安全与隐私signal.org
Facebook 不会给你看的 Instagram 广告
Instagram ads Facebook won't show you
2021 — 2022，它一次次回到首页
黑点是上首页（≥ 50 分）的那次投稿，空心点是没冲上去的投稿，点越大分数越高。
导读
Signal 团队设计了一系列 Instagram 广告，广告文案直接展示平台根据用户个人数据推断出的定向信息（如“你是某公司的产品经理”），以此揭示 Facebook 广告定向系统的运作方式。这些广告大多被 Facebook 拒绝投放，Signal 将整个过程写成博客文章公开。
为什么经久不衰：它用一场真实实验直观展示了广告平台如何利用个人数据做定向，多年后仍是讨论数据隐私时最常被引用的案例之一。
HN 评论精选
建议把定向数据做成 T 恤出售，作为隐私公司的营销噱头
诀窍在于把所有个人数据印在一件异常具体的 T 恤上卖。现在有售，尺码'L'！'我是住在西雅图的自豪爸爸，毕业于华盛顿大学，曾去中美洲旅行过一阵。我养狗、爱读书、偶尔抱怨政治。'如果看到我肯定会买，就图一乐，以及对隐私的虚无态度。事实上，如果我是注重隐私的公司，我绝对会拿这个做营销噱头。
sharkweek查看英文原文
See, the trick here is to put all the personal data onto an oddly specific t-shirt that's for sale. Available now, size "Large" t-shirt for sale! "I'm a proud dad living in Seattle who attended the University of Washington and once went on a trip to Central America for a while. I have a dog and like to read and occasionally complain about politics." I'd buy this if I saw it, if just for the lulz and nihilistic outlook when it comes to privacy. In fact... if I were a privacy-focused company, I'd 100% do this as a marketing stunt.
这实验同时展示了定向的可怕与精准，取决于读者立场
这既是 Signal 的广告，也是 Facebook 广告定向能力的广告。普通消费者读了会惊恐于 Facebook 用他们自愿提供的信息赚钱；而买广告的人读了会惊叹 Facebook 定向之精准，然后往广告账户里充一万美金试试。至于我，我用 Facebook 也接受基于我分享的信息看到广告，但我划的红线是 Facebook 渗入我在站外的浏览记录。所以我用 Mozilla 的 Facebook Container 扩展并屏蔽其分享追踪按钮，用移动浏览器而非 App 访问 Facebook，用 Signal 替代 Messenger，以限制其追踪我的位置和手机元数据。
Someone1234查看英文原文
This is both an ad for Signal and an ad for Facebook Ad's ability to target depending on who is reading it. What I mean is that for your average consumer, they'll read this and be horrified that Facebook is using the information they voluntarily gave Facebook to make money. But someone who is buying ads will read this same thing, be impressed by just how tightly Facebook can target, and put $10K into an Ad Account to try it out. As to me, I use Facebook, I am willing to see ads within Facebook using the information I share with Facebook but where I draw the line is Facebook "leaking" into my wider web browsing history (either tracking me, or using my non-Facebook browsing to advertise to me on Facebook). Therefore, I use Mozilla's Facebook Container extension and blacklist Facebook/Instagram's "Share" tracking buttons. I also access Facebook from a mobile browser rather than app and use Signal instead of Facebook Messager, to limit Facebook's ability to track my location and other phone meta-data.
人们在意的是隐私的幻觉，而非隐私本身
多年前我在维基百科给登录用户加了个小部件，可以显示本地聚会通知。结果发现，如果消息太具体，比如'你所在地区即将举行聚会：纽约聚会'，人们会对这种隐私侵犯相当愤怒。于是设置说明只能让作者改写成'了解即将举行的聚会！'——当然，这条消息只在你附近真有聚会时才显示。无论显示与否，网站都能根据 IP 猜出你的地理位置，泄露的隐私几乎一样——甚至更糟，因为有人提到自己看到了通知，就等于泄露了位置。但更笼统的措辞就没招致抱怨。有时候，人们更在意享受隐私的幻觉，而不是真正拥有隐私。
nullc查看英文原文
Years ago I added a widget to the user interface on wikipedia for logged in users so that people were able to add geography specific notification to tell editors about meetups that were coming up in their area. It turned out that if the message displayed was too specific, like "Upcoming meetup in your area: [New York meetup]" people got rather angry about the privacy invasion. So instead the instructions for setting the messages had to tell the authors to instead say stuff like "Find out about upcoming meetups!" -- which of course was only displayed if there actually was an upcoming meetup near where you geolocated. Of course, regardless of if any message is displayed the site could guess your geography based on your IP address. The exposure of private information was nearly identical-- actually arguably worse because someone might mention that they're currently seeing a notice without realizing that this fact leaked their geography... but the more generic messages didn't generate complaints. (and WP policy effectively makes it impossible to edit via Tor, even for established users in good standing) Sometimes it seems people care a lot more about enjoying the illusion of privacy than they care about actually having privacy.
广告被封可能正是 Signal 有意为之的营销策略
这些广告延续了'从一开始就设计成会被封禁'的光荣传统，因为'我们被封了'这句话本身，就有助于把自己塑造成对体制构成威胁的形象。
kennywinker查看英文原文
These ads follows along in the proud tradition of banned ads that were designed to be banned from the onset because saying "we got banned" is useful for positioning yourself as dangerous to the establishment.
历次讨论
同类还值得读
非法素数
Illegal prime
维基百科条目，介绍“非法素数”：某些素数之所以被称为“非法”，是因为它们经特定编码后，恰好对应一段被法律禁止传播的数据——最著名的是 DVD 解密程序 DeCSS 的代码，有人把…
安全与隐私上首页 5 次 · 2010–2021en.wikipedia.org编辑精选关于 /dev/urandom 的常见误区
Myths about /dev/urandom
（Thomas Hühn 撰写，2014 年首发并持续更新）逐条反驳关于 /dev/urandom 的常见误解：它与 /dev/random 使用的是同一个 CSPRNG，一旦完…
安全与隐私上首页 5 次 · 2014–20202uo.de编辑精选AES 高级加密标准火柴人图解
A Stick Figure Guide to the Advanced Encryption Standard (AES)
一篇用火柴人漫画形式讲解 AES（高级加密标准）算法的经典科普文章。
安全与隐私上首页 5 次 · 2009–2022moserware.com编辑精选指纹是用户名，不是密码
Fingerprints are Usernames, not Passwords
作者（eCryptfs 维护者、Ubuntu 安全工程师）认为指纹等生物特征是公开、不可更改的标识，应视作用户名而非密码，不能当作秘密凭据用于认证。
安全与隐私上首页 4 次 · 2013–2017blog.dustinkirkland.comHTTPS 连接的最初几毫秒（2009）
The First Few Milliseconds of an HTTPS Connection (2009)
逐毫秒拆解一次 HTTPS 连接建立时发生了什么，重点讲 TLS 握手、证书验证、RSA 签名与密钥协商等机制，面向不熟悉该领域的读者。
安全与隐私上首页 4 次 · 2009–2020moserware.com编辑精选