THE TAKE
They hid who else is taking.
//TECHNICAL_DESCRIPTION
Third-party data collection not disclosed in privacy policy. Vendors operate on a site collecting data without being named in the privacy policy, terms of service, or consent UI. The site owner may not even know they exist.
//ESCALATION_CONTEXT
How This Escalates BTI-C Findings
Escalates any BTI-C finding from a technical violation to a disclosure violation. If a vendor is collecting data (C03, C08, C14) AND is undisclosed, the legal exposure multiplies.
//RELATED_ADVISORIES
Related Advisories
No published advisories reference this code yet.
Investigations are ongoing.
Blackout uses security frameworks to protect AGAINST vendors, not FOR them. We do not notify vendors. We do not provide remediation windows. If you're using a vendor flagged by this code, the advisory is your evidence.