refs.bib

@online{chrome2024crux,
    url = {https://developer.chrome.com/docs/crux},
    year = {2024},
    month = {02},
    title = {Overview of {CrUX}},
    urldate = {2024-08-06},
    author = {{Chrome for Developers}}
}

@inproceedings{bouhoula2023automated,
    year = {2023},
    title = {Automated Large-Scale Analysis of Cookie Notice Compliance},
    booktitle = {USENIX Security Symposium},
    author = {Bouhoula, Ahmed and Kubicek, Karel and Zac, Amit and Cotrini, Carlos and Basin, David}
}

@inproceedings{kampanos2021accept,
    year = {2021},
    pages = {213--227},
    title = {Accept all: The landscape of cookie banners in {Greece} and the {UK}},
    booktitle = {IFIP International Conference on ICT Systems Security and Privacy Protection},
    organization = {Springer},
    author = {Kampanos, Georgios and Shahandashti, Siamak F}
}

@inproceedings{khandelwal2023automated,
    year = {2023},
    pages = {1109--1126},
    title = {Automated cookie notice analysis and enforcement},
    booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
    author = {Khandelwal, Rishabh and Nayak, Asmit and Harkous, Hamza and Fawaz, Kassem}
}

@online{iframeMdn,
    url = {https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe},
    title = {$<$iframe$>$: The Inline Frame element},
    urldate = {2024-07-09}
}

@online{shadowDomMdn,
    url = {https://developer.mozilla.org/en-US/docs/Web/API/Web_components/Using_shadow_DOM
  },
    title = {Using shadow {DOM}},
    urldate = {2024-07-10}
}

@online{gdpr2016,
    url = {https://data.europa.eu/eli/reg/2016/679/2016-05-04},
    year = {2016},
    month = {4},
    title = {Regulation (EU) 2016/679 of the {European Parliament} and of the {Council} of 27
    {April} 2016 on the protection of natural persons with regard to the processing
    of personal data and on the free movement of such data, and repealing
    {Directive 95/46/EC (General Data Protection Regulation)}
  },
    urldate = {2024-07-22},
    author = {{European Parliament} and {Council of the European Union}}
}

@online{privacydirective2016,
    url = {https://eur-lex.europa.eu/eli/dir/2002/58/oj},
    year = {2002},
    month = {7},
    title = {Directive {2002/58/EC} of the {European Parliament} and of the {Council} of 12 {July}
    2002 concerning the processing of personal data and the protection of privacy
    in the electronic communications sector ({Directive} on privacy and electronic
    communications)
  },
    urldate = {2024-07-23},
    author = {{European Parliament} and {Council of the European Union}}
}

@online{manifestv3,
    url = {https://developer.chrome.com/docs/extensions/develop/migrate/what-is-mv3},
    title = {Manifest {V3}},
    urldate = {2024-07-30},
    author = {{Chrome for Developers}}
}

@online{oslund2002learnings,
    url = {https://devblogs.microsoft.com/engineering-at-microsoft/learnings-from-migrating-accessibility-insights-for-web-to-chromes-manifest-v3/
  },
    year = {2022},
    month = {12},
    title = {Learnings from migrating {Accessibility Insights} for {Web} to {Chrome’s}
    {Manifest V3}
  },
    urldate = {2024-07-30},
    author = {Sarah Oslund}
}

@online{gonzalez2024bitwarden,
    url = {https://bitwarden.com/blog/bitwarden-manifest-v3/},
    year = {2024},
    month = {05},
    title = {Bitwarden transitions from Manifest v2 to v3},
    urldate = {2024-07-30},
    author = {Cesar Gonzalez}
}

@inbook{frisbie2023browser,
    doi = {10.1007/978-1-4842-8725-5_4},
    url = {https://doi.org/10.1007/978-1-4842-8725-5_4},
    isbn = {978-1-4842-8725-5},
    year = {2023},
    title = {Browser Extension Architecture},
    address = {Berkeley, CA},
    abstract = {Understanding how the various elements of browser extensions work is
    important, but even more important is understanding how they work together.
    The architecture of browser extensions is unusual and multifaceted:
  },
    booktitle = {Building Browser Extensions: Create Modern Extensions for Chrome, Safari,
    Firefox, and Edge
  },
    publisher = {Apress},
    author = {Frisbie, Matt}
}

@inproceedings{carlini2012evaluation,
    url = {https://www.usenix.org/conference/usenixsecurity12/technical-sessions/presentation/carlini
  },
    year = {2012},
    month = {08},
    pages = {97--111},
    title = {An {Evaluation} of the {Google Chrome Extension Security Architecture}},
    address = {Bellevue, WA},
    booktitle = {21st USENIX Security Symposium (USENIX Security 12)},
    publisher = {USENIX Association},
    author = {Nicholas Carlini and Adrienne Porter Felt and David Wagner}
}

@online{a2024webassembly,
    url = {https://developer.mozilla.org/en-US/docs/WebAssembly/Concepts},
    year = {2024},
    month = {07},
    title = {WebAssembly Concepts},
    urldate = {2024-07-31},
    author = {Mozilla}
}

@misc{matte2020cookiebannersrespectchoice,
    url = {https://arxiv.org/abs/1911.09964},
    year = {2020},
    title = {Do Cookie Banners Respect my Choice? Measuring Legal Compliance of Banners from IAB Europe's Transparency and Consent Framework},
    eprint = {1911.09964},
    primaryclass = {cs.CR},
    archiveprefix = {arXiv},
    author = {Célestin Matte and Nataliia Bielova and Cristiana Santos}
}

@article{shezan2023chkplug,
    doi = {10.14722/ndss.2023.24610},
    url = {https://dx.doi.org/10.14722/ndss.2023.24610},
    issn = {Not available},
    year = {2023},
    pages = {Not available},
    title = {CHKPLUG: Checking GDPR Compliance of WordPress Plugins via Cross-language
    Code Property Graph
  },
    volume = {Not available},
    journal = {Proceedings 2023 Network and Distributed System Security Symposium},
    publisher = {Internet Society},
    author = {Faysal Hossain Shezan and Zihao Su and Mingqing Kang and Nicholas Phair and
    Patrick William Thomas and Michelangelo van Dam and Yinzhi Cao and Yuan Tian
  }
}

@article{zimmeck2024pioneer,
    doi = {10.56553/popets-2024-0048},
    url = {https://dx.doi.org/10.56553/popets-2024-0048},
    issn = {2299-0984},
    year = {2024},
    month = {04},
    pages = {211--234},
    title = {{Website Data Transparency} in the {Browser}},
    volume = {2024},
    journal = {Proceedings on Privacy Enhancing Technologies},
    publisher = {Privacy Enhancing Technologies Symposium Advisory Board},
    author = {Sebastian Zimmeck and Daniel Goldelman and Owen Kaplan and Logan Brown and
    Justin Casler and Judeley Jean-Charles and Joe Champeau and Hamza Harkous
  }
}

@article{kretschmer2021cookie,
    doi = {10.1145/3466722},
    url = {https://dx.doi.org/10.1145/3466722},
    issn = {1559-1131, 1559-114X},
    year = {2021},
    month = {07},
    pages = {1--42},
    title = {Cookie Banners and Privacy Policies: Measuring the Impact of the GDPR on the Web},
    volume = {15},
    journal = {ACM Transactions on the Web},
    publisher = {Association for Computing Machinery (ACM)},
    author = {Michael Kretschmer and Jan Pennekamp and Klaus Wehrle}
}

@article{sanchez_rola2019can,
    doi = {10.1145/3321705.3329806},
    url = {https://dx.doi.org/10.1145/3321705.3329806},
    issn = {Not available},
    year = {2019},
    month = {07},
    pages = {Not available},
    title = {Can I Opt Out Yet?},
    volume = {Not available},
    journal = {Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security},
    publisher = {ACM},
    author = {Iskander Sanchez-Rola and Matteo Dell'Amico and Platon Kotzias and Davide Balzarotti and Leyla Bilge and Pierre-Antoine Vervier and Igor Santos}
}

@inproceedings{bollinger2022automating,
    url = {https://www.usenix.org/conference/usenixsecurity22/presentation/bollinger},
    isbn = {978-1-939133-31-1},
    year = {2022},
    month = {08},
    pages = {2893--2910},
    title = {Automating Cookie Consent and {GDPR} Violation Detection},
    address = {Boston, MA},
    booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
    publisher = {USENIX Association},
    author = {Dino Bollinger and Karel Kubicek and Carlos Cotrini and David Basin}
}

@online{gorin2024edpb,
    url = {https://code.europa.eu/edpb/website-auditing-tool},
    year = {2024},
    month = {01},
    title = {{EDPB} Website Auditing Tool},
    urldate = {2024-08-02},
    author = {Jérôme Gorin}
}

@online{smith1999web,
    url = {https://w2.eff.org/Privacy/Marketing/web_bug.html},
    year = {1999},
    month = {11},
    title = {The Web Bug {FAQ}},
    urldate = {2024-08-02},
    author = {Richard M. Smith}
}

@online{cookie_information2019cookie,
    url = {https://chromewebstore.google.com/detail/mginbgceeeielfenknclfcfegblhpkpf},
    year = {2019},
    month = {11},
    title = {Cookie Compliance Audit Tool},
    urldate = {2024-08-03},
    author = {{Cookie Information A/S}}
}

@article{haas2017wasm,
    doi = {10.1145/3140587.3062363},
    url = {https://dx.doi.org/10.1145/3140587.3062363},
    issn = {0362-1340, 1558-1160},
    year = {2017},
    month = {06},
    pages = {185--200},
    title = {Bringing the web up to speed with {WebAssembly}},
    volume = {52},
    journal = {ACM SIGPLAN Notices},
    publisher = {Association for Computing Machinery (ACM)},
    author = {Andreas Haas and Andreas Rossberg and Derek L. Schuff and Ben L. Titzer and
    Michael Holman and Dan Gohman and Luke Wagner and Alon Zakai and JF Bastien
  }
}

@article{nouwens2020dark,
    doi = {10.1145/3313831.3376321},
    url = {https://dx.doi.org/10.1145/3313831.3376321},
    year = {2020},
    month = {04},
    title = {Dark Patterns after the {GDPR}: Scraping Consent Pop-ups and Demonstrating their Influence},
    journal = {Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems},
    publisher = {ACM},
    author = {Midas Nouwens and Ilaria Liccardi and Michael Veale and David Karger and Lalana Kagal}
}

@article{chen2016xgboost,
    doi = {10.1145/2939672.2939785},
    url = {https://dx.doi.org/10.1145/2939672.2939785},
    year = {2016},
    month = {08},
    title = {XGBoost},
    journal = {Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining},
    publisher = {ACM},
    author = {Tianqi Chen and Carlos Guestrin}
}

@online{purdy2024chrome,
    url = {https://arstechnica.com/gadgets/2024/08/chromes-manifest-v3-and-its-changes-for-ad-blocking-are-coming-real-soon/},
    year = {2024},
    month = {08},
    title = {Chrome's {Manifest V3} and its changes for ad blocking, are coming real soon},
    urldate = {2024-08-06},
    author = {Kevin Purdy}
}

@online{huczynski2018ublock,
    url = {https://github.com/uBlockOrigin/uBlock-issues/issues/338},
    year = {2018},
    month = {12},
    title = {Chrome extension manifest v3 proposal},
    urldate = {2024-08-06},
    author = {Gregory Huczynski and Raymond Hill and Kus Resa and others}
}

@online{hill2024google,
    url = {https://github.com/gorhill/uBlock/wiki/About-Google-Chrome's-%22This-extension-may-soon-no-longer-be-supported%22},
    year = {2024},
    month = {08},
    title = {About {Google Chrome's} "{This} extension may soon no longer be supported"},
    urldate = {2024-08-06},
    author = {Raymond Hill}
}

@article{devlin2018bert,
    year = {2018},
    title = {Bert: Pre-training of deep bidirectional transformers for language understanding},
    journal = {arXiv preprint arXiv:1810.04805},
    author = {Jacob Devlin and Ming-Wei Chang and Kenton Lee and Kristina Toutanova}
}

@online{huggingface2023transformers,
    url = {https://huggingface.co/docs/transformers.js/en/index},
    year = {2023},
    title = {Transformers.js},
    urldate = {2024-08-06},
    author = {Huggingface and Joshua Lochner}
}

@article{santos2021cookie,
    doi = {10.1145/3463676.3485611},
    url = {https://dx.doi.org/10.1145/3463676.3485611},
    year = {2021},
    month = {11},
    title = {Cookie Banners, {What}'s the {Purpose}?},
    journal = {Proceedings of the 20th Workshop on Workshop on Privacy in the Electronic Society},
    publisher = {ACM},
    author = {Cristiana Santos and Arianna Rossi and Lorena Sanchez Chamorro and Kerstin Bongard-Blanchy and Ruba Abu-Salma}
}

@article{trevisan2019cookielaw,
    doi = {10.2478/popets-2019-0023},
    url = {https://dx.doi.org/10.2478/popets-2019-0023},
    year = {2019},
    month = {04},
    pages = {126--145},
    title = {4 Years of EU Cookie Law: Results and Lessons Learned},
    volume = {2019},
    journal = {Proceedings on Privacy Enhancing Technologies},
    publisher = {Privacy Enhancing Technologies Symposium Advisory Board},
    author = {Martino Trevisan and Stefano Traverso and Eleonora Bassi and Marco Mellia}
}

@phdthesis{kubicek2024phd,
    doi = {10.3929/ethz-b-000662039},
    year = {2024},
    title = {Automated Analysis and Enforcement of Consent Compliance},
    school = {ETH Zurich},
    author = {Karel Kubicek}
}

@conference{kubicek2022cookieaudit,
    year = {2022},
    month = {8},
    title = {{CookieBlock} \& {CookieAudit}: Fixing Cookie Consent with {ML} (poster)},
    address = {Boston, MA},
    publisher = {USENIX Association},
    author = {Karel Kubicek and Dino Bollinger and Adrian Zanga and Carlos Cotrini and David Basin}
}

@online{easylist2024cookie,
    url = {https://easylist.to},
    year = {2024},
    title = {{EasyList}},
    urldate = {2024-08-20},
    author = {Fanboy and MonztA and Khrin and Yuki2718 and PiQuark6046}
}

@article{gray2021dark,
    doi = {10.1145/3411764.3445779},
    url = {https://dx.doi.org/10.1145/3411764.3445779},
    year = {2021},
    month = {05},
    title = {Dark {Patterns} and the {Legal Requirements} of {Consent Banners}: {An Interaction Criticism Perspective}},
    journal = {Proceedings of the 2021 CHI Conference on Human Factors in Computing Systems},
    publisher = {ACM},
    author = {Colin M. Gray and Cristiana Santos and Nataliia Bielova and Michael Toth and Damian Clifford}
}

@article{zac2023dark,
    doi = {10.2139/ssrn.4547964},
    url = {https://dx.doi.org/10.2139/ssrn.4547964},
    issn = {1556-5068},
    year = {2023},
    title = {{Dark Patterns} and {Online Consumer Vulnerability}},
    journal = {SSRN Electronic Journal},
    publisher = {Elsevier BV},
    author = {Amit Zac and Yun-Chun Huang and Amédée von Moltke and Christopher Decker and Ariel Ezrachi}
}

@article{stover2022website,
    year = {2022},
    title = {Website operators are not the enemy either-{Analyzing} options for creating cookie consent notices without dark patterns},
    publisher = {Gesellschaft f{\"u}r Informatik eV},
    author = {Alina St{\"o}ver and Nina Gerber and Christin Cornel and Mona Henz and Karola Marky and Verena Zimmermann and Joachim Vogt}
}

@online{x_rite2024color,
    url = {https://www.xrite.com/learning-color-education/other-resources/glossary},
    year = {2024},
    title = {{Color Glossary}},
    urldate = {2024-08-22},
    author = {{X-Rite, Incorporated}}
}

@techreport{ITURBT2124,
    key = {ITU-R BT.2124},
    year = {2019},
    month = {01},
    title = {Objective metric for the assessment of the potential visibility of colour differences in television},
    address = {Geneva, CH},
    institution = {Internation Telecommunication Union}
}

@article{bakos2014fineprint,
    doi = {10.1086/674424},
    url = {https://dx.doi.org/10.1086/674424},
    issn = {0047-2530, 1537-5366},
    year = {2014},
    month = {01},
    pages = {1--35},
    title = {{Does Anyone Read the Fine Print? Consumer Attention to Standard-Form Contracts}},
    volume = {43},
    journal = {The Journal of Legal Studies},
    publisher = {University of Chicago Press},
    author = {Yannis Bakos and Florencia Marotta-Wurgler and David R. Trossen}
}

@online{whatwg2024interface,
    url = {https://dom.spec.whatwg.org/#interface-mutationobserver},
    year = {2024},
    month = {08},
    title = {{Interface MutationObserver}},
    urldate = {2024-08-25},
    author = {{Web Hypertext Application Technology Working Group}}
}