Private Claude Chats Exposed in Google and Bing Search Results
Private Claude Chats Exposed in Google and Bing Search Results
私人 Claude 对话在 Google 和 Bing 搜索结果中泄露
What happens between you and an AI chatbot does not always stay between you and a chatbot. Just ask Google. 你与 AI 聊天机器人之间的对话并不总是只属于你们双方。问问 Google 就知道了。
Over the weekend, people were surprised to discover that some Anthropic Claude chats could be easily found via web search. The issue, which appears to have been first flagged by a redditor, exposed chats that included people asking for advice about what political party they should join, whether attorneys in Kansas are required to self-report when they believe they’ve committed an ethical violation, and erotic role play. 上周末，人们惊讶地发现，一些 Anthropic Claude 的对话可以通过网络搜索轻易找到。这个问题最初似乎是由一位 Reddit 用户指出的，泄露的对话内容包括用户咨询应加入哪个政党、堪萨斯州的律师在认为自己违反职业道德时是否需要主动上报，以及色情角色扮演等内容。
Claude allows users to share with other people “snapshots” of chats by creating a public URL to a specific chatbot thread. The reasons some of these URLs were indexed by major search engines comes down to the basic functions of websites, search engines, and the collision of the two when generative AI gets in the mix. Claude 允许用户通过创建指向特定聊天线程的公共 URL，与他人分享对话的“快照”。这些 URL 之所以被主流搜索引擎索引，归根结底是网站和搜索引擎的基本功能，以及生成式 AI 介入后两者之间产生的冲突所致。
Basically, Anthropic instructs web crawlers, like those used by search engines like Google and Bing, not to index chats a user decides to share with other people. The company does this via something called a robots.txt file, which has long been considered the standard way to tell web scrapers what parts of a site are appropriate to access. Anthropic’s robots.txt has made “shared” chats off limits to web scrapers since at least September 2025, according to a snapshot on the Wayback Machine. 基本上，Anthropic 会指示像 Google 和 Bing 这样的搜索引擎所使用的网络爬虫，不要索引用户决定分享给其他人的对话。该公司通过一种名为 robots.txt 的文件来实现这一点，该文件长期以来被认为是告知网络抓取工具哪些网站部分可以访问的标准方式。根据 Wayback Machine 的快照显示，至少从 2025 年 9 月起，Anthropic 的 robots.txt 就已将“共享”对话设为网络抓取工具的禁区。
But it’s harder to prevent pages from being included in search engine results than you might expect. 但要防止页面被收录进搜索引擎结果，比你想象的要困难得多。
Bing, which still shows “about 612 results” if you search “site:claude.ai/share” at the time of this writing, says in its technical documentation that developers can block the search engine’s web crawlers using robots.txt—but that web developers should also include a “noindex” tag on individual pages as well. 在撰写本文时，如果你搜索“site:claude.ai/share”，Bing 仍会显示“约 612 条结果”。Bing 在其技术文档中表示，开发者可以使用 robots.txt 阻止搜索引擎的网络爬虫，但网页开发者同时也应该在各个页面上添加“noindex”标签。
Some of the chats that showed up in search results flagged in the Reddit post were deleted by the time WIRED viewed them, and results no longer show up in Google when you search the “share” query that still worked on Bing. In a developer guide, Google says that it ignores robots.txt instructions if that page is linked to from elsewhere on the internet and the page owner doesn’t also include a special “noindex” html tag on the page or a “x-robots-tag” in the page’s response header. Reddit 帖子中提到的部分出现在搜索结果中的对话，在 WIRED 查看时已被删除。当你在 Google 上搜索在 Bing 上仍有效的“share”查询时，结果已不再显示。在开发者指南中，Google 表示，如果页面在互联网其他地方有链接，且页面所有者未在页面上包含特殊的“noindex”HTML 标签或在页面响应头中包含“x-robots-tag”，它就会忽略 robots.txt 的指令。
WIRED reviewed a sample of the exposed Claude chat pages and found that they did not include the “noindex” tag that both Bing and Google say they take into consideration when deciding whether or not to index a page. WIRED 查看了部分泄露的 Claude 对话页面样本，发现它们并未包含 Bing 和 Google 所称的在决定是否索引页面时会考虑的“noindex”标签。
Microsoft, which owns Bing, did not provide comment ahead of publication. Anthropic did not respond to multiple requests for comment. 拥有 Bing 的微软在本文发布前未提供评论。Anthropic 未回应多次置评请求。
Google spokesperson Ned Adriance tells WIRED that the indexing of shared Claude chats is Anthropic’s responsibility. “Neither Google nor any other search engine controls what pages are made public on the web, and these pages were indexed across many search engines,” Adriance says. “We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives.” Google 发言人 Ned Adriance 告诉 WIRED，共享 Claude 对话被索引是 Anthropic 的责任。“Google 或任何其他搜索引擎都无法控制哪些页面在网络上公开，这些页面是在多个搜索引擎中被索引的，”Adriance 说。“我们为网站所有者提供了明确的控制权，让他们决定页面是否可以被抓取或索引，我们始终尊重这些指令。”
Anthropic didn’t respond to questions about why it didn’t include the “noindex” tag on the shared chat pages. Anthropic 未回应关于为何不在共享对话页面上包含“noindex”标签的问题。
Last September, Anthropic got heat for the same issue, and told Forbes that it uses robots.txt to let crawlers know they shouldn’t access the shared chats. But as the Forbes report points out, there’s no guarantee that will stop search engines from indexing specific web pages. 去年 9 月，Anthropic 因同样的问题受到抨击，并告诉《福布斯》它使用 robots.txt 来告知爬虫不应访问共享对话。但正如《福布斯》报道所指出的，这并不能保证阻止搜索引擎索引特定的网页。
Even if robots.txt doesn’t always work to prevent pages from being indexed on search engines, AI labs are still making use of it for other purposes. Many labs promise creators that their websites won’t be used as AI training fodder so long as the developers make sure to “disallow” certain crawlers in their robots.txt files, and the labs themselves take that advice as well. 即使 robots.txt 并不总能阻止页面被搜索引擎索引，AI 实验室仍在将其用于其他目的。许多实验室向创作者承诺，只要开发者确保在 robots.txt 文件中“禁止（disallow）”某些爬虫，他们的网站就不会被用作 AI 训练素材，而这些实验室自己也采纳了这一建议。
Anthropic, Meta, and OpenAI all include instructions in their chatbots’ robots.txt files that “disallow” their competitors’ web crawlers from accessing any part of the website where the chatbots are hosted. OpenAI and Meta did not respond to a request for comment about the practice. Google did not address WIRED’s questions about the fact that its competitors are blocking its AI training crawler, Google-Extended, from their chatbots’ sites. Anthropic、Meta 和 OpenAI 都在其聊天机器人的 robots.txt 文件中包含了指令，禁止竞争对手的网络爬虫访问托管聊天机器人的网站的任何部分。OpenAI 和 Meta 未回应关于此做法的置评请求。Google 未回应 WIRED 关于其竞争对手正在阻止其 AI 训练爬虫 Google-Extended 访问其聊天机器人网站这一事实的提问。
Though shared chats are no longer turning up in Google results, the pages WIRED reviewed still don’t have a “noindex” tag, meaning that they could potentially show up in search engines again. Claude users can go to Settings > Privacy > Shared chats to manage access—and keep their secret conversations private. 虽然共享对话已不再出现在 Google 搜索结果中，但 WIRED 查看的页面仍然没有“noindex”标签，这意味着它们有可能再次出现在搜索引擎中。Claude 用户可以前往“设置”>“隐私”>“共享对话”来管理访问权限，并确保他们的秘密对话保持私密。
Additional reporting by Andrew Couts. 本文由 Andrew Couts 补充报道。