安全与隐私robindoherty.com编辑精选
为什么隐私重要：没什么可隐藏并不成立
Why privacy is important, and having “nothing to hide” is irrelevant
2016 — 2024，它一次次回到首页
黑点是上首页（≥ 50 分）的那次投稿，空心点是没冲上去的投稿，点越大分数越高。
导读
这篇文章反驳了“我没什么好隐藏的，所以不在乎隐私”这一常见论调，解释为什么隐私对每个人都很重要，即使你自认清白。文章在 2016 年和 2024 年两度登上 Hacker News 首页，引发关于大规模监控的长期讨论。
为什么经久不衰：它系统性地拆解了“无可隐藏”谬误，而这个问题在监控技术无处不在的今天只会更加紧迫。
HN 评论精选
技术行业在缺乏伦理约束地构建监控基础设施，隐私关乎社会而非个人
我觉得技术圈在监控问题上对自己的角色存在否认。我们期望医生、基因和克隆领域的从业者遵守职业道德并受到约束，违规要有后果。然而数百万软件工程师在构建一个监控社会，却毫无伦理意识、约束或后果。隐私问题的关键不在于你个人——没人在乎你在干什么，个人视角毫无价值——而在于建立一个能追踪整个社会中每个人行为的基础设施，并预先压制对既得利益和现状的威胁。个人或许不需要隐私，但一个健康的社会绝对需要它。
tobbyb查看英文原文
I think the tech crowd is in denial about their role in surveillance. We expect professionals to behave ethically. Doctors and companies working on genetics and cloning for instance are expected to behave ethically and have constraints placed on their work. And with consequences for those behaving unethically. Yet we have millions of software engineers working on building a surveillance society with no sense of ethics, constraints or consequences. What we have instead are anachronistic discussions on things like privacy that seem oddly disconnected from 300 years of accumulated wisdom on surveillance, privacy, free speech and liberty to pretend the obvious is not obvious, and delay the need for ethical behavior and introspection. And this from a group of people who have routinely postured extreme zeal for freedom and liberty since the early 90's and produced one Snowden. That's a pretty bad record by any standards, and indicates the urgent need for self reflection, industry bodies, standards, whistle blower protection and for a wider discussion to insert context, ethics and history into the debate. The point about privacy is not you, no one cares what you are doing so an individual perspective here has zero value, but building the infrastructure and ability to track what everyone in a society is doing, and preempt any threat to entrenched interests and status quo. An individual may not need or value privacy but a healthy society definitely needs it.
“无可隐藏”论违背了无罪推定原则，把举证责任错误地压在被监控者身上
“没什么可隐藏”这一论点的问题在于，它把“什么值得隐藏”的举证和判定责任推给了被调查的对象。如果你认同法律中“无罪推定”的前提，那么举证责任就在调查方。你要么相信无罪推定，要么不信——只能选一个。
raminf查看英文原文
The issue with the 'nothing to hide' argument is that it puts the burden of proof and determination of whether something is 'hide-worthy' on the target of the inquiry. If you subscribe to the 'presumed innocent' premise of the law (https://en.wikipedia.org/wiki/Presumption_of_innocence) then the burden of proof is on the inquisitor. Either you believe in presumed innocence or you don't. Pick one.
真正的问题不是隐私本身，而是政府不受规则约束、不值得信任
隐私固然重要，但更重要的是能否信任政府不会做明显违法的事，比如明知无辜却把人关进监狱、侵吞其财产。美国最大的问题是政府连自己定的规则都不遵守。在这种时常无端针对民众、肆意破坏规则的政府面前，那种习以为常的软性极权主义才真正可怕——你真正要防范的正是这样的权力。
x5n1查看英文原文
Privacy is less important than the ability to trust your government won't do blatantly illegal things like put innocent people behind bars, steal their money or property, when they actually know that they are innocent. The biggest problem with America is that the government can not be trusted to follow the rules, their own rules. I don't live in the US, but the stuff the government whether local, state, or federal gets away with is very scary to me. What scares me even more is how the United States encroaches on everyone else's legal system. That's the underlying problem. Under such governments that are actually out to get people at times without much cause breaking all sorts of rules, that's what's scary. The type of soft totalitarianism that exists and passes as common place is very scary. And that's really the people you should be scared of, and that's who you really want to protect your information from. Your run of the mill government that's actually trying to do a good job and not break its own rules, that sort of government like my government, scares me a lot less. Despite the fact that they encroach on my privacy. I know heads are going to roll if it comes out that they do things that are blatantly wrong or abusive with the information that they are collecting. Not so in the US. They always have a half-ass lie that still somehow passes muster.
用保险、数据泄露等切身利益举例，比抽象权利更能说服普通人
每次读这类文章，我都不明白为什么说明大规模监控如何伤害普通人的例子总是这么牵强。比如“你会因此不敢接触可能成为国家关注对象的人”——普通人根本不认识这种人，说服不了任何人。根据我的经验，和持怀疑态度的人谈钱最有效：想象掌握这些数据的人把信息透露给你的保险公司，你还觉得没什么可隐藏吗？只需证明数据永远不“安全”、随时可能“泄露”，就能给出一个日常化的理由。
kmonad查看英文原文
Whenever I read one of these articles I am wondering why the examples of WHY mass surveillance affects ME as average Joe negatively have to be so weak / contrived: For example, imagine someone convinced by the argument "nothing to hide nothing to fear". Would this example convince them that in fact they do have to fear something? "You might think twice about contacting or meeting people (exercising your freedom of association) who you think might become “persons of interest” to the state". I do not think so, after all, average Joe does not know such people. The solution, in my experience when talking to sceptical people not convinced of the risks is talking about money. Imagine someone with the kind of knowledge we are talking about with mass surveillance. And imagine this person could inform your insurance companies. Do you still think that you have nothing to hide? One then must only show that data is never "safe" and could always be "leaked" to make a very simple, everyday example of why it is not in my (average Joe's) interest to be continuously monitored.
历次讨论
同类还值得读
非法素数
Illegal prime
维基百科条目，介绍“非法素数”：某些素数之所以被称为“非法”，是因为它们经特定编码后，恰好对应一段被法律禁止传播的数据——最著名的是 DVD 解密程序 DeCSS 的代码，有人把…
安全与隐私上首页 5 次 · 2010–2021en.wikipedia.org编辑精选关于 /dev/urandom 的常见误区
Myths about /dev/urandom
（Thomas Hühn 撰写，2014 年首发并持续更新）逐条反驳关于 /dev/urandom 的常见误解：它与 /dev/random 使用的是同一个 CSPRNG，一旦完…
安全与隐私上首页 5 次 · 2014–20202uo.de编辑精选AES 高级加密标准火柴人图解
A Stick Figure Guide to the Advanced Encryption Standard (AES)
一篇用火柴人漫画形式讲解 AES（高级加密标准）算法的经典科普文章。
安全与隐私上首页 5 次 · 2009–2022moserware.com编辑精选指纹是用户名，不是密码
Fingerprints are Usernames, not Passwords
作者（eCryptfs 维护者、Ubuntu 安全工程师）认为指纹等生物特征是公开、不可更改的标识，应视作用户名而非密码，不能当作秘密凭据用于认证。
安全与隐私上首页 4 次 · 2013–2017blog.dustinkirkland.comHTTPS 连接的最初几毫秒（2009）
The First Few Milliseconds of an HTTPS Connection (2009)
逐毫秒拆解一次 HTTPS 连接建立时发生了什么，重点讲 TLS 握手、证书验证、RSA 签名与密钥协商等机制，面向不熟悉该领域的读者。
安全与隐私上首页 4 次 · 2009–2020moserware.com编辑精选