TED Fellows Retreat 2013
Christopher Soghoian: Government surveillance — this is just the beginning
政府监视－这只是个开始
Filmed:
Readability: 5.2
893,397 views
隐私研究员柯里斯．索侯恩看到政府的监视已转到我们的脚底，已发展成一个产业来支持监听计划。他说，政府通过私营公司，可购买技术以入侵电脑、盗取文件、和监视目标的活动－而且在不知不觉中进行。这位 TED Fellow 给我们展示令人不安的监视看看接下来会怎么样。
Christopher Soghoian - Privacy researcher and activist
Christopher Soghoian researches and exposes the high-tech surveillance tools that governments use to spy on their own citizens, and he is a champion of digital privacy rights. Full bio
Christopher Soghoian researches and exposes the high-tech surveillance tools that governments use to spy on their own citizens, and he is a champion of digital privacy rights. Full bio
Double-click the English transcript below to play the video.
00:12
The 2011 Arab Spring
0
811
1965
2011年的阿拉伯之春
00:14
captured the attention of the world.
1
2776
1803
引起全世界的关注，
00:16
It also captured the attention
2
4579
1649
也受到其他国家
00:18
of authoritarian governments in other countries,
3
6228
2377
独裁政府的关注，
00:20
who were worried that revolution would spread.
4
8605
2963
那些担心革命蔓延的政府。
00:23
To respond, they ramped up surveillance
5
11568
2077
为此，他们加强
00:25
of activists, journalists and dissidents
6
13645
3096
对激进分子、记者
和异己分子的监控，
和异己分子的监控，
00:28
who they feared would inspire revolution
7
16741
1954
害怕他们受到启发
00:30
in their own countries.
8
18695
1835
在自己国家发动革命。
00:32
One prominent Bahraini activist,
9
20530
2045
一个著名的巴林激进分子
00:34
who was arrested and tortured by his government,
10
22575
2110
被政府抓捕并受到拷问，
00:36
has said that the interrogators showed him
11
24685
1725
他说讯问人给他看
00:38
transcripts of his telephone calls
12
26410
1870
他的电话记录
00:40
and text messages.
13
28280
1808
和短信誊本，
00:42
Of course, it's no secret
14
30088
1656
当然，政府可以监听电话和监视短信，
00:43
that governments are able to intercept
telephone calls and text messages.
telephone calls and text messages.
15
31744
3196
这并不是秘密，
00:46
It's for that reason that many activists
16
34940
2372
正因如此，很多激进分子
00:49
specifically avoid using the telephone.
17
37312
1926
也特别避免使用电话，
00:51
Instead, they use tools like Skype,
18
39238
2348
而使用其他工具比如
SKYPE（网络电话），
SKYPE（网络电话），
00:53
which they think are immune to interception.
19
41586
2520
他们认为这样就可以避免受到监视，
00:56
They're wrong.
20
44106
1772
他们错了。
00:57
There have now been over the last few years
21
45878
2726
在过去几年，
01:00
an industry of companies
22
48604
1646
一个专门提供
01:02
who provide surveillance technology to governments,
23
50250
3254
监听技术给政府的公司，
01:05
specifically technology that
allows those governments
allows those governments
24
53504
2361
特别是让政府
01:07
to hack into the computers
25
55865
1653
入侵监视目标的电脑，
01:09
of surveillance targets.
26
57518
1595
入侵监视目标的电脑，
01:11
Rather than intercepting the communications
as they go over the wire,
as they go over the wire,
27
59113
2840
他们除了通过窃听截听信息外，
01:13
instead they now hack into your computer,
28
61953
2267
现在他们也会入侵你的电脑，
01:16
enable your webcam, enable your microphone,
29
64220
2002
通过你的网络摄像机，或者麦克风
01:18
and steal documents from your computer.
30
66222
2457
盗取电脑上的文件。
01:20
When the government of Egypt fell in 2011,
31
68679
2833
2011年，当埃及政府倒台，
01:23
activists raided the office of the secret police,
32
71512
3401
激进分子突袭秘密警局的办公室，
01:26
and among the many documents they found
33
74913
1988
在他们发现的很多文件中，
01:28
was this document by the Gamma Corporation,
34
76901
2317
有一份来自伽玛公司，
01:31
by Gamma International.
35
79218
1801
属于伽玛国际。
01:33
Gamma is a German company
36
81019
1657
伽玛是一间德国公司，
01:34
that manufactures surveillance software
37
82676
1484
生产监控软件，
01:36
and sells it only to governments.
38
84160
2157
产品只卖给政府，
01:38
It's important to note that most governments
39
86317
2007
需要注意的是很多政府
01:40
don't really have the in-house capabilities
40
88324
2066
自身并没有实力
01:42
to develop this software.
41
90390
1465
来开发软件，
01:43
Smaller ones don't have the resources
42
91855
1619
较小的政府甚至没有资源
01:45
or the expertise,
43
93474
1776
或者经验去开发，
01:47
and so there's this market of Western companies
44
95250
3307
所以西方的公司就有了这样的市场，
01:50
who are happy to supply them with the tools
45
98557
1967
他们很愿意提供各样的工具
01:52
and techniques for a price.
46
100524
1718
和技术，
01:54
Gamma is just one of these companies.
47
102242
2606
伽玛就是这样的一间公司，
01:56
I should note also that Gamma never actually sold
48
104848
2908
我还注意到实际上伽玛
01:59
their software to the Egyptian government.
49
107756
1897
并没有把软件卖给埃及政府，
02:01
They'd sent them an invoice for a sale,
50
109653
2597
他们只是给埃及政府报价，
02:04
but the Egyptians never bought it.
51
112250
1642
但是埃及人并没有买，
02:05
Instead, apparently, the Egyptian government
52
113892
1724
而很明显埃及政府
02:07
used a free demo version of Gamma's software.
53
115616
2633
使用的是免费版本，
02:10
(Laughter)
54
118249
2775
（笑声）
02:13
So this screenshot is from a sales video
55
121024
3498
所以这个截图是来自
02:16
that Gamma produced.
56
124522
1565
一个伽玛生产的销售视频，
02:18
Really, they're just emphasizing
57
126087
1983
事实上，他们只是强调，
02:20
in a relatively slick presentation
58
128070
1651
通过一个简单的演讲，
02:21
the fact that the police can sort of sit
59
129721
2193
警察可以坐在空调办公室里，
02:23
in an air-conditioned office
60
131914
1450
警察可以坐在空调办公室里，
02:25
and remotely monitor someone
61
133364
1411
远程监控某些人，
02:26
without them having any idea that it's going on.
62
134775
2175
而被监视的人却无从所知。
02:28
You know, your webcam light won't turn on.
63
136950
2035
你知道，网络摄像机的灯不会亮起，
02:30
There's nothing to indicate that
the microphone is enabled.
the microphone is enabled.
64
138985
3354
没有任何显示麦克风是开着的。
02:34
This is the managing director
of Gamma International.
of Gamma International.
65
142339
3335
这是伽玛国际的管理总裁
02:37
His name is Martin Muench.
66
145674
1861
他的名字是 Martin Muench
02:39
There are many photos of Mr. Muench that exist.
67
147535
2931
现有很多 Muench 先生的照片,
02:42
This is perhaps my favorite.
68
150466
1852
这是我最喜欢的一张,
02:44
I'm just going to zoom in a little bit onto his webcam.
69
152318
2144
我只是放大一点点他的网络摄像机，
02:46
You can see there's a little sticker
70
154462
1668
你可以看到有一张小纸条,
02:48
that's placed over his camera.
71
156130
1893
那个是他的网络摄像机，
02:50
He knows what kind of surveillance is possible,
72
158023
2533
他知道会发生什么样的监控,
02:52
and so clearly he doesn't want it to be used
73
160556
1806
并且很明显他也不想被利用
02:54
against him.
74
162362
1602
来对抗他。
02:55
Muench has said that he intends
75
163964
1924
Muench 说过他希望
02:57
for his software to be used
76
165888
1664
他的软件被使用
02:59
to capture terrorists and locate pedophiles.
77
167552
2983
来捕捉恐怖分子和定位恋童癖的人
03:02
Of course, he's also acknowledged that once
78
170535
1796
当然，他也承认一旦
03:04
the software has been sold to governments,
79
172331
2155
软件卖给政府，
03:06
he has no way of knowing how it can be used.
80
174486
3825
他也不知道将被如何使用，
03:10
Gamma's software has been located on servers
81
178311
1850
伽玛软件已经服务于
03:12
in countries around the world,
82
180161
1656
世界各地的国家，
03:13
many with really atrocious track records
83
181817
2391
很多是骇人听闻的跟踪记录
03:16
and human rights violations.
84
184208
1561
和侵犯人权的事件，
03:17
They really are selling their
software around the world.
software around the world.
85
185769
3395
他们会卖软件给世界各地，
03:21
Gamma is not the only company in the business.
86
189164
2301
伽玛不是这个产业里唯一的公司，
03:23
As I said, it's a $5 billion industry.
87
191465
2751
正如我说，这是一个50亿美金的行业，
03:26
One of the other big guys in the industry
88
194216
2839
另外一个巨头是
03:29
is an Italian company called Hacking Team.
89
197055
2395
一间意大利公司名为骇客团队
（Hacking Team）,
（Hacking Team）,
03:31
Now, Hacking Team has what is probably
90
199450
1725
骇客团队可能做出了
03:33
the slickest presentation.
91
201175
1970
最花言巧语的广告,
03:35
The video they've produced is very sexy,
92
203145
3028
他们做的视频很性感,
03:38
and so I'm going to play you a clip
93
206173
1648
我现在就给你们展示一个短片,
03:39
just so you can get a feel
94
207821
1314
就是让你们感受下
03:41
both for the capabilities of the software
95
209135
1831
软件究竟能做什么,
03:42
but also how it's marketed
96
210966
1906
同样也看看他们是怎么推销产品
03:44
to their government clients.
97
212872
1768
给政府顾客的
03:46
(Video) Narrator: You want to look
through your target's eyes.
through your target's eyes.
98
214640
3516
（视频）叙述：你想看穿目标的眼睛
03:50
(Music)
99
218179
1884
（音乐）
03:52
You have to hack your target.
100
220063
3002
你必须骇客你的目标，
03:55
["While your target is browsing the web, exchanging documents, receiving SMS, crossing the borders"]
101
223065
6316
［“当你的目标浏览网页、
收发文件、接收信息、跨越边境”］
收发文件、接收信息、跨越边境”］
04:01
You have to hit many different platforms.
102
229381
2923
你必须击中不同的平台
04:04
["Windows, OS X, iOS, Android,
Blackberry, Symbian, Linux"]
Blackberry, Symbian, Linux"]
103
232304
3880
［“视窗、OS X、iOS、安卓、
黑莓、Symbian，Linux”］
黑莓、Symbian，Linux”］
04:08
You have to overcome encryption
104
236184
2468
你必须通过加密软件
04:10
and capture relevant data.
105
238652
2897
来获得相关数据
04:13
[Skype & encrypted calls, target location,
messaging, relationships,
messaging, relationships,
106
241549
4559
[Skype 和加密电话、
目标地、短信、关系、
目标地、短信、关系、
04:18
web browsing, audio & video"]
107
246108
3172
网页、音频和视频“］
04:21
Being stealth and untraceable.
108
249280
4160
变得隐秘和无法追踪
04:25
["Immune to any protection system
Hidden collection infrastructure"]
Hidden collection infrastructure"]
109
253440
3274
［不受任何保护系统影响
隐藏在基础设施中］
隐藏在基础设施中］
04:28
Deployed all over your country.
110
256714
4105
部署在你们国家的各个角落
04:32
["Up to hundreds of thousands of targets
Managed from a single spot"]
Managed from a single spot"]
111
260819
4534
［”由一个单一的地方
来控制超过成百上千的目标］
来控制超过成百上千的目标］
04:37
Exactly what we do.
112
265353
3322
正是我们所做的。
04:40
Christopher Soghoian: So, it
would be funny if it wasn't true,
would be funny if it wasn't true,
113
268675
2263
柯里斯．索侯恩：所以，
如果那不是真的就很有趣，
如果那不是真的就很有趣，
04:42
but, in fact, Hacking Team's software
114
270938
1788
但事实上，骇客团队的软件
04:44
is being sold to governments around the world.
115
272726
2948
已经卖给世界各地的政府。
04:47
Last year we learned, for example,
116
275674
1752
例如，去年我们知道，
04:49
that it's been used to target Moroccan
journalists by the Moroccan government.
journalists by the Moroccan government.
117
277426
4048
摩洛哥政府已经用它
来监控摩洛哥的记者。
来监控摩洛哥的记者。
04:53
Many, many countries it's been found in.
118
281474
2544
很多很多国家已经被发现使用。
04:56
So, Hacking Team has also been actively courting
119
284018
3124
所以，骇客团队也主动地推销给
04:59
the U.S. law enforcement market.
120
287142
2343
美国执法部门市场。
05:01
In the last year or so, the company
121
289485
2283
去年左右，
05:03
has opened a sales office in Maryland.
122
291768
4776
公司在马里兰开了销售部门，
05:08
The company has also hired a spokesperson.
123
296544
2114
并雇佣了一个发言人。
05:10
They've been attending
124
298658
1537
他们参加了
05:12
surveillance industry conferences
125
300195
1597
各式各樣的监控行业业內会议，
05:13
where law enforcement officials show up.
126
301792
2015
执法官员都有参加。
05:15
They've spoken at the conferences.
127
303807
1834
他们在会议上发言。
05:17
What I thought was most fascinating was
128
305641
1588
我认为最有意思的是
05:19
they've actually paid for the coffee break
129
307229
2101
今年较早前
05:21
at one of the law enforcement conferences
130
309330
1940
的其中一个执法会议，
05:23
earlier this year.
131
311270
1493
在中场休息时，他们請客喝咖啡。
05:24
I can't tell you for sure that Hacking Team
132
312763
2099
我不能确切地告诉你骇客团队
05:26
has sold their technology in the United States,
133
314862
2725
是否在美国卖过他们的技术，
05:29
but what I can tell you that if they haven't sold it,
134
317587
1971
但是我可以告诉你们，
如果他们没卖出去，
如果他们没卖出去，
05:31
it isn't because they haven't been trying hard.
135
319558
3175
并不是因为他们没有尽力。
05:34
So as I said before,
136
322733
2042
所以正如我所说的，
05:36
governments that don't really have the resources
137
324775
1920
那些政府真的没有资源
05:38
to build their own tools will buy
138
326695
1596
生产自家工具，
05:40
off-the-shelf surveillance software,
139
328291
1410
就会购买现成的监视软件，
05:41
and so for that reason,
140
329701
1388
也正因为如此，
05:43
you see that the government of, say, Tunisia,
141
331089
2716
你会看到例如突尼斯政府，
05:45
might use the same software
as the government of Germany.
as the government of Germany.
142
333805
2188
可能使用跟德国政府相同的软件，
05:47
They're all buying off-the-shelf stuff.
143
335993
2272
他们都在购买现成的东西。
05:50
The Federal Bureau of
Investigation in the United States
Investigation in the United States
144
338265
2199
美国联邦调查局的预算
05:52
does have the budget to build
their own surveillance technology,
their own surveillance technology,
145
340464
2762
包括建立自己监听技术
05:55
and so for several years, I've been trying
146
343226
1781
并且已有数年，
05:57
to figure out if and how the FBI
147
345007
2391
我正在尝试弄明白
05:59
is hacking into the computers of surveillance targets.
148
347398
2898
FBI 有没有和怎样
入侵监视目标的电脑。
入侵监视目标的电脑。
06:02
My friends at an organization called
the Electronic Frontier Foundation --
the Electronic Frontier Foundation --
149
350296
3153
我一个在电子前哨基金会工作的朋友，
06:05
they're a civil society group —
150
353449
2312
这是一个民间社会组织，
06:07
obtained hundreds of documents from the FBI
151
355761
2492
得到 FBI 数百份文件，
06:10
detailing their next generation
of surveillance technologies.
of surveillance technologies.
152
358253
2848
详细描述他们下一代的监视技术，
06:13
Most of these documents were heavily redacted,
153
361101
2634
很多文件都被批量遮挡，
06:15
but what you can see from the slides,
154
363735
2816
但是字里行间，
06:18
if I zoom in, is this term:
155
366551
1962
如果我放大，就是这些：
06:20
Remote Operations Unit.
156
368513
1820
远程控制单元。
06:22
Now, when I first looked into this,
157
370333
2234
现在，当我第一次看到这些，
06:24
I'd never heard of this unit before.
158
372567
2070
我从来没听过这个单元。
06:26
I've been studying surveillance
for more than six years.
for more than six years.
159
374637
2302
我研究监视技术已经有六年多了，
06:28
I'd never heard of it.
160
376939
1285
却从来没有听过。
06:30
And so I went online and I did some research,
161
378224
1963
所以我上网做了些调查，
06:32
and ultimately I hit the mother lode
162
380187
2125
最终找到了出处。
06:34
when I went to LinkedIn,
163
382312
1634
当我进入linkedin，
06:35
the social networking site for job seekers.
164
383946
2569
找工作的社交网站。
06:38
There were lots of former
U.S. government contractors
U.S. government contractors
165
386515
2913
有很多前美国政府的承包商
06:41
who had at one point worked
166
389428
1387
在远程控制单元
06:42
for the Remote Operating Unit,
167
390815
1309
那块领域工作，
06:44
and were describing in surprising detail on their CVs
168
392124
3414
在简历中详述很多细节，
06:47
what they had done in their former job.
169
395538
2031
有关他们所做的事情，
06:49
(Laughter)
170
397569
2222
（笑声）
06:51
So I took this information
171
399791
1987
所以我做了这个信息，
06:53
and I gave it to a journalist that I know
and trust at the Wall Street Journal,
and trust at the Wall Street Journal,
172
401778
3744
并且交给一个我认识信任的
华尔街日报记者，
华尔街日报记者，
06:57
and she was able to contact several other
173
405522
1801
他能够联系上
06:59
former law enforcement officials
174
407323
1754
其他的前执法官员，
07:01
who spoke on background and confirmed
175
409077
1806
那些证实
07:02
that yes, in fact, the FBI has a dedicated team
176
410883
3359
事实上，FBI确实存在一个团队，
07:06
that does nothing but hack into the computers
177
414242
2136
专门骇客
07:08
of surveillance targets.
178
416378
1526
所监视的电脑。
07:09
Like Gamma and Hacking Team,
179
417904
1888
像伽玛和骇客团队，
07:11
the FBI also has the capability
180
419792
2117
FBI 也有能力
07:13
to remotely activate webcams, microphones,
181
421909
3394
通过远程监控摄像头，麦克风，
07:17
steal documents, get web browsing information,
182
425303
2202
来盗取资料，获得网页信息，
07:19
the works.
183
427505
1684
文件。
07:21
There's sort of a big problem
184
429189
1822
这是一个大问题，
07:23
with governments going into hacking,
185
431011
1600
就是政府监听问题，
07:24
and that's that terrorists, pedophiles,
186
432611
2519
和那些恐怖分子，恋童癖者，
07:27
drug dealers, journalists and human rights activists
187
435130
2911
毒品交易者，记者们，和人权活动家
07:30
all use the same kinds of computers.
188
438041
2271
所有使用同类电脑的人，
07:32
There's no drug dealer phone
189
440312
2047
没有毒品交易者的电话
07:34
and there's no journalist laptop.
190
442359
1966
也没有记者的笔记本。
07:36
We all use the same technology,
191
444325
2234
我们都使用相同的技术，
07:38
and what that means then is that for governments
192
446559
1894
并且那意味着对政府而言，
07:40
to have the capability to hack into the computers
193
448453
2117
有能力通过电脑监视
07:42
of the real bad guys,
194
450570
1699
真正的坏人，
07:44
they also have to have the capability
195
452269
1976
他们还有能力
07:46
to hack into our devices too.
196
454245
2185
也监听我们的设备。
07:48
So governments around the world
197
456430
1752
所以全世界的政府
07:50
have been embracing this technology.
198
458182
1461
已拥有这项技术。
07:51
They've been embracing hacking
199
459643
1605
他们利用骇客
07:53
as a law enforcement technique,
200
461248
1820
作为一个执法技术，
07:55
but without any real debate.
201
463068
1950
但是没有真正意义的舆论。
07:57
In the United States, where I live,
202
465018
1819
在美国，我生活的地方，
07:58
there have been no congressional hearings.
203
466837
1825
没有国会听证会。
08:00
There's no law that's been passed
204
468662
1961
没有法律通过
08:02
specifically authorizing this technique,
205
470623
2073
特别授权这项技术，
08:04
and because of its power and potential for abuse,
206
472696
2669
并且因为它的权力和潜在的滥用，
08:07
it's vital that we have an informed public debate.
207
475365
2947
我们很有必要让公众知晓这些事实，并且就此展开辩论。
08:10
Thank you very much.
208
478312
1946
谢谢大家。
08:12
(Applause)
209
480258
1556
(掌声）
ABOUT THE SPEAKER
Christopher Soghoian - Privacy researcher and activistChristopher Soghoian researches and exposes the high-tech surveillance tools that governments use to spy on their own citizens, and he is a champion of digital privacy rights.
Why you should listen
TED Fellow Christopher Soghoian is a champion of digital privacy rights, with a focus on the role that third-party service providers play in enabling governments to monitor citizens. As the principal technologist at the American Civil Liberties Union, he explores the intersection of federal surveillance and citizen's rights.
Before joining the ACLU, he was the first-ever technologist for the Federal Trade Commision's Division of Privacy and Identity Protection, where he worked on investigations of Facebook, Twitter, MySpace and Netflix. Soghoian is also the creator of Do Not Track, an anti-tracking device that all major web browsers now use, and his work has been cited in court.
Christopher Soghoian | Speaker | TED.com