安全与隐私papers.ssrn.com编辑精选
“我没什么可隐藏”及其他隐私误解（2007）
'I've Got Nothing to Hide' and Other Misunderstandings of Privacy (2007)
2013 — 2021，它一次次回到首页
黑点是上首页（≥ 50 分）的那次投稿，空心点是没冲上去的投稿，点越大分数越高。
导读
这篇 2007 年的法学论文由乔治·华盛顿大学教授 Daniel Solove 撰写，系统剖析了“我没什么可隐藏的”这一常见论调的逻辑缺陷。作者指出该论点把隐私狭隘地理解为“隐藏坏事”，而忽视了监控、数据聚合等对自由与权力的更深层危害。
为什么经久不衰：在监控无处不在、数据被大规模收集的今天，这篇论文为反驳“没什么可隐藏”提供了最经典、最系统的论证框架，至今仍是隐私讨论的必读文献。
HN 评论精选
连自认清白的人也有不愿公开的隐私，且监控扩张从未像钟摆一样回摆
近30年前我就对“梯队”系统感到愤怒，后来又对《爱国者法案》、互联网断网开关等愈发不满。我和牧师谈起这些，他说“我没什么可隐藏的”。他本人确实无可指摘，但他认为与求助者的谈话是神圣不可侵犯的——他愿意公开自己的短信和邮件吗？当然不愿意。连他都绝对有要隐藏的东西！他还说这些事像钟摆，迟早会摆回来。但在这个问题上他完全错了，钟摆只会继续摆过去。美国两党都参与其中，我不知道什么能纠正这个方向，最终我们可能会迎来中国式的“社会信用”体系，只不过由企业而非政府来运营。
TheRealDunkirk查看英文原文
I got upset about Echelon, almost 30 years ago, and then got further upset with the Patriot Act. The internet kill switch. Etc. Et. al. In speaking with my pastor about these things, he gave me the line, "I've got nothing to hide." Sure, he, personally, is above reproach, and would lay his life bare, but he considers conversations with people he counsels to be sacrosanct. Would he like his text messages and emails published? Of course not. Even he absolutely DOES have things to hide! My pastor is a superhumanly wise person. Almost everything he has said has turned out to be true. Of the Patriot Act, he agreed that the government probably overreached, but he said these things are like a pendulum, and eventually it would swing back. On this subject, he has been completely wrong. The pendulum just keeps going. The problem is that both sides of US politics are in on it, so I don't know what will ever correct this course. It seems that, eventually, we'll have Chinese-style, socially-scored citizenship, just run by corporations instead of the government.
合同保密义务证明每个人在法律上都必须“有东西可隐藏”
对“我没什么可隐藏”最有力的反驳是：它本身就是错的，因为我们许多人在事实上必须隐藏某些东西。比如办理 Visa 或万事达卡时同意的条款明确规定：持卡人不得向任何人泄露 PIN 码和安全码，连发卡机构员工也不例外，并须采取一切合理预防措施。签下这些条款，你就负有保密义务。银行、保险公司等场景中也有类似要求——要保守这些秘密，我们就需要安全地存储和传输信息。
triska查看英文原文
The most striking argument against "I've got nothing to hide" is that it's wrong, because many of us in fact must hide something: Take for instance the terms and conditions that you have to agree to when you sign up for a Visa card or Mastercard: https://www.cardcomplete.com/media/medialibrary/2021/03/AGBs_Kreditkarten_ENG_0719.pdf Quoting from the text (section 5.5): "The Cardholder must not disclose the assigned PIN, nor any personally chosen PIN (see Item 17.8.), nor the Secure Code to anyone, not even to employees of card complete. The Cardholder is responsible for ensuring strict secrecy concerning all card security details – PIN, Secure Code and mobileTANs received on his/her telephone (to be used for authenticating a ViS/MCID transaction and valid for a maximum of 5 minutes after receipt) – and must take all reasonable precautions to ensure that they cannot be discovered by others." Thus, if you sign these conditions, you are obligated to keep this information secret. Similar obligations are imposed on customers for other cards and in other circumstances, in communication with banks, insurance companies etc. To keep these secrets, we need secure ways to store this information, and secure ways to communicate.
引用斯诺登名言：不重视隐私如同不重视言论自由
我喜欢斯诺登的论证：“说你因为没什么可隐藏就不在乎隐私权，和说你因为没什么可说就不在乎言论自由，没有区别。”
shantnutiwari查看英文原文
I liked Snowden argument: “Arguing that you don't care about the right to privacy because you have nothing to hide is no different than saying you don't care about free speech because you have nothing to say.” https://www.goodreads.com/quotes/7308507-arguing-that-you-don-t-care-about-the-right-to-privacy
提醒大家：论文中重构的“没什么可隐藏”论点其实很难反驳
看起来没多少人真正读了原文。论文把“没什么可隐藏”论点构建成一个更难反驳的版本：政府监控程序只会把特定信息披露给少数官员或政府计算机，这种有限披露对守法公民的隐私威胁不大，只有从事非法活动的人才有理由隐藏；而防范恐怖袭击的安全利益极高，足以压倒守法公民的这点隐私利益。以这种方式表述，“没什么可隐藏”论点相当有力。
numlocked查看英文原文
Doesn’t look like many are reading the actual article. It sets up the “nothing to hide” argument as the following, which is quite a bit more difficult to rebut: “ Therefore, in a more compelling form than is often expressed in popular discourse, the nothing to hide argument proceeds as follows: The NSA surveillance, data mining, or other government information- gathering programs will result in the disclosure of particular pieces of information to a few government officials, or perhaps only to government computers. This very limited disclosure of the particular information involved is not likely to be threatening to the privacy of law-abiding citizens. Only those who are engaged in illegal activities have a reason to hide this information. Although there may be some cases in which the information might be sensitive or embarrassing to law-abiding citizens, the limited disclosure lessens the threat to privacy. Moreover, the security interest in detecting, investigating, and preventing terrorist attacks is very high and outweighs whatever minimal or moderate privacy interests law-abiding citizens may have in these particular pieces of information. Cast in this manner, the nothing to hide argument is a formidable one.”
海量数据下，任何人都能被找出“罪证”
我关于线上线下隐私的座右铭是黎塞留红衣主教的话：“给我一个最诚实的人亲手写下的六行字，我就能从中找出足以绞死他的东西。”想象一下数 TB 的数据？！
legrande查看英文原文
My current mantra regarding privacy both offline and online: "If you give me six lines written by the hand of the most honest of men, I will find something in them which will hang him" - Cardinal Richelieu Imagine terabytes of data?!
历次讨论
同类还值得读
非法素数
Illegal prime
维基百科条目，介绍“非法素数”：某些素数之所以被称为“非法”，是因为它们经特定编码后，恰好对应一段被法律禁止传播的数据——最著名的是 DVD 解密程序 DeCSS 的代码，有人把…
安全与隐私上首页 5 次 · 2010–2021en.wikipedia.org编辑精选关于 /dev/urandom 的常见误区
Myths about /dev/urandom
（Thomas Hühn 撰写，2014 年首发并持续更新）逐条反驳关于 /dev/urandom 的常见误解：它与 /dev/random 使用的是同一个 CSPRNG，一旦完…
安全与隐私上首页 5 次 · 2014–20202uo.de编辑精选AES 高级加密标准火柴人图解
A Stick Figure Guide to the Advanced Encryption Standard (AES)
一篇用火柴人漫画形式讲解 AES（高级加密标准）算法的经典科普文章。
安全与隐私上首页 5 次 · 2009–2022moserware.com编辑精选指纹是用户名，不是密码
Fingerprints are Usernames, not Passwords
作者（eCryptfs 维护者、Ubuntu 安全工程师）认为指纹等生物特征是公开、不可更改的标识，应视作用户名而非密码，不能当作秘密凭据用于认证。
安全与隐私上首页 4 次 · 2013–2017blog.dustinkirkland.comHTTPS 连接的最初几毫秒（2009）
The First Few Milliseconds of an HTTPS Connection (2009)
逐毫秒拆解一次 HTTPS 连接建立时发生了什么，重点讲 TLS 握手、证书验证、RSA 签名与密钥协商等机制，面向不熟悉该领域的读者。
安全与隐私上首页 4 次 · 2009–2020moserware.com编辑精选