字号·· | 护眼
连线

Bluesky正屏蔽指向美国国土安全部员工记录大规模泄露的链接Bluesky Is Blocking Links to a Major Leak of DHS Employee Records

点「原文对照」整页切到原文,或双击某段只看那段的原文。

Bluesky正在阻止用户打开一份新泄露档案的链接,该档案包含超过4.1万名美国国土安全部员工和承包商的记录,并将相关页面标记为“恶意”。

Bluesky is blocking users from opening links to a newly leaked archive of records on more than 41,000 Department of Homeland Security employees and contractors, and labels the pages “malicious.”

Bluesky对《连线》表示,这些文件包含人们的电子邮件地址和电话号码,“未经其授权而被共享”,违反了其社区准则。该公司称,它选择屏蔽这些链接,而不是删除个别帖子,“以避免限制公众讨论或限制对报道和评论的更广泛访问”。这些国土安全部记录由透明度非营利组织“分布式拒绝秘密”于周三发布,列出了员工和承包商的姓名、联系方式以及内部群组归属,某些情况下还与监控和卧底行动有关。

The files include people’s email addresses and phone numbers, “shared without their authorization,” Bluesky tells WIRED, in violation of its community guidelines. The company says it chose to block the links, rather than remove individual posts, “to avoid limiting public discussion or restricting broader access to reporting and commentary.”The DHS records, published Wednesday by the transparency nonprofit Distributed Denial of Secrets, list employees' and contractors’ names, contact information, and membership in internal groups, tied in some cases to surveillance and undercover operations.

《连线》的一项调查发现,这些文件详细列出了国土安全部的组织架构,从高层领导到个别移民探员,并在某些情况下似乎显示了谁可以访问某些技术。

A WIRED investigation found that the files lay out in detail how DHS is organized, from senior leadership to individual immigration agents, and in some cases appear to show who has access to certain technologies.

试图通过Bluesky网站或应用打开该档案的用户会看到一个标有“链接已屏蔽”的页面,页面上称该网址已被识别为“恶意”,并出于安全考虑予以屏蔽。对于该屏蔽是自动实施的,还是有政府机构要求该公司限制访问这些数据,Bluesky未回应相关问题。

Users who try to open the archive through Bluesky’s website or app land on a page labeled "Blocked Link," which says the URL has been identified as “malicious” and blocked for their safety. Bluesky did not respond to questions about whether the block was imposed automatically or whether any government agency had asked the company to restrict access to the data.

DDoSecrets的主页从Bluesky可以正常加载。至少有一款第三方应用Klearsky在打开国土安全部档案链接时没有任何警告。

The DDoSecrets homepage loads normally from Bluesky. At least one third-party app, Klearsky, opens links to the DHS archive with no warning.

Bluesky倡导一种去中心化的内容审核方式,让用户自行选择为其帖子添加标签或进行过滤的独立服务。其现行社区准则禁止分享“家庭住址、个人联系方式、财务或医疗数据,或身份证明文件”。(《连线》杂志分析的一份国土安全部泄露文件预览中,显然包含与工作相关的联系方式,一位专家称这些细节通常印在“名片”上。)

Bluesky promotes a decentralized approach to content moderation that lets users pick independent services that label or filter posts. Its current community guidelines bar sharing “home addresses, personal contact info, financial or medical data, or identification documents.” (A preview of the DHS leak analyzed by WIRED apparently contained work-related contact information one expert described as details that would be printed “on a business card.”)

同一份准则明确保护涉及公共利益、且“与政府透明度和公职人员相关”的“事实性报道”。Bluesky于2019年作为Twitter的一个研究项目起步,后来独立运营,并于2024年2月向公众开放。截至今年8月,其注册账户数已达4500万,据估计6月有1040万人使用了其移动应用。自联合创始人杰伊·格雷伯于3月卸任以来,Automattic的创始首席执行官托尼·施耐德一直执掌该公司。

The same guidelines explicitly protect “factual reporting” on matters of public interest that are “related to government transparency and public officials.”Bluesky started in 2019 as a Twitter research project, later became independent, and opened to the public in February 2024. By August of this year, it counted 45 million registered accounts, and an estimated 10.4 million people used its mobile app in June. Toni Schneider, the founding CEO of Automattic, has run the company since cofounder Jay Graber stepped down in March.

由于该网络运行在开放协议之上,外部开发者可以构建自己的Bluesky应用,并自行决定采用该公司的哪些审核标签。

Because the network runs on an open protocol, outside developers can build their own Bluesky apps and decide which of the company’s moderation labels to apply.

DDoSecrets联合创始人艾玛·贝斯特表示,这并非社交媒体平台首次错误地将该组织的网站标记为恶意网站,或试图限制对其出版物的访问。2020年,在埃隆·马斯克收购并更名为X之前,Twitter暂停了DDoSecrets的账户,并在该组织发布BlueLeaks后屏蔽了其网站链接。BlueLeaks是来自数百个警察机构和融合中心的269GB内部记录。贝斯特表示,科技平台常常屈服于政府压力,但坚称它们无法阻止信息传播。“他们无法阻止信号,”贝斯特说。

Emma Best, cofounder of DDoSecrets, says this is not the first time a social media platform has wrongly labeled the organization's website malicious or tried to restrict access to its publications. Twitter suspended DDoSecrets’ account in 2020, prior to the Elon Musk acquisition and X rebrand, and blocked links to its website after the group published BlueLeaks, a 269-gigabyte trove of internal records from hundreds of police agencies and fusion centers. Best says tech platforms often give in to government pressure but insists they cannot prevent the information from spreading. “They can't stop the signal,” they say.

一个自称“和平部”的组织将这份名为“冰锥”的档案交给了DDoSecrets和记者玛雅·阿森·克里缪。克里缪还搭建了一个用于检索这些记录的网站,而Bluesky也在其网站和应用中屏蔽了该网站。

A group calling itself the Department of Peace gave the archive, dubbed “Icepick,” to DDoSecrets and journalist maia arson crimew. crimew also built a website for searching the records, and Bluesky blocks that site in its website and app as well.

Bluesky至少有一个竞争对手采取了不同的做法。在X平台上,X母公司开发的聊天机器人Grok向好奇的用户推荐了“冰锥”网站,称其为“经过清理的可搜索网络工具”,并表示完整数据集可通过DDoSecrets的网站或种子下载获取。X未立即回应置评请求。

At least one of Bluesky’s competitors has taken a different tack. On X, the Grok chatbot built by X’s parent company pointed curious users to the Icepick website, describing it as a “cleaned searchable web tool” and saying that the complete dataset can be downloaded via DDoSecrets’ website or by torrent. X did not immediately respond to a request for comment.

阅读媒体原文 ↗