我们追踪了打开 11 家科技新闻网站时会发生的事情

Finding

The audit found that WIRED’s supplied local capture recorded 90 Pinterest audience-segment events and transmitted fields labeled “email_sha256” and “fingerprint,” while RuntimeWire’s 6.6-second homepage capture reached two outside domains and showed no recognized ad trackers or tested social-pixel endpoints.

How we verified

Methods: testing, data analysis.

WIRED’s local browser network log recorded 90 Pinterest requests, 35 distinct segment IDs, and identify-request payloads with nonempty email_sha256 and fingerprint fields; RuntimeWire’s homepage capture recorded two outside domains and requests to its own page-view API.

The article reports scans of ten major English-language technology publishers plus RuntimeWire. Nine publisher automated scans completed; after WIRED’s automated scan failed twice, the audit analyzed a locally captured browser network log spanning three homepage loads. It inspected request URLs and bodies for events and identifiers, counted outside domains using the Public Suffix List, and compared a consistent first-five-seconds window. RuntimeWire’s homepage capture lasted 6.6 seconds. The article discloses that RuntimeWire’s owner supplied the WIRED capture and that the same domain-counting and request-inspection rules were applied to RuntimeWire.

Evidence

• See below

Company response

The company was not contacted before publication.