最新资讯
stackoverflow.blog 欢迎来到芯片时代:半导体制造、AI 数据中心与芯片设计的未来 www.youtube.com AI Agent 总犯同样的错:CentralAgent AI 将记忆重构为经验系统 pub.towardsai.net Netflix 科学家建议重采样 LLM 评判:5 次仅将误差棒缩小 13% pub.towardsai.net Jev 作为 LLM 前的静默层:构建提示感知的模型路由器 reddit.com OpenAI 称 Astra 仅满足 10% 安全任务标准 dev.to FreeToken:在自有 GPU 上运行前沿 MoE 模型及其内存需求 dev.to 当 AI Agent 说“完成”时,究竟完成了什么? dev.to 部署 Underdog Bark 3.0 Pro:逐字转写、自定义后端与分块设置 dev.to 为艰难对话构建 AI:五个 Agent、一条安全正则与一位盲评监督者 techcrunch.com Palo Alto Networks 洽谈以 5 亿美元收购 AI Agent 安全初创公司 Clutch theinformation.com 黄仁勋被要求就涉华间谍指控向国会作简报 www.infoq.com Edera 推出 Object Capability Bounded Authority,试图将凭证与 AI Agent 工作负载隔离
多元动态
登录 注册
大模型 www.aibase.com ·

开发者曝光 OpenAI 广告追踪链:ChatGPT 账号被指关联全网浏览足迹

原文 我的收藏

有安全研究者称,OpenAI 通过名为 bazaar 的内部广告平台建立跨站追踪链:用户打开 ChatGPT 时,客户端生成随机标识符并携带绑定账号的 JWT,写入名为 __obi 的跨站 cookie;当用户访问部署了 OpenAI 广告像素的第三方网站时,其浏览行为会被回传并关联到 ChatGPT 账号。报道称该关联不要求用户在对话中输入相关内容,并称该发现已登上 HackerNews 热门榜第三。上述说法来自二手转述,未附原始报告或 OpenAI 回应。

AI推荐理由 内容涉及开发者/安全研究者对 OpenAI 通过内部广告平台 bazaar 建立跨站追踪链的具体技术描述(随机标识符、绑定账号的 JWT、__obi 跨站 cookie、广告像素回传),并提到在 HackerNews 热门榜排名第三,属于有具体机制细节的隐私与平台治理议题,对 AI 应用合规和开发者有参考价值。但来源为 AIbase 的二手转述,未给出研究者姓名、原始报告链接或可验证证据,正文中“实锤”“悄悄绑定”等表述带有结论性倾向,且未提供 OpenAI 回应,事实明确度与来源可信度有限,故质量分中等。

72

正文

Developer Exposes OpenAI Ad Tracking Chain: ChatGPT Account Is Quietly Linking Your Entire Web Browsing Footprint AIbase基地 Published inAI News · 2 min read · Sep 21, 2026 5 Unfortunately, the worst-case scenario has come true. Security researchers have uncovered that OpenAI has established a complete cross-site tracking chain through an internal advertising platform called "bazaar." When a user opens ChatGPT, the client first generates a random identifier and takes a JWT token bound to the user's account, then writes a cross-site cookie named "__obi" in a cross-site environment. This cookie acts like an identity tag, and when the user later visits third-party websites that have implemented OpenAI ad pixels, their browsing actions on those websites will be directly linked back to their ChatGPT account. More notably, this association does not require that you have ever entered any specific content in ChatGPT. Even if you have never mentioned related topics in the chat window, as long as you visit a site with the pixel, your web browsing behavior will be collected by OpenAI. In other words, the vast expanse of the web outside the chat interface has also been quietly incorporated into the profile. This discovery has already ranked third on HackerNews' popular list and has caused considerable discussion within the developer community. OpenAIJWTToken__obiCross-siteTracking This article is from AIbase Daily Scan to view Welcome to the [AI Daily] column! This is your daily guide to exploring the world of artificial intelligence. Every day, we present you with hot topics in the AI field, focusing on developers, helping you understand technical trends, and learning about innovative AI product applications. —— Created by the AIbase Daily Team © Copyright AIbase Base 2024, Click to View Source -

来源报道 · 1 篇 · 以下链接均前往原始媒体

← 返回精选动态 原文

更多内容