安全与隐私propublica.org
Google 放弃了禁止追踪个人身份信息的承诺
Google Has Dropped Ban on Personally Identifiable Web Tracking
2016 — 2019，它一次次回到首页
黑点是上首页（≥ 50 分）的那次投稿，空心点是没冲上去的投稿，点越大分数越高。
导读
这篇 ProPublica 报道称，Google 悄悄删除了隐私政策中“除非用户主动选择加入，否则不把 DoubleClick cookie 信息与个人身份信息合并”的承诺，改为可能根据账户设置将用户在其它网站和应用上的活动与个人信息关联。批评者认为这让 opt-in 变成 opt-out，扩大了广告追踪的空间。2019 年该文再上首页时，讨论已延伸到 Chrome 与 Google 账号登录绑定带来的隐私担忧。
为什么经久不衰：它记录了“默认追踪”取代“明确同意”的关键转折，也浓缩了广告商业模式与用户隐私之间的长期冲突，因此多年后仍值得读。
HN 评论精选
广告驱动的搜索引擎存在结构性利益冲突。
评论者引用斯坦福早期论文提醒：商业搜索引擎的主要商业模式是广告，而广告目标并不总与为用户提供优质搜索一致；广告资助的搜索引擎会天然偏向广告主、偏离消费者需求。作者当年就预计这种利益冲突。
dredmorbius查看英文原文
I'd just like to draw people's attention to a little bit of conflict-of-interest research some Stanford University researchers published a few years ago: Currently, the predominant business model for commercial search engines is advertising. The goals of the advertising business model do not always correspond to providing quality search to users. For example, in our prototype search engine one of the top results for cellular phone is "The Effect of Cellular Phone Use Upon Driver Attention", a study which explains in great detail the distractions and risk associated with conversing on a cell phone while driving. This search result came up first because of its high importance as judged by the PageRank algorithm, an approximation of citation importance on the web [Page, 98]. It is clear that a search engine which was taking money for showing cellular phone ads would have difficulty justifying the page that our system returned to its paying advertisers. For this type of reason and historical experience with other media [Bagdikian 83], we expect that advertising funded search engines will be inherently biased towards the advertisers and away from the needs of the consumers. http://infolab.stanford.edu/~backrub/google.html
隐私政策从需主动同意改为默认退出，实质是默认追踪。
早先：除非获得你的 opt-in 同意，我们不会把 DoubleClick cookie 信息与你的个人身份信息结合。现在：取决于你的账户设置，你在其他网站和应用上的活动可能与你的个人信息关联，以改进 Google 的服务和广告。也就是说，opt-in 变成了 opt-out。
0xmohit查看英文原文
Earlier: We will not combine DoubleClick cookie information with your personally identifiable information unless we have your opt-in consent. Now: Depending on your account settings, your activity on other sites and apps may be associated with your personal information in order to improve Google's services and the ads delivered by Google. So opt-in becomes opt-out.
认为报道夸大：变更只是澄清数据源并增加设置入口，并非隐私实质变化。
文章不准确。它讲的是这个变更：只是澄清 DoubleClick 并非唯一数据源，并链接到新的控制面板（opt-in/out 设置界面此前没有链接）。政策文档的改动是改进，不是隐私上的变化。如果你不喜欢新政策，逻辑上你也不会喜欢旧政策。
hopler查看英文原文
The article is not accurate. The article is about this change[0], which is simply clarifying that DoubleClick isn't the only data source and linking to the new control panel where the opt-in/out settings UI is (there was no link before). The policy document change is an improvement, and isn't a change in privacy. If too don't like the new policy (up to you), then logically you didn't like the old policy either. https://www.google.com/policies/privacy/archive/20160325-20160628/
Chrome 登录设置可被 Gmail 登录绕过，浏览器与账号身份绑定加剧追踪。
想见识 Google 现在用的狡猾手段？打开 Chrome 设置，关闭“允许 Chrome 登录”，然后去登录 Gmail。你会发现不管这个设置如何，你已经被登录进 Chrome 了。登录 Gmail 就等于把身份分享给浏览器本身。微软基于 Chromium 的 Edge 来得再快也不为过。
petilon查看英文原文
If you want to see an example of the devious means now employed by Google, open Chrome settings and turn off "Allow Chrome sign-in". Then go to Gmail and sign in. You are now signed into Chrome, regardless of the setting. By signing into Gmail you are sharing your identity with the browser itself. Microsoft's Chromium-based Edge can't arrive soon enough.
历次讨论
同类还值得读
非法素数
Illegal prime
维基百科条目，介绍“非法素数”：某些素数之所以被称为“非法”，是因为它们经特定编码后，恰好对应一段被法律禁止传播的数据——最著名的是 DVD 解密程序 DeCSS 的代码，有人把…
安全与隐私上首页 5 次 · 2010–2021en.wikipedia.org编辑精选关于 /dev/urandom 的常见误区
Myths about /dev/urandom
（Thomas Hühn 撰写，2014 年首发并持续更新）逐条反驳关于 /dev/urandom 的常见误解：它与 /dev/random 使用的是同一个 CSPRNG，一旦完…
安全与隐私上首页 5 次 · 2014–20202uo.de编辑精选AES 高级加密标准火柴人图解
A Stick Figure Guide to the Advanced Encryption Standard (AES)
一篇用火柴人漫画形式讲解 AES（高级加密标准）算法的经典科普文章。
安全与隐私上首页 5 次 · 2009–2022moserware.com编辑精选指纹是用户名，不是密码
Fingerprints are Usernames, not Passwords
作者（eCryptfs 维护者、Ubuntu 安全工程师）认为指纹等生物特征是公开、不可更改的标识，应视作用户名而非密码，不能当作秘密凭据用于认证。
安全与隐私上首页 4 次 · 2013–2017blog.dustinkirkland.comHTTPS 连接的最初几毫秒（2009）
The First Few Milliseconds of an HTTPS Connection (2009)
逐毫秒拆解一次 HTTPS 连接建立时发生了什么，重点讲 TLS 握手、证书验证、RSA 签名与密钥协商等机制，面向不熟悉该领域的读者。
安全与隐私上首页 4 次 · 2009–2020moserware.com编辑精选