# Internet measurement

The study introduces PixelConfig, a differential-analysis framework that reverse-engineers Meta Pixel configurations through code-patching replays and developer-account controlled experiments, and uses Internet Archive's Wayback Machine to longitudinally compare configurations on 18K health websites against a top-10K control group from 2017 to 2024, finding that default-enabled tracking features such as automatic events and first-party cookies reached adoption rates up to 98.4%, that health websites show tracking of potentially sensitive information tied to booking medical appointments and button clicks associated with specific conditions such as erectile dysfunction, and that restriction features like Core Setup were configured on 34.3% of health websites versus 8.

The study introduces PixelConfig, a differential-analysis framework that reverse-engineers Meta Pixel configurations through code-patching replays and developer-account controlled experiments, and uses Internet Archive's Wayback Machine to longitudinally compare configurations on 18K health websites against a top-10K control group from 2017 to 2024, finding that default-enabled tracking features such as automatic events and first-party cookies reached adoption rates up to 98.4%, that health websites show tracking of potentially sensitive information tied to booking medical appointments and button clicks associated with specific conditions such as erectile dysfunction, and that restriction features like Core Setup were configured on 34.3% of health websites versus 8.

The authors introduce GateScope, a lightweight black-box auditing framework that uses only public APIs to evaluate LLM API gateways along response content, multi-turn conversation consistency, billing accuracy, and latency characteristics; controlled validation on official endpoints yields an average F1 of 0.968±0.085 across 24 models, and auditing 10 commercial gateways reveals identification rates as low as 13.09% for gpt-5, degraded multi-turn memory checkpoints, a 62.8% billing gap for o*ey on gpt-4o, and markedly higher latency variation for b*ie.

The authors introduce GateScope, a lightweight black-box auditing framework that uses only public APIs to evaluate LLM API gateways along response content, multi-turn conversation consistency, billing accuracy, and latency characteristics; controlled validation on official endpoints yields an average F1 of 0.968±0.085 across 24 models, and auditing 10 commercial gateways reveals identification rates as low as 13.09% for gpt-5, degraded multi-turn memory checkpoints, a 62.8% billing gap for o*ey on gpt-4o, and markedly higher latency variation for b*ie.

Using XMap to probe port 11434 across the full IPv4 space daily from 2025-02-14 to 2026-02-13 over 362 observed days, a Nankai University team found 152,137 cumulative exposed Ollama endpoints, with daily alive endpoints rising from 10,473 to 16,059 (+53.3%), 26.4% of IPs appearing on a single day, only 0.43%–2.90% of below-fix IPs upgrading in place across five CVE cutoffs, the top five countries/regions holding about 70% of weighted observations, and the top five ASNs all cloud or hosting providers, complemented by PTR and port-443 TLS probing of operational characteristics.

Using XMap to probe port 11434 across the full IPv4 space daily from 2025-02-14 to 2026-02-13 over 362 observed days, a Nankai University team found 152,137 cumulative exposed Ollama endpoints, with daily alive endpoints rising from 10,473 to 16,059 (+53.3%), 26.4% of IPs appearing on a single day, only 0.43%–2.90% of below-fix IPs upgrading in place across five CVE cutoffs, the top five countries/regions holding about 70% of weighted observations, and the top five ASNs all cloud or hosting providers, complemented by PTR and port-443 TLS probing of operational characteristics.