世界币和全球数字身份系统的危险

世界币是 Open AI 首席执行官 Sam Altman 和他的两位合作伙伴雄心勃勃的创意，自去年 7 月底推出以来一直饱受争议。

Worldcoin, a brainchild of OpenAI CEO Sam Altman and two of his partners, has been collecting biometric data since its debut in late July last year in an effort to establish a global digital ID system.

Worldcoin 是 OpenAI 首席执行官 Sam Altman 和他的两位合作伙伴的创意，自去年 7 月下旬首次亮相以来，一直在收集生物识别数据，以建立全球数字 ID 系统。

The project has drawn mixed reactions, with some praising its approach to decentralized identity and others expressing concerns about its data collection practices.

该项目引起了不同的反应，一些人赞扬其去中心化身份的方法，另一些人则对其数据收集做法表示担忧。

Despite the controversies, the project has managed to expand rapidly, with 119 ‘orbs’ – a spherical device that scans a user’s iris—across 18 countries within the first few months and now plans to increase that number to 1500 globally. Meanwhile, the World App has raked in over 10 million users.

尽管存在争议，该项目还是成功地迅速扩张，在最初几个月内在 18 个国家部署了 119 个“球体”（一种扫描用户虹膜的球形设备），现在计划在全球范围内将这一数字增加到 1500 个。与此同时，World App 已经吸引了超过 1000 万用户。

To better understand the implications of Worldcoin’s biometric data collection efforts and gain insights into the broader challenges involved in creating secure and efficient identity verification systems, crypto.news reached out to Sebastian Rodriguez, chief product officer at decentralized identity platform Privado ID, for his perspectives on the matter.

为了更好地了解 Worldcoin 生物识别数据收集工作的影响，并深入了解创建安全高效的身份验证系统所涉及的更广泛挑战，crypto.news 联系了去中心化身份平台 Privado ID 的首席产品官 Sebastian Rodriguez，了解他的观点就此事。

Here’s what Rodriguez had to say on the subject:

以下是罗德里格斯就这个问题所说的话：

What are your thoughts on Worldcoin’s biometric data collection efforts?

您对 Worldcoin 的生物识别数据收集工作有何看法？

Worldcoin has recently announced that they will delete all the biometric data and distribute it in a MPC network. This removes one of the major concerns about data concentration from the technical point of view.

Worldcoin 最近宣布他们将删除所有生物识别数据并将其分发到 MPC 网络中。从技术角度来看，这消除了对数据集中的主要担忧之一。

Worldcoin also uses nullification to protect the user against cross-application tracking, so technically speaking, we consider the new Worldcoin approach technically secure.

世界币还使用无效化来保护用户免受跨应用程序跟踪，因此从技术上讲，我们认为新的世界币方法在技术上是安全的。

Do you see any shortcomings with the project’s current approach to security?

您认为该项目当前的安全方法有什么缺点吗？

Security is more complex than its technical component – it’s a property of the entire solution (technology, people, processes and power structures). In our opinion, Worldcoin is using many of the right cryptographic primitives to achieve privacy and security, but they are not following the principles of decentralization and transparency that most Web3 projects embrace.

安全性比其技术组件更复杂——它是整个解决方案（技术、人员、流程和权力结构）的属性。我们认为，Worldcoin 正在使用许多正确的加密原语来实现隐私和安全，但它们没有遵循大多数 Web3 项目所遵循的去中心化和透明原则。

They have made efforts to open source most of their technologies (including hardware to a certain degree), but the governance of the project, its long-term goals and tokenomics are still a source of concern.

他们已经努力开源大部分技术（包括一定程度的硬件），但项目的治理、长期目标和代币经济仍然令人担忧。

Basically, their model only works if they become a monopoly for proof of uniqueness – this is a type of credential (when it’s based on non-standard biometric templates) that can only be provided by a single provider. It’s not based on national ID documents (that would allow for multiple providers of Identity Verification) but on a non-standardized biometric hash database controlled by a single private organization.

基本上，他们的模型只有在成为唯一性证明的垄断者时才有效——这是一种只能由单个提供商提供的凭证（当它基于非标准生物识别模板时）。它不是基于国家身份证件（允许多个身份验证提供商），而是基于由单个私人组织控制的非标准化生物识别哈希数据库。

Worldcoin claims that Secure Multi-Party Computation will enhance data privacy and security by distributing biometric data across multiple parties. Do you believe this approach can effectively address the ethical concerns?

Worldcoin 声称，安全多方计算将通过在多方之间分发生物识别数据来增强数据隐私和安全性。您认为这种方法可以有效解决道德问题吗？

No. Technical security should never stop the ethical debate around the implications of a unique identifier that can’t be changed for my entire life. This is an identifier that I can’t deny to have; I can be forced to present, and I can’t change. The implications are deep and, in some cases, dangerous.

不。技术安全永远不应该停止围绕我一生都无法更改的唯一标识符的影响进行伦理辩论。这是我无法否认的一个标识符；我可以被迫呈现，但我无法改变。其影响是深远的，在某些情况下甚至是危险的。

Despite the controversies, Worldcoin has garnered considerable attention. What do

尽管存在争议，世界币还是引起了相当大的关注。做什么

Every tokenized project is susceptible to speculation, and Worldcoin is no different. They are also linked to Sam Altman and OpenAI, which has a “winner” aura that, in my opinion, has attracted controversy and investor interest at the same time.

每个代币化项目都容易受到投机行为的影响，世界币也不例外。它们还与 Sam Altman 和 OpenAI 联系在一起，后者具有“赢家”光环，在我看来，它们同时引起了争议和投资者的兴趣。

There is a sentiment that OpenAI is investing in a problem they are helping to create (synthetic identities) that is both ethically reprehensible and economically attractive.

有一种观点认为，OpenAI 正在投资解决他们正在帮助创建的一个问题（合成身份），该问题在道德上应受谴责，但在经济上却有吸引力。

Can identity verification systems be enhanced in security and efficiency while minimizing reliance on biometric data?

身份验证系统能否增强安全性和效率，同时最大限度地减少对生物识别数据的依赖？

Biometrics is at the core of all identity systems, even National ID and Passports. It’s not about the technology, but about who is the source of trust and how centralized it is.

生物识别技术是所有身份系统的核心，甚至是国民身份证和护照。这与技术无关，而与谁是信任的来源以及信任的中心化程度有关。

We believe that governments should play that role, and with projects like EUDI [the European Unitons’s digital identity solution] it’s going to become more available for many citizens. Some alternatives are based on networks of trust (social graphs, p2p vouching, etc.), but none of these has seen mass adoption so far.

我们认为政府应该发挥这一作用，并且通过 EUDI（欧盟的数字身份解决方案）等项目，许多公民将能够更方便地使用它。一些替代方案基于信任网络（社交图谱、p2p 凭证等），但到目前为止，这些方案都没有得到大规模采用。

From your experience at Privado ID, what are the key considerations for creating identity solutions that align with international data protection standards?

根据您在 Privado ID 的经验，创建符合国际数据保护标准的身份解决方案的关键考虑因素是什么？

We advocate for open ecosystems of interoperability. Centralizing everything in a single identity provider is always tempting (faster, easier, simpler) – but we need to allow for a healthy open ecosystem of competing and local identity providers that avoid concentration of power, provide choice and alternatives, and can also adapt to local regulations.

我们倡导互操作性的开放生态系统。将所有内容集中在一个身份提供商中总是很诱人（更快、更容易、更简单），但我们需要允许竞争和本地身份提供商建立一个健康的开放生态系统，避免权力集中，提供选择和替代方案，并且还可以适应当地法规。

As an example – it is very tempting to add Age Verification to our Google or Apple accounts and have the verification done by our phones or e-mail accounts. But that will give these companies huge databases of every place where we use these credentials. It will probably also not be fully compliant to every single local regulation about the topic. Having an ecosystem of Age Verification providers with interoperable

举个例子 - 将年龄验证添加到我们的 Google 或 Apple 帐户并通过我们的手机或电子邮件帐户完成验证是非常诱人的。但这将为这些公司提供庞大的数据库，记录我们使用这些凭证的每个地方。它也可能不会完全符合有关该主题的每一项当地法规。拥有具有互操作性的年龄验证提供商生态系统