28 2016:1/24 2017:1/30 2018:1/35 2019:8/80 2020:3/67 2021:8/53 2022:13/99 2023:12/115 2024:16/83 2025:19/108 2026:9/62
 
## loginwall  /login[- ]wall|behind (a )?login|logged[- ]?in (crawl|account|session|user)|authenticated (crawl|session)/i
   platform-subject: 30/897 = 3.3%   |   all papers with text: 123/5855 = 2.1%
   [USENIX 2013] … uch as me. The third snippet toggles between _SESSION['user_id'] of Mallory's session, it would allow login and logout, so that a logged-in user will get a Mallory to act on FooAppS as Alice. Because the seslogoutURL and a logged-out user will get a loginURL i …
   [WWW 2012] … ity 1 Dealing with Mobile Session Separation. As mentioned in section 2, websites like twitter.com and eBay differentiate between authenticated sessions depending on whether the client is a smartphone or a regular web browser. Because they use the user-agent h …
   [USENIX 2014] …  is that web applications normally remove the original login button and display some identifying information about the user in an authenticated session. For example, after a successful registration many websites display a welcome message that includes the user …
   per year (hits/platform-subject with text): 2010:0/11 2011:1/18 2012:1/25 2013:1/29 2014:1/30 2015:1/28 2016:1/24 2017:4/30 2018:0/35 2019:0/80 2020:3/67 2021:0/53 2022:5/99 2023:2/115 2024:4/83 2025:2/108 2026:4/62
 
## proxyresidential  /residential proxy|residential IP|proxy (network|pool)|Bright Data|Luminati|Oxylabs|Smartproxy/i
   platform-subject: 38/897 = 4.2%   |   all papers with text: 275/5855 = 4.7%
   [USENIX 2014] … c number Z, while a compound material can be modeled by producing an "effective Z," or Zeff [46]. Under constant-spectrum X-ray illumination, the backscattered intensity of a given point is largely determined by the atomic composition of matter at that locatio …
   [USENIX 2014] …  alerted the users that they were being photographed. The possibility that a webcam could be capturing pictures without the LED illuminating has led to suggestions that owners should tape over the webcam [43] as well as products designed to cover the camera st …
   [IMC 2016] … tructure.12 We attempt to identify apps implementing peer forwarding from the set of VPN apps with public IP addresses labeled as residential IPs by Spamhaus PBL. However, conducting this classification proves challenging (and prone to errors) as VPN services  …
   per year (hits/platform-subject with text): 2010:0/11 2011:0/18 2012:0/25 2013:0/29 2014:3/30 2015:0/28 2016:2/24 2017:2/30 2018:1/35 2019:1/80 2020:5/67 2021:4/53 2022:5/99 2023:4/115 2024:4/83 2025:5/108 2026:2/62

Full unedited output of node scripts/platforms_named_probe.mjs (named researcher-access routes, over the whole corpus rather than the platform-subject subset — the question “has anyone in these seven venues published through the official routes?” is not a question about the subset):

platforms_named_probe-output.txt
# denominator: 5855 papers with paper.cols.txt (of 5859 extracted)
 
## Meta Content Library / Content Library API
   papers: 1/5855 = 0.02%
   per year: 2025:1
     USENIX 2025 darkgram-a-large-scale-analysis-of-cybercriminal-activity-channels-on-telegram
 
## TikTok Research API / Research Tools
   papers: 0/5855 = 0.00%
   per year: (none)
 
## TikTok Commercial Content Library
   papers: 0/5855 = 0.00%
   per year: (none)
 
## YouTube Researcher Program
   papers: 2/5855 = 0.03%
   per year: 2023:1 2026:1
     USENIX 2023 millions-of-people-are-watching-you-understanding-the-digital-safety-needs-and-p
     USENIX 2026 chameleon-channels-measuring-youtube-accounts-repurposed-for-deception-and-profi
 
## X / Twitter Academic Research track
   papers: 8/5855 = 0.14%
   per year: 2020:1 2022:1 2023:2 2024:1 2025:2 2026:1
     IMC 2023 phishing-in-the-free-waters-a-study-of-phishing-attacks-created-using-free-websi
     IMC 2023 wolf-in-sheeps-clothing-evaluating-security-risks-of-the-undelegated-record-on-d
     PETS 2024 a-black-box-privacy-analysis-of-messaging-service-providers-chat-message-process
     USENIX 2025 please-dont-send-that-bot-anything-a-mixed-methods-study-of-personal-impersonati
     IMC 2025 fishing-for-smishing-understanding-sms-phishing-infrastructure-and-strategies-by
     NDSS 2026 revealing-the-secret-power-how-algorithms-can-influence-content-visibility-on-twitter-x
 
## CrowdTangle
   papers: 6/5855 = 0.10%
   per year: 2022:1 2023:2 2025:2 2026:1
     USENIX 2022 an-audit-of-facebooks-political-ad-policy-enforcement
     IMC 2023 phishing-in-the-free-waters-a-study-of-phishing-attacks-created-using-free-websi
     NDSS 2023 tactics-threats-targets-modeling-disinformation-and-its-mitigation
     WWW 2025 exposing-cross-platform-coordinated-inauthentic-activity-in-the-run-up-to-the-20
     WWW 2026 longitudinal-trends-in-global-climate-change-discourse-on-facebook
     USENIX 2025 darkgram-a-large-scale-analysis-of-cybercriminal-activity-channels-on-telegram
 
## Meta / Facebook Ad Library (incl. API)
   papers: 69/5855 = 1.18%
   per year: 2011:1 2013:1 2014:4 2015:3 2016:4 2017:5 2018:6 2019:5 2020:9 2021:9 2022:5 2023:6 2024:5 2025:3 2026:3
     USENIX 2026 pangolin-fuzzing-multilingual-iot-firmware-with-llm-driven-code-analysis
     PETS 2026 a-year-under-the-dsa-ad-transparencys-uneven-landscape
     IEEE-SP 2025 sok-self-generated-nudes-over-private-chats-how-can-technology-contribute-to-a-s
     IEEE-SP 2016 following-devils-footprints-cross-platform-analysis-of-potentially-harmful-libra
     IEEE-SP 2023 collaborative-ad-transparency-promises-and-limitations
     IEEE-SP 2024 withdrawing-is-believing-detecting-inconsistencies-between-withdrawal-choices-an
 
## Google political ads (BigQuery / Transparency Center)
   papers: 1/5855 = 0.02%
   per year: 2026:1
     PETS 2026 ad-personalization-and-transparency-in-mobile-ecosystems-a-comparative-analysis
 
## Pushshift
   papers: 35/5855 = 0.60%
   per year: 2018:1 2019:4 2020:3 2021:2 2022:4 2023:5 2024:6 2025:9 2026:1
     USENIX 2025 investigating-the-impact-of-online-community-involvement-on-safety-practices-and
     USENIX 2026 stayin-alive-how-global-stolen-data-markets-thrive-on-telegram
     IEEE-SP 2025 security-perceptions-of-users-in-stablecoins-advantages-and-risks-within-the-cry
     USENIX 2025 darkgram-a-large-scale-analysis-of-cybercriminal-activity-channels-on-telegram
     IEEE-SP 2023 beyond-phish-toward-detecting-fraudulent-e-commerce-websites-at-scale
     IEEE-SP 2023 its-up-to-the-consumer-to-be-smart-understanding-the-security-and-privacy-attitu
 
## DSA Article 40 / vetted researcher
   papers: 19/5855 = 0.32%
   per year: 2017:1 2020:2 2021:1 2022:1 2023:2 2024:1 2025:9 2026:2
     PETS 2026 the-pet-paradox-how-amazon-instrumentalises-pets-in-sidewalk-to-entrench-its-inf
     WWW 2026 does-this-button-work-investigating-youtubes-ineffective-user-controls
     IMC 2025 games-are-not-equal-classifying-cloud-gaming-contexts-for-effective-user-experie
     IMC 2025 fishing-for-smishing-understanding-sms-phishing-infrastructure-and-strategies-by
     PETS 2025 gig-work-at-what-cost-exploring-privacy-risks-of-gig-work-platform-participation
     PETS 2025 my-data-or-our-data-a-comparative-study-of-collaborative-family-apps-and-parents
 
## right-of-access / DSAR as an instrument
   papers: 52/5855 = 0.89%
   per year: 2016:2 2020:3 2021:3 2022:10 2023:6 2024:11 2025:8 2026:9
     USENIX 2025 a-stakeholder-based-framework-to-highlight-tensions-when-implementing-privacy-fe
     USENIX 2025 addressing-the-address-books-interdependent-privacy-issues
     USENIX 2025 no-way-to-sign-out-unpacking-non-compliance-with-google-plays-app-account-deleti
     IEEE-SP 2026 setting-the-course-but-forgetting-to-steer-analyzing-compliance-with-gdprs-right
     PETS 2026 on-the-suitability-of-llm-driven-agents-for-dark-pattern-audits
     IEEE-SP 2022 scraping-sticky-leftovers-app-user-information-left-on-servers-after-account-del
 
## data donation
   papers: 25/5855 = 0.43%
   per year: 2019:1 2023:2 2024:5 2025:11 2026:6
     WWW 2026 does-ad-free-mean-less-data-collection-an-empirical-study-of-platform-data-pract
     IEEE-SP 2025 characterizing-robocalls-with-multiple-vantage-points
     PETS 2025 models-matter-setting-accurate-privacy-expectations-for-local-and-central-differ
     USENIX 2025 addressing-the-address-books-interdependent-privacy-issues
     USENIX 2025 ares-comprehensive-path-hijacking-detection-via-routing-tree
     IEEE-SP 2026 setting-the-course-but-forgetting-to-steer-analyzing-compliance-with-gdprs-right

The scripts

Committed under scripts/ and reproduced here verbatim so the audit trail is readable without repo access.

The fold

plat_fold.mjs assigns every platform-name match both a family and a role. The role is the whole point: without it, “Amazon” is sixteen different studies.

plat_fold.mjs
// Folding for design:platforms.
//
// The problem this solves: the string "Amazon" in the extraction is Mechanical
// Turk far more often than it is the retailer, and "Alexa" is a retired
// ranking list far more often than it is a voice assistant. Counting either by
// substring produces a figure that is about something else entirely. So every
// platform-name match is assigned BOTH a family and a ROLE, and only the
// subject roles are counted as "this paper measured that platform".
//
// Roles:
//   subject        the platform (or its API / store / ad archive) is where the
//                  measured data came from — this is what design:platforms counts
//   recruitment    the platform supplied human participants or annotators
//                  (Mechanical Turk) — that is design:user_studies
//   infrastructure the platform supplied compute, storage or a vantage point
//                  (AWS, EC2, S3, Lambda) — that is design:crawling_location
//   mlservice      the platform supplied a hosted model or classifier
//                  (Rekognition, Polly, Transcribe, Comprehend)
//   ranking        "Alexa" the top-sites list — that is design:website_selection
//   operator       the paper is by/with the platform operator and measures its
//                  own internal systems (Facebook production data, changesets)
//   falsepos       token collision (tiktoken, "Meta" as meta-learning, X as a
//                  variable) — excluded from every count
//
// Every distinct string that matched a platform token is printed with its
// assignment by `--dump`, so the residue is auditable rather than invisible.
 
export const FAMILIES = {
  'Twitter/X': /twitter|tweet|\bx\.com\b|\bxcom\b|tweepy|decahose|gardenhose/i,
  'Meta (Facebook/Instagram/WhatsApp)': /facebook|\bfb\.com\b|instagram|whatsapp|crowdtangle|\bmeta ad|meta content library|messenger/i,
  TikTok: /tiktok|douyin|bytedance/i,
  Amazon: /amazon|\baws\b|\bec2\b|\bmturk\b|\balexa\b|\bmechanical turk\b/i,
  YouTube: /youtube/i,
  Reddit: /reddit|pushshift/i,
  Telegram: /telegram/i,
  LinkedIn: /linkedin/i,
  Discord: /discord/i,
  'WeChat/Weibo/QQ': /wechat|weibo|\bqq\b|xiaohongshu|tencent/i,
  'Google (Play/Search/Ads)': /google play|play store|googleplay|google search|google ads|google adwords|google ad library|adsense|doubleclick|youtube data api/i,
  'Apple App Store': /app store|itunes|apple store/i,
  Steam: /\bsteam\b/i,
  Airbnb: /airbnb/i,
  Uber: /\buber\b/i,
  Yelp: /\byelp\b/i,
  eBay: /\bebay\b/i,
  Netflix: /netflix/i,
  Spotify: /spotify/i,
  Twitch: /twitch/i,
  Tumblr: /tumblr/i,
  Flickr: /flickr/i,
  Pinterest: /pinterest/i,
  Snapchat: /snapchat/i,
  Mastodon: /mastodon|fediverse|\bnostr\b|bluesky/i,
};
 
// Ordered, most specific first. Each rule is [regex, role].
const ROLE_RULES = [
  // token collisions — kill these before anything else
  [/tiktoken/i, 'falsepos'],
  [/\bmeta-?learn|meta-?data|metadata|meta-?analysis|meta-?classifier|\bmeta model/i, 'falsepos'],
  [/steam(ing|ed)\b|\bupsteam|downsteam/i, 'falsepos'],
  [/\buber(t|tas)\b/i, 'falsepos'],
  // recruitment
  [/mechanical turk|\bmturk\b|\bamt\b|amazon turk|\bturk\b|prolific academic/i, 'recruitment'],
  [/recruit(ed|ment)?\b/i, 'recruitment'],
  // ML services
  [/rekognition|amazon polly|amazon transcribe|amazon comprehend|amazon machine learning|amazon ml\b|amazon lex/i, 'mlservice'],
  [/text-to-speech|speech-to-text|\btts\b|translation api|vision api/i, 'mlservice'],
  // infrastructure
  [/device farm|test lab|private registry|\bcdn\b|hosting provider/i, 'infrastructure'],
  [/\bec2\b|\baws\b|amazon web service|elastic compute|amazon s3|lambda|elastic mapreduce|simple queue|amazon cloudfront|amazon (batch|vms)|amazon.s command line/i, 'infrastructure'],
  // The retired Alexa top-sites list. This rule is the whole reason the module
  // exists: 51 papers give their population as the bare string "Alexa", and a
  // substring match on the Amazon family turns every one of them into an
  // "Amazon" measurement. Anything naming Alexa that is NOT a skill, a voice
  // device or the skill store is the ranking list.
  [/\balexa\b/i, 'ranking'],
  // benchmark corpora named after a platform (Amazon Reviews, Yelp Polarity):
  // the paper trains on them, it does not measure the platform
  [/wikitext|\bxsum\b|cc-news|glue benchmark|imdb\b|sst-?2|yelp polarity|amazon polarity/i, 'benchmark'],
  // operator-internal
  [/production data|infrastructure changeset|internal (logs|data|telemetry)|server logs of|site integrity/i, 'operator'],
];
 
// Strings that are the platform as subject but would otherwise be caught by a
// broader rule above. Checked BEFORE ROLE_RULES.
const SUBJECT_OVERRIDES = [
  /alexa[- ]?(skill|marketplace|voice|device|echo|assistant|app)/i,
  /skills? (store|market|aggregation)/i,
  /\balexa\b[^,;]{0,40}\bskill/i,
  /amazon\.?com|amazon \[|amazon (reviews|market|product|best-?sell|prime|fire tv|curated|android app store|and )/i,
  /^amazon$/i,
];
 
export function roleOf(s) {
  const str = String(s);
  for (const re of SUBJECT_OVERRIDES) if (re.test(str)) return 'subject';
  for (const [re, role] of ROLE_RULES) if (re.test(str)) return role;
  return 'subject';
}
 
export function familiesOf(s) {
  const str = String(s);
  const out = [];
  for (const [fam, re] of Object.entries(FAMILIES)) if (re.test(str)) out.push(fam);
  return out;
}
 
// A single string can name several platforms ("Amazon, Best Buy, Walmart, and
// Taobao"). Returns [{family, role}].
export function tagsOf(s) {
  const role = roleOf(s);
  if (role === 'falsepos' || role === 'benchmark') return [];
  return familiesOf(s).map((family) => ({ family, role }));
}
 
export const ANY_PLATFORM = new RegExp(
  Object.values(FAMILIES)
    .map((r) => r.source)
    .join('|'),
  'i'
);

The report

platforms_report.mjs
// Report script for design:platforms (and the four named sub-pages).
//
// Every figure prints its own denominator. Counts are of PAPERS, never tuples.
// Sentinels (not-stated / none-mentioned) are never counted as answers.
//
//   node scripts/platforms_report.mjs                 # the page's figures
//   node scripts/platforms_report.mjs --dump           # every folded string + role
//   node scripts/platforms_report.mjs --residue        # strings the fold left as 'subject' with no family
//   node scripts/platforms_report.mjs --quotes <fam>   # evidence quotes for one family
//
// Inclusion rule, fixed before the first figure was computed:
//   A paper "measured platform P" iff at least one population[].sourceList
//   string folds to P with role 'subject' (see scripts/plat_fold.mjs). Role
//   'recruitment' (Mechanical Turk), 'infrastructure' (AWS/EC2), 'mlservice'
//   (Rekognition), 'ranking' (the Alexa top-sites list), 'operator' (the
//   platform's own production data) and 'falsepos' (tiktoken) are NOT that.
 
import { loadExtractions, isSentinel, POPULATIONS } from './lib.mjs';
import { tagsOf, roleOf, familiesOf, FAMILIES, ANY_PLATFORM } from './plat_fold.mjs';
 
const rows = loadExtractions();
const argv = process.argv.slice(2);
const has = (f) => argv.includes(f);
const val = (f) => (argv.indexOf(f) >= 0 ? argv[argv.indexOf(f) + 1] : null);
 
const pct = (n, d) => (d === 0 ? 'n/a' : `${((100 * n) / d).toFixed(1)}%`);
const key = (r) => `${r.venue}/${r.year}/${r.slug}`;
 
// ---------------------------------------------------------------- tag every paper
//
// INCLUSION RULE (fixed before the first figure; see the provenance page).
// A paper counts as measuring platform P if P is matched, with a non-excluded
// role, in at least one of four signals:
//   (a) title
//   (b) population[].sourceList          — where the measured data came from
//   (c) detection[].phenomenon           — what was measured
//   (d) tools[].name, used or produced   — the API / scraper it went through
// Signal (b) alone under-recalls badly: the WWW 2024 TikTok feed study gives
// its population as "custom bot accounts" and never names TikTok there.
// Excluded roles: recruitment, infrastructure, mlservice, ranking, operator,
// benchmark, falsepos (see scripts/plat_fold.mjs).
 
const SIGNALS = {
  title: (r) => [r.title],
  sourceList: (r) => (r.population || []).map((p) => p.sourceList),
  phenomenon: (r) => (r.detection || []).map((d) => d.phenomenon),
  tool: (r) =>
    (r.tools || [])
      .filter((t) => t.usedOrMentioned === 'used' || t.usedOrMentioned === 'produced')
      .map((t) => t.name),
};
 
// perPaper: Map(paperKey -> Map(family -> Set(signal names)))
const perPaper = new Map();
// perPaperRoles: Map(paperKey -> Map(family -> Set(roles seen on sourceList)))
const perPaperRoles = new Map();
const stringRoles = new Map(); // distinct sourceList string -> {role, families, papers:Set}
 
for (const r of rows) {
  const k = key(r);
  const fams = new Map();
  const roles = new Map();
  for (const [sig, get] of Object.entries(SIGNALS)) {
    for (const raw of get(r)) {
      if (!raw || isSentinel(raw)) continue;
      const s = String(raw);
      // Paper-level correction. A qualitative study gives its recruitment
      // channels as a population sourceList ("professional networks, Reddit,
      // Twitter, Slack, and Upwork"). Naming Twitter there is not measuring
      // Twitter. So for a paper with human participants, sourceList alone does
      // not make it a platform study — the platform must also show up in the
      // title, the measured phenomenon, or a tool.
      if (sig === 'sourceList' && (r.participants || []).length > 0) {
        if (ANY_PLATFORM.test(s)) {
          if (!stringRoles.has(s)) stringRoles.set(s, { role: 'recruitment', families: familiesOf(s), papers: new Set() });
          stringRoles.get(s).papers.add(k);
          for (const fam of familiesOf(s)) {
            if (!roles.has(fam)) roles.set(fam, new Set());
            roles.get(fam).add('recruitment');
          }
        }
        continue;
      }
      if (sig === 'sourceList') {
        if (ANY_PLATFORM.test(s)) {
          if (!stringRoles.has(s)) stringRoles.set(s, { role: roleOf(s), families: familiesOf(s), papers: new Set() });
          stringRoles.get(s).papers.add(k);
        }
        for (const fam of familiesOf(s)) {
          if (!roles.has(fam)) roles.set(fam, new Set());
          roles.get(fam).add(roleOf(s));
        }
      }
      for (const { family, role } of tagsOf(s)) {
        if (role !== 'subject') continue;
        if (!fams.has(family)) fams.set(family, new Set());
        fams.get(family).add(sig);
      }
    }
  }
  if (fams.size) perPaper.set(k, fams);
  if (roles.size) perPaperRoles.set(k, roles);
}
 
const byKey = new Map(rows.map((r) => [key(r), r]));
 
const subjectPapers = (family) =>
  [...perPaper.entries()].filter(([, fams]) => fams.has(family)).map(([k]) => byKey.get(k));
 
const anySubject = [...perPaper.keys()].map((k) => byKey.get(k));
 
const signalsFor = (family) => {
  const c = {};
  for (const [, fams] of perPaper) if (fams.has(family)) for (const sig of fams.get(family)) c[sig] = (c[sig] || 0) + 1;
  return c;
};
 
// -------------------------------------------------------------------- --dump
if (has('--dump')) {
  const out = [...stringRoles.entries()].sort((a, b) => b[1].papers.size - a[1].papers.size);
  console.log(`# every distinct population.sourceList string that matched a platform token: ${out.length}`);
  for (const [s, m] of out) console.log(`${String(m.papers.size).padStart(4)}  ${m.role.padEnd(14)} ${m.families.join('|') || '(none)'}  ${JSON.stringify(s)}`);
  process.exit(0);
}
if (has('--residue')) {
  // Strings that matched a platform token, were assigned 'subject', and whose
  // family list is a single broad family — the ones a human should eyeball.
  const out = [...stringRoles.entries()].filter(([, m]) => m.role === 'subject');
  console.log(`# strings folded to role=subject: ${out.length} distinct`);
  for (const [s, m] of out.sort((a, b) => b[1].papers.size - a[1].papers.size))
    console.log(`${String(m.papers.size).padStart(4)}  ${m.families.join('|')}  ${JSON.stringify(s)}`);
  process.exit(0);
}
if (has('--keys')) {
  for (const k of perPaper.keys()) console.log(k);
  process.exit(0);
}
if (has('--list')) {
  const fam = val('--list');
  const ps = subjectPapers(fam).sort((a, b) => a.year - b.year || a.venue.localeCompare(b.venue));
  console.log(`# ${ps.length} papers matched family ${JSON.stringify(fam)} with role=subject`);
  for (const r of ps) {
    const sigs = [...perPaper.get(key(r)).get(fam)].sort().join(',');
    console.log(`${r.venue}\t${r.year}\t${sigs}\t${r.title}`);
    if (has('--why')) {
      const seen = new Set();
      for (const [sig, get] of Object.entries(SIGNALS))
        for (const raw of get(r)) {
          if (!raw || isSentinel(raw)) continue;
          if (sig === 'sourceList' && (r.participants || []).length > 0) continue;
          if (!tagsOf(String(raw)).some((t) => t.family === fam && t.role === 'subject')) continue;
          const line = `      ${sig}: ${JSON.stringify(String(raw))}`;
          if (!seen.has(line)) { seen.add(line); console.log(line); }
        }
    }
  }
  process.exit(0);
}
if (has('--quotes')) {
  const fam = val('--quotes');
  for (const r of subjectPapers(fam).sort((a, b) => a.year - b.year)) {
    for (const p of r.population) {
      if (!p.sourceList || !tagsOf(p.sourceList).some((t) => t.family === fam && t.role === 'subject')) continue;
      console.log(`${r.venue} ${r.year} ${r.slug}\n  n=${p.n} unit=${p.unit} method=${p.samplingMethod} list=${JSON.stringify(p.sourceList)}\n  [${p.evidence.section}] ${p.evidence.quote}\n`);
    }
  }
  process.exit(0);
}
 
// ============================================================== the page's figures
console.log('='.repeat(78));
console.log('design:platforms — report script');
console.log(`corpus: ${rows.length} extracted papers, 7 venues, ${Math.min(...rows.map((r) => r.year))}-${Math.max(...rows.map((r) => r.year))}`);
console.log('='.repeat(78));
 
// -- 0. base denominators
const otherService = rows.filter((r) => (r.platforms || []).includes('other-online-service'));
const web = rows.filter((r) => (r.platforms || []).includes('web'));
const crawled = rows.filter(POPULATIONS.crawled);
const sampled = rows.filter((r) => (r.population || []).length > 0);
console.log(`\n## Denominators`);
console.log(`all extracted papers                                  ${rows.length}`);
console.log(`platforms includes 'other-online-service'             ${otherService.length}  (${pct(otherService.length, rows.length)} of all)`);
console.log(`platforms includes 'web'                              ${web.length}  (${pct(web.length, rows.length)} of all)`);
console.log(`ran a crawl (crawlConfig or studyType, per OVERVIEW)         ${crawled.length}  (${pct(crawled.length, rows.length)} of all)`);
console.log(`drew a study population                               ${sampled.length}`);
console.log(`named >=1 large platform as SUBJECT of measurement    ${anySubject.length}  (${pct(anySubject.length, sampled.length)} of the ${sampled.length} that drew a population)`);
 
// -- 1. ranking of families, subject role only
console.log(`\n## Papers measuring a named large platform (role=subject), of ${sampled.length} papers that drew a study population`);
console.log('rank  papers   share  family');
const ranked = Object.keys(FAMILIES)
  .map((f) => [f, subjectPapers(f)])
  .filter(([, ps]) => ps.length > 0)
  .sort((a, b) => b[1].length - a[1].length);
ranked.forEach(([f, ps], i) => console.log(`${String(i + 1).padStart(4)}  ${String(ps.length).padStart(6)}  ${pct(ps.length, sampled.length).padStart(6)}  ${f}`));
 
// -- 2. the four named sub-pages, by role
console.log(`\n## The four platforms [[start]] names, by the ROLE the name plays in population.sourceList`);
console.log('   (sourceList only — a paper can still be a subject paper via title/phenomenon/tool,');
console.log('    which is why "subject" here is lower than the ranking above.)');
console.log('family                                 subject  recruit  infra  mlsvc  ranking  operator');
for (const fam of ['Meta (Facebook/Instagram/WhatsApp)', 'Twitter/X', 'TikTok', 'Amazon']) {
  const counts = {};
  for (const role of ['subject', 'recruitment', 'infrastructure', 'mlservice', 'ranking', 'operator']) {
    counts[role] = [...perPaperRoles.values()].filter((fams) => fams.has(fam) && fams.get(fam).has(role)).length;
  }
  console.log(
    `${fam.padEnd(37)} ${String(counts.subject).padStart(7)}  ${String(counts.recruitment).padStart(7)}  ${String(counts.infrastructure).padStart(5)}  ${String(counts.mlservice).padStart(5)}  ${String(counts.ranking).padStart(7)}  ${String(counts.operator).padStart(8)}`
  );
}
 
// -- 3. per year, subject role, top families
console.log(`\n## Per-year paper counts, role=subject (2025-2026 provisional: see literature:corpus)`);
const years = [...new Set(rows.map((r) => r.year))].sort();
const showFams = ranked.slice(0, 8).map(([f]) => f);
console.log(['year', 'corpus', ...showFams.map((f) => f.slice(0, 12))].join('\t'));
for (const y of years) {
  const line = [y, rows.filter((r) => r.year === y).length];
  for (const f of showFams) line.push(subjectPapers(f).filter((r) => r.year === y).length);
  console.log(line.join('\t'));
}
 
// -- 4. three-year buckets for the two big families (the API-access story)
console.log(`\n## Twitter/X and Meta as subject, 3-year buckets, as a share of that bucket's corpus`);
const buckets = [
  [2010, 2012],
  [2013, 2015],
  [2016, 2018],
  [2019, 2021],
  [2022, 2024],
  [2025, 2026],
];
console.log('bucket      corpus   Twitter/X          Meta               TikTok');
for (const [a, b] of buckets) {
  const n = rows.filter((r) => r.year >= a && r.year <= b).length;
  const cells = ['Twitter/X', 'Meta (Facebook/Instagram/WhatsApp)', 'TikTok'].map((f) => {
    const c = subjectPapers(f).filter((r) => r.year >= a && r.year <= b).length;
    return `${String(c).padStart(3)} (${pct(c, n).padStart(5)})`;
  });
  console.log(`${a}-${b}${b === 2026 ? '*' : ' '}  ${String(n).padStart(6)}   ${cells.join('   ')}`);
}
console.log('* 2025-2026 is provisional: CCS 2026 and IMC 2026 have not been held, and');
console.log('  IEEE S&P 2026 / WWW 2026 abstracts are not in OpenAlex, so selection under-covers them.');
 
// -- 5. how the platform papers got their data
console.log(`\n## How the ${anySubject.length} platform-subject papers obtained the data (temporal.mode, paper-counted, multi-valued)`);
const modes = {};
for (const r of anySubject) for (const m of new Set((r.temporal || []).map((t) => t.mode).filter((m) => m && !isSentinel(m)))) modes[m] = (modes[m] || 0) + 1;
for (const [m, c] of Object.entries(modes).sort((a, b) => b[1] - a[1])) console.log(`  ${m.padEnd(20)} ${String(c).padStart(4)}  ${pct(c, anySubject.length)}`);
const noMode = anySubject.filter((r) => (r.temporal || []).every((t) => !t.mode || isSentinel(t.mode))).length;
console.log(`  (no stated mode)     ${String(noMode).padStart(4)}  ${pct(noMode, anySubject.length)}`);
// temporal.mode is MULTI-VALUED, so "383 existing-dataset" is not "383 papers
// that collected nothing": 175 of them also name a primary-collection mode.
// Publishing the multi-valued count as an exclusive one overstates dataset
// reuse and understates primary collection. Exclusive split:
const PRIMARY = new Set(['live-crawl', 'active-probing', 'passive-collection']);
let bothModes = 0;
let onlyExisting = 0;
let onlyPrimary = 0;
for (const r of anySubject) {
  const m = new Set((r.temporal || []).map((t) => t.mode).filter((x) => x && !isSentinel(x)));
  const ex = m.has('existing-dataset');
  const pr = [...m].some((x) => PRIMARY.has(x));
  if (ex && pr) bothModes += 1;
  else if (ex) onlyExisting += 1;
  else if (pr) onlyPrimary += 1;
}
console.log(`  EXCLUSIVE split of the same ${anySubject.length} papers:`);
console.log(`    existing-dataset ONLY (no primary collection)  ${String(onlyExisting).padStart(4)}  ${pct(onlyExisting, anySubject.length)}`);
console.log(`    primary collection ONLY (no existing dataset)  ${String(onlyPrimary).padStart(4)}  ${pct(onlyPrimary, anySubject.length)}`);
console.log(`    both                                          ${String(bothModes).padStart(4)}  ${pct(bothModes, anySubject.length)}`);
console.log(`    any primary collection                        ${String(onlyPrimary + bothModes).padStart(4)}  ${pct(onlyPrimary + bothModes, anySubject.length)}`);
 
// -- 6. official API vs scraping, from tool names
console.log(`\n## Did they use the platform's official API, or scrape? (tools[].name over the ${anySubject.length} platform-subject papers)`);
const API_RE = /\bapi\b|graph api|streaming api|decahose|gardenhose|firehose|pushshift|crowdtangle|content library|ad library/i;
const SCRAPE_RE = /scrap|selenium|puppeteer|playwright|phantomjs|\bcurl\b|wget|beautifulsoup|\bbs4\b|mechanize|scrapy|openwpm|webdriver|\bcrawler\b/i;
const usedApi = anySubject.filter((r) => (r.tools || []).some((t) => (t.usedOrMentioned === 'used' || t.usedOrMentioned === 'produced') && API_RE.test(t.name)));
const usedScrape = anySubject.filter((r) => (r.tools || []).some((t) => (t.usedOrMentioned === 'used' || t.usedOrMentioned === 'produced') && SCRAPE_RE.test(t.name)));
const both = usedApi.filter((r) => usedScrape.includes(r));
const neither = anySubject.filter((r) => !usedApi.includes(r) && !usedScrape.includes(r));
console.log(`  names an API-shaped tool          ${String(usedApi.length).padStart(4)}  ${pct(usedApi.length, anySubject.length)}`);
console.log(`  names a scraping/automation tool  ${String(usedScrape.length).padStart(4)}  ${pct(usedScrape.length, anySubject.length)}`);
console.log(`  both                              ${String(both.length).padStart(4)}  ${pct(both.length, anySubject.length)}`);
console.log(`  neither (no tool named for it)    ${String(neither.length).padStart(4)}  ${pct(neither.length, anySubject.length)}`);
console.log('  NB: this is a keyword split over free-text tool names, not an enum. Report as a ranking.');
 
// -- 7. the login wall
const platCrawled = anySubject.filter((r) => r.crawlConfig !== null);
const platCrawledBroad = anySubject.filter(POPULATIONS.crawled);
console.log(`\n## The login wall: crawlConfig.authentication`);
// crawlConfig is null for papers whose crawl is known only from studyTypes, so
// this table's population is "papers with a crawlConfig object", not `crawled`.
const crawlCfg = rows.filter((r) => r.crawlConfig !== null);
for (const [label, set] of [
  [`platform-subject papers with a crawlConfig object (${platCrawled.length})`, platCrawled],
  [`all papers with a crawlConfig object (${crawlCfg.length})`, crawlCfg],
]) {
  const c = {};
  for (const r of set) {
    const a = r.crawlConfig.authentication;
    c[a] = (c[a] || 0) + 1;
  }
  console.log(`  ${label}`);
  for (const [k, v] of Object.entries(c).sort((a, b) => b[1] - a[1])) console.log(`    ${k.padEnd(18)} ${String(v).padStart(4)}  ${pct(v, set.length)}`);
  const stated = set.filter((r) => !isSentinel(r.crawlConfig.authentication)).length;
  console.log(`    -> states a value: ${stated}/${set.length} = ${pct(stated, set.length)}`);
}
 
// -- 8. ToS / robots.txt / ethics review
console.log(`\n## Rules of engagement: robots.txt and ethics review`);
for (const [label, set] of [
  [`platform-subject papers with a crawlConfig object (${platCrawled.length})`, platCrawled],
  [`all papers with a crawlConfig object (${crawlCfg.length})`, crawlCfg],
]) {
  const stated = set.filter((r) => r.ethics && !isSentinel(r.ethics.robotsTxt)).length;
  console.log(`  ${label}: says anything about robots.txt: ${stated}  ${pct(stated, set.length)}`);
}
const platEmpirical = anySubject.filter((r) => r.isEmpirical);
const allEmpirical = rows.filter((r) => r.isEmpirical);
for (const [label, set] of [
  [`platform-subject empirical papers (${platEmpirical.length})`, platEmpirical],
  [`all empirical papers (${allEmpirical.length})`, allEmpirical],
]) {
  const stated = set.filter((r) => r.ethics && !isSentinel(r.ethics.reviewOutcome)).length;
  console.log(`  ${label}: states an ethics-review outcome: ${stated}  ${pct(stated, set.length)}`);
}
 
// -- 9. artifacts: can a platform study even release its data?
console.log(`\n## Artifact availability (artifacts.availability), platform-subject empirical papers vs all empirical`);
for (const [label, set] of [
  [`platform-subject empirical (${platEmpirical.length})`, platEmpirical],
  [`all empirical (${allEmpirical.length})`, allEmpirical],
]) {
  const c = {};
  for (const r of set) {
    const a = r.artifacts ? r.artifacts.availability : 'absent';
    c[a] = (c[a] || 0) + 1;
  }
  console.log(`  ${label}`);
  for (const [k, v] of Object.entries(c).sort((a, b) => b[1] - a[1])) console.log(`    ${k.padEnd(24)} ${String(v).padStart(4)}  ${pct(v, set.length)}`);
}
 
// -- 10. population sizes: what does n look like for a platform study
console.log(`\n## Study size (population.n on the platform-subject tuple), where stated`);
for (const fam of ['Twitter/X', 'Meta (Facebook/Instagram/WhatsApp)', 'Amazon', 'TikTok']) {
  const ns = [];
  for (const r of subjectPapers(fam))
    for (const p of r.population)
      if (p.sourceList && tagsOf(p.sourceList).some((t) => t.family === fam && t.role === 'subject') && typeof p.n === 'number') ns.push(p.n);
  ns.sort((a, b) => a - b);
  const med = ns.length ? ns[Math.floor(ns.length / 2)] : null;
  console.log(`  ${fam.padEnd(37)} tuples with n: ${String(ns.length).padStart(3)}  min ${ns[0] ?? '-'}  median ${med ?? '-'}  max ${ns[ns.length - 1] ?? '-'}`);
}
 
// -- 11. measured results available to quote
console.log(`\n## detection[] tuples carrying a prevalence, on the platform-subject papers`);
const withPrev = anySubject.filter((r) => (r.detection || []).some((d) => d.prevalence));
console.log(`  papers with >=1 detection tuple with a non-null prevalence: ${withPrev.length}  ${pct(withPrev.length, anySubject.length)} of ${anySubject.length}`);
 
// -- 12. legal
console.log(`\n## Laws assessed on platform-subject papers`);
const platLegal = anySubject.filter((r) => (r.legal || []).some((l) => l.usedOrMentioned === 'used'));
console.log(`  platform-subject papers that assessed a law: ${platLegal.length}  ${pct(platLegal.length, anySubject.length)}`);
const laws = {};
for (const r of platLegal) for (const l of new Set(r.legal.filter((l) => l.usedOrMentioned === 'used').map((l) => l.law))) laws[l] = (laws[l] || 0) + 1;
for (const [l, c] of Object.entries(laws).sort((a, b) => b[1] - a[1]).slice(0, 10)) console.log(`    ${l.padEnd(28)} ${c}`);
 
// -- 13. fold audit
console.log(`\n## Fold audit`);
const roleCounts = {};
for (const m of stringRoles.values()) roleCounts[m.role] = (roleCounts[m.role] || 0) + 1;
console.log(`  distinct population.sourceList strings matching a platform token: ${stringRoles.size}`);
for (const [r, c] of Object.entries(roleCounts).sort((a, b) => b[1] - a[1])) console.log(`    role=${r.padEnd(15)} ${String(c).padStart(4)} distinct strings`);
console.log('  full string-by-string assignment: node scripts/platforms_report.mjs --dump');
 
// -- 14. named access routes, folded
console.log(`\n## Named access routes on the ${anySubject.length} platform-subject papers (tools[] used/produced, paper-counted)`);
const ROUTES = [
  ['platform REST/search API (any platform)', /\bAPI\b/i],
  ['Twitter/X streaming or search API', /twitter[^,;]{0,20}(api|stream)|(stream|search|academic|historical|rest)[^,;]{0,12}(twitter|api).{0,0}|decahose|gardenhose|firehose|\bX API\b/i],
  ['Tweepy / twarc / twitter client lib', /tweepy|twarc|python-twitter|twitter4j/i],
  ['Facebook/Meta Graph or Marketing API', /(facebook|meta)[^,;]{0,20}(graph|marketing|ads?) api|open graph/i],
  ['Meta / Facebook Ad Library', /ad library/i],
  ['CrowdTangle', /crowdtangle/i],
  ['Pushshift (Reddit archive)', /pushshift/i],
  ['Reddit API / PRAW', /reddit[^,;]{0,12}api|\bpraw\b/i],
  ['YouTube Data API', /youtube[^,;]{0,15}(api|data api)/i],
  ['TikTok API / TikTok-Api', /tiktok[- ]?api/i],
  ['Instagram API / scraper', /instagram[^,;]{0,15}(api|scraper)/i],
  ['generic browser automation', /selenium|puppeteer|playwright|phantomjs|webdriver|openwpm/i],
  ['custom scraper / crawler', /scrap|\bcrawler\b|beautifulsoup|scrapy|mechanize/i],
];
for (const [label, re] of ROUTES) {
  const c = anySubject.filter((r) =>
    (r.tools || []).some((t) => (t.usedOrMentioned === 'used' || t.usedOrMentioned === 'produced') && re.test(t.name))
  );
  const byYear = {};
  for (const r of c) byYear[r.year] = (byYear[r.year] || 0) + 1;
  const yrs = Object.keys(byYear).sort().map((y) => `${y}:${byYear[y]}`).join(' ');
  console.log(`  ${label.padEnd(42)} ${String(c.length).padStart(4)}  ${pct(c.length, anySubject.length).padStart(6)}   ${yrs}`);
}
console.log('  NB: free-text tool names, matched by regex. Rankings only, never a precise share.');
 
// -- 15. what the field measures on platforms: folded phenomena
console.log(`\n## What the ${anySubject.length} platform-subject papers measure (detection.phenomenon, folded into families, paper-counted)`);
const PHEN = [
  ['spam / abuse / fraud accounts', /spam|abus|fraud|scam|bot\b|fake account|sybil|troll|astroturf/i],
  ['misinformation / content moderation', /misinform|disinform|rumor|rumour|fake news|moderat|hate|toxic|censor|takedown|removal/i],
  ['advertising / targeting / ad delivery', /\bads?\b|advertis|targeting|ad delivery|ad transparen/i],
  ['tracking / third-party data flows', /track|third-part|cookie|fingerprint|pixel/i],
  ['privacy settings / user disclosure', /privacy setting|self-disclos|disclosure|visibility|profile privacy/i],
  ['recommendation / personalisation / feed', /recommend|personali[sz]|feed|ranking algorithm|filter bubble/i],
  ['account security / hijacking / auth', /hijack|compromis|credential|authenticat|2fa|password|takeover/i],
  ['deletion / data subject rights / compliance', /deletion|delete|gdpr|compliance|right of access|retention/i],
  ['network / infrastructure performance', /latency|throughput|peering|cdn|bgp|dns|outage|performance/i],
  ['app / store / SDK analysis', /\bsdk\b|app store|permission|library|apk/i],
];
for (const [label, re] of PHEN) {
  const c = anySubject.filter((r) => (r.detection || []).some((d) => d.phenomenon && re.test(d.phenomenon)));
  console.log(`  ${label.padEnd(44)} ${String(c.length).padStart(4)}  ${pct(c.length, anySubject.length)}`);
}
const unmatched = anySubject.filter(
  (r) => (r.detection || []).length > 0 && !PHEN.some(([, re]) => (r.detection || []).some((d) => d.phenomenon && re.test(d.phenomenon)))
);
console.log(`  RESIDUE: papers with detection tuples matching no family above: ${unmatched.length}  ${pct(unmatched.length, anySubject.length)}`);
console.log('  residue sample (first 15 phenomena):');
for (const r of unmatched.slice(0, 15)) console.log(`    [${r.venue} ${r.year}] ${(r.detection[0] || {}).phenomenon}`);
 
// -- 16. cross-page reconciliation.
// design:website_selection reports 463 papers for Alexa, folded over the 1,153
// papers that sampled the WEB. This page reports 412 for role=ranking over all
// papers that stated a population. A subset cannot exceed its superset, so the
// two folds must be measuring different things — and they are. Printed here so
// neither page looks broken to a reader holding both.
console.log(`\n## Cross-page reconciliation: how many papers name "Alexa" in a stated population source?`);
{
  const stated = rows.filter((r) => (r.population || []).some((p) => p.sourceList && !isSentinel(p.sourceList)));
  const WEB_UNITS = new Set(['websites', 'domains', 'web-pages', 'urls']);
  const isWeb = (r) => (r.population || []).some((p) => p.sourceList && !isSentinel(p.sourceList) && WEB_UNITS.has(p.unit));
  const anyAlexa = stated.filter((r) => r.population.some((p) => p.sourceList && /alexa/i.test(p.sourceList)));
  console.log(`  papers with >=1 stated population sourceList                       ${stated.length}`);
  console.log(`  ... of which at least one tuple has a web unit                     ${stated.filter(isWeb).length}`);
  console.log(`  name "Alexa" in any stated sourceList (no role filter)             ${anyAlexa.length}`);
  console.log(`  ... and have a web-unit population tuple                          ${anyAlexa.filter(isWeb).length}   <- comparable to design:website_selection's 463`);
  const rankingRole = [...perPaperRoles.entries()].filter(([, f]) => f.has('Amazon') && f.get('Amazon').has('ranking')).length;
  console.log(`  assigned role=ranking by plat_fold.mjs (what this page publishes)  ${rankingRole}`);
  console.log('  The gap is the role rule: Alexa-as-skill-store strings are diverted to');
  console.log('  role=subject, and a string naming several lists is tagged per platform.');
  console.log('  Neither number is wrong; they answer different questions.');
}

The full-text probes

Whitespace is collapsed before matching. This is not cosmetic: a PDF line break inside rate limit or terms of service hides the hit and silently undercounts.

platforms_fulltext.mjs
// Full-text probes for design:platforms.
//
// Whitespace is collapsed before matching: a PDF line break inside "rate
// limit" or "terms of service" otherwise hides the hit and silently
// undercounts. Counts are of PAPERS. Each probe prints its own denominator and
// three example hits, so the regex's width is visible rather than assumed.
//
//   node scripts/platforms_fulltext.mjs                 # all probes
//   node scripts/platforms_fulltext.mjs --probe tos --examples 8
//
import fs from 'node:fs';
import path from 'node:path';
import { execSync } from 'node:child_process';
import { dataRoot, loadExtractions } from './lib.mjs';
 
const argv = process.argv.slice(2);
const val = (f) => (argv.indexOf(f) >= 0 ? argv[argv.indexOf(f) + 1] : null);
const only = val('--probe');
const NEX = Number(val('--examples') || 3);
 
const rows = loadExtractions();
 
// The platform-subject set, taken from the report script so the two agree.
const listed = new Set(
  Object.keys({}).length
    ? []
    : execSync(`node ${path.join(import.meta.dirname, 'platforms_report.mjs')} --keys`, {
        encoding: 'utf8',
        maxBuffer: 64 * 1024 * 1024,
      })
        .split('\n')
        .filter((l) => l.trim())
);
 
const PROBES = {
  ratelimit: /rate[- ]?limit(ed|ing|s)?\b/i,
  // 2026-08-27: the first version of this probe was /terms of (service|use)/i,
  // which matches "in terms of user pairs". \b fixes it; the count fell.
  tos: /terms of service|terms of use\b|acceptable use policy|\bToS\b/i,
  sockpuppet: /sock[- ]?puppet/i,
  donation: /data donation|donated (their )?data|data[- ]donating/i,
  captcha: /CAPTCHA/i,
  researchapi: /research(er)?[- ]api|academic (research )?(product )?track|Academic API|Meta Content Library|Researcher Platform|TikTok Research/i,
  // 2026-08-27: /\bDSA\b/i matched the DSA *signature algorithm* (".DSA file
  // under META-INF/"). Narrowed to the regulation.
  dsa: /Digital Services Act|Article 40(\(|\s|,)/,
  crowdtangle: /CrowdTangle/i,
  // 2026-08-27: /Ad(vert(ising)?)? Library/i matched the Android *advertising
  // library* ("AdMob advertising library"), which is a different thing
  // entirely. Narrowed to the named ad-transparency archives.
  adarchive: /Ad Library API|(Facebook|Meta|Google|Twitter|TikTok|X)['\u2019]?s? (Ad|Advert\w+) (Library|Archive)|Ad(vert\w+)? Transparency (Cent|Report|Tool)|Political Ad(vert\w+)? (Library|Archive)/,
  pushshift: /Pushshift/i,
  dsar: /right of access|subject access request|\bDSAR\b/i,
  apikey: /API (key|credentials|token)|developer account|elevated access/i,
  paidtier: /paid tier|Basic tier|Pro tier|Enterprise tier|API pricing|monthly (tweet|post) read/i,
  antibot: /anti-?(bot|scraping|crawl\w*)|bot (detection|mitigation|management)|Cloudflare|DataDome|PerimeterX|Akamai Bot|Distil Networks/i,
  loginwall: /login[- ]wall|behind (a )?login|logged[- ]?in (crawl|account|session|user)|authenticated (crawl|session)/i,
  proxyresidential: /residential proxy|residential IP|proxy (network|pool)|Bright Data|Luminati|Oxylabs|Smartproxy/i,
};
 
const key = (r) => `${r.venue}/${r.year}/${r.slug}`;
const platform = rows.filter((r) => listed.has(key(r)));
console.log(`# platform-subject papers: ${platform.length} (from platforms_report.mjs --keys)`);
const withText = platform.filter((r) =>
  fs.existsSync(path.join(dataRoot(), `fulltext/${r.year}/${r.venue}/${r.slug}/paper.cols.txt`))
);
console.log(`# of those, with paper.cols.txt on disk: ${withText.length}`);
 
const texts = new Map();
for (const r of withText) {
  const f = path.join(dataRoot(), `fulltext/${r.year}/${r.venue}/${r.slug}/paper.cols.txt`);
  texts.set(key(r), fs.readFileSync(f, 'utf8').replace(/\s+/g, ' '));
}
 
// The same probes over ALL papers with full text, so the platform figure has
// something to be a share OF.
const allWithText = rows.filter((r) =>
  fs.existsSync(path.join(dataRoot(), `fulltext/${r.year}/${r.venue}/${r.slug}/paper.cols.txt`))
);
 
for (const [name, re] of Object.entries(PROBES)) {
  if (only && only !== name) continue;
  const hits = withText.filter((r) => re.test(texts.get(key(r))));
  // comparison set: read lazily, only for this probe
  let allHits = 0;
  for (const r of allWithText) {
    const f = path.join(dataRoot(), `fulltext/${r.year}/${r.venue}/${r.slug}/paper.cols.txt`);
    const t = texts.get(key(r)) ?? fs.readFileSync(f, 'utf8').replace(/\s+/g, ' ');
    if (re.test(t)) allHits += 1;
  }
  console.log(
    `\n## ${name}  ${re}\n   platform-subject: ${hits.length}/${withText.length} = ${((100 * hits.length) / withText.length).toFixed(1)}%` +
      `   |   all papers with text: ${allHits}/${allWithText.length} = ${((100 * allHits) / allWithText.length).toFixed(1)}%`
  );
  for (const r of hits.slice(0, NEX)) {
    const t = texts.get(key(r));
    const m = re.exec(t);
    const a = Math.max(0, m.index - 130);
    console.log(`   [${r.venue} ${r.year}] … ${t.slice(a, m.index + 130)} …`);
  }
  // per-year, so a "this is current practice" claim can be checked
  const byYear = {};
  for (const r of hits) byYear[r.year] = (byYear[r.year] || 0) + 1;
  const denYear = {};
  for (const r of withText) denYear[r.year] = (denYear[r.year] || 0) + 1;
  console.log(
    '   per year (hits/platform-subject with text): ' +
      Object.keys(denYear)
        .sort()
        .map((y) => `${y}:${byYear[y] || 0}/${denYear[y]}`)
        .join(' ')
  );
}
platforms_named_probe.mjs
// Named-instrument probe across the WHOLE corpus (not just the platform-subject
// set): has anyone in these seven venues actually published using the official
// researcher-access routes? Whitespace collapsed; paper counts; per-year.
//
//   node scripts/platforms_named_probe.mjs
import fs from 'node:fs';
import path from 'node:path';
import { dataRoot, loadExtractions } from './lib.mjs';
 
const NAMED = {
  'Meta Content Library / Content Library API': /Meta Content Library|Content Library API/i,
  'TikTok Research API / Research Tools': /TikTok Research (API|Tools)/i,
  'TikTok Commercial Content Library': /Commercial Content (Library|API)/i,
  'YouTube Researcher Program': /YouTube Research(er)? Program/i,
  'X / Twitter Academic Research track': /Academic (Research )?(product )?track|Twitter Academic|Academic API|academic research access/i,
  'CrowdTangle': /CrowdTangle/i,
  'Meta / Facebook Ad Library (incl. API)': /Ad Library|Ads? Archive API/i,
  'Google political ads (BigQuery / Transparency Center)': /google_political_ads|Ads Transparency Cent|Google Political Advertising/i,
  'Pushshift': /Pushshift/i,
  'DSA Article 40 / vetted researcher': /Article 40|vetted researcher/i,
  'right-of-access / DSAR as an instrument': /right of access|subject access request|\bDSAR\b/i,
  'data donation': /data donation|donated (their )?data/i,
};
 
const rows = loadExtractions();
const textPath = (r) => path.join(dataRoot(), `fulltext/${r.year}/${r.venue}/${r.slug}/paper.cols.txt`);
const withText = rows.filter((r) => fs.existsSync(textPath(r)));
console.log(`# denominator: ${withText.length} papers with paper.cols.txt (of ${rows.length} extracted)`);
 
const hits = Object.fromEntries(Object.keys(NAMED).map((k) => [k, []]));
for (const r of withText) {
  const t = fs.readFileSync(textPath(r), 'utf8').replace(/\s+/g, ' ');
  for (const [k, re] of Object.entries(NAMED)) if (re.test(t)) hits[k].push(r);
}
for (const [k, h] of Object.entries(hits)) {
  const byYear = {};
  for (const r of h) byYear[r.year] = (byYear[r.year] || 0) + 1;
  console.log(`\n## ${k}\n   papers: ${h.length}/${withText.length} = ${((100 * h.length) / withText.length).toFixed(2)}%`);
  console.log(`   per year: ${Object.keys(byYear).sort().map((y) => `${y}:${byYear[y]}`).join(' ') || '(none)'}`);
  for (const r of h.slice(-6)) console.log(`     ${r.venue} ${r.year} ${r.slug}`);
}

The audit helper

platforms_audit.mjs
// Hand-audit helper for design:platforms.
//
// The report script's family sets are CANDIDATE sets: a regex over title,
// population.sourceList, detection.phenomenon and tool names. This prints, for
// a deterministic every-k-th sample of one family, the whitespace-collapsed
// full-text windows around the platform name, so a human can decide whether the
// paper actually collected data from the platform or merely names it.
//
// Whitespace is collapsed before matching because a PDF line break inside the
// phrase otherwise hides the hit.
//
//   node scripts/platforms_audit.mjs "Twitter/X" 10
//
import fs from 'node:fs';
import path from 'node:path';
import { execSync } from 'node:child_process';
import { dataRoot } from './lib.mjs';
import { FAMILIES } from './plat_fold.mjs';
 
const fam = process.argv[2];
const stride = Number(process.argv[3] || 10);
const re = FAMILIES[fam];
if (!re) throw new Error(`unknown family ${JSON.stringify(fam)}; known: ${Object.keys(FAMILIES).join(', ')}`);
 
const listed = execSync(`node ${path.join(import.meta.dirname, 'platforms_report.mjs')} --list ${JSON.stringify(fam)}`, {
  encoding: 'utf8',
  maxBuffer: 64 * 1024 * 1024,
})
  .split('\n')
  .slice(1)
  .filter((l) => l.includes('\t'));
 
const rows = fs
  .readFileSync(path.join(dataRoot(), 'extract/run1/extractions.jsonl'), 'utf8')
  .split('\n')
  .filter((l) => l)
  .map((l) => JSON.parse(l));
const byTitle = new Map(rows.map((r) => [r.title, r]));
 
const sample = listed.filter((_, i) => i % stride === 0);
console.log(`# family ${fam}: ${listed.length} candidates, auditing every ${stride}th = ${sample.length}`);
const WIN = 200;
for (const line of sample) {
  const [venue, year, sigs, title] = line.split('\t');
  const r = byTitle.get(title);
  if (!r) {
    console.log(`\n## ${venue} ${year} :: ${title}\n   !! no extraction row for this title`);
    continue;
  }
  console.log(`\n## ${venue} ${year} [${sigs}] ${r.slug}\n   ${title}`);
  const f = path.join(dataRoot(), `fulltext/${r.year}/${r.venue}/${r.slug}/paper.cols.txt`);
  if (!fs.existsSync(f)) {
    console.log('   !! no fulltext');
    continue;
  }
  const text = fs.readFileSync(f, 'utf8').replace(/\s+/g, ' ');
  const g = new RegExp(re.source, 'gi');
  let m;
  let shown = 0;
  const seen = new Set();
  while ((m = g.exec(text)) !== null && shown < 3) {
    const a = Math.max(0, m.index - WIN);
    const snip = text.slice(a, m.index + WIN);
    const k = snip.slice(0, 60);
    if (seen.has(k)) continue;
    seen.add(k);
    console.log(`   … ${snip} …`);
    shown += 1;
  }
  if (shown === 0) console.log('   !! platform name not found in fulltext');
}

The quote check

platforms_quotecheck.mjs
// Quote check for design:platforms. Every figure the page publishes from a
// paper is listed here with the phrase that must appear in that paper's
// paper.cols.txt. Whitespace is collapsed on both sides first: a PDF line break
// inside the phrase otherwise produces a false FAIL.
//
//   node scripts/platforms_quotecheck.mjs
import fs from 'node:fs';
import path from 'node:path';
import { dataRoot } from './lib.mjs';
 
const CHECKS = [
  ['2026/NDSS/hey-there-you-are-using-whatsapp-enumerating-three-billion-accounts-for-security-and-privacy', 'we discovered a total of 3,546,479,731 accounts'],
  ['2026/NDSS/hey-there-you-are-using-whatsapp-enumerating-three-billion-accounts-for-security-and-privacy', 'More than 57 % of world users have a public profile picture'],
  ['2024/IMC/beyond-the-guidelines-assessing-metas-political-ad-moderation-in-the-eu', 'only 7.7% of undeclared political ads'],
  ['2024/IMC/beyond-the-guidelines-assessing-metas-political-ad-moderation-in-the-eu', '60.4% of ads moderated by Meta did not align'],
  ['2024/IMC/beyond-the-guidelines-assessing-metas-political-ad-moderation-in-the-eu', 'Digital Services Act'],
  ['2024/WWW/tiktok-and-the-art-of-personalization-investigating-exploration-and-exploitation', "exploits real users' interests in between 30% and 50%"],
  ['2026/PETS/banned-books-analysis-of-censorship-on-amazon-com', 'We found 17,842 products that Amazon restricted'],
  ['2023/IMC/flocking-to-mastodon-tracking-the-great-twitter-migration', 'the Mastodon accounts of 136,009 Twitter users'],
  ['2026/PETS/a-year-under-the-dsa-ad-transparencys-uneven-landscape', '48, 511 ad explanations collected across four platforms'],
  ['2026/PETS/a-year-under-the-dsa-ad-transparencys-uneven-landscape', 'Who Targets Me'],
  ['2026/WWW/does-this-button-work-investigating-youtubes-ineffective-user-controls', 'Bad Recommendation rate was about 2.3%'],
  ['2025/USENIX/please-dont-send-that-bot-anything-a-mixed-methods-study-of-personal-impersonati', 'very small for the Basic tier'],
  ['2026/WWW/longitudinal-trends-in-global-climate-change-discourse-on-facebook', 'the tool was discontinued in 2024'],
  ['2025/WWW/exposing-cross-platform-coordinated-inauthentic-activity-in-the-run-up-to-the-20', '(the now defunct) Crowdtangle'],
  ['2023/WWW/the-thin-ideology-of-populist-advertising-on-facebook-during-the-2019-eu-electio', 'Meta (previously Facebook) Ad Library'],
  ['2019/WWW/auditing-offline-data-brokers-via-facebooks-advertising-platform', 'over 90% of targetable Facebook identities'],
  // 2026-08-27: the extraction's paraphrase ("only t.co and twitter.com are
  // throttled") is NOT in the paper; the paper's own wording is the SNI list.
  // Replaced rather than published.
  ['2021/IMC/throttling-twitter-an-emerging-censorship-technique-in-russia', 'throttling is triggered upon observing Twitter-related domains (*.twimg.com, twitter.com, t.co) in the SNI'],
  ['2021/NDSS/all-the-numbers-are-us-large-scale-abuse-of-contact-discovery-in-mobile-messengers', '10 % of all US mobile phone numbers for WhatsApp and 100 % for Signal'],
  ['2024/IEEE-SP/a-picture-is-worth-500-labels-a-case-study-of-demographic-disparities-in-local-m', 'age prediction fails drastically for individuals below 19'],
  ['2026/IEEE-SP/setting-the-course-but-forgetting-to-steer-analyzing-compliance-with-gdprs-right', 'all three platforms fail to report this information'],
  // Column splice: the sentence is interleaved with the adjacent column, so the
  // full sentence cannot be matched. Two shorter contiguous fragments can.
  ['2025/IMC/exploration-of-the-dynamics-of-buy-and-sale-of-social-media-accounts', 'of social media platforms in blocking these accounts was 19.71%'],
  ['2025/IMC/exploration-of-the-dynamics-of-buy-and-sale-of-social-media-accounts', 'All 11,457 2,259 19.71'],
  // Column splice again: use contiguous fragments.
  ['2026/NDSS/revealing-the-secret-power-how-algorithms-can-influence-content-visibility-on-twitter-x', 'order of magnitude (0.0069 vs. 0.084)'],
  ['2026/NDSS/revealing-the-secret-power-how-algorithms-can-influence-content-visibility-on-twitter-x', 'been restricted since June 2023'],
  ['2024/CCS/modern-problems-require-modern-solutions-community-developed-techniques-for-onli', '137 videos and 4,297 comments on TikTok'],
  ['2025/USENIX/darkgram-a-large-scale-analysis-of-cybercriminal-activity-channels-on-telegram', 'now replaced by the Meta Content Library'],
  // Added 2026-08-27 after review found the '1% streaming API' quote attributed
  // to the wrong NDSS 2021 paper. hagen2021_numbers contains no occurrence of
  // "Twitter" at all; this is the paper the quote belongs to.
  ['2021/NDSS/to-err-is-human-characterizing-the-threat-of-unintended-urls-in-social-media', '1% streaming API that Twitter provides to vetted researchers'],
  ['2021/NDSS/to-err-is-human-characterizing-the-threat-of-unintended-urls-in-social-media', 'all the numbers that we presented in this paper are lower bounds'],
  // Added after review found the cross-platform blocking range omitted TikTok,
  // which is at the TOP of it, not absent from it.
  ['2025/IMC/exploration-of-the-dynamics-of-buy-and-sale-of-social-media-accounts', 'TikTok and Instagram demonstrated the highest'],
  ['2025/IMC/exploration-of-the-dynamics-of-buy-and-sale-of-social-media-accounts', 'TikTok 1,700 816'],
  // Added 2026-08-27 after the generic reviewer pointed out that the header
  // sentence claimed to cover "every figure the page attributes to a paper"
  // while many attributed figures were in no check at all. These close the gap.
  ['2026/PETS/a-year-under-the-dsa-ad-transparencys-uneven-landscape', '98.9% of all explanation texts cite only the main targeting form'],
  ['2026/NDSS/hey-there-you-are-using-whatsapp-enumerating-three-billion-accounts-for-security-and-privacy', 'roughly two-thirds of the images (66 %) contain detectable human faces'],
  ['2026/NDSS/hey-there-you-are-using-whatsapp-enumerating-three-billion-accounts-for-security-and-privacy', '245 countries'],
  ['2019/WWW/auditing-offline-data-brokers-via-facebooks-advertising-platform', 'Australia (81.3%), and for the U.K. (74.4%)'],
  ['2026/PETS/banned-books-analysis-of-censorship-on-amazon-com', '8,965 out of the 796,081'],
  // Column splice: the running sentence is interleaved. The paper's own
  // contiguous statement of the same fact is in its contributions list.
  ['2023/IMC/flocking-to-mastodon-tracking-the-great-twitter-migration', 'The top 25% most populous instances contain 96% of the users'],
  ['2023/IMC/flocking-to-mastodon-tracking-the-great-twitter-migration', '2,879 unique Mastodon instances'],
  ['2025/IMC/exploration-of-the-dynamics-of-buy-and-sale-of-social-media-accounts', 'Facebook 649 37 5.70'],
  ['2026/WWW/does-this-button-work-investigating-youtubes-ineffective-user-controls', '22,722'],
  ['2024/IMC/beyond-the-guidelines-assessing-metas-political-ad-moderation-in-the-eu', '29.5 million'],
  // "63.2 bn" on the page is a rounding of this table value; check the value.
  ['2026/NDSS/hey-there-you-are-using-whatsapp-enumerating-three-billion-accounts-for-security-and-privacy', '63,170,000,000'],
  ['2024/WWW/tiktok-and-the-art-of-personalization-investigating-exploration-and-exploitation', '4.9M'],
];
 
const norm = (s) => s.replace(/\s+/g, ' ').trim();
let pass = 0;
let fail = 0;
for (const [rel, phrase] of CHECKS) {
  const [year, venue, slug] = rel.split('/');
  const f = path.join(dataRoot(), `fulltext/${year}/${venue}/${slug}/paper.cols.txt`);
  if (!fs.existsSync(f)) {
    console.log(`MISSING  ${rel}`);
    fail += 1;
    continue;
  }
  const t = norm(fs.readFileSync(f, 'utf8'));
  const ok = t.includes(norm(phrase));
  console.log(`${ok ? 'PASS' : 'FAIL'}     ${venue} ${year}  ${JSON.stringify(phrase)}`);
  ok ? (pass += 1) : (fail += 1);
}
console.log(`\n${pass} pass, ${fail} fail, of ${CHECKS.length} checks`);

Probes that had to be rewritten, and the wrong numbers they gave first

Four of the eighteen full-text probes were wrong on the first run. Each produced a plausible number.

Probe First regex What it matched by mistake Effect
terms of service terms of (service\|use) "in **terms of us**er pairs" 147 platform-subject hits became 134 after adding a word boundary after use
Digital Services Act \bDSA\b the DSA signature algorithm".RSA or .DSA file under META-INF/" 27 platform-subject hits became 15 for the narrowed Digital Services Act\|Article 40 form, and the page uses the even narrower Digital Services Act count of 25 over the whole corpus
ad archive Ad(vert(ising)?)? Library the Android advertising library"Google's AdMob advertising library" 56 platform-subject hits, mostly false; replaced with a regex requiring a platform name or Ad Library API
YouTube family youtube\|\byt\b \byt\b as an abbreviation anywhere dropped \byt\b entirely before any figure was computed

One probe was abandoned rather than narrowed, and this is the most important entry in this section:

/Article 40\|vetted researcher/ returned 19 papers. We hand-checked all 19 and exactly one is on point. The other 18 are:

  • ACM reference numbers"Queue 10, 11, Article 40, 10 pages", "Comput. Surveys 48, 3, Article 40", "CHI '22 ... Article 400/404/407/409" (11 papers)
  • GDPR Article 40 codes of conduct, not DSA Article 40 (1 paper: PETS 2023 Data Security on the Ground)
  • “vetted researchers” meaning artefact release on request"we will share our code with vetted researchers upon publication", "open-sourced to vetted researchers and vendors upon request" (4 papers)
  • “vetted researchers” meaning someone else's access programme — Censys ("provides vetted researchers with access to a search engine of Internet-wide scanning results") and the Twitter 1% stream (2 papers)

The one on-point hit is [1McCrosky, Jesse; Malla, Ranadheer; Tanskanen, Aapo; Camargo, Chico Q. (2026): "Does This Button Work? Investigating YouTube's Ineffective User Controls", in: Proceedings of the ACM Web Conference. (DOI)], which discusses proposed vetted-researcher mandates rather than using one. So the publishable claim is “essentially nobody in these seven venues has used the DSA Article 40 route”, and the count 19 is published only as the probe's raw output with this audit attached. A page that had printed “19 papers engage with DSA Article 40” would have been wrong by a factor of nineteen.

The folds and their residue

Fold 1: platform name to (family, role)

Rules are in plat_fold.mjs above, ordered most-specific-first. Aggregate result over population[].sourceList:

Role assigned Distinct strings
subject 515
ranking (the Alexa top-sites list) 331
recruitment 295
infrastructure 26
operator 4
mlservice 2
falsepos 1
total distinct strings matching any platform token 1,174

The full string-by-string assignment follows. This is the residue: nothing is hidden behind a summary. Reproduce with node scripts/platforms_report.mjs --dump. Columns are: papers, role, family (or families, pipe-separated), the verbatim string.

platforms_fold_dump.txt
# every distinct population.sourceList string that matched a platform token: 1174
 143  subject        Google (Play/Search/Ads)  "Google Play"
  77  subject        Google (Play/Search/Ads)  "Google Play Store"
  68  recruitment    Amazon  "Amazon Mechanical Turk"
  51  ranking        Amazon  "Alexa"
  18  ranking        Amazon  "Alexa Top 1M"
  17  ranking        Amazon  "Alexa top 1 million"
  16  recruitment    Amazon  "Alexa top 1M"
  14  ranking        Amazon  "Alexa top 100"
  14  ranking        Amazon  "Alexa top 10,000"
  14  subject        Reddit  "Reddit"
  13  subject        YouTube  "YouTube"
  12  subject        Twitter/X  "Twitter API"
  12  recruitment    Amazon  "Amazon Mechanical Turk (MTurk)"
  11  recruitment    Apple App Store  "Apple App Store"
   9  ranking        Amazon  "Alexa top websites"
   8  recruitment    Amazon  "Alexa Top 100"
   8  subject        Twitter/X  "Twitter"
   7  subject        Reddit  "Pushshift"
   6  subject        Flickr  "Flickr"
   6  ranking        Amazon  "Alexa top sites"
   6  recruitment    Amazon  "Amazon's Mechanical Turk"
   6  subject        Amazon  "Amazon"
   6  ranking        Amazon  "Alexa Top 10,000"
   6  ranking        Amazon  "Alexa top 100K"
   6  recruitment    Amazon  "Alexa Top Sites"
   6  subject        Apple App Store  "App Store"
   5  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook"
   5  subject        Twitter/X  "Twitter Streaming API"
   5  ranking        Amazon  "Alexa ranking"
   5  ranking        Amazon  "Alexa Top 1 Million"
   5  ranking        Amazon  "Alexa top 1000"
   5  ranking        Amazon  "Alexa Top 500"
   5  ranking        Amazon  "Alexa Top Million"
   5  subject        Google (Play/Search/Ads)  "Google Search"
   5  subject        Yelp  "Yelp"
   4  subject        Twitter/X  "Twitter streaming API"
   4  ranking        Amazon  "Alexa.com"
   4  subject        Google (Play/Search/Ads)  "Google Play store"
   4  ranking        Amazon  "Alexa Top 50"
   4  subject        LinkedIn  "LinkedIn"
   4  subject        eBay  "eBay"
   4  ranking        Amazon  "Alexa top 500"
   4  ranking        Amazon  "Alexa Top-1M"
   4  subject        Meta (Facebook/Instagram/WhatsApp)  "Instagram"
   4  ranking        Amazon  "Alexa top 10K websites"
   4  ranking        Amazon  "Alexa top 10K"
   4  ranking        Amazon  "Alexa Top 100K"
   4  recruitment    Amazon  "Alexa top 1 million list"
   3  ranking        Amazon  "Alexa top sites by category"
   3  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook users"
   3  recruitment    Google (Play/Search/Ads)  "Google Play Market"
   3  ranking        Amazon  "Alexa Top 1000"
   3  ranking        Amazon  "Alexa top 1 million websites"
   3  recruitment    Amazon  "Amazon.com"
   3  recruitment    Amazon  "Mechanical Turk"
   3  subject        Google (Play/Search/Ads)  "Google search results"
   3  ranking        Amazon  "Alexa list"
   3  ranking        Amazon  "Alexa Top 100k"
   3  ranking        Amazon  "Alexa's top 100 websites"
   3  ranking        Amazon  "Alexa top 1,000 websites"
   3  recruitment    Amazon  "Alexa top-100K"
   3  ranking        Amazon  "Alexa top 50"
   3  ranking        Amazon  "Alexa top-10K"
   3  ranking        Amazon  "Alexa top 10,000 domains"
   3  recruitment    Amazon  "Amazon MTurk"
   3  subject        Steam  "Steam-200K"
   3  ranking        Amazon  "Alexa Top list"
   2  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook regional networks"
   2  ranking        Amazon  "Alexa top 1000 websites"
   2  ranking        Amazon  "Alexa list of most used websites"
   2  ranking        Amazon  "Alexa 1M"
   2  ranking        Amazon  "Alexa's list"
   2  infrastructure Amazon  "Amazon EC2"
   2  ranking        Amazon  "Alexa Top 1 Million Domains"
   2  subject        Google (Play/Search/Ads)  "Google Play market"
   2  ranking        Amazon  "Alexa top 10,000 websites"
   2  ranking        Amazon  "Alexa Top 100 websites"
   2  subject        Apple App Store  "iOS App Store"
   2  subject        WeChat/Weibo/QQ  "Tencent"
   2  subject        Twitter/X  "Twitter's streaming API"
   2  ranking        Amazon  "Alexa top ranking"
   2  subject        Google (Play/Search/Ads)  "Google AdWords campaign"
   2  subject        Yelp  "Yelp dataset"
   2  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook application"
   2  ranking        Amazon  "Alexa Top 10k"
   2  ranking        Amazon  "Alexa top 100,000 domains"
   2  ranking        Amazon  "Alexa top 500 sites"
   2  recruitment    Amazon  "Alexa Top 50 websites"
   2  ranking        Amazon  "Alexa top million"
   2  ranking        Amazon  "Alexa top 1,000"
   2  ranking        Amazon  "Alexa top 20K websites"
   2  ranking        Amazon  "Alexa top 100 sites"
   2  ranking        Amazon  "Alexa Top Million domains"
   2  ranking        Amazon  "Alexa top-100K websites"
   2  ranking        Amazon  "Alexa rankings"
   2  ranking        Amazon  "Alexa's top 10,000 websites"
   2  ranking        Amazon  "Alexa top 1M list"
   2  ranking        Amazon  "Alexa Top 10K"
   2  recruitment    Amazon  "Amazon Mechanical Turk and Prolific Academic"
   2  subject        Twitter/X  "Twitter 1% Streaming API"
   2  ranking        Amazon  "Alexa top 1m"
   2  mlservice      Amazon  "Amazon Rekognition API"
   2  ranking        Amazon  "Alexa Top-100K"
   2  ranking        Amazon  "Alexa top 1-million websites"
   2  ranking        Amazon  "Alexa Top 1,000,000 Sites"
   2  recruitment    Reddit  "pushshift.io"
   2  ranking        Amazon  "Alexa top 100k"
   2  ranking        Amazon  "Alexa Top 1 million"
   2  subject        Netflix  "Netflix"
   2  subject        Apple App Store  "Google App Store"
   2  ranking        Amazon  "Alexa 10k"
   2  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook groups"
   2  subject        Google (Play/Search/Ads)  "Google search"
   2  ranking        Amazon  "Alexa top 1,000,000 sites"
   2  recruitment    Amazon  "US Alexa skill store"
   2  ranking        Amazon  "Alexa top 1,000 domains"
   2  subject        Google (Play/Search/Ads)  "Google Search API"
   2  recruitment    Amazon  "MTurk"
   2  ranking        Amazon  "Alexa top-10K websites"
   2  subject        Twitch  "Twitch"
   2  ranking        Amazon  "Alexa top 10k"
   2  subject        Google (Play/Search/Ads)  "Google Play and WanDouJia"
   2  subject        Apple App Store  "SideQuest app store"
   2  subject        Twitter/X  "Twitter15"
   2  subject        Twitter/X  "Twitter16"
   2  subject        Flickr  "Flickr30k"
   2  ranking        Amazon  "Alexa top 100 websites"
   2  subject        Steam  "Steam"
   2  ranking        Amazon  "Alexa top 20,000"
   2  recruitment    WeChat/Weibo/QQ  "WeChat groups"
   2  subject        YouTube|Google (Play/Search/Ads)  "YouTube Data API"
   1  ranking        Amazon  "Alexa top sites/category/Top/News"
   1  subject        Twitter/X  "Twitter APIs"
   1  ranking        Amazon  "Alexa global top 50,000"
   1  ranking        Amazon  "Alexa global top 100"
   1  ranking        Amazon  "Alexa global top 1,300"
   1  infrastructure Amazon  "Amazon AWS, Microsoft Azure, Google AppEngine, and Rackspace CloudServers"
   1  ranking        Amazon  "Alexa top sites and embedded-content domains"
   1  ranking        Amazon  "embedded domains extracted from Alexa-ranked hosts"
   1  subject        Twitter/X  "Twitter public accounts"
   1  subject        Twitter/X  "blacklist-flagged Twitter accounts"
   1  subject        YouTube  "captured YouTube video requests at a university network gateway"
   1  subject        YouTube  "YouTube featured videos"
   1  subject        YouTube  "YouTube crawl datasets D1 and D2"
   1  ranking        Amazon  "top 500 alexa.com domain names"
   1  ranking        Amazon  "top 10,000 Alexa domain names"
   1  ranking        Amazon  "top 100,000 Alexa domain names"
   1  recruitment    Amazon  "Alexa Top 200"
   1  recruitment    Flickr  "Flickr.com"
   1  ranking        Amazon  "Alexa top 100 websites plus Alexa category rankings"
   1  ranking        Twitter/X|Amazon  "Google Hot Searches, Alexa, and Twitter"
   1  ranking        Amazon  "Google Hot Searches and Alexa"
   1  subject        Twitter/X  "Google Hot Trends and Twitter Current Trends"
   1  ranking        Amazon  "Alexa Top 100 Web sites"
   1  subject        YouTube  "YouTube friend social network"
   1  subject        YouTube  "YouTube website popular-uploaders list"
   1  subject        YouTube  "YouTube live system"
   1  ranking        Amazon  "globally routable BGP prefixes and Alexa top 1 million"
   1  subject        Twitter/X  "Twitter dataset gathered in [14]"
   1  subject        YouTube  "YouTube servers in India"
   1  ranking        Amazon  "Alexa Top 1 Million Hosts list"
   1  ranking        Amazon  "two malware feeds, public blacklists, DNSWL, and top 30 Alexa domains"
   1  subject        Twitter/X  "Twitter Monitor collection"
   1  ranking        Amazon  "Alexa's top 90,000 Web sites"
   1  recruitment    Amazon  "friends and mturk.com"
   1  infrastructure Amazon  "Amazon EC2 us.east-1c"
   1  ranking        Amazon  "Alexa Top 1000 web pages"
   1  ranking        Amazon  "Alexa Top 1000 web pages, cleaned top 800 URLs"
   1  subject        Amazon  "commercial rankings (Amazon.com and Download.cnet.com) combined with Thepiratebay.org download numbers"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "top 250 Facebook applications"
   1  recruitment    Netflix  "Hulu, Netflix, and Vudu"
   1  ranking        Amazon  "Alexa list of the one-million most popular websites"
   1  ranking        Amazon  "alexa.com"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)  "Twitter and Facebook announcements; direct recruitment through non-technical disciplines"
   1  subject        Twitter/X  "Twitter public timeline"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook Public directory"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "custom Facebook application"
   1  ranking        Amazon  "Alexa and live successful-DNS-query collection"
   1  recruitment    Amazon  "Alexa's 100 most visited global sites"
   1  recruitment    Amazon  "Amazon's Mechanical Turk crowdsourcing service (MTurk)"
   1  subject        Twitter/X  "A Twitter mention network"
   1  subject        Twitter/X  "the same Twitter mention network"
   1  ranking        Amazon  "Alexa top 5000"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook users in the U.S."
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook users who never viewed security announcements"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook friendship graph from the New Orleans regional network [33]"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook interaction graph from the New Orleans regional network [33]"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "custom-developed Facebook App"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook datasets"
   1  subject        Twitter/X  "Twitter Firehose stream issued to Yahoo!"
   1  recruitment    Amazon  "schools of engineering and business in two universities and Amazon's Mechanical Turk"
   1  ranking        Amazon  "custom collection from Alexa Top 100 websites"
   1  subject        Amazon  "Amazon-derived candidate groups"
   1  subject        Flickr  "Flickr public API"
   1  ranking        Amazon  "Alexa top 500 domains"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook Open Graph"
   1  subject        Yelp  "six online review communities: Expedia, Hotels.com, Orbitz, Priceline, TripAdvisor, and Yelp"
   1  subject        Apple App Store  "Windows App Store"
   1  subject        Google (Play/Search/Ads)  "Google search query \"login.php\""
   1  subject        Twitter/X  "Twitter suspended accounts"
   1  subject        Twitter/X  "Twitter suspended accounts with blacklisted shortened URLs"
   1  subject        Twitter/X  "random sample of Twitter users"
   1  subject        Twitter/X  "Twitter Search APIs"
   1  ranking        Amazon  "Alexa top 60,000 site list"
   1  ranking        Amazon  "Alexa top 800 sites"
   1  ranking        Amazon  "Alexa top 100 pages"
   1  ranking        Amazon  "Alexa Top 50 web pages"
   1  recruitment    Twitter/X  "dataset from our previous Twitter spam account detection study [35]"
   1  recruitment    Twitter/X  "public entire Twitter snapshot [25]"
   1  subject        WeChat/Weibo/QQ  "ZBJ Weibo campaigns"
   1  subject        WeChat/Weibo/QQ  "Weibo social graph"
   1  ranking        Amazon  "Alexa top 100,000 sites"
   1  subject        LinkedIn  "LinkedIn member subset"
   1  subject        Google (Play/Search/Ads)  "Google Play, SoftAndroid, ProAndroid, Anzhi, Ndoo, Contagio, Zhou et al., and M1"
   1  ranking        Amazon  "Alexa top 10,000 most popular web sites"
   1  ranking        Amazon  "Alexa Top 1000 websites"
   1  subject        Twitter/X  "public Twitter accounts"
   1  subject        Twitter/X  "custom sample of collected tweets"
   1  subject        Twitter/X  "Twitter from linked Foursquare accounts"
   1  ranking        Amazon  "transitive trust dependencies of Alexa domains and TLDs"
   1  subject        Google (Play/Search/Ads)  "Google's Play Store"
   1  recruitment    Amazon  "Google Products, Amazon and Shopping.com"
   1  ranking        Amazon  ".com zone file and Alexa list"
   1  ranking        Amazon  "Alexa top/mid/tail domains and .com zone file"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook's people directory"
   1  subject        Twitter/X  "Twitter dataset"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook SIGCOMM and COSN groups"
   1  ranking        Amazon  "Alexa top global sites"
   1  ranking        Amazon  "Alexa top 100,000"
   1  ranking        Amazon  "Alexa top 3,000"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook and Instagram"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)  "university campus and online-media (Facebook & Twitter)"
   1  recruitment    Amazon  "Alexa top 20 sub-categories"
   1  ranking        Amazon  "Alexa top one million sites"
   1  subject        Apple App Store  "MAC App Store"
   1  ranking        Amazon  "Alexa's top 1 million sites"
   1  infrastructure Amazon  "DNS-CDN-enabled sites identified from Alexa's top 1 million"
   1  recruitment    Amazon  "university and Amazon Mechanical Turk"
   1  subject        Twitter/X  "Twitter, crowdturfing sites, and black-market sites"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook interaction graph from the New Orleans regional network"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "publicly available data from Facebook"
   1  ranking        Amazon  "Alexa top 25; three social networks popular in Arabic-speaking countries"
   1  subject        Apple App Store  "iTunes preview"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook pages created by the authors"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook public directory"
   1  ranking        Amazon  "Alexa Top 500 web sites"
   1  ranking        Amazon  "Alexa Top 25 web sites"
   1  ranking        Amazon  "Alexa Top 50 web sites"
   1  ranking        Amazon  "Alexa top 1000 URL"
   1  ranking        Amazon  "Alexa top one million websites"
   1  ranking        Amazon  "Alexa DB"
   1  ranking        Amazon  "Alexa's, MajesticSEO's, and QuantCast's top 1 million lists"
   1  subject        Google (Play/Search/Ads)  "Google Play and other 12 popular third-party app markets worldwide"
   1  ranking        Amazon  "Alexa Top 20"
   1  ranking        Amazon  "Alexa top 68 U.S. sites"
   1  ranking        Amazon  "Alexa's one million top-ranked websites list"
   1  subject        Google (Play/Search/Ads)  "Google Play Store, Crawl 1"
   1  subject        Google (Play/Search/Ads)  "Google Play Store, Crawl 2"
   1  subject        Google (Play/Search/Ads)  "Google Play Store, Crawl 3"
   1  recruitment    Amazon  "LBNL, ICSI, NERSC, and an Amazon EC2 honeypot"
   1  ranking        Amazon  "Alexa Top 10,000 websites"
   1  ranking        Amazon  "Alexa Top 50 websites in the US"
   1  ranking        Amazon  "Alexa Top 5,000 websites"
   1  ranking        Amazon  "Alexa top 10 K domains"
   1  ranking        Amazon  "top-1000 Alexa websites"
   1  subject        Google (Play/Search/Ads)  "Google search index"
   1  ranking        Amazon  "VeriSign .com/.net zone files and Alexa Top 1 Million"
   1  ranking        Amazon  "Alexa Top 1 Million websites"
   1  ranking        Amazon  "combined EFF/Alexa crawl"
   1  subject        LinkedIn  "LinkedIn list"
   1  subject        Google (Play/Search/Ads)  "GooglePlay Store"
   1  recruitment    Amazon|Apple App Store  "Amazon's Android app store"
   1  ranking        Amazon  "Alexa top 500 websites for the U.S."
   1  ranking        Amazon  "Alexa top million Web sites"
   1  ranking        Amazon  "Alexa's top 500 websites"
   1  ranking        Amazon  "Alexa ranking; May 2015"
   1  subject        Amazon  "Google top 100 search queries; Amazon and Walmart top 100 best-selling products"
   1  ranking        Amazon  "Alexa top 15"
   1  recruitment    Google (Play/Search/Ads)  "Google Play Store, “top free” category"
   1  recruitment    Google (Play/Search/Ads)  "Google Play Store, apps described as app-lockers"
   1  subject        Google (Play/Search/Ads)  "Google search results, Black Hat World, and traffic exchange ranking lists"
   1  ranking        Amazon  "Alexa Top 1,000,000 websites list"
   1  subject        Twitter/X  "custom random Twitter account sample"
   1  subject        Twitter/X  "Twitter follower network from four seed impersonating identities"
   1  recruitment    Amazon  "Amazon's Mechanical Turk (MTurk)"
   1  ranking        Amazon  "Alexa's top 50 websites in China"
   1  ranking        Amazon  "Alexa web sites"
   1  infrastructure Amazon  "Amazon EC2 published IP ranges"
   1  infrastructure Amazon  "custom launched EC2 instances"
   1  ranking        Amazon  "Alexa top 3K websites"
   1  ranking        Amazon  "Alexa top 500 category lists"
   1  subject        Google (Play/Search/Ads)  "Google Play, collected by the TACYT application"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook1 [45]"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook2 [45]"
   1  subject        Twitter/X  "Twitter [23]"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook wall post dataset in [34]"
   1  ranking        Amazon  "Alexa top 500 websites in each category"
   1  subject        Steam  "Steam Web API"
   1  subject        Steam  "Steam catalog"
   1  subject        Steam  "same Steam users"
   1  subject        Steam  "same Steam user set"
   1  subject        Steam  "Steam games"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook (New Orleans)"
   1  subject        YouTube  "YouTube (Snowball Crawl)"
   1  subject        Meta (Facebook/Instagram/WhatsApp)|YouTube  "Facebook, YouTube, and Renren sampled node sets"
   1  ranking        Amazon  "Alexa's 8 \"News and Media\" categories"
   1  subject        Google (Play/Search/Ads)  "Google Play Store and featured/recommended apps"
   1  subject        Google (Play/Search/Ads)  "Google AdWords top websites"
   1  ranking        Amazon  "Alexa top 1 million domains"
   1  recruitment    Apple App Store  "App Store app volunteers"
   1  ranking        Amazon  "Alexa's top 5,000 pages"
   1  ranking        Amazon  "Alexa's top 100 sites"
   1  subject        Twitter/X  "Twitter's public stream"
   1  recruitment    Amazon  "Mechanical Turk (prior research studies)"
   1  ranking        Amazon  "Alexa top one million Web sites"
   1  ranking        Amazon  "Alexa historical API and archived Alexa top-100 pages"
   1  ranking        Amazon  "Alexa top 500 sites ground-truth datasets"
   1  ranking        Amazon  "Alexa's top 20,000 web sites"
   1  ranking        Amazon  "Alexa's top 100 web sites"
   1  ranking        Amazon  "top 100,000 Alexa web pages"
   1  ranking        Amazon  "Alexa e-commerce categories"
   1  ranking        Amazon  "Alexa Top-1K"
   1  ranking        Amazon  "Alexa Top-5K"
   1  subject        Google (Play/Search/Ads)  "Google Play, filtered reviewed items"
   1  subject        YouTube  "anonymized aggregate YouTube user activity logs"
   1  subject        YouTube  "YouTube abuse team"
   1  subject        Google (Play/Search/Ads)  "Google Play Store and six online sources: Androidapps, Apkhere, Apkmirror, Apkpure, Uptodown, and Aptoide"
   1  subject        Google (Play/Search/Ads)  "Google Play Store and third-party websites"
   1  subject        Google (Play/Search/Ads)  "Google Play and third-party Android markets"
   1  subject        Google (Play/Search/Ads)  "Google Play and third-party Android markets plus VirusTotal"
   1  subject        Google (Play/Search/Ads)  "Google Play top-ranked apps"
   1  subject        Google (Play/Search/Ads)  "Google Play categories"
   1  subject        Google (Play/Search/Ads)  "Google Play Store and PlayDrone matched applications"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Instagram API"
   1  recruitment    Google (Play/Search/Ads)  "US Google Play Store"
   1  ranking        Amazon  "Alexa top 500 U.S. sites"
   1  ranking        Amazon  "Alexa top 1 M list"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook Apps Leaderboard"
   1  ranking        Amazon  "custom seed list (PremiumDrops, ViewDNS, Alexa, Umbrella, and ICANN Centralized Zone Data Service)"
   1  ranking        Amazon  "Alexa top-5K websites"
   1  ranking        Amazon  "Alexa top-5K retrospective measurement"
   1  ranking        Amazon  "Alexa top-1,000 sites"
   1  ranking        Amazon  "Alexa top-25,000 sites"
   1  ranking        Amazon  "Alexa top-30,000"
   1  ranking        Amazon  "Alexa top-500 sites"
   1  ranking        Amazon  "Alexa's top websites worldwide"
   1  ranking        Amazon  "Alexa's top 1 million domain names"
   1  subject        Google (Play/Search/Ads)  "Google Play Store (US site)"
   1  subject        Google (Play/Search/Ads)  "Google Play Store privacy-policy links"
   1  subject        Google (Play/Search/Ads)  "Google Play Store (popular apps)"
   1  ranking        Amazon  "Alexa Top 75 k domains"
   1  ranking        Amazon  "Alexa top 100K websites"
   1  ranking        Amazon  "Alexa top-1K websites"
   1  subject        Uber  "a data-set of GPS traces of Uber black cars rides in San Francisco [32]"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)  "custom purposive selection of Facebook Messenger, Instagram, and Twitter"
   1  ranking        Amazon  "Alexa top 50 and Alexa-ranked websites"
   1  ranking        Amazon  "Alexa-ranked websites"
   1  ranking        Amazon  "Alexa-ranked webpages"
   1  recruitment    Google (Play/Search/Ads)  "Google Play store, Ubuntu Software Center and Chrome Extensions"
   1  recruitment    Amazon  "Amazon Mechanical Turk and Survey Sampling International"
   1  ranking        Amazon  "combined CLBL and Alexa domain set"
   1  ranking        Amazon  "Alexa Top 100 Global"
   1  ranking        Amazon  "Alexa Million"
   1  ranking        Amazon  "union of Alexa top 1 million and app-extracted domains"
   1  ranking        Amazon  "Alexa Top-500 start pages"
   1  recruitment    Twitter/X  "Twitter active users"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)  "websites including Twitter, Facebook, Quora, Hacker News, and Freedom to Tinker"
   1  ranking        Amazon  "top 100k Alexa domains"
   1  ranking        Amazon  "Alexa top 50,000"
   1  ranking        Amazon  "top 50,000 Alexa websites"
   1  ranking        Amazon  "Alexa top 5K"
   1  recruitment    Google (Play/Search/Ads)  "custom selection from Google Play"
   1  recruitment    Google (Play/Search/Ads)  "Google Play accounts revealed by 23 fraud workers"
   1  recruitment    Google (Play/Search/Ads)  "Google Play reviews of 640 apps"
   1  ranking        Amazon  "Alexa 1-100"
   1  ranking        Amazon  "Alexa 1-2000"
   1  ranking        Amazon  "Alexa Internet top 100 ranking"
   1  recruitment    Amazon  "Alexa top-50 popular websites"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "friends and family members with active Facebook accounts"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "friends and family members with Facebook accounts"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "mailing lists, a local neighborhood Facebook group, and personal contacts"
   1  ranking        Amazon  "Alexa Global Top 1M"
   1  infrastructure Amazon  "AWS VMs"
   1  ranking        Amazon  "Alexa Top Categories"
   1  ranking        Amazon  "combined Alexa sample after deduplication"
   1  ranking        Amazon  "Alexa Top-1M certificates and CRL URLs"
   1  subject        Reddit  "Reddit Pushshift (The_Donald subreddit)"
   1  ranking        Amazon  "Alexa Top 1 Million Global Sites"
   1  ranking        Amazon  "Alexa top-1000 sites"
   1  recruitment    Amazon  "institutional mailing lists, social media, and Amazon Mechanical Turk"
   1  ranking        Amazon  "Alexa top 100 popular websites"
   1  ranking        Amazon  "Alexa top 101-200"
   1  recruitment    Google (Play/Search/Ads)  "Google Play Store, emails to targeted participants, and social networking platforms"
   1  subject        Google (Play/Search/Ads)  "Google Play Store's Designed for Families program"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "synthetic Facebook password-reset emails"
   1  subject        YouTube  "YouTube-curated Top Shared and Liked playlist"
   1  subject        YouTube  "YouTube recorded live chat videos"
   1  subject        YouTube  "Live YouTube-curated list"
   1  recruitment    Amazon  "Alexa top 5000 domains"
   1  ranking        Amazon  "Alexa top 25 websites"
   1  subject        Amazon  "third-party Alexa skill-name aggregation database"
   1  ranking        Amazon  "Alexa Top 500 websites"
   1  ranking        Amazon  "Alexa list of top websites"
   1  ranking        Amazon  "Alexa list of top sites"
   1  ranking        Amazon  "Alexa Top 50,000 domains"
   1  ranking        Amazon  "Alexa 100k top websites"
   1  subject        Twitter/X  "custom Twitter search for “first AA meeting”"
   1  subject        Twitter/X  "custom Twitter-filtered population"
   1  subject        Twitter/X  "Twitter friend network"
   1  subject        Twitter/X  "Twitter API collection"
   1  ranking        Amazon  "Alexa top one million"
   1  subject        Twitter/X  "exhaustive list of 400 keywords via Twitter streaming API"
   1  subject        Twitter/X  "Twitter streaming data"
   1  subject        Twitter/X  "Twitter accounts checked through Twitter API"
   1  subject        Twitter/X  "3,370 Twitter campaigns with at least one suspended user"
   1  subject        Twitter/X  "3,370 Twitter campaigns"
   1  ranking        Amazon  "one of the top 15 French websites (according to the Alexa traffic rank)"
   1  ranking        Amazon  "Alexa Top 1 million ranking"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Instagram public API"
   1  ranking        Amazon  "Alexa Top 1M Websites"
   1  subject        WeChat/Weibo/QQ  "WeChat"
   1  subject        Google (Play/Search/Ads)  "Google Search RTBF requests"
   1  ranking        Amazon  "Alexa dataset"
   1  recruitment    Amazon  "Alexa top 1 Million Sites"
   1  subject        YouTube  "YouTube's Music category"
   1  ranking        Amazon  "Alexa top 1 million website list"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook ASO groups, Upwork, Fiverr, Zeerk, and Peopleperhour"
   1  recruitment    Google (Play/Search/Ads)  "custom worker-revealed Google Play account IDs"
   1  recruitment    Google (Play/Search/Ads)  "custom worker-revealed Google Play apps"
   1  recruitment    Google (Play/Search/Ads)  "custom worker-controlled Google Play reviews"
   1  subject        Amazon  "Amazon Fire TV channel store"
   1  recruitment    Amazon  "Alexa top-500"
   1  recruitment    Amazon  "Amazon Alexa skill market"
   1  recruitment    Amazon  "Alexa skill market"
   1  recruitment    WeChat/Weibo/QQ  "Chinese third-party markets (Baidu, Xiaomi, Huawei, Tencent)"
   1  recruitment    Google (Play/Search/Ads)  "Google Play and Baidu market"
   1  subject        Yelp  "Yelp dataset (Yelp-health and Yelp-author subsets)"
   1  subject        Netflix  "Netflix Prize data set"
   1  ranking        Amazon  "Alexa list of popular websites"
   1  recruitment    Apple App Store  "Apple Store and other contributed devices"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "anonymized Facebook log records"
   1  recruitment    Amazon  "Alexa top-20"
   1  subject        WeChat/Weibo/QQ  "Sina Weibo"
   1  ranking        Amazon  "Alexa global ranking"
   1  subject        Twitter/X  "Twitter social graph dataset"
   1  ranking        Amazon  "Alexa Web Information Service (AWIS)"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook production traffic"
   1  ranking        Amazon  "toplists.github.io / Alexa rankings"
   1  subject        Twitter/X  "BGPStream Twitter account"
   1  ranking        Amazon  "Alexa Adult category"
   1  ranking        Amazon  "Alexa rank throughout 2018, keyword-matched URLs"
   1  ranking        Amazon  "Alexa top-1M sites"
   1  ranking        Amazon  "Alexa top-100 websites"
   1  ranking        Amazon  "Alexa top 50k"
   1  ranking        Amazon  "Alexa Top 1M list"
   1  subject        Twitter/X  "Twitter dataset from Wang et al. [17]; directed follower-followee graph collected by Kwak et al. [52]"
   1  subject        WeChat/Weibo/QQ  "Sina Weibo dataset from Fu et al. [16]"
   1  subject        Yelp  "Yelp dataset from [25]"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook graph with synthetic Sybils"
   1  ranking        Amazon  "Alexa Top 50 Global and United States lists"
   1  ranking        Amazon  "Bing results for Alexa domains"
   1  recruitment    Amazon  "Amazon Alexa Skill Store"
   1  subject        Twitter/X  "custom Twitter dataset"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "university emails and student-focused Facebook groups"
   1  ranking        Amazon  "Alexa top 5K websites"
   1  ranking        Amazon  "Alexa top 50K websites"
   1  recruitment    Google (Play/Search/Ads)  "custom crowdsourcing deployment via Google Play"
   1  ranking        Amazon  "Alexa country rankings"
   1  ranking        Amazon  "Alexa Top Global Sites"
   1  recruitment    Twitter/X  "custom seed list (Twitter snowball crawl)"
   1  recruitment    Twitter/X  "same Twitter users as 2016 crawl"
   1  recruitment    Twitter/X  "Twitter API trending topics"
   1  recruitment    Twitter/X  "9 active Twitter chatbots"
   1  recruitment    YouTube  "Kaggle YouTube Comments dataset"
   1  subject        Twitter/X  "Twitter 1% random sample"
   1  subject        Twitter/X  "Twitter's Streaming API"
   1  ranking        Amazon  "Alexa top sites list in the United States"
   1  ranking        Amazon  "Alexa top 150"
   1  ranking        Amazon  "Alexa websites ranked between 200 and one million"
   1  subject        Google (Play/Search/Ads)  "Google search query traffic"
   1  ranking        Amazon  "Alexa list of most popular sites"
   1  recruitment    Amazon  "Amazon Mechanical Turk (AMT)"
   1  subject        Google (Play/Search/Ads)  "U.S. Google Play Store"
   1  ranking        Amazon  "Alexa top 250K websites"
   1  recruitment    Google (Play/Search/Ads)|Apple App Store  "Google Play and iTunes stores"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)  "custom recruitment via local mailing lists, Craigslist, Twitter, and local Facebook groups"
   1  ranking        Amazon  "Alexa top 25 thousand domains"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook ads"
   1  subject        Apple App Store  "iTunes Preview"
   1  subject        Apple App Store  "Apple App Store charts, top paid app list"
   1  subject        Twitter/X  "custom Twitter event datasets"
   1  recruitment    Amazon  "Alexa and publicly-available datasets"
   1  subject        Reddit  "Reddit repository"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook advertising platform"
   1  subject        Reddit  "Reddit archive"
   1  subject        Netflix  "MovieLens and Netflix public rating datasets"
   1  subject        Twitter/X  "Twitter 10% sample"
   1  subject        Twitter/X  "custom curated Twitter lists"
   1  subject        Twitter/X  "custom unlabeled Twitter profiles"
   1  subject        Twitter/X  "Twitter random 10% stream"
   1  subject        Google (Play/Search/Ads)  "Google Play Store Top Free in Android Apps"
   1  operator       Pinterest  "internal dataset from Pinterest"
   1  recruitment    Apple App Store  "iTunes RSS feed"
   1  recruitment    Apple App Store  "iTunes reviews"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook News Feed A/B tests"
   1  recruitment    Twitter/X  "Twitter public API"
   1  recruitment    Twitter/X  "Wikipedia list of most-followed Twitter accounts"
   1  recruitment    Twitter/X  "Twitter users identified in the collected sample and Twitter advertisement"
   1  subject        Twitter/X  "custom disaster tweet collection"
   1  subject        Reddit  "Reddit mental-health-related subreddits"
   1  subject        Reddit  "Reddit SuicideWatch subreddit"
   1  subject        Reddit  "Reddit SuicideWatch and other mental-health subreddits"
   1  subject        Reddit  "Potentially suicidal Redditors"
   1  subject        Reddit  "Pushshift Reddit crawl"
   1  subject        Twitter/X  "follower markets identified through Google and Twitter search"
   1  subject        Twitter/X  "custom seed list (hyperlinks posted on @DefineAmerican and @wginfonetorg Twitter timelines)"
   1  subject        Twitter/X  "custom seed list (top-10 policy issues on Twitter during the 2016 U.S. presidential election campaign)"
   1  subject        WeChat/Weibo/QQ  "WeChat Dataset"
   1  subject        WeChat/Weibo/QQ  "Weibo Dataset"
   1  ranking        Amazon  "Alexa Top 600K"
   1  ranking        Amazon  "Alexa Top 100 Global Sites"
   1  subject        Twitter/X  "Twitter Public Streams"
   1  subject        Twitter/X  "Tweets(Riloff)"
   1  subject        Twitter/X  "Tweets(Ghosh)"
   1  subject        WeChat/Weibo/QQ  "Tencent QQ"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook wall post data collected by Viswanath et al."
   1  ranking        Amazon  "Alexa Top-200K"
   1  subject        Yelp  "Yelp Dataset Challenge"
   1  ranking        Amazon  "Alexa list of popular domains"
   1  recruitment    Amazon  "Amazon Alexa skills store"
   1  recruitment    Amazon  "Alexa top 1k"
   1  ranking        Amazon  "Alexa Top 500 apex domains"
   1  ranking        Amazon  "Alexa Traffic Rank"
   1  recruitment    LinkedIn  "LinkedIn password leak"
   1  subject        Google (Play/Search/Ads)  "Google Play marketplace dataset provided by Norton"
   1  subject        Google (Play/Search/Ads)  "top 200 free non-game Android apps from Google Play"
   1  ranking        Amazon  "Alexa Top 1K"
   1  subject        Twitter/X  "Twitter Search API and Twitter Streaming API"
   1  ranking        Amazon  "Majestic Million, Cisco top 1 Million, historical Alexa top 1 Million, and Censys research dataset"
   1  ranking        Amazon  "Alexa top 100K crawl hash matches"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook's global edge network"
   1  infrastructure Meta (Facebook/Instagram/WhatsApp)  "Facebook CDN infrastructure"
   1  ranking        Amazon  "Alexa Top Sites by Country"
   1  subject        YouTube  "YouTube URLs in Dissenter data"
   1  subject        Reddit  "NY Times, Daily Mail, and Reddit datasets"
   1  subject        Reddit  "Dissenter usernames matched to Reddit accounts"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook authenticated HTTP(S) requests from logged-in users"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook abusive accounts dataset"
   1  recruitment    Amazon  "Alexa lists collected over time"
   1  ranking        Amazon  "Alexa Top 150"
   1  ranking        Amazon  "Alexa's top million websites list"
   1  ranking        Amazon  "Alexa top million list"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook users in the New Orleans area"
   1  ranking        Amazon  "Alexa top one million site list"
   1  recruitment    Amazon  "Mechanical Turk novice-user suggestions"
   1  subject        Google (Play/Search/Ads)  "Google Play search engine"
   1  recruitment    Reddit  "Reddit VPN sub-communities"
   1  ranking        Amazon  "Alexa Top Million Sites, TFO-supporting hostnames"
   1  ranking        Amazon  "Alexa Top Million Sites, always-TFO-supporting hostnames"
   1  ranking        Amazon  "Alexa.com ranking"
   1  ranking        Amazon  "Alexa top 1-million site crawl"
   1  ranking        Amazon  "Alexa rank"
   1  recruitment    Amazon  "Amazon [com/ca/co.uk]"
   1  recruitment    Amazon  "Alexa TopSites API"
   1  recruitment    Amazon  "Alexa Website Information Service"
   1  subject        Amazon  "Amazon curated list \"Top Featured\" apps"
   1  ranking        Amazon  "Alexa Top websites"
   1  ranking        Amazon  "Alexa Top 5K"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Instagram production infrastructure"
   1  operator       Meta (Facebook/Instagram/WhatsApp)  "FACEBOOK infrastructure changesets"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "FACEBOOK production deletion workload"
   1  subject        Apple App Store  "iTunes App Store"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook, Social Media Privacy, and the Use and Abuse of Data hearing"
   1  subject        Amazon  "Amazon market"
   1  subject        Reddit  "ConvoKit Reddit corpus"
   1  subject        WeChat/Weibo/QQ  "an anonymized user-user transaction data set provided by Tencent"
   1  ranking        Amazon  "Alexa and Cisco Umbrella top sites lists"
   1  recruitment    Amazon|Reddit  "MTurk, literature, and online forums like Reddit"
   1  ranking        Amazon  "Alexa's top 14,000"
   1  subject        Reddit  "LazyKodi, Reddit, GitHub, and kodi.tv"
   1  subject        Reddit  "Kodi addon ecosystem discovered from LazyKodi, Reddit, GitHub, and kodi.tv"
   1  ranking        Amazon  "Alexa top 5000 websites"
   1  ranking        Amazon  "Alexa's Top 10k, Top 100k and Top 1M lists"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "volunteers using Facebook"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook Ad Library"
   1  subject        WeChat/Weibo/QQ  "Tencent click-through rate prediction data"
   1  ranking        Amazon  "Alexa Top Lists"
   1  recruitment    Amazon  "Alexa top 500 U.S. websites"
   1  recruitment    Amazon  "Alexa top-2,000 U.S. websites"
   1  recruitment    Amazon  "Alexa top-7,000 U.S. websites"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook historical friending data"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook global network"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook network, single country"
   1  recruitment    LinkedIn  "RockYou, LinkedIn, and eHarmony"
   1  recruitment    Amazon  "Alexa US 2019"
   1  recruitment    Amazon  "Alexa UK 2019"
   1  recruitment    Amazon  "Alexa US 2018"
   1  subject        Amazon  "AmazonMovies"
   1  subject        Amazon  "Amazon reviews"
   1  subject        Yelp  "Yelp Dataset reviews"
   1  subject        Airbnb  "Inside Airbnb"
   1  subject        Reddit  "Pushshift Reddit data"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook pages"
   1  subject        Telegram|Google (Play/Search/Ads)  "Google search and Telegram message-board expansion"
   1  subject        Meta (Facebook/Instagram/WhatsApp)|Telegram  "Telegram-hosted Instagram pods"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Instagram user identifier space"
   1  subject        WeChat/Weibo/QQ  "public Weibo dataset"
   1  recruitment    Amazon  "Alexa top-10,000"
   1  ranking        Amazon  "1M-top Alexa"
   1  subject        Amazon  "Amazon and JD.COM best-selling smart cameras"
   1  subject        Google (Play/Search/Ads)  "official Google Play market"
   1  recruitment    Amazon  "Amazon, Best Buy, Walmart, and Taobao"
   1  ranking        Amazon  "Alexa Top Sites in United States list"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook groups dedicated to product promotion"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Instagram advertisements"
   1  ranking        Amazon  "Alexa Top 1M List"
   1  subject        Twitter/X  "Russia Twitter throttle dataset"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "custom phone-number database filtered by libphonenumber and WhatsApp registration API"
   1  subject        Twitter/X  "#Donttweet dataset"
   1  recruitment    Amazon  "Alexa skill stores: US, UK, AU, CA, DE, JP, FR"
   1  recruitment    Amazon  "Amazon, BestBuy, Costco, Walmart, and Home Depot"
   1  recruitment    Google (Play/Search/Ads)|Apple App Store  "Google search results and Apple's US App Store"
   1  recruitment    Reddit  "Upwork, developer websites, Reddit, and iOSoho"
   1  ranking        Amazon  "Alexa Top Sites API"
   1  subject        Twitter/X  "Twitter 1% streaming API"
   1  subject        Twitter/X  "Twitter users"
   1  ranking        Amazon  "Alexa top-1k"
   1  ranking        Amazon  "Alexa top-5k"
   1  ranking        Amazon  "Alexa Top 1M + Cisco Umbrella top 1 million + Majestic Million"
   1  recruitment    Google (Play/Search/Ads)  "Google Play and Apkmonk"
   1  ranking        Amazon  "Alexa website ranking of Germany"
   1  recruitment    Amazon  "Alexa top 10 U.S. websites"
   1  recruitment    Google (Play/Search/Ads)  "Android Play Store"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "local online forums, university-based research participant pool, Facebook, and physical flyers"
   1  recruitment    Twitter/X  "Twitter ad targeting service"
   1  recruitment    Amazon  "Amazon Mechanical Turk pilot studies"
   1  subject        Google (Play/Search/Ads)|Apple App Store  "Google Play Store, Apple App store, and App Annie"
   1  recruitment    Reddit  "local online forums (Craigslist, Reddit, Nextdoor)"
   1  recruitment    Google (Play/Search/Ads)  "Permission Checker (Google Play)"
   1  subject        Telegram  "public fraud-related Telegram channels"
   1  operator       Meta (Facebook/Instagram/WhatsApp)  "Facebook production data"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook active users"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook active accounts"
   1  subject        Google (Play/Search/Ads)  "first returned page of Google search results"
   1  recruitment    Google (Play/Search/Ads)  "Google Play filtered app set"
   1  recruitment    Google (Play/Search/Ads)  "Google Play dynamically analyzed apps"
   1  recruitment    Telegram  "Telegram group of a well-known service provider"
   1  subject        Apple App Store  "SnapPea and Android Market app stores"
   1  subject        WeChat/Weibo/QQ  "Tencent My App"
   1  ranking        Amazon  "Alexa top-ranked websites"
   1  recruitment    Amazon  "Amazon Alexa Top Sites List"
   1  recruitment    Twitter/X|Reddit  "Twitter and Reddit"
   1  recruitment    Google (Play/Search/Ads)  "Google Play, Germany"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook test accounts"
   1  subject        Google (Play/Search/Ads)  "Google Play top paid app list"
   1  subject        Apple App Store  "iTunes store"
   1  subject        Apple App Store  "iOS app store"
   1  subject        WeChat/Weibo/QQ  "Gmail, Hotmail, Yahoo!, and QQ mail"
   1  recruitment    Twitter/X  "random Twitter users"
   1  infrastructure Amazon  "AWS Lambda account"
   1  subject        Reddit  "Reddit subforums GIF Fakes and SFWDeepFakes"
   1  subject        YouTube  "DF-W YouTube and Bilibili"
   1  subject        WeChat/Weibo/QQ|Google (Play/Search/Ads)  "Google Play and Tencent Myapp"
   1  ranking        Amazon  "Alexa top 100K list"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "local Facebook groups"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "collected public WhatsApp groups from India discussing politics"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook Custom Audience targeting of WhatsApp users"
   1  ranking        Amazon  "Alexa's top 500 domain names"
   1  ranking        Amazon  "Alexa's top 20 domain names and 15 URL shortening services"
   1  ranking        Amazon  "Alexa's top 1 million list"
   1  subject        Amazon  "AOSP, Amazon, Xiaomi and LG"
   1  subject        Apple App Store  "Electron App store"
   1  subject        Steam  "Steam game database"
   1  subject        Steam  "custom Steam game collection"
   1  recruitment    Reddit  "Craigslist, Reddit, and our institution's recruitment website"
   1  ranking        Amazon  "Alexa top-1K list"
   1  ranking        Amazon  "Alexa global top 500 websites (ATL)"
   1  infrastructure Amazon  "AWS developer guide and blogs"
   1  ranking        Amazon  "Alexa's top 1M domains"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook's Ad Library Report"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook's Ad Library API"
   1  recruitment    Flickr  "COCO2017 and Flickr30k"
   1  subject        Twitter/X  "Twitter Academic API"
   1  subject        Twitter/X  "Twitter-collected images"
   1  subject        Twitter/X  "Twitter-collected SMS spam messages"
   1  subject        WeChat/Weibo/QQ|Apple App Store  "WeChat app store"
   1  subject        Google (Play/Search/Ads)  "Google Play, apkpure.com, and apktada.com"
   1  recruitment    Amazon  "Alexa Top One Million Domain List"
   1  recruitment    YouTube  "Internet (e.g., YouTube)"
   1  infrastructure Amazon  "Intel processors including the available 1st/2nd/3rd Generation Intel Xeon Scalable Processors on AWS EC2, and five Intel desktop/server processors we own"
   1  recruitment    Twitter/X|Reddit  "professional networks, Reddit, Twitter, Slack, and Upwork"
   1  subject        Twitch  "twitch dataset [29]"
   1  recruitment    Amazon  "AWS IP pool"
   1  subject        Reddit  "Reddit's 2017 transparency report and suspect account findings"
   1  subject        Reddit  "Pushshift public archives"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook ads and online discussion forums"
   1  subject        Apple App Store  "iTunes Search API"
   1  subject        Apple App Store  "Apple App Store listings"
   1  ranking        Amazon  "Alexa top-100K domains"
   1  subject        Discord  "Discord privacy-policy pages"
   1  recruitment    Amazon  "Alexa's top 1M list"
   1  ranking        Amazon  "Alexa, Umbrella, Majestic, Tranco, Secrank, and Trexa top lists"
   1  recruitment    Amazon  "Amazon's MTurk platform and social circles"
   1  subject        Google (Play/Search/Ads)  "apps hosted by several third party app markets including apkpure, an unofficial mirror of Google Play and wandoujia, a major app market in Mainland China"
   1  recruitment    Amazon  "Google Firebase Test Lab and Amazon Device Farm"
   1  recruitment    Apple App Store  "12 working antimalware sandboxes, app stores, and online sandbox services"
   1  subject        Apple App Store  "MacOS App Store"
   1  subject        Yelp  "eight major brokers: Factual, Foursquare, Infogroup, Localeze, Manta, MapQuest, Yellowpage, and Yelp"
   1  subject        WeChat/Weibo/QQ|Apple App Store  "Xiaomi, Baidu, Tencent, and Huawei app stores"
   1  subject        Google (Play/Search/Ads)  "Google Play Store's Top 500 list"
   1  ranking        Amazon  "Similar Web and Alexa Top Sites"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)  "Facebook Audience Network, Google AdMob, and Twitter MoPub"
   1  ranking        Amazon  "Alexa top 1 million websites worldwide from May 25, 2020"
   1  ranking        Amazon  "Alexa top 1 million websites, .de domains"
   1  ranking        Amazon  "Alexa top 1 million websites, pre-filtered EN and DE sets"
   1  recruitment    Google (Play/Search/Ads)  "Google PlayStore"
   1  subject        Apple App Store  "Apple iTunes Preview / Apple App Store"
   1  subject        Apple App Store  "Fire TV app store"
   1  ranking        Amazon  "Alexa 10K-100K websites"
   1  recruitment    Amazon  "Alexa's Europe region categories"
   1  recruitment    Reddit  "local Craigslist and sub-Reddit forums"
   1  recruitment    Twitter/X|Reddit  "Reddit, Twitter, professional contacts, and snowball referrals"
   1  ranking        Amazon  "Alexa top 30,000 websites"
   1  recruitment    Amazon  "Alexa top and additional organizations"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook Ad Library web portal"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook Ad Library Report"
   1  subject        Apple App Store  "three leading app stores"
   1  recruitment    Amazon  "Alexa top 10000 websites"
   1  infrastructure Amazon  "Amazon private registry"
   1  recruitment    LinkedIn  "custom collection of LinkedIn profiles"
   1  subject        Twitter/X  "Twitter Filtered Stream API"
   1  recruitment    Apple App Store  "Xiaomi, Huawei, Oppo and Vivo app stores"
   1  recruitment    Google (Play/Search/Ads)  "Google Play's “top 200 free apps” list"
   1  ranking        Amazon  "Alexa top-500 websites"
   1  ranking        Amazon  "Alexa's list of most popular news websites"
   1  ranking        Amazon  "Alexa's top website list"
   1  subject        Apple App Store  "official Oculus app store"
   1  ranking        Amazon  "Alexa top 20K"
   1  subject        Twitter/X  "Robertson et al. Twitter dataset"
   1  subject        Twitter/X  "Robertson et al. Twitter dataset, derived Datt"
   1  ranking        Amazon  "Alexa global website rankings"
   1  ranking        Amazon  "Alexa top 1m list"
   1  ranking        Amazon  "Alexa, Google Assistant, IFTTT, SmartThings, Apple HomeKit, OpenHAB, and HomeAssistant integration lists"
   1  mlservice      Amazon  "Google, Amazon, and IBM text-to-speech APIs"
   1  subject        YouTube  "YouTube Top 100"
   1  subject        Netflix  "Netflix Top 50"
   1  subject        Amazon  "Amazon random movies"
   1  subject        YouTube  "YouTube Top 101-300"
   1  ranking        Amazon  "DE findings from the Alexa Top 10K"
   1  ranking        Amazon  "Alexa's top-100K list"
   1  ranking        Amazon  "Alexa 100K-top domains"
   1  subject        WeChat/Weibo/QQ  "Tencent Kandian Dataset"
   1  subject        Twitter/X  "Twitter API; Election 2020 hashtag collection"
   1  subject        Twitter/X  "Twitter API; Covid-19 hashtag collection"
   1  subject        Twitter/X  "Twitter API; BlackLivesMatter hashtag collection"
   1  subject        Twitter/X  "Twitter API; gun-violence keywords and hashtags"
   1  subject        WeChat/Weibo/QQ  "Weibo"
   1  recruitment    Twitter/X|Reddit  "two Rust-related subreddits, two Rust forums, and one author's Twitter account"
   1  recruitment    Amazon  "Amazon Mechanical Turk, U.S. region"
   1  subject        WeChat/Weibo/QQ  "Tencent Map Service"
   1  subject        YouTube  "YouTube recommendation engine"
   1  subject        WeChat/Weibo/QQ  "Weibo dataset released by Jin et al."
   1  subject        Reddit  "Reddit Hyperlink Network"
   1  subject        Reddit  "publicly available Reddit data presented by Turcan and McKeown"
   1  subject        Twitter/X  "custom Twitter Historical API collection"
   1  subject        Twitter/X  "annotated twitter dataset from [13]"
   1  subject        Reddit  "Pushshift's API"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Instagram Graph API"
   1  subject        Reddit  "custom seed list (15 subreddits from the Daily, Fun, and Health domains)"
   1  operator       TikTok  "server logs of Douyin"
   1  subject        Steam  "Steam dataset"
   1  subject        Steam  "processed Steam dataset"
   1  recruitment    Reddit  "Reddit's comments dump"
   1  subject        Amazon  "Amazon Alexa marketplace"
   1  subject        Amazon  "Amazon Alexa marketplace, US market"
   1  subject        Amazon  "Alexa skills with complete traceability"
   1  subject        Spotify  "Spotify logged feedback data from live traffic"
   1  recruitment    Amazon  "Alexa top million sites"
   1  subject        YouTube  "YouTube dataset"
   1  subject        Twitter/X  "Donald Trump's Twitter account"
   1  subject        Twitter/X  "Twitter replies generated during the specific period"
   1  subject        Yelp  "The Yelp Review Challenge dataset"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook conflict reporting tool"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Kijiji and Facebook"
   1  subject        Spotify  "Spotify's recommendation and search products"
   1  ranking        Amazon  "Media Bias Chart and Alexa ranking"
   1  subject        Twitter/X  "Twitter publisher feeds"
   1  subject        Flickr  "Flickr-Faces-HQ (FFHQ)"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook on-platform survey"
   1  subject        Yelp  "Yelp business dataset"
   1  ranking        Amazon  "Alexa Top 1M domains"
   1  ranking        Amazon  "Alexa 100K domains"
   1  recruitment    LinkedIn  "custom recruitment via interviewee referrals, LinkedIn, and MaiMai"
   1  ranking        Amazon  "Alexa Top 1M, Cisco Umbrella, Majestic Million, and Tranco Research List"
   1  subject        Meta (Facebook/Instagram/WhatsApp)|Twitch  "Cora, Citeseer, Coauthor CS, Facebook, Twitch-ES, LastFM Asia"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Meta's CrowdTangle"
   1  subject        Twitter/X|Meta (Facebook/Instagram/WhatsApp)  "FreePhish Twitter and Facebook streams"
   1  subject        Twitter/X|Meta (Facebook/Instagram/WhatsApp)  "Twitter and Facebook daily streams"
   1  subject        YouTube  "YouTube Kids"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)  "online student communities (Facebook, Twitter and Instagram)"
   1  subject        Google (Play/Search/Ads)  "UK Google Play store"
   1  recruitment    Reddit  "Reddit's r/cybersecurity; Commonwealth Cyber Initiative advertisement; recommendations from interviewees"
   1  ranking        Amazon  "Alexa/Tranco top 10,000"
   1  subject        Reddit  "Reddit User Submissions"
   1  ranking        Amazon  "Alexa 1M, Umbrella 1M, and Majestic 1M"
   1  subject        WeChat/Weibo/QQ  "WeChat and WeCom first-party miniapps"
   1  subject        WeChat/Weibo/QQ  "QQ first-party miniapps"
   1  subject        WeChat/Weibo/QQ  "WeChat third-party miniapps"
   1  recruitment    Amazon  "Amazon and BestBuy"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook groups, pages, WhatsApp groups and direct messaging"
   1  subject        Reddit  "Reddit.com"
   1  subject        Amazon  "Amazon and Google rankings"
   1  subject        Apple App Store  "four Chinese app stores"
   1  recruitment    Twitter/X|LinkedIn|Discord  "LinkedIn, Upwork, Discord, Slack, Twitter"
   1  ranking        Amazon  "Alexa Top 1M, Cisco Umbrella, Majestic Million, and the Tranco Research List"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)|Discord  "Twitter, Facebook, Discord, and the ethresear.ch online forum"
   1  recruitment    WeChat/Weibo/QQ  "wenjuan.com, friends, colleagues, contacts, Chinese universities and technical colleges, QQ, WeChat, and Chinese online-game groups"
   1  subject        Amazon  "Alexa skill marketplace"
   1  recruitment    Twitter/X|Reddit  "Consumer Reports' tech-focused mailing list, subreddits, Twitter, Open Tech Fund and Internet Freedom Festival mailing lists"
   1  subject        Google (Play/Search/Ads)  "Google Play, third-party websites (APKPure and 360 Store)"
   1  subject        Apple App Store  "app store pages, device vendor websites, and app resources"
   1  ranking        Amazon  "Alexa 1M Global Sites 2020"
   1  subject        Amazon|eBay  "Amazon, Walmart, eBay, Best Buy, and Home Depot"
   1  subject        Google (Play/Search/Ads)|Apple App Store  "Apple App Store and Google Play Store"
   1  subject        Amazon|eBay  "Amazon, Walmart, and eBay"
   1  recruitment    Google (Play/Search/Ads)|Apple App Store  "North America-regional App Store and Google Play store"
   1  subject        Apple App Store  "Xiaomi App Store"
   1  recruitment    Amazon  "Alexa Top 10K sites"
   1  subject        Google (Play/Search/Ads)  "Google Play Store charts"
   1  subject        Apple App Store  "iOS App Store category rankings"
   1  recruitment    Reddit  "social media, mailing lists, Slack channels, HackerOne, BugCrowd, and Reddit"
   1  recruitment    Amazon  "Alexa top 1M domains"
   1  recruitment    Reddit  "Reddit forums and an email listserv"
   1  subject        Discord  "Midjourney Discord dataset"
   1  recruitment    Amazon  "Mechanical Turk (MTurk)"
   1  recruitment    Amazon  "Amazon Mechanical Turk (Mturk)"
   1  recruitment    Apple App Store  "Chrome Web Store, Firefox Browser Add-Ons, Mac App Store, and GitHub"
   1  subject        Apple App Store  "official app stores [7] and open-source datasets [2]"
   1  recruitment    Twitter/X  "Twitter API for Academic Research"
   1  recruitment    Twitter/X  "Twitter account dataset derived from sampled tweets"
   1  recruitment    Amazon  "Alexa Top Website list"
   1  ranking        Amazon  "Alexa's Top 10 Sites"
   1  subject        Apple App Store  "Android and iOS app stores"
   1  subject        YouTube  "YouTube-VIS"
   1  subject        Amazon  "Amazon websites in English: amazon.com, amazon.com.au, amazon.ca, amazon.in, amazon.sg, and amazon.co.uk"
   1  subject        Amazon  "Amazon websites in English"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "custom Facebook Groups dataset"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook leak and name-dataset"
   1  subject        Amazon  "Amazon Cell Phone"
   1  infrastructure Amazon  "AWS cloud IP addresses"
   1  subject        Twitter/X  "Twitter API V2"
   1  ranking        Amazon  "Alexa Top 10K websites"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)|Reddit|LinkedIn|Pinterest  "custom website list: Google, Facebook, Dropbox, Twitter, Pinterest, LinkedIn, Yahoo, Reddit, and GitHub"
   1  subject        WeChat/Weibo/QQ  "Tencent advertisement platform"
   1  ranking        Amazon  "Alexa top 20k"
   1  ranking        Amazon  "custom traffic-trace dataset derived from Alexa websites"
   1  recruitment    Twitter/X|Reddit  "public websites, Reddit, Twitter, and personal networks"
   1  subject        Amazon  "Amazon-Beauty"
   1  subject        Amazon  "Amazon-Baby"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook Ad Library API"
   1  recruitment    Twitter/X  "Hayawi et al. [34] COVID-19 vaccine-related Twitter dataset"
   1  recruitment    Twitter/X  "custom keyword-filtered Twitter corpus"
   1  recruitment    Twitter/X  "custom Twitter reply corpus"
   1  subject        Twitter/X  "Twitter API 2.0 search endpoints"
   1  subject        Twitter/X  "Twitter API 2.0 conversation IDs"
   1  subject        Apple App Store  "Apple app store (U.S.)"
   1  subject        Apple App Store  "Apple app store (U.S.), high-profile apps"
   1  subject        Google (Play/Search/Ads)  "Google Play Store top-100 most popular games and apps"
   1  subject        Amazon  "popular US stores, including Amazon.com"
   1  subject        Mastodon  "Bluesky Relay"
   1  subject        Mastodon  "Bluesky repositories and Firehose"
   1  recruitment    Google (Play/Search/Ads)  "Google Play Store top app charts"
   1  subject        WeChat/Weibo/QQ  "Tencent Myapp"
   1  recruitment    Discord  "undergraduate junior operating systems class; senior- and MS-level application security class; informal student software chat group over Discord"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Meta Ad Library"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook pages manually identified for parties and leaders"
   1  recruitment    YouTube  "YouTube Creator Research"
   1  subject        Google (Play/Search/Ads)  "Google Play; AppBrain and AndroidRank"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)|Reddit|LinkedIn  "LinkedIn and Facebook connections; regional Subreddits and Kijiji"
   1  subject        WeChat/Weibo/QQ  "Tencent WeChat English Documentation"
   1  recruitment    Reddit  "social media platforms (e.g., Reddit, Slack), email lists, and attached flyers around our institution"
   1  recruitment    Twitter/X  "custom participant-controlled Twitter accounts"
   1  recruitment    Telegram  "Telegram groups"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Prolific and Facebook advertisements"
   1  ranking        Amazon  "Alexa Top-1K, Top-1K˜10K, Top-10K˜100K, Top-100K˜1M"
   1  subject        Twitter/X  "Twitter, ScamSniffer, Etherscan, CryptoScamDB, Chainabuse"
   1  subject        WeChat/Weibo/QQ  "WeChat mini-programs"
   1  subject        WeChat/Weibo/QQ  "WeChat mini-programs flagged as potentially vulnerable"
   1  subject        WeChat/Weibo/QQ  "WeChat mini-programs excluded from MiniCAT query results"
   1  subject        WeChat/Weibo/QQ  "WeChat mini-programs with potential vulnerabilities"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook [32, 37]"
   1  subject        Google (Play/Search/Ads)  "Google Play Store in the US"
   1  subject        Amazon  "Amazon product reviews"
   1  subject        Spotify  "Spotify"
   1  recruitment    Apple App Store  "Xiaomi app store"
   1  subject        Twitter/X  "Twitter Moderation Research Consortium"
   1  recruitment    YouTube  "custom seed list of YouTube channels selected based on popularity"
   1  subject        Twitter/X  "cryptocurrency derivatives exchange users linking Twitter handles"
   1  subject        YouTube  "YouTube and Bilibili"
   1  recruitment    WeChat/Weibo/QQ|Apple App Store  "Huawei, Vivo, and Tencent app stores"
   1  subject        Twitter/X  "Twitter Application Programming Interface"
   1  ranking        Amazon  "Alexa-top websites dataset"
   1  subject        Reddit  "public dataset of 16K Reddit comments"
   1  recruitment    YouTube  "YouTube Faces DB (YTF)"
   1  subject        Apple App Store  "product websites, the Apple App Store, or mobile devices"
   1  subject        Apple App Store  "Apple App Store XML site map"
   1  subject        Apple App Store  "Apple App Store policy links"
   1  recruitment    Reddit  "Reddit and I2P"
   1  subject        Flickr  "Flickr-Faces-HQ (FFHQ) dataset"
   1  recruitment    Twitter/X|Reddit|LinkedIn|Discord  "Public Subreddits and Discord servers; national associations; Twitter, LinkedIn, email; open-source game projects; Upwork"
   1  subject        Google (Play/Search/Ads)  "Google searches"
   1  recruitment    LinkedIn  "SAT Conference + LinkedIn, snowballing, and prior interview-study contacts"
   1  subject        Reddit  "Reddit data set"
   1  subject        Telegram  "public Telegram channels associated with KIWI FARMS"
   1  subject        Twitter/X  "Twitter hashtag #dropkiwifarms"
   1  recruitment    Reddit  "FAU lab webpage, private contacts, mailing lists, Reddit, and media advertisements"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)|Reddit|LinkedIn|Discord  "VR-related Discord servers, sub-Reddits, LinkedIn, Facebook groups, and a local school"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Meta Ad Library API"
   1  recruitment    Reddit  "Reddit subreddit"
   1  subject        YouTube  "YouTube recommendation feed"
   1  subject        Google (Play/Search/Ads)  "AndroZoo and Google Play Store"
   1  subject        Google (Play/Search/Ads)  "Filtered AndroZoo/Google Play Store app set"
   1  recruitment    Twitter/X  "Twitter and personal contacts"
   1  ranking        Amazon  "Alexa top list"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)  "social media (e.g., Twitter and Facebook), then snowball sampling"
   1  recruitment    Apple App Store  "top free app charts in both app stores"
   1  recruitment    Reddit  "Grindr advertisements, Reddit advertisements, university posters and LGBTQ+-focused organizations; snowball sampling"
   1  recruitment    Reddit|Discord  "websites and forums related to LLM jailbreaking, including FlowGPT, Jailbreak Chat, GitHub repositories, Reddit, and Discord"
   1  recruitment    Mastodon  "joinmastodon.org and instances.social"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)  "professional network, local NGOs, second hand goods advertising mailing lists, poverty related Twitter hashtags, and Facebook groups"
   1  ranking        Amazon  "Cisco Umbrella, Majestic Million, Tranco, SecRank, Alexa Top 1 Million"
   1  infrastructure Google (Play/Search/Ads)  "CDN market share statistics [12] and a Google search"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook advertising campaign"
   1  subject        Amazon  "Amazon's API"
   1  infrastructure Amazon  "Ubuntu-based Amazon EC2 instances"
   1  recruitment    Twitter/X|Telegram|Discord  "Twitter, Telegram, Discord, and word-of-mouth"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)|Reddit|Discord  "VR-specific Discord servers, subreddits, Facebook groups"
   1  recruitment    Reddit|LinkedIn  "VR-specific LinkedIn groups, subreddits"
   1  subject        WeChat/Weibo/QQ  "various app markets and WeChat mini-programs"
   1  ranking        Amazon  "Alexa top-50 websites"
   1  ranking        Amazon  "D2 and Alexa Ranking"
   1  recruitment    Reddit  "Reddit, online classifieds at Indiana University, and physical locations in/around Bloomington, Indiana"
   1  subject        Apple App Store  "App Store top-popular list"
   1  subject        Amazon  "Amazon.nl product pages"
   1  ranking        Amazon  "Alexa top 5,000"
   1  ranking        Amazon  "Alexa rank from 100k to 105k"
   1  ranking        Amazon  "DynaPD and Alexa Top 5,000 to 15,000"
   1  subject        Google (Play/Search/Ads)  "Google Play store based on the rank of APKPure"
   1  subject        Discord  "Discord"
   1  recruitment    Google (Play/Search/Ads)  "Avast fleeceware reports on Google Play"
   1  subject        LinkedIn  "000Webhost, LinkedIn, Yahoo, RedMart, ClixSense, LiveAuctioneers, Tianya, 126, Dodonew, Taobao, and CSDN"
   1  recruitment    Google (Play/Search/Ads)  "Google Play and 360 App Assistant top download lists"
   1  infrastructure Amazon  "AWS Spot Price History"
   1  infrastructure Amazon  "AWS pricing history API"
   1  recruitment    LinkedIn  "organizations and conferences associated with medical device security; LinkedIn; personal contacts"
   1  subject        Google (Play/Search/Ads)  "Google search engine and crowd-knowledge platforms"
   1  falsepos       Google (Play/Search/Ads)  "AndroZoo (metadata) and Google Play Store"
   1  subject        Reddit  "Reddit public URLs from a continuous Internet-wide crawl"
   1  subject        Reddit  "43 manually selected Reddit subreddits"
   1  subject        Reddit  "Reddit posts identified as IBSA help-seeking"
   1  subject        Reddit  "Top three upvoted Reddit threads per sampled post"
   1  subject        Twitter/X  "DeFiHackLabs, Twitter, SmartBugs Curated, Code4rena, Sherlock, and Ethereum Commonwealth"
   1  subject        Twitter/X  "Global Reactions to COVID-19 on Twitter"
   1  subject        Twitter/X  "Global Reactions to COVID-19 on Twitter, India sample"
   1  ranking        Amazon  "Alexa Top 50,000"
   1  subject        Reddit  "Pushshift API"
   1  recruitment    Twitter/X  "personal and professional networks; then-Twitter; GitHub; S&P groups on Slack"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook survey and de-identified platform log data"
   1  ranking        Amazon  "Alexa top 500 and top 10,000"
   1  ranking        Amazon  "Alexa Top 100 Most Popular Websites"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Instagram interaction network"
   1  subject        Amazon  "Alexa skill marketplaces"
   1  subject        Amazon  "privacy-policy pairs across Alexa marketplaces"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "top 10 messenger and social media apps in 2023"
   1  subject        Twitch  "Twitch live streams"
   1  infrastructure Amazon  "eight commercial VPN providers and EC2 cloud instances"
   1  subject        Telegram  "IT Army of Ukraine Telegram channel"
   1  ranking        Amazon  "Alexa Top 200 websites"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook group directory"
   1  recruitment    LinkedIn  "LinkedIn member directory"
   1  recruitment    Amazon  "custom online study via Amazon Mechanical Turk"
   1  recruitment    Amazon  "wtikay.com's set of 7012 commonly visited URLs (derived from the Alexa top 5000 sites list)"
   1  ranking        Amazon  "Alexa top 10,000 global websites"
   1  ranking        Amazon  "Alexa U.S. top 500"
   1  subject        eBay  "Authorize, Digg, eBay, Microsoft, Recaptcha, and Yahoo commercial CAPTCHA schemes"
   1  recruitment    Apple App Store  "SmartThings app store"
   1  subject        Amazon  "custom Amazon search for “smart home devices”"
   1  subject        Google (Play/Search/Ads)  "Google Play Store dataset from related work [79]"
   1  recruitment    WeChat/Weibo/QQ  "WeChat public accounts, WeChat groups, and Xiaohongshu"
   1  recruitment    Reddit|LinkedIn  "LinkedIn, Reddit, gCaptain, and personal connections/snowballing"
   1  infrastructure Amazon  "Google phone farm, Google and AWS cloud, a local lab"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook codebase"
   1  subject        Reddit  "PushShift and ArcticShift"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook matrimony groups"
   1  recruitment    LinkedIn  "LinkedIn, emailing groups serving power grid administrators, and personal social networks"
   1  recruitment    Reddit  "Reddit keyword searches across selected subreddits"
   1  subject        YouTube  "YouTube trending lists"
   1  subject        Twitter/X  "Twitter V2 Archive Search endpoint"
   1  subject        Telegram  "Telegram channels"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "academic mailing lists, university community networks, Facebook/WhatsApp groups with parents, and word-of-mouth"
   1  subject        Google (Play/Search/Ads)|Apple App Store  "popular industrial PMs identified through Chrome Web Store, Google Play Store, Firefox Add-ons, Edge Add-ons, Apple's App Store, recommendation sites, and GitHub"
   1  recruitment    TikTok|WeChat/Weibo/QQ  "WeChat, QQ, Xiaohongshu, Sina Weibo, and Douyin recruitment"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook group exclusively tailored to Pakistani women residing in the United States"
   1  subject        Meta (Facebook/Instagram/WhatsApp)|Discord|Snapchat  "six selected online services: Apple iCloud, Google, Facebook, Instagram, Snapchat, and Discord"
   1  recruitment    Twitter/X|LinkedIn  "developer forums, LinkedIn and Twitter, and Upwork"
   1  subject        Google (Play/Search/Ads)  "Google Play U.S. region via AppBrain"
   1  subject        WeChat/Weibo/QQ|Apple App Store  "Tencent App Store"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Prolific and Facebook group focused on CI users"
   1  recruitment    Telegram|Discord  "X, Discord, and Telegram, and the research team's personal contacts"
   1  recruitment    Reddit  "the ranking of the top 1000 subreddits provided by Reddit"
   1  recruitment    Reddit  "these subreddits"
   1  subject        eBay  "eBay API"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook Marketplace"
   1  subject        eBay  "custom image sample from processed eBay images"
   1  ranking        Amazon  "Alexa Top 1M List generated in May 2022"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)|Reddit|Discord  "VR-specific subreddits, Facebook groups, and Discord servers; snowball sampling"
   1  recruitment    Google (Play/Search/Ads)  "public developer contact information on Google Play and social-media accounts"
   1  subject        YouTube  "McGrady et al. [43] random YouTube video sample"
   1  subject        Apple App Store  "Meta Quest app store"
   1  infrastructure Amazon  "AWS IP ranges intersected with ISI IP Hitlist"
   1  subject        Amazon  "Amazon USB-hub search results"
   1  ranking        Amazon  "Alexa Top Websites and Semrush"
   1  subject        Reddit  "seven selected subreddits"
   1  subject        Reddit  "Reddit dataset"
   1  subject        Google (Play/Search/Ads)  "Google Play store top app lists"
   1  recruitment    TikTok  "TikTok dataset [33]"
   1  recruitment    Google (Play/Search/Ads)|Apple App Store  "Google Play and Apple App Store"
   1  recruitment    Mastodon  "Bluesky historical searches"
   1  subject        YouTube  "YouTube Kids app"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook Hateful Memes (FHM)"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)|LinkedIn  "Facebook marketplace, [anonymized regional online marketplace], LinkedIn, and word-of-mouth"
   1  subject        Reddit  "Pushshift Reddit API"
   1  recruitment    Discord  "local Discord server"
   1  subject        WeChat/Weibo/QQ  "Weibo-COV"
   1  subject        WeChat/Weibo/QQ  "Weibo-COV, keyword- and geolocation-filtered"
   1  subject        Twitter/X  "publicly available data consisting of 1.4 billion tweets related to the COVID-19 pandemic"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "SNAP repository Facebook dataset"
   1  subject        Meta (Facebook/Instagram/WhatsApp)|YouTube|Telegram  "78 keywords across X, Instagram, Facebook, Telegram, and YouTube"
   1  subject        Reddit  "all Reddit submissions"
   1  subject        Reddit  "Reddit climate change dataset"
   1  subject        Reddit  "Know Your Meme website and subreddit Bad Memes"
   1  subject        Google (Play/Search/Ads)  "Google Play and development documentation"
   1  subject        WeChat/Weibo/QQ  "WeChat and Baidu mini-apps with category information"
   1  subject        WeChat/Weibo/QQ  "mini-apps using the WeChat realtime log API"
   1  subject        LinkedIn  "Rockyou, LinkedIn, Mail.ru, 000webhost, Taobao, Gmail, Ashley Madison, Libero"
   1  subject        Yelp  "Google PoJ104 and Yelp"
   1  infrastructure Amazon  "AWS Serverless Application Repository"
   1  subject        Amazon  "Amazon Reviews"
   1  recruitment    LinkedIn  "Maimai, LinkedIn, industry connections, and snowball sampling"
   1  recruitment    Apple App Store  "Meta Quest App Store"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "2021 Facebook data leak"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "custom collected WhatsApp profile pictures"
   1  subject        Google (Play/Search/Ads)  "Google Ads Keyword Planner API"
   1  infrastructure Amazon  "Amazon S3 bucket"
   1  subject        Apple App Store  "macOS App Store"
   1  recruitment    Apple App Store  "mainstream app stores and CoinCarp"
   1  recruitment    WeChat/Weibo/QQ  "Weibo and Xiaohongshu native search features"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Ego-Facebook"
   1  subject        Twitter/X  "Ego-Twitter"
   1  recruitment    Amazon  "Amazon's Mechanical Turk platform"
   1  infrastructure Amazon  "AWS EC2 regions outside China"
   1  ranking        Amazon  "combined Alexa Top 1M, Tranco 1M, and Cisco Umbrella 1M history"
   1  subject        Amazon|Reddit  "WikiText-103, XSum, Amazon Reviews, CC-News, and Reddit"
   1  subject        Twitter/X|LinkedIn  "LinkedIn, 000Webhost, Twitter, RedMart, and MathWay"
   1  recruitment    Amazon  "Sidewalk-related publications from Amazon, tech news outlets, and manufacturers"
   1  recruitment    LinkedIn  "direct emails obtained from publicly available sources, direct messages on LinkedIn, professional networks, and snowball sampling"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)|Reddit  "selected Reddit subreddits and public Instagram profiles"
   1  recruitment    YouTube  "Mozilla's \"YouTube Regrets\" project"
   1  recruitment    Amazon|YouTube|Netflix  "YouTube, Amazon Prime Video, and Netflix"
   1  recruitment    Reddit  "r/Drugs related subreddits"
   1  subject        Reddit  "RedditLeak"
   1  subject        Reddit  "PersonalReddit"
   1  infrastructure Amazon  "Ubuntu Generic, Ubuntu AWS, Fedora Core, and Fedora Enterprise Linux Next"
   1  subject        Twitter/X  "Twitter dataset by Sawhney et al."
   1  subject        Telegram  "Telegram search bots"
   1  subject        Telegram  "Telegram"
   1  subject        Telegram  "Telegram channels linked through bios, pinned posts, and message histories"
   1  subject        Telegram  "Five Telegram query groups"
   1  recruitment    LinkedIn|Discord  "social media, LinkedIn groups, Discord servers, university bulletin boards, and snowball sampling"
   1  subject        Google (Play/Search/Ads)  "Google Play lists of popular apps in 49 app categories"
   1  infrastructure Amazon  "AWS C5 instance type"
   1  ranking        Amazon  "Alexa Top 3k"
   1  ranking        Amazon  "Alexa Top 1k"
   1  subject        Amazon  "Amazon CD"
   1  subject        WeChat/Weibo/QQ  "WeChat Accounts (4), Appraven Groups (2), Illicit Websites (17)"
   1  subject        WeChat/Weibo/QQ  "RedNote (Xiaohongshu)"
   1  subject        Twitter/X  "Twitter Archiving Project"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "CrowdTangle API"
   1  recruitment    WeChat/Weibo/QQ  "Tencent's official VTT service"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook's desktop website"
   1  subject        Twitter/X  "Twitter URLs checked against five blacklists"
   1  subject        Twitter/X  "non-spam URLs appearing on Twitter"
   1  ranking        Amazon  "Alexa top 100,000 websites"
   1  ranking        Amazon  "Alexa top 1,000 sites"
   1  ranking        Amazon  "Alexa top site list"
   1  subject        Google (Play/Search/Ads)  "Google Play Store (previous crawl of the market)"
   1  subject        Amazon  "Google, Amazon, Microsoft Azure, and Alibaba Cloud application marketplaces"
   1  recruitment    Amazon  "Amazon Mechanical Turk workers, friends, and colleagues"
   1  recruitment    Amazon  "local VMs, Azure, and AWS Windows images"
   1  subject        Apple App Store  "App Store top 100 free apps in the Netherlands"
   1  recruitment    Telegram|Discord  "Discord and Telegram"
   1  ranking        Amazon  "Alexa, Tranco, Cisco Umbrella, and Google's Chrome User Experience Report (CrUX) Top Lists"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "local WhatsApp groups in Kenya and WhatsApp status"
   1  ranking        Amazon  "Alexa top 10 000"
   1  recruitment    Amazon  "custom extracted email list from Amazon Alexa skill descriptions"
   1  recruitment    YouTube  "previous unrelated study's 1% YouTube dataset"
   1  recruitment    YouTube  "YouTube organic searches"
   1  subject        WeChat/Weibo/QQ|Apple App Store  "WeChat miniapp store"
   1  subject        Amazon  "custom collection of Amazon Music recordings"
   1  subject        Reddit  "Piracy Megathread on Reddit"
   1  recruitment    Google (Play/Search/Ads)|Apple App Store  "Google Play Store and Apple App Store"
   1  recruitment    Steam  "Most played VR games list on Steam"
   1  recruitment    Steam  "Steam app privacy policies"
   1  recruitment    Discord  "university forums, CTF competition mail lists, and VDE Discords"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "custom experiment population on Instagram"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "custom experiment population on Facebook"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "custom Case Study 2 experiment population on Instagram"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "custom Case Study 3 experiment population on Facebook"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "custom Case Study 5 experiment population on Instagram"
   1  subject        Netflix  "Netflix and Prime Video"
   1  ranking        Amazon  "Alexa Top 1M dataset"
   1  subject        Amazon  "Amazon Prime Video, Max, and SVT Play"
   1  ranking        Amazon  "Alexa top 10,000 websites list"
   1  recruitment    Reddit  "Reddit communities r/VPS, r/agency, r/webhosting, r/Hosting"
   1  recruitment    Reddit  "Reddit communities and manually reviewed company websites"
   1  recruitment    LinkedIn  "professional networks, LinkedIn posts, medical professional development organizations, and snowball sampling"
   1  recruitment    Reddit  "literature, Reddit, and Quora"
   1  recruitment    Google (Play/Search/Ads)  "Google Play Store developer contact information"
   1  subject        Reddit|Telegram  "Pushshift Telegram"
   1  subject        Meta (Facebook/Instagram/WhatsApp)  "Facebook public groups via CrowdTangle"
   1  subject        Meta (Facebook/Instagram/WhatsApp)|WeChat/Weibo/QQ  "WeChat Mini Game, Facebook Instant Games, and QuickGame"
   1  subject        Google (Play/Search/Ads)  "OSV database; Google Search API results"
   1  subject        Google (Play/Search/Ads)  "Google Ads"
   1  recruitment    Amazon  "Alexa top 50K domains"
   1  ranking        Amazon  "Alexa top 12K websites"
   1  ranking        Amazon  "Alexa top 20K registration pages"
   1  subject        WeChat/Weibo/QQ  "custom WeChat MP crawler"
   1  subject        Google (Play/Search/Ads)  "Top Google Play dataset"
   1  subject        Google (Play/Search/Ads)  "Top Google Play and F-Droid datasets"
   1  subject        Google (Play/Search/Ads)  "Google APK scan / Google Play apps"
   1  subject        Google (Play/Search/Ads)  "Google Play apps using com.umlaut.crowd SDK"
   1  subject        Twitter/X|Meta (Facebook/Instagram/WhatsApp)|WeChat/Weibo/QQ  "custom seed list: Twitter, Facebook, and Weibo public user-posted URLs"
   1  subject        Twitter/X  "Twitter Decahose"
   1  recruitment    Reddit  "online military-related forums, specifically Reddit"
   1  recruitment    Reddit|Google (Play/Search/Ads)  "custom MMMapp dataset assembled from Google Play and Reddit"
   1  subject        Google (Play/Search/Ads)  "Google Play Top Free charts"
   1  subject        Google (Play/Search/Ads)  "Google search results and GitHub repositories"
   1  recruitment    Netflix  "Netflix Prize dataset"
   1  subject        Google (Play/Search/Ads)  "Google Play Store historical most-installed list"
   1  subject        Google (Play/Search/Ads)|Apple App Store  "Google Play, MyApp, and Apple App Store"
   1  ranking        Amazon  "Alexa websites"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)  "Twitter, Facebook and WhatsApp"
   1  recruitment    Google (Play/Search/Ads)  "Android's Google Play"
   1  ranking        Amazon  "Alexa's top US list"
   1  ranking        Amazon  "Alexa top 3000 sites"
   1  ranking        Amazon  "Alexa top 1000 sites"
   1  ranking        Amazon  "Alexa top 500K"
   1  ranking        Amazon  "Alexa top 1K"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook Ads Manager"
   1  recruitment    Meta (Facebook/Instagram/WhatsApp)  "Facebook population statistics derived from Dp"
   1  recruitment    Reddit  "/r/Scams subreddit"
   1  ranking        Amazon  "Alexa Top 1M Sites"
   1  infrastructure Amazon  "AWS S2N-TLS"
   1  recruitment    Google (Play/Search/Ads)  "Goko Store, Android Wear Center, and the official Google Play app market"
   1  recruitment    Google (Play/Search/Ads)  "Google Play store; AOL Query Log dataset"
   1  subject        Google (Play/Search/Ads)|Apple App Store  "iOS App Store, Google Play Store, Chrome Web Store and Firefox Add-on Store; web search engine and curated lists"
   1  subject        Telegram  "official Telegram clients"
   1  subject        Google (Play/Search/Ads)  "Google Play Store reviews"
   1  subject        YouTube|Google (Play/Search/Ads)  "10M dataset and YouTube data APIs"
   1  ranking        Amazon  "Alexa top one million list"
   1  ranking        Amazon  "Alexa Top 1K websites"
   1  recruitment    Twitter/X|Meta (Facebook/Instagram/WhatsApp)|LinkedIn  "Twitter, LinkedIn, Slack channels, Whatsapp groups, vulnerability discovery organizations, and bug bounty-as-a-service companies"
   1  ranking        Amazon  "Alexa Top Websites"
   1  subject        Apple App Store  "HUAWEI and Google's app store"

Reading notes on that dump:

  • "Alexa" alone is 51 papers, all assigned ranking. This single line is the difference between 176 and 39 Amazon papers.
  • "tiktoken" is the OpenAI tokenizer, assigned falsepos. A substring match on tiktok finds it.
  • "Amazon Reviews", "WikiText-103, XSum, Amazon Reviews, CC-News, and Reddit" are assigned benchmark: training corpora named after a platform. The paper trains on them; it does not measure the platform.
  • "Google, Amazon, and IBM text-to-speech APIs" is mlservice; "Google Firebase Test Lab and Amazon Device Farm" is infrastructure.
  • Strings naming several platforms ("Amazon, Walmart, eBay, Best Buy, and Home Depot") are tagged for each family they name, which is why the family counts do not sum to 897.
  • Known imperfections we did not fix, visible in the dump: "Amazon private registry" is assigned subject and is probably a package registry; "AOSP, Amazon, Xiaomi and LG" is Amazon as a device vendor. These are the kind of residue the hand-audit prices, which is why the audit exists.

Fold 2: detection.phenomenon into ten families

detection.phenomenon is free text and agrees run-to-run on roughly 20% of exact strings, so this fold is published on the content page as a ranking, explicitly not a partition, with its residue stated in the table itself: 415 of 897 papers (46.3%) have detection tuples matching none of the ten families.

The residue is 1,893 distinct phenomenon strings across 1,920 tuples — i.e. almost every residue string occurs once. That distribution is itself the finding: the fold cannot be made into a partition without inventing categories. The full residue vocabulary, frequency-ordered:

platforms_phenomenon_residue.txt
# residue: 415 papers, 1893 distinct phenomenon strings, 1920 tuples
  3  false positives
  3  SSL/TLS MITM vulnerability
  3  tweet location prediction
  2  Attack transferability
  2  Automated hollow CAPTCHA solving
  2  blacklist coverage
  2  code-injection vulnerability
  2  countermeasure bypass
  2  cross-domain authorship attribution
  2  Defense detection failure
  2  false negatives
  2  In- and out-degree distributions
  2  Interaction-level membership inference
  2  malware infection
  2  network de-anonymization
  2  radicalization-pathway reduction
  2  runtime certificate pinning
  2  Security and privacy themes
  2  Sensitive-resource access
  2  topic diversity
  2  Training-data memorization
  2  unintended URLs
  2  URL shortening
  2  visual-concept names
  1  2020 election narrative mentions
  1  3D skeleton recovery from IR shadows
  1  A&T network requests
  1  AAID co-transmission
  1  AAID transmission before consent
  1  AAID transmission without consent
  1  Abandoned domains
  1  ABR traffic side-channel leakage
  1  Access duration
  1  accessible NSXPC methods
  1  Account growth and churn
  1  Account hacking experiences
  1  Account popularity
  1  Account recovery experience
  1  Achievement-playtime relationship
  1  Actionable rationale snippets
  1  Actionable tweets
  1  activation duration
  1  Active attacker-in-the-middle
  1  Active property inference
  1  Active-learning label selection
  1  activity centers
  1  Activity-connectivity association
  1  Adaptive evasion by decoding changes
  1  Additional privacy information leakage
  1  administrator policy customization
  1  Adoption willingness
  1  Adversarial attack success
  1  adversarial attack vulnerability
  1  adversarial authorship attribution
  1  Adversarial content exposure
  1  Adversarial robustness under defenses
  1  Adversarial synonym perturbation
  1  Adversarial text attack success
  1  Adversarial text utility preservation
  1  adversarial training resilience
  1  Adversarial-training resistance
  1  Adversarial-training robustness
  1  advice-position inconsistency
  1  AES key-size classification
  1  Affective polarization parameters
  1  affiliate communities
  1  age variation in broker coverage
  1  agreement with human diffusion judgments
  1  AI assistant usage and security practices
  1  AI-generated content
  1  AI-mediated product market shares
  1  Alarm blocking
  1  Alexa skill identification
  1  Alexa skill-discovery ranking
  1  Alexa transcription accuracy
  1  algorithm scalability
  1  Algorithm scalability
  1  Algorithmic cluster stability
  1  Algorithmic skin-tone bias
  1  ALM maturity-rating classification
  1  Alternative formula recovery
  1  Alternative-market risk
  1  Alzheimer's predisposition inference
  1  Amazon client-ID typosquatting
  1  Amazon wishlist monetization
  1  Android app code coverage
  1  Android app straw attacks
  1  Android app traffic classification
  1  Android app-virtualization engines
  1  Android application analysis runtime
  1  Android cryptographic API misuses
  1  Android fragment use
  1  Android IoT runtime-information gathering
  1  Android malware
  1  Android malware threat-intelligence extraction
  1  Android network data flows
  1  Android PhaLib prevalence
  1  Android privacy leakage paths
  1  Android text-input constraints
  1  Android traffic imprints
  1  Android vulnerabilities and bugs
  1  Android-version-dependent support
  1  AngularJS CSP bypasses
  1  animated 3D model cloning
  1  annotation burden
  1  Anonymization resistance to de-anonymization
  1  Anti-phishing crawler access
  1  Anti-spyware detection
  1  Anti-Theft bypass
  1  Antivirus co-detection relationships
  1  Antivirus detection
  1  Antivirus detection coverage
  1  antivirus evasion
  1  anxiety symptom classification
  1  API sampling and topical-density effects
  1  app downloads
  1  App identification coverage
  1  app squatting
  1  App vulnerabilities
  1  App-category correlations
  1  App-category popularity
  1  App-category usage diversity
  1  App-level security behaviors
  1  App-side input sanitization
  1  App-virtualization-based malware
  1  apparently dead operations
  1  AppID confusion
  1  Application crashes
  1  Application hiding
  1  Application-specific radio inefficiency
  1  Apps storing evidentiary data
  1  apps with both vulnerabilities
  1  argumentation stance
  1  artificial channel engagement
  1  aspect, opinion, and sentiment extraction
  1  ASR mistranscription
  1  Assortative mixing coefficient
  1  AT commands
  1  ATS domains
  1  attachment recovery via deduplication
  1  attack categories
  1  attack completion time
  1  Attack execution time
  1  Attack-VC prevention effectiveness
  1  Attacker accesses and account actions
  1  Attacker response speed
  1  Attorney influence on incident response
  1  attribute inference for majors and employers
  1  attribute inference from social links and behaviors
  1  Audio and video RTP traffic
  1  audio exfiltration
  1  auditing burden
  1  authority ranking
  1  authority-score validation
  1  authorization vulnerability candidates
  1  Automated comment generation
  1  automated scraping activity
  1  automatic fake-edge detection
  1  Automatic quality classification
  1  Available bandwidth
  1  Average video file size
  1  AVI misidentification
  1  Awareness of Off-Facebook Activity
  1  Awareness of sensitive XR data
  1  Awareness of XR attacks
  1  Backend URL extraction
  1  backup ciphertext-length injection attacks
  1  Badly generated cryptographic keys
  1  Baidu master-key leakage
  1  Ban-evasion tactics
  1  behavior exploration coverage
  1  behavioral homophily
  1  behavioral personas
  1  behavioral profile pollution
  1  Below-market liquidation prices
  1  Benchmark graph classification
  1  benefit of additional mobility data
  1  benign campaign effectiveness
  1  benign indicators
  1  binary obfuscation
  1  binomial ordering prediction
  1  binomial word ordering
  1  black-box Titan attack
  1  black-word discovery
  1  blacklisted unintended domains
  1  blind message attacks
  1  blind multi-message attacks
  1  Blind-user timeline accessibility
  1  Blocking used for privacy
  1  Bluesky integration synchronization
  1  Bluetooth skimmer detectability
  1  booter domain resurrection
  1  BPPM dependence and asymptotic independence
  1  brandless phishing
  1  Broadcast plaintext recovery
  1  Broadcast-message impersonation
  1  Broken published Alexa kids skills
  1  browser Safe Browsing warnings
  1  BSSID geolocation
  1  bugdoors
  1  built-in QR code readers
  1  Business versus social review language
  1  Buyer-location inference
  1  campaign aggregation
  1  CAN bus command semantics
  1  CAN bus command syntactics
  1  candidate app detection
  1  candidate sentiment trends
  1  candidate-pair blocking
  1  capability confusion
  1  CAPTCHA labeling reliability
  1  Car-model information
  1  carbon-footprint estimation error
  1  Carrier-aggregation traffic loss
  1  category-specific inaccuracy
  1  causal arguments
  1  CBC padding oracle
  1  Cellular-network robustness
  1  Celsius leak deanonymization
  1  Centrality of cheaters
  1  Certificate masquerading
  1  Certificate pinning
  1  Certificate pinning and expiry
  1  Certificate-search incompleteness
  1  Certificate-search processing delay
  1  Certification of policy-violating Alexa skills
  1  Certification of policy-violating Google actions
  1  Chameleon detection on known apps
  1  Chameleon-page group infiltration
  1  Changing LTE identifiers
  1  Channel longevity
  1  Channel membership growth
  1  channel popularity
  1  channel sojourn time
  1  Cheater gameplay interactions
  1  Cheater homophily
  1  Cheating propagation
  1  check-in sequences
  1  Check-in spatial concentration
  1  check-in utility improvement
  1  Checkworthy claim classification
  1  Checkworthy CURE claims
  1  CID exposure
  1  cipher classification
  1  Circumvention in popular sites
  1  Circumvention surviving ACVL
  1  Citation contamination
  1  City-scale Grindr scanning
  1  claim truth accuracy
  1  Claim-type prediction
  1  Classifier A&T detection
  1  Cleartext login pages
  1  Client response injection
  1  Client- versus server-side validation
  1  client-side token leakage
  1  Climate discourse topics
  1  Climate stance
  1  Climate temperature-history reconstruction
  1  Climate-activism activation
  1  Climate-change awareness
  1  CLIP encoder membership inference
  1  cloaked content categories
  1  Cloud processing and third parties
  1  Cloud-device registration vulnerabilities
  1  Cluster stability over time
  1  Clustering evolution
  1  CMRF attack case studies
  1  CMRF vulnerability
  1  code snippet containment
  1  code vetting evasion
  1  collective emotional resonance
  1  Collusion-network membership
  1  comment intent
  1  commercial audio CAPTCHA solving
  1  Commonsense QA usefulness
  1  commonsense reasoning quality
  1  communication overhead
  1  communicative intent
  1  Community characteristics associated with exploration
  1  community discussion topics
  1  community engagement
  1  community mapping
  1  Community participation roles
  1  Community rule restrictions
  1  community success dimensions
  1  Community-group exploration
  1  Community-level privacy risk
  1  Community-level social dimensions
  1  Community-note treatment timing
  1  company authorization responses
  1  competitor preference
  1  compiler-induced backdoor
  1  compiler-induced numerical deviation
  1  Component-control semantic recovery
  1  Concealing drug use
  1  conditionally triggered UIs
  1  confidence-based selective attacks
  1  confidence-score calibration
  1  confirmed vulnerabilities
  1  confused deputy vulnerabilities
  1  Connected-component structure
  1  console malware image substitution
  1  constant CBC initialization vectors
  1  constant symmetric encryption keys
  1  Constraint extraction errors
  1  Consumer attitudes
  1  contact and message metadata inference
  1  contact-discovery enumeration
  1  container-image vulnerabilities
  1  containment estimation
  1  content amplification
  1  Content manipulation
  1  content pollution
  1  content vetting evasion
  1  content-agnostic detection
  1  content-based sensitive-place inference
  1  Content-category distribution
  1  Contested WhatsApp evidence
  1  contextual privacy leakage
  1  Continental snow cover
  1  continued listening after stop
  1  Continued user participation
  1  contraband concealment by masking
  1  contraband concealment by positioning
  1  control-script and content-provider infrastructure
  1  control-script API usage
  1  control-team malware classification
  1  coordinated malicious wall posts
  1  copied Stack Overflow snippets in Android apps
  1  coping-story classification accuracy
  1  coping-story Twitter posts
  1  COPPA-related privacy leakage
  1  copyright-detector evasion
  1  copyright-evasion techniques
  1  corpus similarity
  1  Correlation between antivirus engines
  1  counter-type anomalous interactions
  1  Countermeasure effectiveness
  1  country-wide emotional resonance
  1  county-level coverage variation
  1  Coverage instrumentation compatibility
  1  Covert traffic detection
  1  CovertCast detectability
  1  COVID-19 issue relevance
  1  COVID-related topics
  1  crashes in native libraries
  1  CreepRank effectiveness
  1  creepware apps
  1  creepware categories
  1  creepware ecosystem
  1  creepware over time
  1  criminal supporters
  1  criminal traces on Reddit
  1  criminal-account inference
  1  criminal-account relationship network
  1  critical-vulnerability prioritization
  1  cross-booter navigation
  1  Cross-chain warning severity
  1  cross-cluster coordination
  1  cross-device transferability
  1  Cross-domain user reconciliation
  1  cross-market attribution
  1  cross-messenger registration overlap
  1  cross-miniapp communication
  1  cross-miniapp redirection relationships
  1  cross-modal adversarial illusions
  1  cross-network reliability
  1  cross-origin vulnerabilities
  1  cross-platform coordination
  1  cross-platform domain typosquatting
  1  cross-platform harmful behavior
  1  cross-platform illicit promotion
  1  Cross-platform linking
  1  Cross-platform vulnerability similarity
  1  Cross-query poisoning
  1  Cross-session license replay
  1  Cross-user leakage in iOS counterparts
  1  Cross-user personal-data over-delivery
  1  crowdturfing app promotion
  1  crowdturfing marketplace activity
  1  crowdturfing platforms
  1  Crowdturfing target tweets
  1  crowdturfing task types
  1  crypto-detector missed misuse mutants
  1  crypto-mining malware
  1  Crypto-wallet user groups
  1  Cryptocurrency discussion spread
  1  Cryptocurrency promotion among verified accounts
  1  Cryptographic and SSL/TLS API misuse
  1  cryptographic API misuse
  1  Cryptographic vulnerabilities in Android libraries
  1  CRYSTAL typo detection
  1  CSP deployment
  1  CSP enforcement bugs
  1  CSP policy bypassability
  1  CSP security bypasses
  1  CT public-log record growth
  1  cue extraction volume
  1  cue matching effectiveness
  1  CURE claim presence
  1  custom RAHs
  1  customer activity distance decay
  1  CVE-based privilege escalation
  1  Cyber-insurance provider relationships
  1  Cyberbullying window positions
  1  daemon crashes
  1  Daily YouTube delivery traffic
  1  Daily YouTube video views
  1  Dalvik protection overhead
  1  dark jargon discovery
  1  dark-jargon evolution
  1  dark-jargon prevalence
  1  Dashboard usability
  1  Dashboard usefulness
  1  data collection in Alexa skills
  1  Data flows
  1  Data leakage
  1  Data linkability
  1  Data Not Collected labels
  1  Data savings
  1  data sharing/storage
  1  data-broker coverage
  1  data-driven geo-fence
  1  Data-type transmission
  1  DCH and FACH tail effects
  1  DCV-Hunter false positives
  1  DDoS attack traffic
  1  DDoS attack-volume change
  1  Dead network sinks
  1  deceptive link previews
  1  dedicated malicious HICs
  1  Deep-learning app adoption
  1  Deep-learning application uses
  1  Deep-learning model extraction
  1  Deepfake detection robustness
  1  deepfake engagement and reach
  1  deepfake prevalence
  1  defacement motives
  1  defense effectiveness
  1  Defense effectiveness
  1  Degree-distribution stabilization
  1  delayed message processing
  1  delisted article themes
  1  delisted URL rediscovery
  1  Delisting decisions
  1  delivery-notification timing side channel
  1  Demographic differences in Alexa accuracy
  1  Demographic differences in attacker behavior
  1  Deniability consideration in court
  1  Dense communication clusters
  1  dense-type anomalous interactions
  1  deployed MFA methods
  1  depression expressions
  1  depression severity levels
  1  depressive symptom classification
  1  Description frequency among human authors
  1  description-instruction inconsistency
  1  description-mismatched privacy requests
  1  Detected misconfiguration errors
  1  detection precision
  1  detection-method agreement
  1  developer account polymorphism
  1  Developer IPS support
  1  Developer responses to findings
  1  Device impersonation
  1  Device serial-number enumeration
  1  Device vulnerabilities
  1  device-family similarity
  1  Device-ID collection
  1  Device-ID sharing
  1  Devices sold as new despite prior use
  1  Differential Context Vulnerabilities
  1  Digital adversarial attacks against commercial speech APIs
  1  Direct device communication
  1  Direct MIME exfiltration
  1  Disaster-related Twitter activity
  1  Discord flow behavior
  1  Discriminative-attribute coverage
  1  Discussion topics in tweets and replies
  1  Distribution shift
  1  Distribution vectors
  1  DNN speech synthesis fooling speaker recognition
  1  documentation-experience mismatch
  1  documented MFA recovery procedures
  1  domain aliases
  1  domain and logo variants
  1  domain cloaking
  1  domain credibility
  1  domain grouping effectiveness
  1  domain name confusion
  1  Dominant retweet applications
  1  download-source malware distribution
  1  DP GCN resistance to edge re-identification
  1  Driving-route inference
  1  DroidBench privacy leaks
  1  Drug-photo prohibitions
  1  dummy-account evolution
  1  dummy-segment indistinguishability
  1  Duplicate devices
  1  duration-based sensitive-place inference
  1  dynamic code loading
  1  Dynamic file paths
  1  Dynamic graph unlearning effectiveness
  1  Dynamic graph unlearning efficiency
  1  dynamic harmful actions
  1  dynamic model extraction
  1  Dynamic property occurrence
  1  Dynamic-versus-static detection differences
  1  early fake-account detection
  1  Early-exit routing
  1  early-stopping privacy–utility trade-off
  1  ECB-mode use
  1  edge re-identification
  1  Edge-level privacy risk
  1  EdX student reidentification
  1  Effect of post location
  1  Effect of post type
  1  Effective anonymity below five
  1  email-mediated MFA recovery
  1  email-to-phone-number inference
  1  email-token access
  1  email–socware keyword overlap
  1  embedded contacts
  1  embedded versus arm's-length relationships
  1  embedding separability under data loss
  1  emoji skin-tone inference on Twitter users
  1  Emotional change-points
  1  Emotional group switching
  1  Emotional persistence
  1  en-masse visitor de-anonymization
  1  Encrypted IoT traffic behavior inference
  1  Encrypted model extraction
  1  Encrypted or downloaded plugins
  1  encrypted video identification
  1  end-to-end service delay
  1  End-to-end watermark embedding
  1  Endorsement-tag effects
  1  Engagement associations
  1  Engagement by sentiment and topic
  1  Engagement robustness
  1  ENS integration synchronization
  1  ensemble detection
  1  environmental robustness of surveillance
  1  European regional population estimation
  1  evasion tactics
  1  evasive miniapp malware
  1  Evidence-file identification
  1  Evidentiary files and data types
  1  Executable injected mutants
  1  Experienced harms and attacks
  1  experienced legal threats
  1  expert versus non-expert agreement
  1  explicit and implicit PII
  1  exploitable content-provider access
  1  Exploitable crypto vulnerabilities
  1  exploitable malicious behavior
  1  Exploitable unsafe communication cases
  1  Exploration preference across groups
  1  Exploratory listening
  1  Exploratory prompt behavior
  1  Exported component protection
  1  exposed content-provider candidates
  1  Exposure to inappropriate content
  1  Extended illicit listings
  1  external resource loading
  1  External-image loading
  1  External-storage evidence
  1  Extraterritorial requests
  1  Facebook audience-statistic rounding
  1  Facebook Connect login success
  1  Facebook demographic undercounting
  1  Facebook estimate stability
  1  Facebook gifting application activity
  1  Facebook location profiling
  1  Facebook municipality coverage
  1  Facebook photo privacy leakage
  1  Facebook post-clicking decisions
  1  Facebook security behaviors
  1  Facebook suspicious-login incident response
  1  Facebook-hosted socware
  1  Facebook-leak account persistence
  1  Faces in profile pictures
  1  Facet and DeltaShaper detectability
  1  Faithful attention
  1  fake engagement accounts
  1  fake social engagement
  1  fake-account detection
  1  fake-account detection in deployment
  1  fake-account prevalence robustness
  1  fake-edge detection
  1  fake-update detectability
  1  False app identification
  1  False discoveries and statistical power
  1  False negatives
  1  False positives
  1  False positives in User-ID checks
  1  false positives on unknown traffic
  1  false positives under network jitter
  1  false-negative clone detection
  1  False-positive alerts
  1  false-positive clone detection
  1  false-positive control in A/A tests
  1  false-positive detection
  1  False-positive snow photos
  1  False-positive threat alerts
  1  false-positive vulnerability flags
  1  Fauxtography detection
  1  Fauxtography prevalence
  1  FCM use by secure-messaging apps
  1  feature-dependent label noise
  1  Features associated with surge pricing
  1  Figurative disease-word mentions
  1  Figurative false positives
  1  figurative health mentions
  1  Fine-grained multimodal QA coverage
  1  fine-grained opinion extraction
  1  Fine-grained privacy issues
  1  first-sentence quotation
  1  Five-label classification improvement
  1  Five-level suicide-risk severity
  1  fixed-key decryption
  1  Fixed-randomness license manipulation
  1  Flash XSS vulnerabilities
  1  flow-context extraction
  1  flow-policy inconsistencies
  1  flow-semantic correlation
  1  FM-radio delivery
  1  Follower change
  1  Follower dynamics after community notes
  1  Follower-growth treatment effect
  1  foreground-app inference
  1  Foreign state-owned subsidiaries
  1  forged SSL certificates
  1  Formal incident-report production
  1  foundation-model adversarial evasion
  1  Four security-related behaviors in reviews
  1  four-way health mention classification
  1  frame polarization
  1  frame-embedding protection
  1  Friendship homophily
  1  Friendship loss after cheating label
  1  full VA-stack bypass
  1  functional exploit development
  1  Functional transformation discrepancies
  1  future interaction timing
  1  future popularity
  1  fuzzing false positives
  1  Fuzzing triggers
  1  Fuzzing-trigger prevalence
  1  Game co-dwelling context
  1  Game co-purchase context
  1  Gateway channels
  1  gateway entities
  1  gateway-site promotion
  1  Gender and audience differences
  1  generalization to customized generators
  1  generic-IOC explosion
  1  Geographic origins of accesses
  1  Geographic profile coverage
  1  Geographic propagation locality
  1  Geographic surge areas
  1  geographical location privacy
  1  Geographical proximity
  1  geographical topics and language patterns
  1  Geographical variation in security and privacy mentions
  1  geolocation inconsistency
  1  Geolocation transmission
  1  geospatial entity resolution
  1  giant connected component
  1  GitHub integration synchronization
  1  Global clustering coefficient
  1  global crowdturfing prevalence
  1  Global edge traffic growth
  1  GNN utility loss under infiltration
  1  Google Bouncer evasion
  1  Google Play app discovery
  1  Google Play safeguard bypasses
  1  Google+ component composition
  1  Government-policy effect on key placement
  1  GPU acceleration adoption
  1  Graph classification on Tencent QQ groups
  1  graph de-anonymization
  1  Graph de-anonymization
  1  graph recovery
  1  graph training-data misuse
  1  graph utility
  1  Graph utility preservation
  1  Graph-characteristic estimation accuracy
  1  Grindr user positioning
  1  ground-truth web traffic
  1  Group metadata and activity
  1  Group URL revocation
  1  Group-chat births and deaths
  1  Group-test significance and coverage
  1  Guest data-sharing preferences
  1  Guest smart-device preferences
  1  Hack Forums discussion
  1  Hacker mistakes and technical issues
  1  Handle changes in Social Blade channels
  1  Hard-coded encryption keys
  1  hard-news filtering
  1  Hashtag cascade diffusion
  1  Hashtag obfuscation effectiveness
  1  Hashtag-based fine-grained location inference
  1  Headless/API choice biases
  1  Health-mention classification
  1  Heavy-tailed behavior distributions
  1  Help-giving support types
  1  Help-seeking state
  1  heterogeneous treatment effects
  1  Heuristic versus taint-based detection
  1  hidden crowdturfing UIs
  1  Hidden-face identification
  1  High-entropy memorization
  1  High-level privacy themes
  1  High-school student profiling
  1  high-severity vulnerabilities
  1  Hindsight evaluation errors
  1  Hint parsing coverage
  1  historical GPS metadata exposure
  1  Historical mobility predicts future mobility
  1  Historical proximity tracing
  1  HITS bias amplification
  1  home and workplace locations
  1  Home-brewed address-bar weaknesses
  1  homophily relationship
  1  Host-segment differences
  1  Hostile language differences
  1  HTML-obfuscation robustness
  1  HTML/CSS/URI blocking bypasses
  1  HTML5 mobile-app code-injection vulnerability
  1  HTTP exposure of sensitive data
  1  HTTP request template coverage
  1  Human comprehension
  1  Human detection of hidden commands
  1  Human detection of synthetic speech
  1  Human intelligibility under jamming
  1  Human mobility nowcasting
  1  Human mobility under disasters
  1  Human recognition of perturbations
  1  Human recognition of physical adversarial audio
  1  human speaker-identification evasion
  1  human-in-the-loop acceptance
  1  Human-labeling reduction
  1  human-perceived music deviation
  1  Human-written description quality
  1  Humanitarian crisis-tweet classes
  1  humanitarian tweet classification
  1  Hybrid UI frameworks
  1  hyperbolic health mentions
  1  IBSA help-seeking posts
  1  ICC computation cost
  1  ICC specification precision
  1  ICC vulnerabilities
  1  ID-based endpoint stability
  1  idea plagiarism
  1  Identifiable-packet coverage
  1  Identification of hidden faces
  1  identity confusion vulnerabilities
  1  Identity-induced divergence
  1  IDLL campaign clusters
  1  IFT learnability
  1  Illicit drug local listings
  1  Illicit drug storefront content
  1  illicit Monero mining
  1  illicit monetization exploits
  1  illicit-image detection
  1  illicit-promotion posts
  1  illicit-promotion prevalence
  1  Image annotation tags
  1  Image content themes
  1  image format and resolution properties
  1  image optimization effects
  1  image rationale extraction
  1  Image search quality
  1  image-based meme clusters
  1  image-semantic extraction
  1  imminent exploit emergence
  1  implicit PII
  1  Implicit URL propagation
  1  Implicit-flow analysis overhead
  1  Improper logout
  1  inaccessible or non-exploitable targets
  1  Inadvertent location privacy leakage
  1  inaudible voice command injection
  1  Income prediction
  1  Inconsistent JavaScript execution
  1  Incorrect consent-choice storage
  1  incremental contact-discovery rate limiting
  1  IND-CPA insecurity
  1  Indirect traffic overflow
  1  Individual app popularity
  1  Individual app usage diversity
  1  Individual shortened-URL clicks
  1  infected source domains
  1  infection persistence
  1  Influence-operation participant strategies
  1  Information transfer between Twitter users
  1  Information-flow leak-path detection
  1  Information-flow validation
  1  information-flow-related malware
  1  information-operation agents
  1  Information-sharing practices
  1  informative security users
  1  Injection channels in vulnerable apps
  1  Insecure broadcast channels
  1  insecure copied snippets in Android apps
  1  Insecure cryptographic code in search results
  1  Insecure OpenZeppelin code
  1  insecure QR code readers
  1  insecure Stack Overflow snippets
  1  Insecure UIP transmission
  1  Instagram social activism
  1  Insurer access to forensic reports
  1  Insurer and law-firm market concentration
  1  Intended privacy-protective behavior
  1  intent causes
  1  Intent key-value data
  1  Intent-handler code coverage
  1  Intention-related subscriptions and listening
  1  Intentionally loosened checks
  1  Inter-component data flows
  1  Inter-rater coding reliability
  1  intergroup interaction
  1  internal codebase secret leakage
  1  Internet scanning activity
  1  Interpreted commands
  1  Interview themes
  1  intra-corpus similarity
  1  investor long/short positions
  1  investor margin size
  1  invocation-name violations
  1  IOC discovery
  1  iOS API usage
  1  iOS Chameleon apps
  1  iOS counterparts affected by spoofing
  1  iOS PhaLib prevalence
  1  iOS side-channel discovery
  1  IoT companion-app identification
  1  IoT device and app vulnerabilities
  1  IoT device identification
  1  IoT device vulnerabilities
  1  IoT endpoint and protocol reconstruction
  1  IoT operation inference
  1  IoT security and privacy ratings versus sales
  1  IP addresses per user
  1  IP cloaking
  1  IP-based cloaking
  1  IPS-related reviews
  1  IPS-related web resources
  1  IPS-relevant apps
  1  IPv6 prevalence among users and requests
  1  IPv6 security-action effectiveness
  1  IR shadow curtain penetration
  1  IR shadow keypoint detection
  1  issue polarization
  1  issue topics
  1  IT Army Telegram activity
  1  Italian recipe-query search volume
  1  Jamming robustness against enhancement
  1  JavaScript backchannels
  1  JNI memory safety
  1  JPEG-resistant illusions
  1  JSONP bypass exploitability
  1  JSONP CSP bypasses
  1  key and IV reuse
  1  Key reuse
  1  Key-function category combinations
  1  Key-transparency perceptions and misconceptions
  1  keystroke decryption by network eavesdroppers
  1  Kin genome reconstruction
  1  Knowledge diversity
  1  Knowledge tuple correctness
  1  Knowledge tuple elicitation
  1  known activity-date deanonymization
  1  Known exploit-chain rediscovery
  1  known-token deanonymization
  1  label-noise robustness
  1  large network flows
  1  Large-scale exploitation
  1  larger-foundation-model defense resilience
  1  Largest connected component evolution
  1  latent community structure and burstiness
  1  latent content topics
  1  leader-follower emotional fluctuations
  1  Leaked onion-domain lookups
  1  Leaked-key attacks
  1  Leave/Remain camp affiliation
  1  legitimate-keyword usage
  1  legitimate-user concentration
  1  legitimate-user recognition
  1  legitimate-user simulation coverage
  1  lexical diffusion of ordinary language
  1  Lexically similar impersonator handles
  1  License expiration extension
  1  Like-as-a-Service
  1  Limited privacy-settings knowledge
  1  link previews
  1  link-preview fields and layouts
  1  Link-stealing resilience
  1  linkage attack effectiveness
  1  Linked-account exposure
  1  LinkedIn audience size
  1  LinkedIn user uniqueness
  1  LinkedIn-Wikipedia identity matches
  1  Literature trends and knowledge gaps
  1  LLM cue presence detection
  1  LLM cue-type extraction
  1  LLM false IOBs
  1  Local-search query pollution
  1  local-search scalability
  1  local-verification vulnerability
  1  localized memorization signals
  1  Location changes
  1  Location collection
  1  Location-agnostic server selection
  1  Location-based load-balancing effects
  1  location-based triggers
  1  lockstep behavior
  1  logic bombs in benign applications
  1  logic bombs in malicious applications
  1  logical contradictions or narrowing definitions
  1  logical privacy-policy contradictions
  1  Long-term app usage evolution
  1  Long-term departure association
  1  Longitudinal posting activity
  1  Longitudinal throttling variation
  1  Longitudinal vulnerability evolution
  1  Longitudinal vulnerable-component adoption
  1  Loop-stable-period leakage
  1  loosely synchronized malicious-account activity
  1  Low clustering in activity graphs
  1  low PBE iteration counts
  1  Lower social rewards for CMV participants
  1  LTE video identification
  1  MAC-address extraction from auction photographs
  1  MAC-address OCR validation
  1  Mainstream CA coverage
  1  malicious accounts
  1  malicious accounts across five applications
  1  malicious author domains
  1  malicious destination prevalence
  1  malicious dynamic behavior
  1  malicious instructions
  1  malicious package detection
  1  malicious payload categories
  1  malicious redirection prediction
  1  malicious URL redirection paths
  1  malicious URL validation
  1  malicious-link countermeasures
  1  malicious-user admission
  1  malicious-user growth
  1  malware in squatting apps
  1  malware in trending-term results
  1  malware packing
  1  malware SSL interception
  1  Malware TLS proxies
  1  Malware-family detection
  1  malware-preview handling
  1  manual stress-category labels
  1  Map-search pollution
  1  Market movements around pumps
  1  Mastodon security events
  1  media exfiltration
  1  Media-public temporal relationship
  1  membership inference
  1  Membership inference
  1  membership inference against image encoders
  1  membership inference under defenses
  1  membership inference vulnerability
  1  meme influence
  1  meme propagation across communities
  1  meme-variant relationships
  1  message recovery via zlib compression
  1  message reordering
  1  Message-content leakage
  1  messenger server infrastructure
  1  Metadata leakage
  1  Metadata predictors of return frequency
  1  metric directionality
  1  metric sensitivity
  1  MFA recovery success
  1  MFA sites
  1  MFA-domain collusion
  1  Migration terminology reframing
  1  MIME multipart capacity
  1  mimicry resistance
  1  Mini-program popularity
  1  MiniCPRF vulnerability
  1  minimum posts for severity prediction
  1  Minority representation in rankings
  1  misactivating words
  1  misactivation repeatability
  1  misactivations by TV show
  1  Misconceptions about wallet security
  1  misconfigured content providers
  1  Misconfigured Google Play manifests
  1  Misconfigured pre-installed manifests
  1  Missing one-time prekeys
  1  Missing precertificates
  1  Missing privacy policies
  1  Missing product attributes
  1  Missing zero-address checks
  1  missing-hostname collisions
  1  Mistake categories
  1  Mistake resolution time costs
  1  Mitigation quality
  1  Mobile AES-GCM cost
  1  mobile app category classification
  1  mobile browser security-mechanism support
  1  Mobile deep-learning framework adoption
  1  Mobile handle truncation
  1  mobile-app privacy risk categories
  1  Mobile-browser UI vulnerabilities
  1  mobile-phone hash reversal
  1  Mobility similarity and new friendships
  1  Model answer error types
  1  Model execution efficiency
  1  model extraction false positives
  1  model extraction fidelity
  1  model interface inference
  1  model memorization and exposure
  1  model prediction error
  1  Model protection
  1  model protection techniques
  1  model quantization
  1  model recall for available matches
  1  Model trajectory agreement
  1  model utility after unlearning
  1  Model-averaging property leakage
  1  Model-selection heterogeneity
  1  Monero mining campaigns
  1  Monero share of circulation
  1  Monitor log coverage
  1  Moral-emotion classification
  1  Moral-emotion prevalence
  1  motivations and attitudes
  1  MQTT endpoint reachability
  1  Multi-device wallet adoption preference
  1  Multi-frame diagnostic traffic
  1  Multi-party property leakage
  1  multi-source prompt-injection success
  1  Multiplayer playtime
  1  multiple-phone-number inference failure
  1  mutation versus base-case detection
  1  N-day backend vulnerabilities
  1  NASDAQ trading-volume history reconstruction
  1  natural compiler-induced triggers
  1  negativity bias
  1  Negligent certificate validation
  1  Negotiation timing preference
  1  Neighbourhood variation
  1  NetCam home-occupancy inference
  1  network activity
  1  Network and identity effects
  1  network connection classification
  1  network data flows
  1  network encryption protocol vulnerabilities
  1  Network exposure
  1  Network round-trip time
  1  Network traffic overhead
  1  Network-fuzzer vulnerabilities
  1  network-to-policy inconsistency
  1  Never-expiring license generation
  1  new enforcement-action effectiveness
  1  New vulnerabilities
  1  News sentiment shift
  1  NFL score timeline reconstruction
  1  NFT drainer accounts
  1  NFT drainer detection
  1  NFT transaction behavior
  1  no-verification vulnerability
  1  node attribute inference
  1  node label inference
  1  node link inference
  1  node training membership
  1  Node-classification utility
  1  Non-deterministic network traffic
  1  Non-gazetteer location revealing words
  1  Non-injective data transformations
  1  Non-TLS sensitive transmissions
  1  non-uniform ATM UN distributions
  1  Nonfunctional recovery codes
  1  Nonzero Google Trends query estimates
  1  NSC adoption
  1  NSC security downgrades
  1  NSXPC attack surface
  1  OAuth access-token leakage susceptibility
  1  OBD-II formula recovery
  1  Obfuscated and encrypted privacy leaks
  1  obfuscated-secret detection
  1  obfuscation robustness
  1  off-chain cue prevalence
  1  Off-store spyware
  1  official UPI security advice categories
  1  on-device deep-learning models
  1  on-device ML adoption
  1  On-device PendingIntent exposure
  1  One-way delay
  1  online item categories
  1  Online versus physical exploration intention
  1  online-offline identity linkage
  1  OnlyFans creator profiles
  1  open-world app inference
  1  OpenPGP exfiltration channels
  1  OpenPGP starting-sequence frequency
  1  Operating-system inference
  1  Organic interaction after pod use
  1  organizer design decision-making
  1  Orthogonal exploration depth
  1  OSS reuse in Android apps
  1  OSS version identification
  1  Outdated proxy software
  1  Outgoing network requests
  1  Outgoing reputation manipulation
  1  over-telephony countermeasure bypass
  1  Overbroad personal-data collection
  1  Overbroad-PDCP identification
  1  overlap between promoted targets and observed attacks
  1  Overrated Android applications
  1  PACTOR detection accuracy
  1  page availability and survival
  1  page cloaking duration
  1  PageRank bias reproduction
  1  PageRank-detected malicious HICs
  1  Pandora streaming tails
  1  paraphrase plagiarism
  1  Parent-child GAI safety perceptions
  1  Parental mediation strategies
  1  Parenting discussion topics
  1  parked domains
  1  partisan amplification in snippets
  1  partisan polarity flipping
  1  Partisan stance gap
  1  passive content leaks
  1  Passive property inference
  1  passively leaked private information
  1  Pay-Per-Install infrastructure
  1  Payment-account campaign reuse
  1  payment-processing concentration
  1  PDCP extraction and regularization
  1  pedagogical dimension implementation
  1  PendingIntent exposure
  1  Per-layer attack effects
  1  Perceived online harms
  1  Perceived WhatsApp security and trust
  1  Perceived WiFi data collection
  1  Perceived XR threat importance and practicality
  1  perceived-noise detection
  1  Persistence after downvotes
  1  Persistent-identifier sharing
  1  personal attribute inference
  1  Personal-information leakage to FCM
  1  Personally identifiable information
  1  Perturbation indistinguishability
  1  phishing
  1  Phishing blocking coverage
  1  phishing campaigns in the wild
  1  phishing detection
  1  phishing domain uptime
  1  phishing kit deployment
  1  phishing kit family prevalence
  1  Phishing-link preview behavior
  1  Phone-number exposure
  1  Phoneme-based error prediction
  1  Physical adversarial attacks against voice assistants
  1  physical surveillance via poisoned hashes
  1  PII deduplication
  1  PII extractability
  1  PII extraction
  1  PII in pinned traffic
  1  PII in plagiarized sequences
  1  PII inference
  1  PII reconstruction
  1  PII transmission
  1  PII-containing requests
  1  pink-slime post classification
  1  pinning circumvention
  1  PIP categories
  1  PIP survival
  1  plagiarism occurrence frequency
  1  plaintext location reporting
  1  plaintext recovery
  1  plastic-explosive concealment
  1  platform request signatures
  1  Platform-induced degradation
  1  Platform-key installers
  1  Player experience
  1  Pod-affiliated Instagram posts
  1  Pod-classifier generalization
  1  POI-indicator association
  1  Poisoned-entry persistence
  1  PoliCheck consistency accuracy
  1  Policy content omissions
  1  policy contradictions
  1  Policy coverage
  1  policy statement extraction
  1  Policy violations in published Alexa kids skills
  1  Policy violations in published Google kids actions
  1  Policy-app inconsistencies
  1  policy-provenance mismatch
  1  Policy-sensitive content after repurposing
  1  Policy-sensitive content in sold channels
  1  Polisis purpose extraction
  1  political discussion episodes
  1  Political leaning among verified accounts
  1  political leaning differences
  1  political orientation of visited news websites
  1  politics-related memes
  1  polluted-content side effects
  1  pollution revenue increase
  1  Position effects
  1  Positional attack consistency
  1  Positive sentiment in experience comments
  1  Post engagement
  1  Post subjectivity and discussion spread
  1  Post-certification code-update vulnerability
  1  Post-incident protective behavior
  1  post-to-article segmentation patterns
  1  potential device vulnerabilities
  1  Potential GPL/AGPL violations
  1  Potential IRSA victim population
  1  Potential MiniCPRF attack paths
  1  potential phishing domains
  1  Potential victim population
  1  Potential Xrce exposure
  1  potentially harmful libraries
  1  Potentially malicious domains
  1  Potentially suicidal Redditors
  1  potentially unauthorized 3D model cloning
  1  poverty-associated coverage disparity
  1  PPI distribution
  1  pre-compilation trigger stealth
  1  Pre-consent data processing
  1  Pre-interaction PII transmission
  1  pre-play card cloning
  1  predictable community success
  1  predictable EMV unpredictable numbers
  1  prediction consistency
  1  Preferential return and exploration
  1  preferred emoji skin tone
  1  Preferred server configuration
  1  Prefix-search completeness
  1  preview refresh behavior
  1  Previously undetected A&T requests
  1  previously undetected malicious accounts
  1  previously unknown backdoors
  1  previously unreported malicious packages
  1  previously unseen samples
  1  primary news frames
  1  Privacy and security perceptions
  1  Privacy and security risk perceptions
  1  Privacy attitudes and inference beliefs
  1  Privacy conceptualized as information control
  1  Privacy concerns about audiovisual data collection
  1  Privacy labels by app price
  1  privacy leaks
  1  Privacy leaks
  1  Privacy leaks in Android apps
  1  Privacy leaks missed by existing tools
  1  Privacy negotiation intention
  1  privacy side-channel image reconstruction
  1  Privacy themes and issues
  1  Privacy violations
  1  Privacy violations in mobile apps
  1  Privacy-attitude changes
  1  privacy-conscious geotagging behavior
  1  privacy-information requests
  1  Privacy-label adoption
  1  Privacy-label changes
  1  Privacy-management themes
  1  privacy-notice generation reliability
  1  privacy-notice readability
  1  Privacy-policy availability
  1  privacy-policy completeness
  1  Privacy-policy content
  1  privacy-policy profiles
  1  Privacy-policy reading interest
  1  privacy-policy variability
  1  privacy-policy/data-flow inconsistencies
  1  Privacy-related reviews
  1  privacy-sensitive data leakage
  1  Privacy-setting changes
  1  Privacy-threat detection
  1  Private activity recognition
  1  private-data leakage
  1  private-information leakage
  1  private-registry project-ID availability
  1  privateId reuse
  1  privilege escalation
  1  Privilege-escalation chains
  1  proactive web defacement
  1  Probabilistic prediction miscalibration
  1  problematic-content exposure
  1  proctoring-evasion techniques
  1  Product attribute mining
  1  Product traffic and user-behavior changes
  1  Product-attribute sensitivities
  1  product-to-NAICS mapping accuracy
  1  production false positives
  1  profession, gender, age, and family-status prediction
  1  Profile-language usage
  1  Profile-picture availability
  1  promotion campaigns
  1  Prompt length
  1  Prompt quality association
  1  Prompt sessions
  1  Prompt term usage and co-occurrence
  1  Prompt-induced choice changes
  1  Prompt-injection attack success
  1  prompt-injection defense evasion
  1  Prompt-text embedding gap
  1  Proper security checks
  1  Proportional load balancing
  1  proprietary non-TLS encryption
  1  Prospective-employer reidentification risk
  1  PROSPER payment-impersonation attacks
  1  protection-system blocking
  1  Protest participation
  1  Prototype processing overhead
  1  proximity-based ordering
  1  Proxy infrastructure
  1  Psychological language differences
  1  Public kin genomic privacy exposure
  1  Public messaging-group discovery
  1  Public user activity
  1  public-registry typosquatting downloads
  1  Pump-target prediction
  1  PUP and malware prevalence
  1  purpose classification
  1  QAnon-related content
  1  QR-code filter bypass
  1  quantization robustness effect
  1  Query efficiency
  1  query-level privacy leakage
  1  question-answer generation errors
  1  racist memes
  1  radiation safety-interlock bypass
  1  radio content syndication
  1  radio livestream content
  1  random-delay countermeasure
  1  Randomized HITS fairness
  1  Rapid liquidation
  1  rationale faithfulness
  1  Rationale tokens
  1  re-marketing profile pollution
  1  Re-ranking reduction of insecure results
  1  Readability differences
  1  Real-world candidate URL inference
  1  real-world cryptographic misuse
  1  real-world IOB detection
  1  Real-world quality degradation
  1  Reasoning about policy statements
  1  reCAPTCHA reputation
  1  receiver country classification
  1  receiver location classification
  1  Reciprocal relationships
  1  Recovery and relapse after AA enrollment
  1  Recovery prediction at 90 days
  1  Recovery prediction at one year
  1  Recovery-code awareness
  1  Recovery-code dialog interactions
  1  Recovery-code storage strategies
  1  recovery-procedure configuration
  1  recurrent suspicious URLs
  1  Reddit auditing discussions
  1  Reddit discourse about AI-assisted development
  1  Reddit discussion cascades
  1  Reddit discussion categories
  1  Reddit post categories
  1  Reddit post interaction categories
  1  Reddit recovery support problems
  1  Reddit sentiment
  1  Reddit stablecoin discussions
  1  redirection-chain connectivity
  1  regional misactivation differences
  1  Regular versus irregular Skype stream classification
  1  Related-video crawl coverage
  1  Relay coverage and churn
  1  religious polarization
  1  remote ML model usage
  1  Remote YouTube delivery
  1  repeatable fake-profile reporting skill
  1  repeatable invitation-acceptance skill
  1  repeatable invitation-rejection skill
  1  repeatedly detected accounts
  1  replay attacks
  1  Reply stance
  1  reported broker-attribute accuracy
  1  Reported feelings after exposure
  1  Repurposing among sold channels
  1  Reputation-manipulation activity
  1  Request processing time
  1  Requester concentration
  1  requester gender distribution
  1  requester identification
  1  researcher legal concerns
  1  Retrieval factual correctness
  1  Return-community preference
  1  Retweet and mention network structure
  1  retweet-based message virality
  1  retweet-network communities
  1  Retweet-time distribution
  1  Reused encryption key-IV pairs
  1  Review-disclosed transformation methods
  1  Reviewers’ evaluation practices
  1  Routing-policy what-if impact
  1  RRC inference accuracy
  1  RRC promotion overhead
  1  RSA key-exchange leakage
  1  RTBF request volume
  1  RTC application traffic
  1  Rules encouraging politeness
  1  runtime model downloading
  1  Runtime monitoring overhead
  1  Runtime-information-gathering attacks
  1  S/MIME exfiltration channels
  1  S&P-related Reddit posts
  1  Safe Browsing blocking coverage
  1  Safeguard threat detection
  1  sandbox-induced provenance bias
  1  Sarcasm in user-generated text
  1  Scan and Secure spoofability
  1  scanner radiation dose
  1  screen recording by Appsee
  1  screenshot exfiltration by TestFairy
  1  Search and chat content
  1  search-engine intervention effect
  1  Search-ranking effect on functional correctness
  1  Search-ranking effect on submitted-code security
  1  search-ranking promotion
  1  search-redirection attacks
  1  search-result cloaking
  1  search-result persistence
  1  Search-result temporal variability
  1  search-to-sale conversion
  1  Secomp attack resistance
  1  Secomp communication overhead
  1  secret leakage across platforms
  1  secret leakage in files
  1  secret persistence across PyPI versions
  1  Security and privacy concern themes
  1  Security and privacy criteria in reviews
  1  Security and privacy issues in reviews
  1  Security event extraction
  1  Security flaws in push-messaging SDKs
  1  security impact of CMRF
  1  security regressions
  1  Security response actions
  1  Security- and privacy-related Reddit discussions
  1  security-event detection
  1  security-measure prevalence
  1  security-mechanism adoption windows
  1  Security-related manifest misconfigurations
  1  security-related Stack Overflow snippets
  1  Seed-mapping error robustness
  1  segment reordering
  1  segment transmission delay
  1  segregation of harmful content
  1  Seller-buyer device movement
  1  Seller-location inference
  1  Semantic cache poisoning
  1  Semantic false positives
  1  semantic location privacy
  1  semantic preservation
  1  semantic privacy leakage
  1  Semantic similarity crafting
  1  semantic-background inference gain
  1  semi-private entitlements
  1  sensitive custom RAHs
  1  sensitive data access
  1  sensitive data flow exposures
  1  Sensitive data over HTTP
  1  Sensitive push-message leakage
  1  Sensitive user inputs
  1  Sensitive user-input identification
  1  sensitive-data extraction
  1  sensitive-data over-collection
  1  Sensitive-data transmission
  1  Sensitive-location device presence
  1  sensitive-place visits
  1  sensitive-word detection
  1  Sentence-level membership inference
  1  Sentiment
  1  Sentiment bias
  1  Sentiment toward Elon Musk
  1  SEO synthetic-content contamination
  1  SERP popularity bias
  1  server location collection
  1  Server session fixation
  1  server-side message analysis
  1  Service confusion
  1  Session binding to devices
  1  Session Juggler login success
  1  Session-level cyberbullying
  1  Seven IBSA types
  1  SFC attack classification
  1  SFC attack detection
  1  shared encrypted models
  1  Shortened-URL click candidates
  1  Signal account registration
  1  similar container-registry FQIDs
  1  similar-claim clustering
  1  Similarity of real-world and common degradation
  1  Skew in posting activity
  1  Skew in received reactions
  1  Skill squatting
  1  skimmer evasion
  1  skimmer location distribution
  1  skimmer-detection app behavior
  1  small-world criminal network
  1  Smart-device practices in Airbnbs
  1  Smart-home NER
  1  Smart-home power dynamics and privacy concerns
  1  Smart-home security and privacy attitudes
  1  smart-speaker misactivations
  1  SMS expenditure
  1  SMS-based triggers
  1  SNI-triggered throttling
  1  snippet extraction location
  1  snippet versus metadata partisanship
  1  Snow cover and snowfall
  1  Social covariate–mobility association
  1  Social dimensions in Twitter relationships
  1  Social influence on game engagement
  1  social interactivity
  1  Social media used as data storage
  1  Social uploader activity
  1  social-butterfly follow-back behavior
  1  Social-group label density
  1  social-link inference from mobility profiles
  1  social-link inference under obfuscation
  1  Social-network chameleon susceptibility
  1  social-promoter behavior
  1  Sociodemographic-security behavior associations
  1  Socioeconomic indicator prediction
  1  Socket-channel vulnerabilities
  1  socware detection accuracy
  1  socware exposure
  1  Source diversity collapse
  1  source IP-address distribution
  1  spatial emotional resonance
  1  speaker diarization
  1  speaker identification
  1  speaker-verifier bypass
  1  Spear skill squatting
  1  Speech recognition under ultrasonic jamming
  1  speech transcription quality
  1  speech-content preservation
  1  Spelling-check resistance
  1  Sponsored-tag effects
  1  squatting across app markets
  1  squatting-app downloads
  1  SSL dialogue accessibility and comprehension
  1  SSL dialogue adherence
  1  Stablecoin discussion topics
  1  Stablecoin interaction scenarios
  1  Stablecoin security-risk topics
  1  Standardized versus customized CAN commands
  1  STARTTLS certificate validation
  1  STARTTLS command injection
  1  STARTTLS security issues in email clients
  1  STARTTLS-specific security issues
  1  startup delay
  1  State-owned access-market footprint
  1  State-owned AS address-space footprint
  1  State-owned Internet operators and ASNs
  1  static 3D model cloning
  1  static certificate-pinning indicators
  1  static MAC addresses
  1  static PBE salts
  1  static SecureRandom seeds
  1  Static versus dynamic behavior coverage
  1  Static-analysis overhead
  1  stealthy impersonation malware
  1  stealthy malware detection
  1  Stealthy plugin installation
  1  Steam gamer behavior diversity
  1  Steam user engagement distribution
  1  Stolen-data categories
  1  Stolen-data Telegram channels
  1  Stranger access to tagged photos
  1  straw data-storing vulnerabilities
  1  streamer policy suggestions
  1  Streisand effect
  1  stress category
  1  stress expressions
  1  structured metadata prevalence
  1  sub-app data leakage
  1  Subject-field modifications
  1  Subjective voice quality
  1  submission-button adversarial robustness
  1  success-measure association
  1  Successful adblock circumvention
  1  support of eight security mechanisms
  1  Surge duration and update timing
  1  Surge impact on vehicle transitions
  1  Surge jitter
  1  Surge multiplier prevalence
  1  Surprising information discovery
  1  surrogacy assumption
  1  survey response coverage
  1  Suspension events
  1  Suspicious background apps
  1  Suspicious followers
  1  suspicious URLs
  1  suspicious URLs in Twitter stream
  1  Synchronized group activity
  1  synchronized registration patterns
  1  Synthetic graph classification
  1  Synthetic graph inference risk
  1  Synthetic graph linkability risk
  1  Synthetic graph singling-out risk
  1  synthetic image quality
  1  Synthetic network reconstruction
  1  synthetic noise resilience
  1  Synthetic speech accepted by deployed SR systems
  1  Synthetic update-history reconstruction
  1  Synthetic-text detection generalization
  1  synthetic-text fidelity
  1  Synthetic-versus-empirical graph similarity
  1  Systematic Alexa interpretation errors
  1  tag spoofing vulnerability detection
  1  tamper-evident seal conditions
  1  Targeted domains
  1  Targeted site categories
  1  targeted-item promotion
  1  task volume
  1  TCF implementation prevalence
  1  TCP/IP application tunneling
  1  TDS infrastructure overlap
  1  TDS malicious lifetime
  1  Teenager GAI usage patterns
  1  Telegram engagement
  1  Telegram message languages
  1  Telegram metadata exposure
  1  Telegram pump-and-dump events
  1  Telegram-hosted Instagram pod ecosystem
  1  Temporal adversarial-audio detection
  1  temporal and community variation
  1  temporal campaign bursts
  1  Temporal concern changes
  1  temporal generalization
  1  Temporal review-language evolution
  1  Temporal vocabulary locality
  1  Temporal-dependency attack detection
  1  Ten social dimensions in conversations
  1  text rationale extraction
  1  text-image alignment
  1  TFLite models in Android apps
  1  Thematic-analysis themes
  1  Theme dependability
  1  Theme quality
  1  Theme transferability
  1  Threat-detection time consistency
  1  threats to core values
  1  Threshold versus multisig preference
  1  Throttler network location
  1  Throttler state timeout
  1  Throttling asymmetry
  1  TikTok privacy-management behaviors
  1  Tile Mate 2024 static MAC
  1  time-based triggers
  1  time-to-inactivity and long-term engagement
  1  Timer-setting tradeoffs
  1  timing side channel
  1  TLS certificate validation errors
  1  TLS cipher-suite degradation
  1  TLS cipher-suite diversity
  1  TLS proxies by country
  1  TLS proxy prevalence
  1  TLS/SSL misconfiguration
  1  TOC diversity and accuracy
  1  TOCTOU confidentiality attack
  1  Token-level corpus divergence
  1  top-list FP coverage
  1  topic changes
  1  Topic differences
  1  topic improvement
  1  topic recall
  1  topic-model distortion
  1  Topical coverage gaps
  1  topical homophily
  1  Total number of YouTube videos
  1  trade-area boundaries
  1  traffic after TDS parking
  1  Traffic by access type
  1  Traffic distribution
  1  Traffic Distribution Systems
  1  Traffic graph snapshot stability
  1  Traffic policing
  1  traffic to registered domains
  1  Traffic-duration effect
  1  Traffic-volume asymmetry
  1  Training-order effects
  1  transcription utility
  1  Transfer to DeepSpeech
  1  Transfer to iFLYTEK ASR
  1  transferable adversarial illusions
  1  Transformation methods
  1  Trending-hashtag promotion
  1  Triangulation scan efficiency
  1  trigger refinement
  1  trinomial ordering
  1  trinomial-binomial compatibility
  1  Trust and profile authenticity
  1  Trust in user-installed CAs
  1  trusted IOB detection
  1  Trusted-context human deception
  1  Tweet and reply textual outliers
  1  tweet embedding quality
  1  Tweet emotional composition
  1  Tweet entity linking
  1  tweet spread
  1  Tweet stance
  1  Tweet topic composition
  1  Twitter account suspension lag
  1  Twitter activity
  1  Twitter advice categories
  1  Twitter chat sessions
  1  Twitter content promotion
  1  Twitter demographic attributes
  1  Twitter group chats
  1  Twitter image-description prevalence
  1  Twitter request throttling
  1  Twitter social actions
  1  Twitter verification-status changes
  1  Typos or phishing-like onion domains
  1  Typos or phishing-like popular domains
  1  UA-specific phishing-site blocking evasion
  1  Uber vehicle supply and fulfilled demand
  1  UDP amplification DDoS attacks
  1  UDS/KWP 2000 formula recovery
  1  UDS/KWP formula prevalence in apps
  1  UI interference elements
  1  UI text and sensor-value extraction
  1  Ultrasonic transmission coverage
  1  ultrasound attack range
  1  UMTS RRC state transitions and timers
  1  Unambiguous uniqueness
  1  Unauthorized message injection
  1  unaware-party detection
  1  unaware-party labels
  1  Unbounded device additions
  1  Unclassified RTC traffic
  1  Underrated Android applications
  1  Undetected executable data leaks
  1  Undocumented flaws in Android leak detectors
  1  Undocumented manifest entities
  1  unencrypted keystroke transmission
  1  Unencrypted web API communication
  1  unexpected photo uploading
  1  Unique CSP policies
  1  Unique records with all quasi-identifiers
  1  uniqueness distribution estimation
  1  Unity game-engine prevalence
  1  Unix-domain-socket usage
  1  unlearning effectiveness
  1  unnoticed music perturbation
  1  Unobservable covert TCP channel
  1  Unprotected built-in defenses
  1  unprotected ML models
  1  unprotected model files
  1  Unreachable retweeters
  1  Unrecognized depicted faces
  1  unrelated collection purposes
  1  Unreliable Android maturity ratings
  1  Unsafe CSP whitelists
  1  Unsafe custom communication
  1  Unsafe DOM and jQuery API usage
  1  Unseen YouTube traffic
  1  Unsupervised covert-channel detection
  1  Untaged depicted users
  1  Unwanted app families
  1  Unwanted-app encounters
  1  Update-support information availability
  1  Update-support information versus sales
  1  UPI users’ perceptions and behaviors
  1  Uploader content consistency
  1  Uploader content type
  1  Urban-rural inequality
  1  URL click disparity
  1  URL crawling
  1  URL propagation cascades
  1  URL safety-checking evasion
  1  URL-level collective detection
  1  URL-rendering behavior
  1  user check-in profiles
  1  User credibility for security reporting
  1  user differentiation
  1  User emotional groups
  1  user engagement impact
  1  user geographic distribution
  1  User geolocation
  1  User ID enumeration
  1  User identification
  1  User ideology
  1  User IP-address life spans
  1  User positioning from coarse proximity data
  1  User reviews as sales proxies
  1  User satisfaction
  1  user tag spoofing vulnerabilities
  1  User trust and VPA usage behavior
  1  User-ID verification failures
  1  user-level inaccuracy variation
  1  Users per IP address
  1  Users per IPv6 prefix
  1  VAC-flagged cheaters
  1  Valid text-input generation
  1  Validation correctness
  1  Vegetation cover
  1  venue-day deduplication
  1  verbatim plagiarism
  1  Verification-perception mismatch
  1  Verified front-end vulnerabilities
  1  Verified-account composition
  1  Video inclusion attrition
  1  video playback stuttering
  1  Video quality degradation
  1  Video view-count distribution
  1  viewer comment explanations
  1  viral crowdturfing campaigns
  1  virtual machine escape
  1  virtual-trailer extraction
  1  visual cues of unawareness
  1  Vocabulary coverage
  1  vocabulary estimation
  1  Voice-command availability violations
  1  Voice-command blocking
  1  Voice-command delay
  1  Voice-search pollution
  1  Void synthetic-speech detection
  1  VoIP call quality
  1  vouching delay
  1  vulnerabilities in Android native libraries
  1  Vulnerable Android apps
  1  vulnerable authorization implementations
  1  Vulnerable certificate-validation code
  1  vulnerable IAP implementation
  1  Vulnerable OSS usage
  1  WAA over-the-air command recognition
  1  Walking-based surge avoidance
  1  Watermark robustness after model extraction
  1  Watermark success on selected apps
  1  weak ATM and POS RNGs
  1  Weak substitute certificates
  1  weak TLS ciphers
  1  web affordability
  1  Web API validation inconsistencies
  1  Web knowledge-panel pollution
  1  web-domain promotion
  1  Web-download risk
  1  Web-page inference
  1  web-page topics
  1  Web3 audit-information perceptions
  1  Web3AuthGuard attack detection
  1  webcam indicator LED bypass
  1  WebMD disease-condition inference
  1  webpage size and object complexity
  1  website content
  1  website defacement attacks
  1  website-visit inference
  1  website-visitor de-anonymization
  1  WebView-launching QR readers
  1  WebView-user-agent crawler support
  1  WeChat master-key leakage
  1  Weekly group-chat meetings
  1  Weekly playtime variation
  1  Weibo information cascades
  1  WhatsApp account enumeration
  1  WhatsApp account registration
  1  WhatsApp evidence use in Swiss penal cases
  1  whole-system leak mitigation
  1  Widevine API and system-call tampering
  1  WiFi-versus-3G viewing behavior
  1  Wishlist product categories
  1  Within-category app centralization
  1  working copy protection bypass
  1  WTA adversarial command recognition
  1  X-Frame-Options clickjacking exposure
  1  XGuard exploit mitigation
  1  XGuard false positives
  1  XGuard runtime overhead
  1  Xrce vulnerabilities in cross-platform applications
  1  YouTube account commerce
  1  YouTube channel repurposing
  1  YouTube content scale
  1  YouTube data-center locations
  1  YouTube streaming energy
  1  YouTube uploader population
  1  ZepScope warning accuracy
  1  Zero-day web vulnerabilities
  1  ZIP-bomb denial of service

Hand audits: the candidate sets and their measured precision

The family sets are regex candidate sets, so they were audited against the papers' own full text with scripts/platforms_audit.mjs, which prints whitespace-collapsed windows around each platform-name match. Samples are deterministic (every k-th row of the --list output, which is sorted by year then venue), so the audit is reproducible.

These samples are smalln = 7, 15, 16 and 11. At n = 15 the 95% interval around 73% is roughly ±20 points. The precisions below are coarse corrections on a candidate set, not measurements, and the content page now says so too.

TikTok — full audit, all 7 candidates

Verdict Paper Why
genuine IEEE S&P 2024 A Picture is Worth 500 Labels [2West, Jack; Thiemt, Lea; Ahmed, Shimaa; Bartig, Maggie; Fawaz, Kassem; Banerjee, Suman (2024): "A Picture is Worth 500 Labels: A Case Study of Demographic Disparities in Local Machine Learning Models for Instagram and TikTok", in: Proceedings of the IEEE Symposium on Security and Privacy. (DOI)] extracted and evaluated the on-device ML models shipped in the TikTok app
genuine TheWebConf 2024 TikTok and the Art of Personalization [3Vombatkere, Karan; Mousavi, Sepehr; Zannettou, Savvas; Roesner, Franziska; Gummadi, Krishna P. (2024): "TikTok and the Art of Personalization: Investigating Exploration and Exploitation on Social Media Feeds", in: Proceedings of the ACM Web Conference. (DOI)] five sock-puppet accounts driving the feed, plus TikTok-Api
genuine CCS 2024 Modern problems require modern solutions [4Simko, Lucy; Hutchinson, Adryana; Isaac, Alvin; Fries, Evan; Sherr, Micah; Aviv, Adam J. (2024): ""Modern problems require modern solutions": Community-Developed Techniques for Online Exam Proctoring Evasion", in: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security. (DOI)] collected social-media video and comment data from TikTok and YouTube. The paper's own wording is "the qualitative analysis of 137 videos and 4,297 comments on TikTok (n = 120) and YouTube (n = 17)" — so 137 videos in total, of which 120 are TikTok, and the 4,297 comments are across both platforms. An earlier version of this row said “120 TikTok videos and 4,297 comments”, which silently reassigned the combined comment count to TikTok alone; corrected after review.
genuine IEEE S&P 2026 Setting the Course, but Forgetting to Steer [5Karnam, Sai Keerthana; Dash, Abhisek; Das, Antariksh; Mousavi, Sepehr; Bechtold, Stefan; Gummadi, Krishna P.; Mukherjee, Animesh; Weber, Ingmar; Zannettou, Savvas (2026): "Setting the Course, but Forgetting to Steer: Analyzing Compliance with GDPR's Right of Access to Data by Instagram, TikTok, and Youtube", in: Proceedings of the IEEE Symposium on Security and Privacy. (DOI)] GDPR right-of-access requests to TikTok from sock-puppet accounts
no — topic only PETS 2023 Creative beyond TikToks interview and diary study of adolescents; TikTok is the subject matter, not the measured system
no — topic only PETS 2026 “The city isn't uploading me to TikTok” interview study on data collection in urban public spaces; TikTok appears in the title quote
no — collision PETS 2023 RAVEN tool list contains "Tiktok"; the paper is enterprise IP address variation

Precision 4/7 = 57%.

Twitter/X — every 10th of 142 = 15 audited

Genuine (11): CCS 2010 @spam (25 M URLs from Twitter) · NDSS 2012 WarningBird · TheWebConf 2013 Hierarchical geographical modeling · USENIX 2015 Vulnerability Disclosure in the Age of Social Media · IMC 2018 On the Origins of Memes [6Zannettou, Savvas; Caulfield, Tristan; Blackburn, Jeremy; Cristofaro, Emiliano De; Sirivianos, Michael; Stringhini, Gianluca; Suarez-Tangil, Guillermo (2018): "On the Origins of Memes by Means of Fringe Web Communities", in: Proceedings of the ACM Internet Measurement Conference. (DOI)] · PETS 2019 #DontTweetThis · TheWebConf 2019 Revisiting User Mobility … in LBSNs (collected Foursquare-tagged tweets from Twitter Public Streams) · CCS 2021 An Ontology-driven Knowledge Graph for Android Malware (academic Twitter API) · USENIX 2022 Automated Detection of Automated Traffic (5.1 M accounts via the public API) · TheWebConf 2023 Identifying Checkworthy CURE Claims on Twitter · TheWebConf 2023 Papageno Effect (2 M posts).

False positives (4), all the same failure mode — a reused Twitter-derived benchmark corpus, with no collection from the platform: TheWebConf 2022 Massive Text Normalization (Twitter/Reddit datasets) · TheWebConf 2024 Message Injection Attack on Rumor Detection (Twitter15/Twitter16) · TheWebConf 2025 Thematic-LM (TweetNLP model, Reddit data, Twitter only in a reference) · TheWebConf 2026 Cross-Modal Rationale Transfer (CrisisMMD).

Precision 11/15 = 73%. All four false positives are 2022 or later, which is why the content page warns that the recent Twitter/X counts are inflated relative to the earlier ones, and states the trend as a change in composition rather than in size.

Meta — every 10th of 151 = 16 audited

Genuine (11): CCS 2010 Detecting and characterizing social spam campaigns (3.5 M users' wall messages) · USENIX 2012 MyPageKeeper · CCS 2017 walk2friends (Instagram check-ins) · TheWebConf 2018 Tagvisor (239 k Instagram posts) · TheWebConf 2019 Auditing Offline Data Brokers via Facebook's Advertising Platform [7Venkatadri, Giridhari; Sapiezynski, Piotr; Redmiles, Elissa M.; Mislove, Alan; Goga, Oana; Mazurek, Michelle L.; Gummadi, Krishna P. (2019): "Auditing Offline Data Brokers via Facebook's Advertising Platform", in: Proceedings of the ACM Web Conference. (DOI)] · USENIX 2020 DELF [8Cohn-Gordon, Katriel; Damaskinos, Georgios; Neto, Divino; Cordova, Joshi; Reitz, Benoît; Strahs, Benjamin; Obenshain, Daniel; Pearce, Paul; Papagiannis, Ioannis (2020): "DELF: Safeguarding deletion correctness in Online Social Networks", in: Proceedings of the USENIX Security Symposium. (Link)] (Facebook-authored, own systems) · NDSS 2021 All the Numbers are US [9Hagen, Christoph; Weinert, Christian; Sendner, Christoph; Dmitrienko, Alexandra; Schneider, Thomas (2021): "All the Numbers are US: Large-scale Abuse of Contact Discovery in Mobile Messengers", in: Proceedings of the Network and Distributed System Security Symposium. (Link)] (WhatsApp crawling) · TheWebConf 2023 The Thin Ideology of Populist Advertising [10Capozzi, Arthur; Morales, Gianmarco De Francisci; Mejova, Yelena; Monti, Corrado; Panisson, André (2023): "The Thin Ideology of Populist Advertising on Facebook during the 2019 EU Elections", in: Proceedings of the ACM Web Conference. (DOI)] (Meta Ad Library, 45 k campaigns) · USENIX 2024 The Imitation Game [11Acharya, Bhupendra; Lazzaro, Dario; López-Morales, Efrén; Oest, Adam; Saad, Muhammad; Cinà, Antonio Emanuele; Schönherr, Lea; Holz, Thorsten (2024): "The Imitation Game: Exploring Brand Impersonation Attacks on Social Media Platforms", in: Proceedings of the USENIX Security Symposium. (Link)] · IMC 2025 Buy and Sale of Social Media Accounts [12Beluri, Mario; Acharya, Bhupendra; Khodayari, Soheil; Stivala, Giada; Pellegrino, Giancarlo; Holz, Thorsten (2025): "Exploration of the Dynamics of Buy and Sale of Social Media Accounts", in: Proceedings of the ACM Internet Measurement Conference. (DOI)] · TheWebConf 2026 Longitudinal Trends in Global Climate Change Discourse on Facebook [13Biswas, Md. Rafiul; Bessghaier, Mabrouka; Ibrahim, Shimaa; Mikros, George K.; Zaghouani, Wajdi (2026): "Longitudinal Trends in Global Climate Change Discourse on Facebook", in: Proceedings of the ACM Web Conference. (DOI)] (299,329 Facebook posts via CrowdTangle).

False positives (5): TheWebConf 2013 Google+ or Google-? (measures Google+; Facebook only in the framing) · CCS 2015 Perplexed Messengers from the Cloud (the Facebook client app is one of many analysed; the study is push clouds) · USENIX 2022 Pre-hijacked accounts (Facebook as an identity-provider example) · PETS 2023 Creative beyond TikToks (Facebook in related work) · TheWebConf 2025 Cross-Modal Transfer from Memes to Videos (Facebook Hateful Memes benchmark).

Precision 11/16 = 69%.

This row was wrong on first publication and was corrected by review. It read “every 10th of 151 = 15 audited … precision 10/15 = 67%”. A stride of 10 over 151 rows yields 16 samples (indices 0, 10, … 150), not 15, and the sixteenth — TheWebConf 2026 Longitudinal Trends in Global Climate Change Discourse on Facebook — was silently dropped. It is unambiguously genuine: the content page cites it two sections earlier for having collected 299,329 Facebook posts through CrowdTangle. So the audited sample is 16 and the precision is 11/16. TikTok (stride 1 over 7), Twitter/X (stride 10 over 142 → 15) and Amazon (stride 7 over 72 → 11) were re-checked and are correct. Found by the figures reviewer; the author had counted the sample by eye from a truncated terminal listing rather than from wc -l.

Amazon — every 7th of 72 = 11 audited

Genuine (4): IEEE S&P 2011 How to Shop for Free Online (analysed Amazon Payments as a cashier-as-a-service provider and found logic flaws; verified in full text) · CCS 2020 Dangerous Skills Got Certified [14Cheng, Long; Wilson, Christin; Liao, Song; Young, Jeffrey; Dong, Daniel; Hu, Hongxin (2020): "Dangerous Skills Got Certified: Measuring the Trustworthiness of Skill Certification in Voice Personal Assistant Platforms", in: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security. (DOI)] (Alexa skill store) · TheWebConf 2024 Understanding GDPR Non-Compliance in Privacy Policies of Alexa Skills [15Liao, Song; Aldeen, Mohammed; Yan, Jingwen; Cheng, Long; Luo, Xiapu; Cai, Haipeng; Hu, Hongxin (2024): "Understanding GDPR Non-Compliance in Privacy Policies of Alexa Skills in European Marketplaces", in: Proceedings of the ACM Web Conference. (DOI)] · PETS 2025 Erasing the Echo (Alexa data deletion).

False positives (7): CCS 2018 Assessing Non-Visual SSL Certificates · TheWebConf 2020 Snippext (Amazon Reviews benchmark) · IEEE S&P 2022 Time-Print (USB drives purchased on Amazon — verified in full text: "a generic device found on Amazon", "purchased by users on Amazon as of September 2020") · IEEE S&P 2023 Breaking Security-Critical Voice Authentication (evaluates Amazon Connect Voice ID, a hosted ML product; scored mlservice, and a reasonable person could score it subject) · TheWebConf 2023 CaML · PETS 2024 DeTorrent · TheWebConf 2026 FeedGuard (Amazon dataset benchmark).

Precision 4/11 = 36% — the lowest of the four, and the direct reason no Amazon sub-page was written. The genuine four also split into two unrelated objects: the Alexa voice/skill ecosystem (3) and an Amazon web service (1).

Quotes spot-checked against the source

Every figure and every quoted phrase the content page attributes to a paper is listed in scripts/platforms_quotecheck.mjs with the text that must appear in that paper's paper.cols.txt. Whitespace is collapsed on both sides first.

That sentence was not true when this page was first published, and the generic reviewer caught it. The list then held 26 checks and covered the numbered figures but not every attributed figure: the 98.9% YouTube explanation share, the 66% face-detection rate, 81.3%/74.4%, 1.1% of 796,081, the Mastodon 96% and 2,879, the per-platform blocking rates, 22,722, 29.5 M ads and 63,170,000,000 were all attributed on the page and checked by nobody. It now holds 42 checks and the sentence is true. The lesson generalises past this page: a quote-check list built from “the figures I published” misses everything a reader would also want to trust, and the number guard cannot see quoted phrases at all.

platforms_quotecheck-output.txt
PASS     NDSS 2026  "we discovered a total of 3,546,479,731 accounts"
PASS     NDSS 2026  "More than 57 % of world users have a public profile picture"
PASS     IMC 2024  "only 7.7% of undeclared political ads"
PASS     IMC 2024  "60.4% of ads moderated by Meta did not align"
PASS     IMC 2024  "Digital Services Act"
PASS     WWW 2024  "exploits real users' interests in between 30% and 50%"
PASS     PETS 2026  "We found 17,842 products that Amazon restricted"
PASS     IMC 2023  "the Mastodon accounts of 136,009 Twitter users"
PASS     PETS 2026  "48, 511 ad explanations collected across four platforms"
PASS     PETS 2026  "Who Targets Me"
PASS     WWW 2026  "Bad Recommendation rate was about 2.3%"
PASS     USENIX 2025  "very small for the Basic tier"
PASS     WWW 2026  "the tool was discontinued in 2024"
PASS     WWW 2025  "(the now defunct) Crowdtangle"
PASS     WWW 2023  "Meta (previously Facebook) Ad Library"
PASS     WWW 2019  "over 90% of targetable Facebook identities"
PASS     IMC 2021  "throttling is triggered upon observing Twitter-related domains (*.twimg.com, twitter.com, t.co) in the SNI"
PASS     NDSS 2021  "10 % of all US mobile phone numbers for WhatsApp and 100 % for Signal"
PASS     IEEE-SP 2024  "age prediction fails drastically for individuals below 19"
PASS     IEEE-SP 2026  "all three platforms fail to report this information"
PASS     IMC 2025  "of social media platforms in blocking these accounts was 19.71%"
PASS     IMC 2025  "All 11,457 2,259 19.71"
PASS     NDSS 2026  "order of magnitude (0.0069 vs. 0.084)"
PASS     NDSS 2026  "been restricted since June 2023"
PASS     CCS 2024  "137 videos and 4,297 comments on TikTok"
PASS     USENIX 2025  "now replaced by the Meta Content Library"
PASS     NDSS 2021  "1% streaming API that Twitter provides to vetted researchers"
PASS     NDSS 2021  "all the numbers that we presented in this paper are lower bounds"
PASS     IMC 2025  "TikTok and Instagram demonstrated the highest"
PASS     IMC 2025  "TikTok 1,700 816"
PASS     PETS 2026  "98.9% of all explanation texts cite only the main targeting form"
PASS     NDSS 2026  "roughly two-thirds of the images (66 %) contain detectable human faces"
PASS     NDSS 2026  "245 countries"
PASS     WWW 2019  "Australia (81.3%), and for the U.K. (74.4%)"
PASS     PETS 2026  "8,965 out of the 796,081"
PASS     IMC 2023  "The top 25% most populous instances contain 96% of the users"
PASS     IMC 2023  "2,879 unique Mastodon instances"
PASS     IMC 2025  "Facebook 649 37 5.70"
PASS     WWW 2026  "22,722"
PASS     IMC 2024  "29.5 million"
PASS     NDSS 2026  "63,170,000,000"
PASS     WWW 2024  "4.9M"
 
42 pass, 0 fail, of 42 checks

Three checks failed on the first run, and all three were column-splice artefacts of two-column PDF reading order, not fabrications:

Paper What failed Resolution
IMC 2021 Throttling Twitter [16Xue, Diwen; Ramesh, Reethika; S, Valdik S.; Evdokimov, Leonid; Viktorov, Andrey; Jain, Arham; Wustrow, Eric; Basso, Simone; Ensafi, Roya (2021): "Throttling Twitter: an emerging censorship technique in Russia", in: Proceedings of the ACM Internet Measurement Conference. (DOI)] the extraction's paraphrase "only t.co and twitter.com are throttled" is not in the paper replaced with the paper's own wording, which is about SNI matching: "throttling is triggered upon observing Twitter-related domains (*.twimg.com, twitter.com, t.co) in the SNI". The page quotes the paper, not the extraction.
IMC 2025 Buy and Sale of Social Media Accounts [12Beluri, Mario; Acharya, Bhupendra; Khodayari, Soheil; Stivala, Giada; Pellegrino, Giancarlo; Holz, Thorsten (2025): "Exploration of the Dynamics of Buy and Sale of Social Media Accounts", in: Proceedings of the ACM Internet Measurement Conference. (DOI)] the 19.71% sentence is interleaved with the adjacent column split into two contiguous fragments, both of which pass: the sentence tail, and the table row "All 11,457 2,259 19.71"
NDSS 2026 Revealing The Secret Power [17Galeazzi, Alessandro; Paudel, Pujan; Conti, Mauro; Cristofaro, Emiliano De; Stringhini, Gianluca (2026): "Revealing The Secret Power: How Algorithms Can Influence Content Visibility on Twitter/X", in: Proceedings of the Network and Distributed System Security Symposium. (Link)] "approximately eight times for Ukraine-Russia" is spliced ("approxibeen able ... mately eight times") replaced with two contiguous fragments: "order of magnitude (0.0069 vs. 0.084)" and "been restricted since June 2023"

After those replacements: 26 checks, 26 pass, 0 fail.

One further note on the corpus text: some IMC volumes in paper.cols.txt include the published reviewer comments (“Reviewer #2 Strengths: …”). A keyword probe over full text can therefore hit a reviewer's sentence rather than the authors'. Two of the early rate-limit examples in the probe output are exactly that. Quantified rather than waved away: 36 of the 5,869 paper.cols.txt files contain the string Reviewer #, and 9 of the 897 platform-subject papers do. So the contamination is real and bounded at about 1% of the population every probe on this page ran over. A probe designed to measure what authors say would still need to strip those sections.

External sources

Two Claude Sonnet sub-agents were asked for the current status of platform access routes and of the DSA/legal position, with instructions to fetch primary sources and to flag anything they could not verify. Every claim that reached the content page was then re-fetched by the main agent. The sub-agents' unverified items are listed below as unverified.

Verified by direct fetch, 2026-08-27

Claim on the page Primary source Verbatim quote Date on the page
X API is pay-per-usage, $0.005/Post read, capped at 3 M Post reads per month, no academic tier https://docs.x.com/x-api/getting-started/pricing "The X API uses pay-per-usage pricing. No subscriptions—pay only for what you use."; "Pay-per-usage plans are capped at 3 million Post reads per monthly billing cycle." none shown
CrowdTangle withdrawn 14 August 2024 https://transparency.meta.com/researchtools/other-datasets/crowdtangle/ "As of August 14, 2024, CrowdTangle is no longer available." "UPDATED AUG 16, 2024"
Meta Content Library scope and the 100-follower threshold https://transparency.meta.com/researchtools/meta-content-library/ "posts that appear on public profiles that are either verified or that have 100 or more followers"; "All applications are independently reviewed by the Secure Data Access Center (CASD ...)" "UPDATED APR 30, 2026"
Meta Content Library eligibility criteria https://developers.facebook.com/docs/content-library-and-api/get-access "Dedicated to the pursuit of education and research", "Accredited", "Qualified to grant academic degrees", "A not-for-profit endeavor" none shown
TikTok Research Tools regions, eligibility, turnaround, data https://developers.tiktok.com/products/research-api/ "Academic institutions in the US, EEA, UK or Switzerland"; "Not-for-profit and/or independent research institution, organization, association, or body in the EU"; "You can typically expect to hear back from us within 4 weeks" none shown
TikTok Commercial Content Library is EU-only https://developers.tiktok.com/products/commercial-content-api/ "in this phase we are ONLY including data from EU countries" none shown
YouTube Researcher Program exists and is separate from a quota increase https://research.youtube/how-it-works/ "scaled, expanded access to global video metadata across the entire public YouTube corpus via our Data API" none shown
YouTube Data API default quota https://developers.google.com/youtube/v3/getting-started#quota "a default quota allocation of 100 search.list calls, 100 videos.insert calls, and 10,000 units per day combined for all other endpoints" none shown
Amazon PA-API 5.0 deprecated; calls return HTTP 403 https://affiliate-program.amazon.com/creatorsapi/docs/en-us/paapiv5-deprecation "The Amazon Product Advertising API 5.0 (PA-API 5) has been deprecated and is being replaced by the Creators API"; "receive an HTTP 403 Forbidden response with an AccessDeniedException" none shown
Commission Delegated Regulation (EU) 2025/2050, of 1 July 2025, entry into force rule https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202502050 (CELEX 32025R2050) "laying down the technical conditions and procedures under which providers of very large online platforms and of very large online search engines are to share data with vetted researchers"; "This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union."; "Done at Brussels, 1 July 2025." n/a
X fined €120 M on 5 December 2025; researcher data access is one of three grounds https://digital-strategy.ec.europa.eu/en/news/commission-fines-x-eu120-million-under-digital-services-act "X's terms of service prohibit eligible researchers from independently accessing its public data, including through scraping."; "This is the first non-compliance decision under the DSA." "Publication 05 December 2025", "Last update 16 January 2026"
Current VLOP designation list, including WhatsApp https://digital-strategy.ec.europa.eu/en/policies/list-designated-vlops-and-vloses list includes "WhatsApp Ireland Ltd.", "X Internet Unlimited Company(XIUC)", "Meta Platforms Ireland Limited (MPIL)", "TikTok Technology Limited", "Amazon EU S.à.r.l." "Information updated on 24 July 2026"
help.crowdtangle.com is gone DNS net::ERR_NAME_NOT_RESOLVED 2026-08-27
X pay-per-use launched 6 Feb 2026; Basic and Pro remain for existing subscribers; Owned Reads added 20 Apr 2026 at $0.001 https://docs.x.com/changelog "Today, we officially launched X API Pay-Per-Use pricing"; "Basic and Pro plans remain available, and existing subscribers can opt in to Pay-Per-Use."; "Effective April 20, 2026, we introduced new Owned Reads pricing at $0.001 per resource" entries dated Feb 6, 2026 and Apr 16, 2026
Reg. (EU) 2025/2050 was published in the OJ on 9 October 2025, so it has been in force since 29 October 2025 the same EUR-Lex record "OJ L, 2025/2050, 9.10.2025" n/a
The DSA Data Access Portal accepts applications from 29 October 2025 and publishes a register of vetted-researcher projects https://data-access.dsa.ec.europa.eu/home (headless browser) "You can send applications as of 29 October 2025."; "Find out more about ongoing research projects conducted by vetted researchers who have access to data under Article 40 of the Digital Services Act." none shown
Pushshift live access is moderator-only, by Reddit approval, for moderation use only https://support.reddithelp.com/hc/en-us/articles/16470271632404-Pushshift-Access-Request (headless browser; Cloudflare-walled to curl) "which will be reinstated for verified Reddit moderators"; "Each moderator will also need explicit approval from Reddit, and the use of Pushshift will be limited to moderation use cases only." "Updated 1 year ago"
TikTok's non-academic EU pathway is a beta https://developers.tiktok.com/products/research-api/ "We are currently beta testing this service with select researchers in the US, UK, Switzerland, Norway, Iceland and Liechtenstein." — the sentence sits immediately after the EU not-for-profit clause none shown

Two of these pages are JavaScript-only and were fetched with Playwright's own Chromium rather than curl (transparency.meta.com, developers.facebook.com; curl returns an error page for the second). The DSA data-access portal at https://data-access.dsa.ec.europa.eu/ renders nothing without JavaScript — the page title "DSA - Data Access Portal" is all that could be confirmed, and the content page says only that the portal exists.

Reported by a sub-agent, NOT verified, NOT used on the page

Claim Why it is not on the page
Official Journal publication date of Reg. 2025/2050 (9 October 2025) and entry into force (29 October 2025) EUR-Lex confirmed the instrument, its adoption date and the twentieth-day rule; we did not confirm the OJ date itself, so the page states the rule and not the date
Legacy X API Basic ($200/month) and Pro ($5,000/month) tiers, and their closure developer.x.com returns HTTP 402 and the official forum thread returns 403. The current pricing page does not mention tiers, so the page describes only pay-per-usage
Exact date the X Academic Research track was removed the corroborating forum thread is 403. The page instead quotes a 2026 paper's own statement that academic access has "been restricted since June 2023"
Reddit Data API pricing ($0.24/1,000 calls), rate limits (100 QPM OAuth), and Pushshift's current status every Reddit-owned domain refused the fetch (403 or unreachable). The page makes no claim about Reddit pricing or limits; it reports only the corpus counts for Pushshift and the Reddit API
Ad Library coverage rules (political ads worldwide for 7 years, non-political EU-only for 1 year) and the government-ID requirement transparency.meta.com ad-library pages did not yield the text; the page says only that an ad archive contains ads that ran
hiQ Labs v. LinkedIn final consent judgment, Meta v. Bright Data, X Corp. v. Bright Data, Van Buren no primary opinion could be read: CourtListener and Justia 403, the SCOTUS and Ninth Circuit PDFs did not parse. The two sub-agents also disagreed on which Bright Data case is the relevant one. Not published
ICPSR/SOMAR compute fees for Meta Content Library access from January 2026 no primary source found
Google Ads Transparency Center researcher API no primary Google page describes one; the page makes no claim
X has appealed the €120 M DSA fine (reported as filed at the EU General Court on 16 February 2026) reported by the currency reviewer from secondary press; no case number could be confirmed from a primary Curia document. Not published — the page presents the decision as the Commission published it and does not claim finality either way. This is the single most likely thing on the page to go out of date first
DSA Art. 40(12) has been enforced directly by researchers in German courts — Democracy Reporting International v X, reported as LG Berlin II, 6 February 2025 (41 O 140/25), and a Kammergericht order of 17 February 2026 granting API access to 30 June 2026 and holding that Art. 40(12) confers an individually enforceable right reported by the currency reviewer; we tried to verify it. democracy-reporting.org is Cloudflare-walled even to a headless browser, the Columbia Global Freedom of Expression search did not surface the case, and the cited German legal blog's February 2026 archive does not contain it. Not published. If true it is the most important thing missing from the page, because it would mean the “no worked example of Art. 40” claim holds only for published papers, not for practice. What would close it: the Kammergericht order itself, or DRI's case page fetched from a network Cloudflare does not challenge
Amazon Conditions of Use anti-scraping clause amazon.com/gp/help/… returned HTTP 503 twice

Rejected sources

  • Law-firm client alerts and legal-blog summaries for US case outcomes (Proskauer, Morgan Lewis, MoFo, Skadden, Privacy World and others). Consistent across sources, but a methods wiki citing a case outcome should cite the opinion. Rejected; the topic is handled by pointing the reader at their institution.
  • Search-result AI summaries giving an X API cap of 2 million posts/month and a February 2026 rollout date. The primary docs page says 3 million and shows no date. Rejected in favour of the primary page. This is the exact shape of the error: a confident secondary number, close enough to the real one to survive review.
  • about.fb.com CrowdTangle announcement (2024/03 URL) — returns Meta's 404 page. Rejected in favour of the transparency-centre page, which carries the date and the sentence.
  • A claimed “first vetted-researcher decisions expected late February 2026” milestone, surfaced only in a search summary with no quotable primary sentence. Rejected.
  • support.alexa.com for the Alexa retirement dates — the domain no longer resolves. The page does not restate those dates; they are already on website_selection.

What could not be established

  • Whether any paper anywhere has published through the DSA Article 40 vetted-researcher route. Zero in this corpus. The corpus is seven venues; ICWSM, CHI, FAccT and the communications journals are not in it, and that is where such a paper would most plausibly appear first. This is a genuine gap in what this page can say, not a finding about the world.
  • Why platform-subject papers state authentication state less often (65.8% vs 72.1% of all papers with a crawl configuration) even though the login wall matters more to them. The difference is 6.3 points on 260 papers; it could be noise. Not published as a finding, only as the two figures.
  • Whether the Twitter/X decline is caused by the API closing. The share was already down to 1.9% in 2016–2018, years before the restriction. The page says so explicitly rather than drawing the tempting line.
  • Whether Art. 40(12) has already been enforced through national courts. A reviewer reported a German line of cases (Democracy Reporting International v X) that would mean the route has been exercised in practice even though no paper here uses it. We could not verify it from a primary document — see the unverified table above. This is the biggest known hole in the page.
  • The real cost of a metered-API study. No paper in the corpus publishes its API spend. The arithmetic on the page (1 M posts = $5,000) is ours, from the vendor's published unit price, and is labelled as such.
  • Whether reused corpora still describe the platform. 383 of 897 platform papers name an existing dataset, and 208 name one with no primary collection of their own; nobody in the corpus tests whether conclusions from a 2019 Twitter corpus hold for X in 2026. Listed as an open question.

Mistakes and near-misses in this run

Recorded because they are the part with reuse value.

  1. A concurrent-edit race gave a probe the wrong denominator. platforms_fulltext.mjs obtains the platform-subject key set by shelling out to platforms_report.mjs --keys. It ran while platforms_report.mjs was being rewritten and got 172 keys instead of 897, then computed every percentage on 172. Nothing errored; the output looked normal. Fixed by adding if (listed.size < 800) throw — a fail-loud guard, not a retry.
  2. The role filter was missing at the call site. tagsOf() returns {family, role}; the report accepted every tag it returned. Amazon read 923 papers for one run. Fixed, and the number is recorded above.
  3. Four probe regexes were too wide (see the table above), and one had to be abandoned entirely after a hand audit found 1 on-point hit in 19.
  4. Bare wiki links resolved inside the design: namespace. [[Design]], [[start]] and [[Artifacts]] rendered as red links to design:design, design:start and design:artifacts. Caught by diffing class="wikilink2" out of the rendered DOM, not by reading the source. Fixed with a leading colon.
  5. The bibliography cache served a stale parse. After appending 24 entries, the first render resolved only some citekeys. Fixed with ?purge=true on literature:bibliography and then on design:platforms; verified by counting <dt> entries in the rendered reference list (26) against distinct {[key]} markers on the page (26).
  6. LaTeX accent escapes render as HTML entities. Beno\^{i}t came out as Beno&circ;it in the reference list. The five new entries with diacritics were rewritten in UTF-8. Pre-existing entries elsewhere in the bibliography have the same problem and were left alone.
  7. A multi-valued field was published as an exclusive one. The first draft read 383 (42.7%) worked from an existing dataset rather than collecting anything themselves — a higher share than live collection (346, 38.6%). Both halves were wrong: temporal.mode is multi-valued, so 175 of the 383 also name a primary-collection mode, only 208 name an existing dataset and nothing else, and 628 (70.0%) name some primary collection. Caught by the author before review, by asking what the exclusive split was; platforms_report.mjs now prints it so the next reader cannot make the same mistake.
  8. An audit sample was miscounted by one, in the direction that lowered the precision. A stride of 10 over Meta's 151 candidates gives 16 samples, not 15; the sixteenth was dropped and is genuine, so the published precision was 67% instead of 69%. The author counted the sample from a truncated terminal listing instead of wc -l. Found by review, not by the number guard — which passed, because “67” happens to appear in an unrelated per-year denominator elsewhere in the report. Explicit ALLOW entries for all four audit precisions have since been added to scripts/check_page_numbers.mjs so the next change to them is actually guarded rather than passing by coincidence.
  9. A combined figure was reassigned to one platform. This log said CCS 2024 “collected 120 TikTok videos and 4,297 comments”; the paper says 137 videos in total, of which 120 are TikTok, and the 4,297 comments span TikTok and YouTube. Found by review. The quote-check script had the right phrase all along and passed — the error was in the prose beside it, which is exactly the gap the number guard cannot see.
  10. A vendor fact was stale within the same page. The first version said “the Basic tier the paper worked around no longer exists”. X's own changelog says the opposite: pay-per-use launched 6 February 2026 and “Basic and Pro plans remain available” to existing subscribers. Found by the currency reviewer. The lesson is the page's own: an access-route claim needs a dated primary source even when it is only an aside.
  11. A quote was attributed to the wrong paper. The Denominator problem bullet on sampled streams cited hagen2021_numbers (NDSS 2021, All the Numbers are US) for "the 1% streaming API that Twitter provides to vetted researchers". That paper is about WhatsApp and Signal phone-number enumeration and contains no occurrence of the word “Twitter” at all. The quote belongs to a different NDSS 2021 paper, To Err.Is Human: Characterizing the Threat of Unintended URLs in Social Media, which the author had read in the same probe output and confused with it. Found by the citations reviewer. Fixed by adding kaleli2021_human to the bibliography and re-citing; two quote checks for it were added to platforms_quotecheck.mjs. This is the worst class of error on the page: a quote check that only verifies “does this phrase exist somewhere in the corpus” would have passed it, and the one here passed because the phrase was never in the check list at all. Every quote on a page belongs in the check list, not just the numbered figures.
  12. A cross-platform range omitted the platform at the top of it. The page reported blocking efficacy “from 5.02% (YouTube) to 46.41% (Instagram)” across [12Beluri, Mario; Acharya, Bhupendra; Khodayari, Soheil; Stivala, Giada; Pellegrino, Giancarlo; Holz, Thorsten (2025): "Exploration of the Dynamics of Buy and Sale of Social Media Accounts", in: Proceedings of the ACM Internet Measurement Conference. (DOI)]'s five platforms — leaving out TikTok, which is at or above Instagram. The paper's own summary is "TikTok and Instagram demonstrated the highest detection efficacy at 48%, whereas YouTube and Facebook showed the lowest efficacy at just 5%"; its Table 8 gives TikTok 816 of 1,700, and the efficacy cell for that row is lost to a column splice, which is how it came to be dropped. Found by the citations reviewer. Fixed, with the paper's prose figure quoted rather than a recomputed one.
  13. A true finding was framed so it invited a false inference. The headline box's “official researcher routes are almost entirely absent from this literature” is correct as a count — the generic reviewer re-ran it with wider probes and the absolutes held — but a fresh reader would have concluded that the programmes do not work, when part of the absence is mechanical: 2023-and-later launches, a provisional 2025–2026 slice, and the venues that publish most such work (ICWSM, CHI, FAccT, communications journals) excluded by construction. That caveat existed on the page, 280 lines below the claim. Moved into the box.
  14. Three pages counted the same names and got different numbers, and none of them said so. website_selection reports 463 papers for Alexa; this page reported 412; user_studies publishes 139 / 92 / 279 for Mechanical Turk against this page's 179. A subset appearing to exceed its superset is a signal that two folds disagree, not that one is broken. Reconciled and now printed by the report script: 486 papers name Alexa in a stated population source at all, 464 of those have a web-unit population tuple — which is what website_selection measures — and 412 is what survives our role rule. The content page carries the reconciliation and does not claim its fold is the better one.
  15. A schema label was published as an audited one. The crawlConfig.authentication split (145 / 22 / 4 / 0) was stated as what papers “state”, when registration warns on this exact field that crawlConfig carries one evidence quote for the whole object so the label cannot be checked against it, and consent measured 19.4% false positives on consentAction, another field of that same object. We did not audit the 145; the page now says so. This is the finding most likely to move a number if someone does the audit.
  16. No accidental exposure. No credentials, participant data or unpublished material was written to the wiki. The only non-public thing touched was .env for the JSON-RPC credentials, read by scripts/dw.mjs.

Observations for whoever maintains the shared bibliography

Found incidentally while checking this page's citations. None of these keys are used by this page; they are recorded because a key-string collision check does not find them.

Duplicate pair Note
lerner2016internet / lerner2016_internet same paper under two keys
bouhoula2024automated / bouhoula2024_automated same
fouad2022my / fouad2022_cookie same
bottger2025_regional / boettger2025_regional same, transliteration variant
ahmad2026_ipfp / ahmad2026_more same

Also: biswas2026_longitudinal's DOI 10.1145/3774904.3793026 did not resolve at doi.org or via the CrossRef API on 2026-08-27, although the title and author list check out against the ACM listing. Almost certainly registration lag on a TheWebConf 2026 paper rather than a wrong DOI, but it is unverified as of this run.

And a corpus trap worth knowing: data/fulltext/2024/IMC/beyond-the-guidelines-.../paper.cols.txt contains a null byte, so plain grep treats the file as binary and reports no match for a phrase that is present. Use grep -a, or read it from a language runtime. Every script on this page reads the file through Node, so none of the published figures were affected — but a hand-check with grep would have produced a false negative. Same family as the known corpus under-count trap.

Review log

Four reviewers, each given the page text, the report scripts and their unedited output, and these notes, and each told explicitly that the author's context may not be exhaustive.

Three focused passes ran in parallel first; the generic pass ran afterwards against the corrected page. Rejections are recorded as fully as fixes — they are the only record of whether a reviewer earned its slot.

Reviewer 1 — figures against the scripts (Claude Sonnet)

Finding Verdict Action
Meta audit sample is 16, not 15 — a stride of 10 over 151 rows yields indices 0…150 — and the dropped 16th ([13Biswas, Md. Rafiul; Bessghaier, Mabrouka; Ibrahim, Shimaa; Mikros, George K.; Zaghouani, Wajdi (2026): "Longitudinal Trends in Global Climate Change Discourse on Facebook", in: Proceedings of the ACM Web Conference. (DOI)]) is genuine, so precision is 11/16 = 69%, not 10/15 = 67% accepted, reproduced with wc -l fixed on both pages; the dropped paper added to the genuine list; TikTok, Twitter/X and Amazon strides re-checked and correct
This log said CCS 2024 collected “120 TikTok videos and 4,297 comments”; the paper says 137 videos total (120 TikTok + 17 YouTube) with the comments spanning both accepted fixed, with the paper's own sentence quoted
The number guard passes the three other audit precisions only by coincidence — “57” matches inside an unrelated WhatsApp quote, “67” inside a per-year denominator, “73” inside the artifact table — so a future change to them would pass silently accepted, and the more useful of its findings explicit ALLOW entries added for all four audit precisions, each naming its numerator and denominator
All four committed *-output.txt files reproduce byte-for-byte, including a full re-run of the 7-minute full-text probe; check_page_numbers.mjs returns OK; every figure in Measured results you can cite verified independently against paper.cols.txt and population.n confirmation, no action

Reviewer 2 — citations and quotes (Claude Sonnet)

Finding Verdict Action
The "1% streaming API that Twitter provides to vetted researchers" quote was attributed to [9Hagen, Christoph; Weinert, Christian; Sendner, Christoph; Dmitrienko, Alexandra; Schneider, Thomas (2021): "All the Numbers are US: Large-scale Abuse of Contact Discovery in Mobile Messengers", in: Proceedings of the Network and Distributed System Security Symposium. (Link)], which contains no occurrence of “Twitter”; it belongs to a different NDSS 2021 paper accepted — the most serious finding of the review re-cited to [18Kaleli, Beliz; Kondracki, Brian; Egele, Manuel; Nikiforakis, Nick; Stringhini, Gianluca (2021): "To Err.Is Human: Characterizing the Threat of Unintended URLs in Social Media", in: Proceedings of the Network and Distributed System Security Symposium. (Link)], new bibliography entry, two quote checks added
The cross-platform blocking range omitted TikTok, which is at the top of it, not absent from it accepted fixed in both places, quoting the paper's own 48% summary
biswas2026_longitudinal's DOI does not resolve at doi.org or CrossRef accepted as an observation, not a defect — title and authors check out, almost certainly registration lag recorded above rather than changing the entry
Five duplicate-key pairs elsewhere in the shared bibliography, none used by this page accepted as an observation recorded above for the bibliography's maintainer
beyond-the-guidelines's paper.cols.txt contains a null byte, so plain grep silently reports no match accepted as an observation recorded above; no published figure affected, since every script reads through Node
All 26 content-page and 17 provenance-page citekeys resolve; all 24 new entries' authors, titles, years and DOIs verified, including the eight fetched by hand from landing pages; all 13 footnoted URLs fetched and their quotes confirmed, including the JS-only Meta and DSA pages confirmation, no action

Reviewer 3 — external currency (Claude Sonnet)

Finding Verdict Action
The page said “the Basic tier the paper worked around no longer exists”. X's changelog says pay-per-use launched 6 February 2026 and “Basic and Pro plans remain available” to existing subscribers accepted rewritten, with both changelog entries quoted and dated; the point that the model changed twice inside 2026 is now made explicitly
Pushshift was labelled “current in practice”. Reddit's own moderator page says access is reinstated only for approved moderators and “limited to moderation use cases only” accepted re-labelled historical-for-researchers in three places, with the primary quote; the page now says a paper citing Pushshift is citing a historical dump
TikTok's non-academic EU pathway is a beta, not open accepted the beta sentence is now quoted rather than the eligibility asserted
The OJ publication date (9 October 2025) and entry into force (29 October 2025) could be closed off, and the DSA portal states applications open from 29 October 2025 and publishes a register of vetted-researcher projects accepted, re-verified by the author against EUR-Lex and the portal both dates and the register are now on the page; the register is named as where the missing worked example will first appear
X has appealed the €120 M fine (reported as filed 16 February 2026) not published — no primary Curia document could be found recorded in the unverified table
DSA Art. 40(12) has been enforced directly by researchers in German courts (Democracy Reporting International v X) not published — three independent verification attempts failed; see the unverified table recorded, with what would close it. If true it is the largest hole in the page
All 13 previously verified URLs still live with their quotes unchanged; YouTube, Meta and Amazon claims unchanged confirmation, no action

Reviewer 4 — generic, no checklist (Claude Fable)

The generic pass was run against the corrected page, after the three focused ones. It produced 14 findings; 11 were accepted, 3 partly. It is the only reviewer that found anything about framing rather than about facts, and it earned its slot.

Finding Verdict Action
The headline “almost entirely absent from this literature” is numerically right (it re-ran the probes wider and the absolutes held) but invites the inference that the programmes do not work; the mechanical explanation sat 280 lines below accepted caveat moved into the box
The crawlConfig.authentication split republishes a schema read that registration explicitly warns against on this field, with no audit and no caveat accepted — the highest-value finding caveat carried inline, with the sibling field's measured 19.4% false-positive rate; the 145 remain unaudited and the page says so
Cross-page count conflicts: Alexa 412 here vs 463 on website_selection (a subset exceeding its superset), and Mechanical Turk 179 here vs 139 / 92 / 279 on user_studies accepted reconciled in the report script and on the page: 486 name Alexa at all, 464 with a web-unit population, 412 after the role rule
This page's quote-check header claimed to cover “every figure the content page attributes to a paper” while ~12 attributed figures were in no check at all, and the embedded script and output were stale accepted 16 checks added (42 total, all passing), both <file> blocks regenerated, and the overclaim recorded above rather than quietly fixed
“The top two rows are largely app-store work” — row 2 is Meta, not app-store work accepted rewritten to rows 1 and 7
Two pointers send the reader to mobile_and_app_measurement for skill-store and on-device-extraction material that page does not contain accepted reworded to say what that page does and does not cover
Google is rank 1 with 323 papers and gets no route, no read-first and no pointer; and the page is silent on what Reddit currently offers accepted both named as explicit gaps — search/ads auditing in Open Questions, Reddit as a “we could not establish this” bullet
“statistically indistinguishable from the 33.8% baseline” — no test was run, and the platform papers are inside that baseline accepted reworded to “essentially at the baseline”, with both caveats stated
“roughly twice as likely” does not name which baseline it is twice of; against crawling papers (11.5%) the ratio is ~1.3× accepted both baselines now named
“Three practical consequences:” followed by four bullets accepted trivial fix
TikTok-Api is the unofficial scraper library, on a page whose axis is official-versus-unofficial routes accepted row relabelled
“61.5% of platform-subject papers name no instrument” converts absence-from-extracted-tool-lists into a claim about what papers state accepted softened to an upper bound, with the un-audited 552 stated
The early routes table and the closing currency table duplicate each other row-for-row partly accepted the early table's status column reduced to one word and the evidence left to the closing section; the two tables are kept, because one is a route inventory and the other a dated verdict, and a skimmer needs the first
The TikTok no-page justification (“four papers is a paragraph”) reads as the page marking its own homework accepted rewritten to rest on venue scope: the TikTok literature is mostly outside these seven venues, so a page built from this corpus would misrepresent the field
Smaller rigour points: a duplicated sentence in this log; a negative claim (“no academic tier”) with no stated search method; an unquantified reassurance about reviewer-comment contamination; audit precisions quoted as bare points at n = 7–16 all accepted sentence deleted; the tier claim scoped to the pages an applicant is sent to; contamination quantified (36 of 5,869 files, 9 of 897 platform papers); a small-n caveat added here and on the page
Confirmations: the framing claim is delivered (organised by route and denominator, not by vendor); length and section order match the house pattern; the read-first quartet is right for the stated reader; the box's zero/once absolutes survive wider independent probes no action

One thing the generic reviewer reported that is not a page defect: the local checkout's pages/start.txt and pages/design.txt are stale relative to the live wiki. The live pages were updated in this sitting; the stale files are old local copies and were never the source of a save.

  • platforms — the page these notes are for.
  • corpus — the corpus, the selection funnel, and the caveats that apply to every page built on it.
  • design — the index of provenance pages for the design: namespace.
[1]
McCrosky, Jesse; Malla, Ranadheer; Tanskanen, Aapo; Camargo, Chico Q. (2026): "Does This Button Work? Investigating YouTube's Ineffective User Controls", in: Proceedings of the ACM Web Conference. (DOI)
[2]
West, Jack; Thiemt, Lea; Ahmed, Shimaa; Bartig, Maggie; Fawaz, Kassem; Banerjee, Suman (2024): "A Picture is Worth 500 Labels: A Case Study of Demographic Disparities in Local Machine Learning Models for Instagram and TikTok", in: Proceedings of the IEEE Symposium on Security and Privacy. (DOI)
[3]
Vombatkere, Karan; Mousavi, Sepehr; Zannettou, Savvas; Roesner, Franziska; Gummadi, Krishna P. (2024): "TikTok and the Art of Personalization: Investigating Exploration and Exploitation on Social Media Feeds", in: Proceedings of the ACM Web Conference. (DOI)
[4]
Simko, Lucy; Hutchinson, Adryana; Isaac, Alvin; Fries, Evan; Sherr, Micah; Aviv, Adam J. (2024): ""Modern problems require modern solutions": Community-Developed Techniques for Online Exam Proctoring Evasion", in: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security. (DOI)
[5]
Karnam, Sai Keerthana; Dash, Abhisek; Das, Antariksh; Mousavi, Sepehr; Bechtold, Stefan; Gummadi, Krishna P.; Mukherjee, Animesh; Weber, Ingmar; Zannettou, Savvas (2026): "Setting the Course, but Forgetting to Steer: Analyzing Compliance with GDPR's Right of Access to Data by Instagram, TikTok, and Youtube", in: Proceedings of the IEEE Symposium on Security and Privacy. (DOI)
[6]
Zannettou, Savvas; Caulfield, Tristan; Blackburn, Jeremy; Cristofaro, Emiliano De; Sirivianos, Michael; Stringhini, Gianluca; Suarez-Tangil, Guillermo (2018): "On the Origins of Memes by Means of Fringe Web Communities", in: Proceedings of the ACM Internet Measurement Conference. (DOI)
[7]
Venkatadri, Giridhari; Sapiezynski, Piotr; Redmiles, Elissa M.; Mislove, Alan; Goga, Oana; Mazurek, Michelle L.; Gummadi, Krishna P. (2019): "Auditing Offline Data Brokers via Facebook's Advertising Platform", in: Proceedings of the ACM Web Conference. (DOI)
[8]
Cohn-Gordon, Katriel; Damaskinos, Georgios; Neto, Divino; Cordova, Joshi; Reitz, Benoît; Strahs, Benjamin; Obenshain, Daniel; Pearce, Paul; Papagiannis, Ioannis (2020): "DELF: Safeguarding deletion correctness in Online Social Networks", in: Proceedings of the USENIX Security Symposium. (Link)
[9]
Hagen, Christoph; Weinert, Christian; Sendner, Christoph; Dmitrienko, Alexandra; Schneider, Thomas (2021): "All the Numbers are US: Large-scale Abuse of Contact Discovery in Mobile Messengers", in: Proceedings of the Network and Distributed System Security Symposium. (Link)
[10]
Capozzi, Arthur; Morales, Gianmarco De Francisci; Mejova, Yelena; Monti, Corrado; Panisson, André (2023): "The Thin Ideology of Populist Advertising on Facebook during the 2019 EU Elections", in: Proceedings of the ACM Web Conference. (DOI)
[11]
Acharya, Bhupendra; Lazzaro, Dario; López-Morales, Efrén; Oest, Adam; Saad, Muhammad; Cinà, Antonio Emanuele; Schönherr, Lea; Holz, Thorsten (2024): "The Imitation Game: Exploring Brand Impersonation Attacks on Social Media Platforms", in: Proceedings of the USENIX Security Symposium. (Link)
[12]
Beluri, Mario; Acharya, Bhupendra; Khodayari, Soheil; Stivala, Giada; Pellegrino, Giancarlo; Holz, Thorsten (2025): "Exploration of the Dynamics of Buy and Sale of Social Media Accounts", in: Proceedings of the ACM Internet Measurement Conference. (DOI)
[13]
Biswas, Md. Rafiul; Bessghaier, Mabrouka; Ibrahim, Shimaa; Mikros, George K.; Zaghouani, Wajdi (2026): "Longitudinal Trends in Global Climate Change Discourse on Facebook", in: Proceedings of the ACM Web Conference. (DOI)
[14]
Cheng, Long; Wilson, Christin; Liao, Song; Young, Jeffrey; Dong, Daniel; Hu, Hongxin (2020): "Dangerous Skills Got Certified: Measuring the Trustworthiness of Skill Certification in Voice Personal Assistant Platforms", in: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security. (DOI)
[15]
Liao, Song; Aldeen, Mohammed; Yan, Jingwen; Cheng, Long; Luo, Xiapu; Cai, Haipeng; Hu, Hongxin (2024): "Understanding GDPR Non-Compliance in Privacy Policies of Alexa Skills in European Marketplaces", in: Proceedings of the ACM Web Conference. (DOI)
[16]
Xue, Diwen; Ramesh, Reethika; S, Valdik S.; Evdokimov, Leonid; Viktorov, Andrey; Jain, Arham; Wustrow, Eric; Basso, Simone; Ensafi, Roya (2021): "Throttling Twitter: an emerging censorship technique in Russia", in: Proceedings of the ACM Internet Measurement Conference. (DOI)
[17]
Galeazzi, Alessandro; Paudel, Pujan; Conti, Mauro; Cristofaro, Emiliano De; Stringhini, Gianluca (2026): "Revealing The Secret Power: How Algorithms Can Influence Content Visibility on Twitter/X", in: Proceedings of the Network and Distributed System Security Symposium. (Link)
[18]
Kaleli, Beliz; Kondracki, Brian; Egele, Manuel; Nikiforakis, Nick; Stringhini, Gianluca (2021): "To Err.Is Human: Characterizing the Threat of Unintended URLs in Social Media", in: Proceedings of the Network and Distributed System Security Symposium. (Link)
provenance/design/platforms.txt · Last modified: by karel.kubicek.claude

Except where otherwise noted, content on this wiki is licensed under the following license: CC BY-NC-SA 4.0
CC BY-NC-SA 4.0 Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki