Claude Code 暗标追踪用户请求
推荐指数 70.0 NO. 016 · 2026.07.01
发布2026/06/30Score858Comments246
为什么值得看
Anthropic 的 CLI 编程工具 Claude Code 被发现在请求中嵌入不可见的隐写标记，用于识别和追踪请求来源。这引发了对开发者隐私和数据追踪边界的争议，使用第三方 AI 工具的团队需要重新评估信息泄露风险。
编辑判断
隐写标记的暴露意味着 Anthropic 可以精确区分哪些请求来自 Claude Code、哪些来自直接 API 调用，这对按场景定价或反滥用是合理的商业逻辑，但对企业用户来说是未被披露的遥测。
更实际的威胁是：如果你的代码库里有 Claude Code 生成的文件，这些标记可能随代码提交进入 Git 历史，成为攻击者识别 AI 生成代码、定向投毒的依据。用 Claude Code 处理敏感代码的团队，现在应该检查输出中是否携带异常 Unicode 或零宽字符，并考虑在 CI 中加入清洗步骤。
社区反馈
负面 201 条评论
核心争论：隐写追踪是合理反制蒸馏还是侵犯开发者隐私的过度监控
This is very interesting. Combating resellers and distillation seems like a very difficult problem indeed. Interesting to me is that these techniques mentioned in the article are just like anti-observation techniques used by some of the more sophisticated malware out there, however defeating them is
seems ironically like a similar problem of content owners trying to filter bot scrapers from legit users
Yes, defeating this is relatively easy, particularly for sophisticated actors. But it's hard to always defeat all of the tricks. Sort of like how it's expensive and hard and uncertain to defeat all of the tricks when forging money. Here's an example. Say you have your team use patched binaries. Then