全球评论系统是否存在隐私问题？
我越来越多地在每个页面上看到这些全球登录一次评论无处不在的系统。我问之前没有做修修补补和搜索的功课，所以我的问题如下：
- 你登录A站并发表评论。
- 现在您访问站点 B，该站点使用相同的全球评论系统。页面底部会出现一个包含您的姓名和数据的请求表，供您在 B 页面上添加评论。您不发表任何评论并浏览。
即使您没有留下任何评论，全局评论提供商是否会获取有关您访问页面 B 的信息？
我一有时间就会深入研究代码，但同时我想问问你对这方面的见解。
I more and more see these global login-once comment-everywhere systems on every page. I didn't do my homework of tinkering debugging and search before asking, so my question is as follows:
- You login on site A and leave a comment.
- Now you go on site B, which uses the same global comment system. At the bottom of the page a request form with your name and data appears for you to add a comment on B page. You don't leave any comment and browse away.
Does the global-comment provider get information about the fact that you visited page B, even if you don't leave any comment ?
I will dig into the code as soon as I have time, but in the meanwhile I would like to ask your insights on this regard.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
对于少数人来说确实如此，比如联邦军。
对于世界其他地方来说，这确实没有被考虑。
当然，Facebook 上也有一些隐私小组之类的。
您所询问的那种跟踪确实存在，但规模大约是您所担心的 20 倍。在多个网站之间跟踪用户是由每个网络服务提供商完成的，其内容是从第三方页面链接的，例如谷歌分析、digg/stubleupon/facebook 小部件、头像图像。
例如，Gravatar 服务可以认为非常简单，只有链接的图像，没有 JavaScript。该服务将能够跟踪浏览所有带有头像图像的网站的每个人。他们还将知道单个用户发表过评论的所有网站。即使用户尚未使用 gravatar 注册电子邮件，他们仍然有足够的信息来创建有关该用户的个人资料。
如果您正在编写包含在其他网站上的任何类型的全球网络服务，最好的办法是不要提及隐私，除非必须这样做 - 这将减少隐私担忧。
更新，gravatar
虽然 gravatar 不是评论系统，但它是功能的子集，但具有与所询问的相同的隐私问题。使用 JavaScript 并让用户登录使得这一切变得更容易，这是不可能的。
For a few people it is, like the EFF.
For the rest of the world it's really not considered.
Sure there are some Facebook privacy groups and alike.
The kind of tracking you are asking about exists but about 20 times the magnitude you are worrying about. Tracking a user between several sites is done by every web service provider whose contents are linked from third party pages, such as google-analytics, digg/stubleupon/facebook widgets, gravatar images.
For example the gravatar service which can be considered quite simple, only a linked image, no JavaScript. This service will be able to track every individual surfing all sites with gravatar images on them. They will also know all sites where a single user has commented. Even if a user hasn't registered their email with gravatar they still has enough to make a profile about that user.
If you are writing any kind of global web service that is included on others websites best bet is to not mention privacy, unless you have to - that will reduce the privacy concern.
Update, gravatar
Although gravatar is not a commenting system it is a subset of features but with the same privacy concerns that is being asked about. Using JavaScript and having users logging in makes it only easier not possible.
是的，他们当然可以。这通常可以通过多种方式实现。首先是 Referer 标头。至少对于 Disqus，他们使用 http: //subdomain.disqus.com/thread.js?url=main_page_url&trackback_url=null&trackbacks=null 。
因此，即使您禁用了 Referer 标头，他们仍然可以告诉您去了 main_page_url。如果您禁用了脚本，则无法使用该服务。但是，您可以暂时禁用引用站点并为该域启用脚本。 NoScript 可以帮助解决这个问题。
Yes, they certainly can. This is typically made available several ways. First, there's the Referer header. For Disqus at least, they use script URLs like http://subdomain.disqus.com/thread.js?url=main_page_url&trackback_url=null&trackbacks=null .
so even if you have the Referer header disabled they can still tell you went to main_page_url. If you have scripting disabled, you can't use the service. However, you could disable the Referer and enable scripting for that domain only temporarily. NoScript can help with this.