查看原文
其他

大数据时代,你的衣食住行、银行信息甚至性生活,Siri们都知道

CGTN CGTN 2020-08-25
当你24小时抱着手机的时候,你的手机也在24小时监听你的生活。


英国《卫报》日前报道,负责为苹果Siri语音助理做质量控制与评估的外包公司人员透露,他们经常会听到机密的医疗信息、毒品交易甚至性生活的录音。


Today, we are not being watched by the big brother, but by a lot of brothers.


你的衣食住行、银行信息甚至性生活,Siri们都知道
Siri and her kind know your darkest secrets


Apple commissioned a billboard in Las Vegas during this year"s CES that reads, "What happens on your iPhone stays on your iPhone."


…But, it turns out, it also goes to whoever is listening.


根据这位匿名透露者的消息,Siri有时会在未得到授权的情况下启动,如听到与唤醒语(hey Siri)类似的发音,再比如拉链的声音,甚至,当Apple Watch感受到手臂抬起并听到人声时,Siri便会自动启动——在所有苹果产品中,Apple Watch误启动Siri的概率是最高的。


According to the anonymous source, Siri can be accidentally activated when it hears anything that sounds like "hey Siri" – this can be anything, ranging from words that are similar to the sound of a zip. 


Siri can also be activated when an Apple Watch, the most frequent source of mistaken recordings, detects it has been raised and then hears speech.


“(我们听到)无数私密的录音内容,比如医患对话,商业洽谈,疑似犯罪活动,性行为等等。这些录音同时携带用户数据,包括地理位置,联系信息,和APP数据。”


"There have been countless instances of recordings featuring private discussions between doctors and patients, business deals, seemingly criminal dealings, sexual encounters and so on. These recordings are accompanied by user data showing location, contact details, and app data," The Guardian reported, quoting the whistleblower.


 Apple's digital "HomePod" assistant /Apple official website screenshot


The whistleblower also told the newspaper, “There's not much vetting of who works there, and the amount of data that we're free to look through seems quite broad. It wouldn't be difficult to identify the person that you're listening to, especially with accidental triggers – addresses, names and so on."


苹果回应,只有极小一部分录音会被随机获取用于提升Siri的能力,让其能更好地理解并帮助用户;使用的录音通常只有几秒,且不与Apple ID相关联。


苹果并非独一家。2018年5月,亚马逊的语音助手Alexa误录下一名美国女性与丈夫的对话并发给一位联系人;本月初,亚马逊官方承认在用户删除Alexa中的个人数据后仍会无限期保存。


而就在上个月,谷歌的语音助手被指出雇用合同工监听对话录音。


国内的网友也经常发现,自己刚说过想吃的食物,想买的东西,随即就出现在外卖和购物APP的推荐首页……


2018年11月中旬,上海的孙女士在和同事闲聊时提到想喝某品牌奶茶,在打开饿了时,在推荐商家首位看见了该品牌奶茶。让孙女士疑惑的是,自己之前从未在饿了么买过该品牌奶茶,在她手机后台,同时打开了淘宝、微信、知乎、微博等多个App,“此前也没有使用任何手机App搜索过此奶茶的相关信息。


无独有偶,北京一位网友燃玉(化名)在2018年11月14日晚上8点左右,跟朋友说想吃鳗鱼饭,1分钟后打开支付宝上的饿了么应用,推荐位顶部恰巧显示着一家鳗鱼饭的外卖店,此时距离他上次下单鳗鱼饭相隔23天。


——IT时报《隔屏有耳,记者耗时3个月测试,美团饿了么是否在“偷听”?

今年2月,京东金融还曾被网友爆出非法在手机后台获取用户的敏感图片并上传。


种种新闻,令人不寒而栗。


在这个连在饭店点菜都要授权获取个人信息的时代,我们究竟还有隐私可言吗?



隐私不再的“超级全景监狱”?

The panopticon in a digital age


数据窃取和隐私泄露正变成一个世界性的难题。


有人说,今天的我们就像生活在一个“超级全景监狱”(Super-panopticon)里,无时无刻不被人监视。


Our information, often in high-quality audio and video, is being collected and can identify our every move.


First defined by English philosopher Jeremy Bentham in the 18th century, the concept of the "panopticon" was later used by French philosopher Michel Foucault in his renowned work "Discipline and Punishment" to elaborate on how individuals are "carefully fabricated in" the social order.


Mark Poster later developed the concept of the "super-panopticon", which differs in its use of storage and seems even more relevant today in a digital and data-driven world. 


Most of the time, we have no idea if we are being watched.


在这种中央是眺望塔,四周为环型监狱的建筑结构中,只需一位监视者就可以监视所有的犯人,而犯人却无法确定自己是否正受到监视。


美国媒介史学者波斯特后来将这一概念与数据库相结合,称其为“超级全景监狱”。当技术所带来的权力消解了私人与公共空间的界限,便形成了对人无时无刻的隐秘监视系统。


这很像我们与今天的数字社会的关系:大部分时间没有人在特意窥视你的生活,但如果“监视”者想看任何人,都可以一览无遗。

A still from Oliver Stone's 2016 film "Snowden"


而另一方面,人们又是否是自愿用隐私去换取生活的便捷与自我展示表达的舞台呢?


毕竟手机是自己买的,APP是自己下的,注册信息都是自己填的。


只是,这信息一旦给出,就由不得你决定它再去向何方。

如何更好地保护隐私?"Hands off my data"


1) 强化法律监督


去年5月,被视为“史上最严”的欧盟隐私法案《通用数据保护条例》(General Data Protection Regulation,简称GDPR)正式生效实施,希望通过严格的监管手段,倒逼企业建立完善的制度,保障个人资料、隐私不受侵犯。
 
新条例扩大了用户隐私的定义范围,“该管的管了,不该管的也管了”


  • 用户层面:赋予了用户“被遗忘权”——用户可以要求网站删除于自己相关的数据;

  • 企业层面:在隐私协议里,要对用户说人话——即必须用通俗的语言向用户解释收集数据的方式;

  • 法律效力层面:“管的宽”也“罚得狠”——境外互联网公司,只要它们存储、处理、交换任何欧盟个人的数据,也在这一条例的管辖范围之内。违规企业最高可能受到2000万欧元或全球营业额4%(以较高者为准)的罚款。


In May 2018, the European Union (EU) introduced what was considered to be "the strictest" online privacy rules to the world. The EU General Data Protection Regulation (GDPR), which forces companies to be ever more attentive to how they handle customer data, heralds an era where breaking privacy laws can result in fines of up to four percent of a company's global revenue or 20 million euros (23.5 million US dollars), whichever is higher, as opposed to a few hundred thousand euros.


2) 行业推动


今年3月,在万维网(World Wide Web)诞生30周年之际,创始人蒂姆·伯纳斯·李发表了一封公开信,信里写满对万维网的忧虑和反思。


黑客攻击、种种犯罪行为、猎奇信息和虚假信息大肆泛滥、网络上的“粗鄙化”和“极端化”……这些都不是设计万维网的初衷。


World Wide Web Inventor Sir Tim Berners-Lee speaks during the inauguration of Web Summit, Europe's biggest tech conference, in Lisbon, Portugal, November 5, 2018. /Reuters


为了解决这些问题,他发起了一项名为“全球网络契约”(Contract for the Web)的运动,希望制定一系列的标准和规则,为网络世界重建信任。


尤其对于那些有能力书写网络世界法则的人来说,这项契约显得刻不容缓——


明确责任,以此让他们去创造一个更好的网络世界。”


Last November, Tim Berners-Lee, inventor of the World Wide Web, launched a campaign to persuade governments, companies and individuals to sign a "Contract for the Web", a set of principles designed to defend a free and open internet.


"The web is at a crucial point," Berners-Lee said in excerpts from his speech launching the project at the Web Summit conference in Lisbon. "We need a new Contract for the Web, with clear and tough responsibilities for those who have the power to make it better."


3)树立自我隐私保护的个人意识


这是最后,也是最坚韧的一道防线。


As a Google executive puts it, according to Financial Times' Henry Mance, "You should always be in control of what you share and who you share it with."


  • 时刻警惕自己分享的信息和任何授权,包括小程序。

  • 查看手机哪些APP有使用麦克风的权限,把不需要的关掉。

  • 如果你没那么需要Siri,考虑将它整个关掉。



"I don' t want to live in a world where everything that I say, everything I do, everyone I talk to, every expression of creativity, or love, or friendship is recorded."
--Edward Snowden


    您可能也对以下帖子感兴趣

    文章有问题?点此查看未经处理的缓存