Claude Code 使用隐写术标记中国用户 —— Anthropic 称其为实验
anthropic 在系统提示中使用隐藏信号来检测位于中国的用户。此次回滚显示了实验室为阻止模型蒸馏所采取的激进手段。
anthropic was forced to rollback a covert surveillance feature in claude code after a reddit user exposed how the tool manipulated system prompts to flag chinese connections. the code checked for asia/shanghai timezones, chinese proxy domains, and ai labs, transmitting the data via invisible character tweaks and xor encryption. anthropic defended the mechanism as a necessary experiment to prevent account abuse and distillation by competitors like deepseek and alibaba. since claude code has filesystem access, critics argued this behavior constituted a fundamental violation of trust that could lead to data exfiltration.