世界幣和全球數位身分系統的危險

世界幣是 Open AI 執行長 Sam Altman 和他的兩位合作夥伴雄心勃勃的創意，自去年 7 月底推出以來一直飽受爭議。

Worldcoin, a brainchild of OpenAI CEO Sam Altman and two of his partners, has been collecting biometric data since its debut in late July last year in an effort to establish a global digital ID system.

Worldcoin 是 OpenAI 執行長 Sam Altman 和他的兩位合作夥伴的創意，自去年 7 月下旬首次亮相以來，一直在收集生物識別數據，以建立全球數位 ID 系統。

The project has drawn mixed reactions, with some praising its approach to decentralized identity and others expressing concerns about its data collection practices.

該計畫引起了不同的反應，有些人讚揚其去中心化身分的方法，有些人則對其數據收集做法表示擔憂。

Despite the controversies, the project has managed to expand rapidly, with 119 ‘orbs’ – a spherical device that scans a user’s iris—across 18 countries within the first few months and now plans to increase that number to 1500 globally. Meanwhile, the World App has raked in over 10 million users.

儘管存在爭議，該項目還是成功地迅速擴張，在最初幾個月內在18 個國家部署了119 個「球體」（一種掃描用戶虹膜的球形設備），現在計劃在全球範圍內將這一數字增加到1500 個。同時，World App 已經吸引了超過 1,000 萬用戶。

To better understand the implications of Worldcoin’s biometric data collection efforts and gain insights into the broader challenges involved in creating secure and efficient identity verification systems, crypto.news reached out to Sebastian Rodriguez, chief product officer at decentralized identity platform Privado ID, for his perspectives on the matter.

為了更了解Worldcoin 生物辨識資料收集工作的影響，並深入了解創建安全且高效的身份驗證系統所涉及的更廣泛挑戰，crypto.news 聯繫了去中心化身分平台Privado ID 的首席產品長Sebastian Rodriguez，了解他的觀點就此事。

Here’s what Rodriguez had to say on the subject:

以下是羅德里格斯對這個問題所說的話：

What are your thoughts on Worldcoin’s biometric data collection efforts?

您對 Worldcoin 的生物辨識資料收集工作有何看法？

Worldcoin has recently announced that they will delete all the biometric data and distribute it in a MPC network. This removes one of the major concerns about data concentration from the technical point of view.

Worldcoin 最近宣布他們將刪除所有生物識別資料並將其分發到 MPC 網路中。從技術角度來看，這消除了對資料集中的主要擔憂之一。

Worldcoin also uses nullification to protect the user against cross-application tracking, so technically speaking, we consider the new Worldcoin approach technically secure.

世界幣還使用無效化來保護用戶免受跨應用程式跟踪，因此從技術上講，我們認為新的世界幣方法在技術上是安全的。

Do you see any shortcomings with the project’s current approach to security?

您認為該專案目前的安全方法有什麼缺點嗎？

Security is more complex than its technical component – it’s a property of the entire solution (technology, people, processes and power structures). In our opinion, Worldcoin is using many of the right cryptographic primitives to achieve privacy and security, but they are not following the principles of decentralization and transparency that most Web3 projects embrace.

安全性比其技術組件更複雜——它是整個解決方案（技術、人員、流程和權力結構）的屬性。我們認為，Worldcoin 正在使用許多正確的加密原語來實現隱私和安全，但它們並未遵循大多數 Web3 專案所遵循的去中心化和透明原則。

They have made efforts to open source most of their technologies (including hardware to a certain degree), but the governance of the project, its long-term goals and tokenomics are still a source of concern.

他們已經努力開源大部分技術（包括一定程度的硬體），但專案的治理、長期目標和代幣經濟仍然令人擔憂。

Basically, their model only works if they become a monopoly for proof of uniqueness – this is a type of credential (when it’s based on non-standard biometric templates) that can only be provided by a single provider. It’s not based on national ID documents (that would allow for multiple providers of Identity Verification) but on a non-standardized biometric hash database controlled by a single private organization.

基本上，他們的模型只有在成為唯一性證明的壟斷者時才有效——這是一種只能由單一提供者提供的憑證（當它基於非標準生物識別模板時）。它不是基於國家身分證件（允許多個身分驗證提供者），而是基於由單一私人組織控制的非標準化生物識別雜湊資料庫。

Worldcoin claims that Secure Multi-Party Computation will enhance data privacy and security by distributing biometric data across multiple parties. Do you believe this approach can effectively address the ethical concerns?

Worldcoin 聲稱，安全多方計算將透過在多方之間分發生物辨識資料來增強資料隱私和安全性。您認為這種方法可以有效解決道德問題嗎？

No. Technical security should never stop the ethical debate around the implications of a unique identifier that can’t be changed for my entire life. This is an identifier that I can’t deny to have; I can be forced to present, and I can’t change. The implications are deep and, in some cases, dangerous.

不。這是我無法否認的一個識別符；我可以被迫呈現，但我無法改變。其影響是深遠的，在某些情況下甚至是危險的。

Despite the controversies, Worldcoin has garnered considerable attention. What do

儘管有爭議，世界幣還是引起了相當大的關注。做什麼

Every tokenized project is susceptible to speculation, and Worldcoin is no different. They are also linked to Sam Altman and OpenAI, which has a “winner” aura that, in my opinion, has attracted controversy and investor interest at the same time.

每個代幣化項目都容易受到投機行為的影響，世界幣也不例外。它們也與 Sam Altman 和 OpenAI 聯繫在一起，後者俱有「贏家」光環，在我看來，它們同時引起了爭議和投資者的興趣。

There is a sentiment that OpenAI is investing in a problem they are helping to create (synthetic identities) that is both ethically reprehensible and economically attractive.

有一種觀點認為，OpenAI 正在投資解決他們正在幫助創建的一個問題（合成身份），該問題在道德上應受譴責，但在經濟上卻有吸引力。

Can identity verification systems be enhanced in security and efficiency while minimizing reliance on biometric data?

身分驗證系統能否增強安全性和效率，同時最大限度地減少對生物辨識資料的依賴？

Biometrics is at the core of all identity systems, even National ID and Passports. It’s not about the technology, but about who is the source of trust and how centralized it is.

生物辨識技術是所有身分系統的核心，甚至是國民身分證和護照。這與技術無關，而是與誰是信任的來源以及信任的中心化程度有關。

We believe that governments should play that role, and with projects like EUDI [the European Unitons’s digital identity solution] it’s going to become more available for many citizens. Some alternatives are based on networks of trust (social graphs, p2p vouching, etc.), but none of these has seen mass adoption so far.

我們認為政府應該發揮這一作用，並且透過 EUDI（歐盟的數位身​​分解決方案）等項目，許多公民將能夠更方便地使用它。一些替代方案是基於信任網絡（社交圖譜、p2p 憑證等），但到目前為止，這些方案都沒有大規模採用。

From your experience at Privado ID, what are the key considerations for creating identity solutions that align with international data protection standards?

根據您在 Privado ID 的經驗，創建符合國際資料保護標準的身份解決方案的關鍵考慮因素是什麼？

We advocate for open ecosystems of interoperability. Centralizing everything in a single identity provider is always tempting (faster, easier, simpler) – but we need to allow for a healthy open ecosystem of competing and local identity providers that avoid concentration of power, provide choice and alternatives, and can also adapt to local regulations.

我們倡導互通性的開放生態系統。將所有內容集中在一個身份提供者中總是很誘人（更快、更容易、更簡單），但我們需要允許競爭和本地身份提供者建立一個健康的開放生態系統，避免權力集中，提供選擇和替代方案，並且還可以適應當地法規。

As an example – it is very tempting to add Age Verification to our Google or Apple accounts and have the verification done by our phones or e-mail accounts. But that will give these companies huge databases of every place where we use these credentials. It will probably also not be fully compliant to every single local regulation about the topic. Having an ecosystem of Age Verification providers with interoperable

舉個例子 - 將年齡驗證新增至我們的 Google 或 Apple 帳戶並透過我們的手機或電子郵件帳戶完成驗證是非常誘人的。但這將為這些公司提供龐大的資料庫，記錄我們使用這些憑證的每個地方。它也可能不會完全符合有關該主題的每項當地法規。擁有具有互通性的年齡驗證提供者生態系統