一位亲戚最近向一个AI聊天机器人咨询,应该吃他母亲准备的哪些菜。我指出,他每周都吃她做的饭,而聊天机器人从未尝过。他回答说,他对所有事情都会咨询聊天机器人。显然,没有味蕾并不会成为当家人美食评论家的障碍。
A RELATIVE OF mine recently consulted an AI chatbot about which of the dishes his mother had prepared he should eat. I pointed out that he ate her cooking every week, whereas the chatbot had never tasted it. He replied that he consulted the chatbot about everything. Apparently, having no taste buds was no obstacle to becoming the family’s food critic.
这次交谈很有趣。但它对我的工作的影响则不然。作为以色列中央选举委员会的临时负责人,我正在为10月27日的议会选举做准备。AI公司应该利用剩余时间来解决一个远超以色列的问题:当“应该吃什么?”变成“应该投谁的票?”时会发生什么?聊天机器人可以让政治更易于理解。它们可以解释选举制度,梳理政纲,帮助公民审视相互竞争的主张。这些好处很重要。
The exchange was amusing. Its implications for my work are less so. As interim head of the Israeli Central Elections Committee, I am preparing for our parliamentary election on October 27th. AI companies should use the time remaining to address a question that reaches far beyond Israel: what happens when “What should I eat?” becomes “Who should I vote for?”Chatbots can make politics easier to understand. They can explain electoral systems, make sense of manifestos and help citizens interrogate competing claims. Those benefits matter.
但投票建议涉及对价值观、可信度和权衡的判断。将其呈现为看似公正机器的个性化输出,可能会掩盖产生它的假设。
But a voting recommendation involves judgments about values, credibility and trade-offs. Presenting it as the personalised output of an apparently impartial machine can conceal the assumptions that produced it.
这种危险不一定始于恶意意图。一个模型可能依赖过时信息,偏爱流行观点,或对类似问题给出不同答案。2025年,荷兰数据保护局警告称,聊天机器人给出了扭曲的投票建议,反复偏向两个政党,有时即便与用户表达的偏好相悖。发表在《自然》上的研究发现,被指示倡导特定候选人的模型能够改变参与者的偏好。这表明其具有说服力,而非普通聊天机器人使用已经改变了选举结果。
The danger need not begin with malicious intent. A model may draw on stale information, favour popular viewpoints or give different answers to similar questions. In 2025 the Dutch data-protection authority warned that chatbots gave distorted voting advice, repeatedly favouring two parties, sometimes despite users’ stated preferences. Research published in Nature found that models instructed to advocate particular candidates could shift participants’ preferences. That shows persuasive capacity, not that ordinary chatbot use has changed an election result.
恶意行为者带来另一种风险。他们可以在人工智能系统检索的来源中植入误导性材料,希望以助手安抚的声音传递宣传。英国智库Demos已记录显示,领先的人工智能服务正在放大来自俄罗斯影响行动的叙事。如果攻击者能够污染其信息供应,则无需控制模型。
Malicious actors introduce another risk. They can plant misleading material in sources that AI systems retrieve, hoping to have propaganda delivered in the reassuring voice of an assistant. Demos, a British think-tank, has documented leading AI services amplifying narratives from a Russian influence operation. An attacker need not control the model if they can contaminate its information supply.
对于选民而言,该干预的作者可能是隐形的。竞选传单会宣示其忠诚;熟悉聊天机器人的回答可能会让人感觉像是来自了解你的人的无偏见建议。通过数百次平凡交流建立的信任可能会延伸到具有公共后果的决策。针对构建这些系统的公司,我提出五项承诺。
For the voter, the author of that intervention may be invisible. A campaign leaflet announces its allegiance; an answer from a familiar chatbot can feel like disinterested advice from someone who knows you. The trust earned through hundreds of mundane exchanges can carry across into a decision with public consequences. To the companies building these systems, I propose five commitments.
首先,拒绝建议人们以某种方式投票,包括通过政党排名或所谓的兼容性得分。应使用明确标准解释政策并比较可验证的立场,同时将判断权留给选民。
First, decline to recommend people vote one way or another, including through party rankings or purported compatibility scores. Explain policies and compare verifiable positions using clear criteria, while leaving the judgment to the voter.
巴西选举法院已禁止人工智能服务提供商推荐或排名候选人和政党,即使用户要求他们这样做。公司应在其运营的任何地方采纳这一原则。事实比较和充分的政治讨论应继续提供。公司应明确公布界限,以免保护选民自主权的措施成为压制不便问题或批评的借口。
Brazil’s electoral court has already banned AI providers from recommending or ranking candidates and parties, even when users ask them to do it. Companies should adopt this principle wherever they operate. Factual comparison and robust political discussion should remain available. Companies should publish the boundary clearly, so a safeguard for voter autonomy does not become an excuse to suppress inconvenient questions or criticism.
其次,使选举信息可验证。关于资格、投票站、程序和结果的问题应引用来自负责选举当局的当前来源,并提供用户可检查的链接。政治主张需要明确标注来源和可见的不确定性。政党的承诺应被识别为仅仅是承诺。当可靠信息不可用时,系统应明确说明。
Second, make election information verifiable. Questions about eligibility, polling places, procedures and results should draw on current sources from the responsible electoral authorities, with links users can inspect. Political claims require clearly attributed sources and visible uncertainty. A party’s promise should be identified as merely a promise. Where reliable information is unavailable, the system should say so.
第三,既要捍卫数据来源,也要捍卫模型。检测旨在冲垮检索系统的协同尝试。核实信息来源。避免将复制网站之间的重复视为独立的佐证。与选举当局和独立研究人员建立快速沟通渠道,以调查错误和操纵行为。必须在选民仍能使用这些更正时进行更正。
Third, defend the sources as well as the model. Detect co-ordinated attempts to flood retrieval systems. Check provenance. Avoid treating repetition across copied websites as independent corroboration. Establish rapid channels with election authorities and independent researchers to investigate errors and manipulation. Corrections must be made while voters can still use them.
第四,防止个性化演变为政治画像。用户向助手透露的财务、健康或焦虑等信息,绝不应成为左右其投票的素材。公司应明确禁止利用对话记忆或推断出的脆弱性进行选举说服。
Fourth, keep personalisation from becoming political profiling. Information entrusted to an assistant about someone’s finances, health or anxieties should never become material for steering their vote. Companies should explicitly prohibit using conversational memory or inferred vulnerabilities for electoral persuasion.
第五,使防护措施可测试。发布针对选举的专项评估,披露重大失效情况,并在隐私保护下向独立研究人员提供有意义的访问权限。测试重复对话以及规避限制的尝试。以色列的情况意味着需要检查希伯来语、阿拉伯语、俄语和英语。若没有证据表明防护措施在不同语言和政治立场下有效,仅仅承诺中立是不够的。
Fifth, make safeguards testable. Publish election-specific evaluations, disclose material failures and give independent researchers meaningful access under privacy protections. Test repeated conversations and attempts to evade restrictions. In Israel, that means checking Hebrew, Arabic, Russian and English. A promise of neutrality is inadequate without evidence that the safeguards work across languages and political viewpoints.
选举官员必须提供清晰的信息。公民必须行使判断力。然而,公司却控制着形成这种判断的系统。要求他们保护选民的自主权,是赢得公众信任的实际条件。他们应在投票日前公布并落实这些承诺,并由具名团队负责交付。
Election officials must provide clear information. Citizens must exercise judgment. Companies, however, control the systems through which that judgment is increasingly formed. Asking them to preserve voters’ autonomy is a practical condition for public trust. They should publish and follow through on these commitments before polling day, with named teams accountable for delivery.
我的亲戚下周可以回到母亲的餐桌旁,重新考虑聊天机器人的烹饪建议。选举却没有这样的每周更正机会。人工智能应帮助公民理解他们的选择。选择本身必须由他们自己做出。■ 迪恩·利夫内是以色列中央选举委员会的代理总干事。
My relative can return to his mother’s table next week and reconsider the chatbot’s culinary advice. An election offers no such weekly correction. AI should help citizens understand their choices. The choice itself must remain theirs.■ Dean Livne is the acting director-general of the Israeli Central Elections Committee.