70 comments • Comments Link

一个开发者经常在产品里加入分析工具，比如记录鼠标移动的会话回放。直到有一次他的朋友震惊地发现自己的浏览行为竟被实时观看，他这才真正意识到问题——抽象的数据收集与被真人实时监视带来的强烈不适感之间，存在着巨大的差距。

人们对隐私的态度愈发呈现两面性：多数人可以接受被拍摄或被收集数据，只要相信这些信息由自动化系统处理；一旦觉得有真实的人在看着自己的具体行为，就会变得极度不安。这说明"合理否认"是一种强大的心理安慰。

这类似于长期存在的"公共场所的私密对话"这一社会规范——人们在餐厅里放心交谈，并非没人能听见，而是大家默认没人会主动去偷听。但当技术使大规模单向监控变得轻而易举时，这一默认就被侵蚀了。

当不当监控被大规模机械化，并且实施监控的富裕机构缺乏问责，这就意味着通过社区排斥和孤立来约束越界行为的古老社会契约正在被根本性地破坏。

许多看似不在乎隐私的人其实并非漠不关心，他们可能没意识到全部影响、不了解技术细节，或已对行业内的敌对模式感到疲惫与无奈。更深入的对话往往能揭示出他们真正的担忧。

服务条款和隐私政策在很大程度上只是形式化的法律保护，大多数用户既不阅读也不完全理解。有人认为许多协议实际上是在胁迫下签署的，应被视为无效，尤其当诸如停车等基本市政服务也强制要求接受侵入性条款时。

单向监控会放大不适感——在过去缺乏相应技术时这种动态难以形成，但在数字时代却变得轻而易举，使人们可以在没有对等互惠的情况下相互窥探。

就连部署监控工具的人也珍视自己的隐私，因为他们清楚这些数据未来可能被用于画像分析、心理操纵、个性化定价，或被共享给第三方以获取行为洞察。

一些基于浏览器的追踪能力演示（例如通过小游戏展示网站能从光标移动和点击模式中推断出多少信息）有效地揭示了用户对网站了解的预期与客户端 JavaScript 实际能力之间的落差。

阻断 websocket 、 cookies 等追踪机制可以防止许多侵入性功能生效。这表明此类演示可以进一步改进，通过奖励那些成功阻止监控的用户来赋能他们，而不仅仅是起到警示作用。 • A developer who routinely added analytics tools, including session replay that records mouse movements, had a personal wake-up call when a friend reacted with shock upon realizing her individual browsing session was being watched, highlighting the gap between abstract data collection and the visceral feeling of being personally observed.

• There's a growing duality in privacy attitudes: most people tolerate being filmed or having their data collected as long as it's processed by automated systems, but the moment it feels like an actual human is watching individual behavior, it becomes deeply unsettling, suggesting that plausible deniability is a powerful psychological comfort.

• This mirrors the long-standing social norm of "private conversations in public spaces," where people speak freely in restaurants not because others can't hear, but because there's a shared understanding that no one is actively listening, a norm that breaks down when technology enables one-way surveillance at scale.

• The mechanization of inappropriate surveillance at scale, combined with a lack of accountability for wealthy entities engaging in such behavior, represents a fundamental breakdown of the social contracts that historically kept individual creepy behavior in check through community exclusion and shun.

• Many people who appear not to care about privacy actually do care but are either unaware of the full implications, don't understand the technical details, or have simply become exhausted and resigned to the hostile patterns of the industry, with deeper conversations often revealing genuine concern.

• Terms and conditions and privacy policies are largely performative legal protections that most users don't read or fully understand, with some arguing that many agreements are effectively signed under duress and should be considered invalid, particularly when basic civic functions like parking require accepting invasive terms.

• The creepiness of surveillance is amplified when the observation is one-way, a dynamic that was historically difficult without technology but has become trivially easy in the digital age, allowing everyday people to spy on each other without reciprocity.

• Even those who implement surveillance tools value their own privacy, recognizing that the data they collect could be used in the future for profiling, psychological manipulation, personalized pricing, or sharing behavioral insights with third parties.

• Browser-based demonstrations of tracking capabilities, such as games that reveal how much a website can infer from cursor movements and click patterns, effectively illustrate the gap between what users expect websites to know and what's actually technically possible through client-side JavaScript.

• Blocking tracking mechanisms like websockets and cookies can prevent many of these invasive features from working, suggesting that the demonstration could be improved by rewarding users who successfully block surveillance, thereby empowering rather than just alarming them.