隐私与数据卫生
了解工具会记住什么、不应上传什么，以及如何负责任地处理工作数据。
28 项内容 (19 篇文章 · 9 个视频)
从这里开始
浏览完整内容之前，先阅读几篇推荐文章。
此主题下的更多内容
6 分钟阅读Do Not Paste Bank Statements Into AI
Account numbers, balances, counterparties, and payroll lines are paste bans for consumer AI. How to get literacy help from a model using typed, redacted fields - without uploading full statements, screenshots, or PDF exports.
AI新手
6 分钟阅读Home Photos and Floorplans: Privacy Before You Upload
Uploading interiors and floorplans to consumer AI can leak layout, valuables, kids' rooms, and security cues. A privacy-first checklist for what to redact, what to keep offline, and how to still get planning help without broadcasting your house.
AI新手
5 分钟阅读Solo AI Rules for Client Work
Before you put a client's brief, draft, or data near a consumer AI tool, write a one-page personal policy card: what you will never paste, what needs client consent, what you still price and scope yourself, and when you escalate to a human specialist. Freelancers do not inherit an employer AI policy - you need your own.
AI新手
7 分钟阅读Coordinating an Ageing Parent's Care Without Losing Their Voice
When siblings start coordinating a parent's care, information sprawls across group chats, and the person it's about gets talked over. A consent-aware record — what to share, with whom, and a strict line between emergency and administrative information — keeps the coordination practical and keeps your parent's voice in the decisions.
初级
7 分钟阅读A Caregiving Handoff That Preserves Dignity and Context
When care shifts between family members, shifts, or a new paid caregiver, what usually transfers is a list of tasks and a rushed verbal summary. A handoff template carries the cared-for person's own preferences forward too - without AI turning them into behavioural labels.
初级
7 分钟阅读Is This AI Product Safe for My Child's Data? A Privacy Checklist
A seven-point checklist — age rules, collection, retention, training use, sharing, controls, and deletion — for deciding whether an AI product gets allow, allow-with-controls, or do-not-use for your child.
初级
8 分钟阅读Chronic-Condition Administration: Build a Care Calendar, Not a Treatment Plan
Managing a chronic condition, your own or a family member's, is mostly logistics: appointments, refills, forms, transport, and follow-ups, each with an owner and a deadline. A care-operations board handles that coordination - and stops firmly at the edge of anything clinical.
中级
7 分钟阅读Archiving Family Photos and Stories Without Inventing History
AI makes it fast to caption, transcribe, and organize decades of family photos and recordings — and just as fast to quietly invent a date, a name, or a detail nobody actually confirmed. A metadata schema for consent, provenance, and uncertainty keeps the archive honest, restricts children's images by default, and keeps them out of unreviewed AI tools.
中级
9 分钟阅读A personal knowledge system that helps you retrieve, not hoard
Highlights, clippings, and AI summaries pile up without making you smarter. A small capture-to-retrieval system built around three real decisions — plus what to do about sensitive notes, other people's data, and the false privacy of a personal account.
中级
7 分钟阅读Get Consent Before You AI-Edit or Share Someone's Photo
Uploading a friend's photo to an AI tool to remove a background, swap a smile, or turn it into an illustration feels like a small, personal edit. For the person in the photo, it can be a much bigger decision they never got to make.
初级
6 分钟阅读Finding Subscription Drift Without Exposing Your Bank History
Review a locally redacted transaction export for recurring charges and drift, without ever connecting an AI tool to your bank account. A confidence-flagged merchant list, and a cancellation checklist a human actually executes.
初级
7 分钟阅读Understand a Medical Document Without Turning It Into Medical Advice
A discharge note or test report arrives full of clinical shorthand you were never taught to read. A four-column method - exact text, plain paraphrase, uncertainty, clinician question - lets AI translate the language without ever telling you what your results mean.
初级
20 分钟RAG权限与访问控制：深入教程
Paragon. 视频逐步讲解生产环境中的RAG权限问题，并比较工具调用、命名空间、ACL表和基于关系的权限。这直接支持文章的核心规则：检索只能返回当前用户获准查看的来源，而且不能把源系统权限视为事后补充。
高级
10 分钟阅读企业知识RAG：权限、泄露与来源边界
只有检索过程遵守权限，企业知识助手才是安全的。本文介绍如何设计RAG来源边界、ACL筛选、文档责任归属、日志记录、过时来源处理和拒绝行为。
高级
9 分钟阅读面向中小企业的欧盟《人工智能法案》：实用治理方案
欧盟《人工智能法案》并非只给大型供应商带来法律问题。本指南为中小企业提供一套实用方案，涵盖清单盘点、风险分类、人工监督、透明度、供应商记录和分阶段落地规范。
高级
10 分钟阅读在Mac上运行本地AI：Ollama、LM Studio，以及7B模型究竟能做什么
本地运行AI已日趋成熟。借助Ollama或LM Studio和一台现代Mac，你可以离线、免费且私密地运行能力不俗的模型。本文将介绍哪些方法可行、哪些不可行，以及真正能从中受益的使用场景。
中级
6 分钟阅读与AI分享图像：哪些可以上传，哪些不应该上传
现代AI读取照片、图表、屏幕截图和手写内容几乎和读取文本一样轻松。本指南将实用地介绍哪些做法有效、哪些无效，以及上传任何内容前应完成的三十秒隐私检查。
AI新手
25 分钟OWASP攻击LLM的10种方式：AI漏洞揭秘
IBM Technology. 视频从提示词注入扩展到更全面的OWASP LLM十大风险——不安全的输出处理、敏感信息泄露、过度代理等。在向任何工具授予Gmail或HubSpot权限范围之前，你正需要在脑中备好这份故障模式清单。
中级
11 分钟什么是提示词注入攻击？
IBM Technology. Jeff Crume用“以$1购买一辆SUV”的例子，在10分钟内极其清楚地解释了为什么直接提示词注入与间接提示词注入是两类不同的问题，以及为什么过滤无法彻底解决任何一类。这与文章的论点直接呼应：对于任何不可逆操作，你需要最小权限范围、专用智能体账号和人在回路机制，而不是更巧妙的系统提示词。
中级
14 分钟15分钟学会Ollama——免费在本地运行大语言模型
Tech With Tim. 简洁直接的Ollama实操教程——安装、拉取模型、对话，然后用Python调用本地HTTP API，并通过Modelfile创建自定义模型。内容恰好覆盖文章所述的Mac日常使用流程，也讲解了如何根据机器的RAM考虑模型大小。
中级
6 分钟LM Studio教程：在笔记本电脑上运行大语言模型
Kevin Stratvert. 通过图形界面完成与Ollama相同的工作流：下载LM Studio、拉取Llama或Gemma模型、进行对话，以及放入PDF并就其内容提问。适合不想一直使用终端的读者，也有助于直观比较1B–3B模型与更大模型的实际表现。
中级
93 分钟Sam Altman｜Theo Von访谈节目This Past Weekend第599期
Theo Von. 大约在第十二分钟，Altman承认与ChatGPT的对话不受法律特权保护，而且在诉讼中OpenAI可能会被要求交出这些对话。这是关于该话题引用最广的一段视频，值得听他亲口说明，而不是通过新闻片段了解。后面的谈话涉及许多其他话题，但仅这段对话就诚实回答了文章提出的问题：“公司究竟会如何处理我输入的内容？”
AI新手
13 分钟如何保障AI商业模型的安全
IBM Technology. Jeff Crume通过白板讲解了生成式AI引入风险的三个环节——数据、模型和使用方式——以及各环节应采用的良好管控措施。这有助于理解文章的观点：“务必小心”并不足够；作为员工，你需要判断自己实际面对的是哪一类风险。
初级
11 分钟什么是影子AI？网络安全威胁中的黑马
IBM Technology. 虽然观看次数低于我们通常采用的100K门槛，但它仍值得入选，因为它用很短的篇幅出色地说明了为什么员工使用个人ChatGPT账户处理工作问题，才是多数公司真正面对的风险。Crume所说的“不要只说不行，要说明怎样才行”，与文章采用的立场完全一致——目的不是禁止AI，而是让安全使用成为最省事的默认选择。
初级
4 分钟GPT-4o视觉能力现场演示
OpenAI. 视频用四分钟展示了一个人把手写的线性方程举到摄像头前，ChatGPT在不直接给出答案的情况下辅导他解题。这是最清晰、最简短的演示，能让你切实体会“模型真的能看到我展示的内容”；与我们找到的其他操作演示相比，它也更准确地呈现了文章推荐的使用场景——手写笔记、简单数学题和拍摄的文档。
AI新手