[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-study-limits-ad-click-attribute-inference-to-065-auc-after-160-runs":10},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":22,"tags":38,"sources":42,"feedback":46,"feedback_at":22,"cost_usd":46,"total_tokens":46},1231,"study-limits-ad-click-attribute-inference-to-065-auc-after-160-runs","Study limits ad click attribute inference to 0.65 AUC after 160 runs","Researchers find that even with repeated targeted ad campaigns, attribute inference tops out around 0.65 AUC, showing disclosure policies curb privacy leaks.","- Researchers modeled interactive targeted ads as a noisy oracle that can reveal user attributes.\n\nThe team built a synthetic benchmark calibrated with public data, assigning known sensitive labels to a virtual population. They simulated ad campaigns that expose users, record interactions, and optionally disclose linked observations to advertisers. Across four topic variants, seven random seeds, and two interaction settings, Bayesian and supervised attacks peaked at roughly 0.64 AUC in the standard scenario and 0.65 AUC when interactions were higher, after 160 repeated campaigns.\n\nThese numbers matter because they quantify how much personal detail an advertiser can infer from a realistic chain of ad delivery and user response. The ceiling is set not by the attack method but by the platform’s disclosure policy; aggregate reporting, type filtering, and randomized disclosure all suppress the signal. In practice, the findings suggest that without strict policy controls, targeted ad ecosystems could leak more attribute information than regulators might expect.\n\nIn short, the study shows that even with many campaigns, attribute inference stalls near 0.65 AUC, and that disclosure rules are the most effective lever to limit privacy erosion. Regulators should therefore focus on mandating aggregate reporting and stochastic disclosure rather than relying on opaque algorithmic safeguards.","[\"privacy\",\"advertising\",\"machine-learning\"]","2026-06-16T04:00:00.000Z","2026-06-16T19:52:22.340Z","2026-06-16T19:52:25.159Z","published",null,[24,30,34],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Add a concise concluding paragraph that summarizes the key finding and its implications for privacy policy.","resolved",{"id":31,"reviewer":26,"round":32,"reason":33,"status":29},"editor-r2",2,"Add a concise concluding paragraph that clearly summarizes the study’s key finding (disclosure policy cuts inference to ~0.65 AUC after 160 campaigns) and its implications for privacy regulation.",{"id":35,"reviewer":26,"round":36,"reason":37,"status":29},"editor-r3",3,"Add a distinct concluding paragraph that succinctly restates the finding (disclosure policy caps inference at ~0.65 AUC after 160 campaigns) and its implications for privacy regulation.",[39,40,41],"privacy","advertising","machine-learning",[43],{"name":44,"url":45},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2606.15209",0]