TED Fellows Retreat 2013
Christopher Soghoian: Government surveillance — this is just the beginning
Christopher Soghoian: 政府監控呢個故仔至啱啱開始
Filmed:
Readability: 5.2
893,397 views
私隱權學者 Christopher Soghoian 睇到政府監控嘅情況無聲無色噉改變梗，逐漸成為一件支援監管嘅工作。佢表示，政府透過私人企業購入可以喺唔觸動嘅情況下入侵電腦、偷取文件以及監控活動嘅技術。呢位 TED 研究生對於未來可能發生嘅嘢表示擔憂。
Christopher Soghoian - Privacy researcher and activist
Christopher Soghoian researches and exposes the high-tech surveillance tools that governments use to spy on their own citizens, and he is a champion of digital privacy rights. Full bio
Christopher Soghoian researches and exposes the high-tech surveillance tools that governments use to spy on their own citizens, and he is a champion of digital privacy rights. Full bio
Double-click the English transcript below to play the video.
00:12
The 2011 Arab Spring
0
811
1965
2011 年阿拉伯之春引起世界嘅關注
00:14
captured the attention of the world.
1
2776
1803
00:16
It also captured the attention
2
4579
1649
亦都引起其他國家獨裁政府嘅警覺性
00:18
of authoritarian governments in other countries,
3
6228
2377
00:20
who were worried that revolution would spread.
4
8605
2963
佢哋擔心運動會蔓延
為咗應對
00:23
To respond, they ramped up surveillance
5
11568
2077
佢哋加強對社會運動人士、
記者同異議分子嘅監控
記者同異議分子嘅監控
00:25
of activists, journalists and dissidents
6
13645
3096
00:28
who they feared would inspire revolution
7
16741
1954
佢哋驚呢班人會喺自己國家裏面
00:30
in their own countries.
8
18695
1835
引發一場革命
00:32
One prominent Bahraini activist,
9
20530
2045
一個巴林出名嘅社運人士
00:34
who was arrested and tortured by his government,
10
22575
2110
被政府拘捕同虐待
00:36
has said that the interrogators showed him
11
24685
1725
佢話，問話嘅人俾佢睇
00:38
transcripts of his telephone calls
12
26410
1870
佢電話嘅通話內容同短訊內容
00:40
and text messages.
13
28280
1808
00:42
Of course, it's no secret
14
30088
1656
當然
政府能夠截聽電話同埋短訊
早已經唔係咩秘密
早已經唔係咩秘密
00:43
that governments are able to intercept
telephone calls and text messages.
telephone calls and text messages.
15
31744
3196
00:46
It's for that reason that many activists
16
34940
2372
正因為係咁
好多社運人士都避免用電話
00:49
specifically avoid using the telephone.
17
37312
1926
00:51
Instead, they use tools like Skype,
18
39238
2348
佢哋會用类似 Skype 嘅工具
00:53
which they think are immune to interception.
19
41586
2520
因為佢哋認為咁樣就唔會俾人截聽到
00:56
They're wrong.
20
44106
1772
但佢哋錯啦
00:57
There have now been over the last few years
21
45878
2726
从前幾年開始
已經有好多公司向政府提供監控技術
01:00
an industry of companies
22
48604
1646
01:02
who provide surveillance technology to governments,
23
50250
3254
01:05
specifically technology that
allows those governments
allows those governments
24
53504
2361
尤其係
俾政府可以入侵監察對象電腦嘅科技
01:07
to hack into the computers
25
55865
1653
01:09
of surveillance targets.
26
57518
1595
由佢哋以前喺線路中間一半截聽通訊
01:11
Rather than intercepting the communications
as they go over the wire,
as they go over the wire,
27
59113
2840
01:13
instead they now hack into your computer,
28
61953
2267
改為宜家直接入侵你嘅電腦
01:16
enable your webcam, enable your microphone,
29
64220
2002
启动你嘅網絡攝錄機、麥克風
01:18
and steal documents from your computer.
30
66222
2457
盜取你電腦裡邊嘅文件
01:20
When the government of Egypt fell in 2011,
31
68679
2833
當埃及政府喺 2011 年倒台時
01:23
activists raided the office of the secret police,
32
71512
3401
社運人士搜查咗秘密警察嘅辦公室
01:26
and among the many documents they found
33
74913
1988
喺好多文件裏面
發現一份嚟自 Gamma International
01:28
was this document by the Gamma Corporation,
34
76901
2317
01:31
by Gamma International.
35
79218
1801
旗下子公司 Gamma Corporation 嘅文件
01:33
Gamma is a German company
36
81019
1657
Gamma International 係一間德國公司
01:34
that manufactures surveillance software
37
82676
1484
佢研發監控軟件同埋剩係向政府售卖
01:36
and sells it only to governments.
38
84160
2157
01:38
It's important to note that most governments
39
86317
2007
值得注意嘅係
大部分政府本身係冇能力開發呢啲軟件
01:40
don't really have the in-house capabilities
40
88324
2066
01:42
to develop this software.
41
90390
1465
更細規模嘅政府更加冇
01:43
Smaller ones don't have the resources
42
91855
1619
咁樣嘅資源同人才
01:45
or the expertise,
43
93474
1776
01:47
and so there's this market of Western companies
44
95250
3307
因此
西方企業好樂意提供呢啲工具同技術
01:50
who are happy to supply them with the tools
45
98557
1967
01:52
and techniques for a price.
46
100524
1718
以換取收入
01:54
Gamma is just one of these companies.
47
102242
2606
Gamma 只係其中一間咁樣嘅公司
01:56
I should note also that Gamma never actually sold
48
104848
2908
我亦都要強調事實上 Gamma
從來冇賣軟件俾埃及政府
01:59
their software to the Egyptian government.
49
107756
1897
02:01
They'd sent them an invoice for a sale,
50
109653
2597
佢哋有寄過報價嘅發票
02:04
but the Egyptians never bought it.
51
112250
1642
但係埃及從來冇買過
02:05
Instead, apparently, the Egyptian government
52
113892
1724
好明顯
埃及政府係用紧 Gamma 嘅免費試用版
02:07
used a free demo version of Gamma's software.
53
115616
2633
02:10
(Laughter)
54
118249
2775
（笑聲）
02:13
So this screenshot is from a sales video
55
121024
3498
呢個截圖係嚟自 Gamma 銷售推廣嘅片
02:16
that Gamma produced.
56
124522
1565
佢哋喺呢個比較簡潔流暢嘅影片裏面強調
02:18
Really, they're just emphasizing
57
126087
1983
02:20
in a relatively slick presentation
58
128070
1651
02:21
the fact that the police can sort of sit
59
129721
2193
其實警察坐喺冷氣辦公室
02:23
in an air-conditioned office
60
131914
1450
就能夠遙控地監控著某人
02:25
and remotely monitor someone
61
133364
1411
02:26
without them having any idea that it's going on.
62
134775
2175
而被監聽嘅人係唔知情嘅
02:28
You know, your webcam light won't turn on.
63
136950
2035
你知嗎？
網絡攝錄機嘅燈唔會著
02:30
There's nothing to indicate that
the microphone is enabled.
the microphone is enabled.
64
138985
3354
唔會有嘢話你知個麥克風被人開咗
02:34
This is the managing director
of Gamma International.
of Gamma International.
65
142339
3335
呢位係 Gamma International 嘅董事總經理
02:37
His name is Martin Muench.
66
145674
1861
Martin Muench
02:39
There are many photos of Mr. Muench that exist.
67
147535
2931
佢出現過喺好多相裏邊
02:42
This is perhaps my favorite.
68
150466
1852
呢張係我最鍾意嘅
我哋放大佢嘅網絡攝錄機
02:44
I'm just going to zoom in a little bit onto his webcam.
69
152318
2144
02:46
You can see there's a little sticker
70
154462
1668
可以見到有一張細黐紙
02:48
that's placed over his camera.
71
156130
1893
黐咗喺攝錄機度
02:50
He knows what kind of surveillance is possible,
72
158023
2533
佢知道有咩監控係可能發生嘅
02:52
and so clearly he doesn't want it to be used
73
160556
1806
所以好明顯佢唔希望咁樣嘅嘢
02:54
against him.
74
162362
1602
發生喺佢自己身上
02:55
Muench has said that he intends
75
163964
1924
Martin 話
佢希望佢嘅軟件
02:57
for his software to be used
76
165888
1664
02:59
to capture terrorists and locate pedophiles.
77
167552
2983
可以用嚟捉恐怖分子
或者搵出戀童癖嘅藏身之處
03:02
Of course, he's also acknowledged that once
78
170535
1796
當然
佢都承認呢個軟件賣咗俾政府之後
03:04
the software has been sold to governments,
79
172331
2155
03:06
he has no way of knowing how it can be used.
80
174486
3825
佢哋點樣用就唔知啦
03:10
Gamma's software has been located on servers
81
178311
1850
全世界好多伺服器都裝咗 Gamma 個軟件
03:12
in countries around the world,
82
180161
1656
03:13
many with really atrocious track records
83
181817
2391
好多伺服器都有驚人嘅追蹤紀錄
03:16
and human rights violations.
84
184208
1561
同埋好多都違反人權
03:17
They really are selling their
software around the world.
software around the world.
85
185769
3395
佢哋真係做到銷售全球化
03:21
Gamma is not the only company in the business.
86
189164
2301
Gamma 唔係唯一一個咁嘅公司
好似我話齋
03:23
As I said, it's a $5 billion industry.
87
191465
2751
呢個係一個價值五十億美元嘅行業
03:26
One of the other big guys in the industry
88
194216
2839
呢行嘅另一間大公司係
03:29
is an Italian company called Hacking Team.
89
197055
2395
義大利嘅 Hacking Team
今日嚟講
03:31
Now, Hacking Team has what is probably
90
199450
1725
呢家公司做嘅匯報可能係最簡潔流暢
03:33
the slickest presentation.
91
201175
1970
03:35
The video they've produced is very sexy,
92
203145
3028
佢哋整嘅宣傳片非常有吸引力
03:38
and so I'm going to play you a clip
93
206173
1648
我一陣間會播出嚟
03:39
just so you can get a feel
94
207821
1314
令你哋感受下呢間公司嘅軟件有幾勁
03:41
both for the capabilities of the software
95
209135
1831
03:42
but also how it's marketed
96
210966
1906
以及係佢哋係點樣向政府推銷呢件產品
03:44
to their government clients.
97
212872
1768
03:46
(Video) Narrator: You want to look
through your target's eyes.
through your target's eyes.
98
214640
3516
(影片嘅聲音)
錄音︰你想睇你監控對象睇梗啲乜
03:50
(Music)
99
218179
1884
(音樂)
03:52
You have to hack your target.
100
220063
3002
你要攻擊你個對象
03:55
["While your target is browsing the web, exchanging documents, receiving SMS, crossing the borders"]
101
223065
6316
[「當你監控對象喺度上網、
交換文件、收短訊、過境」]
交換文件、收短訊、過境」]
04:01
You have to hit many different platforms.
102
229381
2923
你必須要攻入好多唔同嘅平台
04:04
["Windows, OS X, iOS, Android,
Blackberry, Symbian, Linux"]
Blackberry, Symbian, Linux"]
103
232304
3880
[「Windows, OS X, iOS, Android,
Blackberry, Symbian, Linux」]
Blackberry, Symbian, Linux」]
04:08
You have to overcome encryption
104
236184
2468
你必須要克服加密嘅問題以獲取相關資料
04:10
and capture relevant data.
105
238652
2897
[「Skype 以及已加密嘅通話
目標位置、短訊、 關係、
目標位置、短訊、 關係、
04:13
[Skype & encrypted calls, target location,
messaging, relationships,
messaging, relationships,
106
241549
4559
網頁瀏覽、錄音及影片」]
04:18
web browsing, audio & video"]
107
246108
3172
04:21
Being stealth and untraceable.
108
249280
4160
隱形而冇被偵測到
[「對任何保護系統都有抗禦能力」]
04:25
["Immune to any protection system
Hidden collection infrastructure"]
Hidden collection infrastructure"]
109
253440
3274
[「隱藏嘅資料收集設施」]
04:28
Deployed all over your country.
110
256714
4105
遍佈全國
[「一個設施可以監控數以千計嘅目標」]
04:32
["Up to hundreds of thousands of targets
Managed from a single spot"]
Managed from a single spot"]
111
260819
4534
04:37
Exactly what we do.
112
265353
3322
正係我哋做嘅嘢
講者：如果頭先講嘅嘢係虛構
04:40
Christopher Soghoian: So, it
would be funny if it wasn't true,
would be funny if it wasn't true,
113
268675
2263
噉就幾搞笑啦
04:42
but, in fact, Hacking Team's software
114
270938
1788
但事實上
駭客團隊嘅軟件係賣俾全世界嘅政府
04:44
is being sold to governments around the world.
115
272726
2948
04:47
Last year we learned, for example,
116
275674
1752
舉個例
舊年我哋至知摩洛哥政府
04:49
that it's been used to target Moroccan
journalists by the Moroccan government.
journalists by the Moroccan government.
117
277426
4048
一直用呢個科技監控記者
好多國家都有類似嘅情況
04:53
Many, many countries it's been found in.
118
281474
2544
04:56
So, Hacking Team has also been actively courting
119
284018
3124
所以
駭客團隊都留意
04:59
the U.S. law enforcement market.
120
287142
2343
美國司法管轄地方嘅市場
05:01
In the last year or so, the company
121
289485
2283
舊年左右呢間公司
05:03
has opened a sales office in Maryland.
122
291768
4776
喺維珍妮亞州或者馬里蘭州
開設銷售辦公室
05:08
The company has also hired a spokesperson.
123
296544
2114
仲請咗一名發言人
05:10
They've been attending
124
298658
1537
佢哋有參與監控業界嘅研討會
05:12
surveillance industry conferences
125
300195
1597
05:13
where law enforcement officials show up.
126
301792
2015
執法官員都有出席
05:15
They've spoken at the conferences.
127
303807
1834
佢哋有喺研討會度發言
05:17
What I thought was most fascinating was
128
305641
1588
我覺得最得意嘅係
05:19
they've actually paid for the coffee break
129
307229
2101
佢哋今年初喺其中一個
05:21
at one of the law enforcement conferences
130
309330
1940
有關執法嘅會議裏面贊助咗休息時間
05:23
earlier this year.
131
311270
1493
05:24
I can't tell you for sure that Hacking Team
132
312763
2099
我唔可以好肯定咁話你知駭客團隊
05:26
has sold their technology in the United States,
133
314862
2725
有冇賣咗佢哋嘅科技俾美國政府
05:29
but what I can tell you that if they haven't sold it,
134
317587
1971
但我可以話俾你聽
如果佢哋冇賣到
05:31
it isn't because they haven't been trying hard.
135
319558
3175
唔係因為佢哋冇努力推銷
05:34
So as I said before,
136
322733
2042
正如我之前所講
05:36
governments that don't really have the resources
137
324775
1920
冇資源開發軟件嘅政府
05:38
to build their own tools will buy
138
326695
1596
會買呢啲上咗架嘅監控軟件
05:40
off-the-shelf surveillance software,
139
328291
1410
05:41
and so for that reason,
140
329701
1388
正因為咁
05:43
you see that the government of, say, Tunisia,
141
331089
2716
你會見到，譬如，突尼斯政府
05:45
might use the same software
as the government of Germany.
as the government of Germany.
142
333805
2188
可能會同德國政府一樣用同一款軟件
05:47
They're all buying off-the-shelf stuff.
143
335993
2272
佢哋都係買貨架上嘅軟件
05:50
The Federal Bureau of
Investigation in the United States
Investigation in the United States
144
338265
2199
美國聯邦調查局 FBI
05:52
does have the budget to build
their own surveillance technology,
their own surveillance technology,
145
340464
2762
有筆預算去研發佢哋
自己一套嘅監控技術
自己一套嘅監控技術
05:55
and so for several years, I've been trying
146
343226
1781
於是呢幾年嚟
我嘗試搵出
05:57
to figure out if and how the FBI
147
345007
2391
FBI 有冇真係入侵
05:59
is hacking into the computers of surveillance targets.
148
347398
2898
同埋點樣入侵監控對象嘅電腦
06:02
My friends at an organization called
the Electronic Frontier Foundation --
the Electronic Frontier Foundation --
149
350296
3153
我有個朋友喺電子領域基金會度做
06:05
they're a civil society group —
150
353449
2312
呢個基金會一個民間組織
06:07
obtained hundreds of documents from the FBI
151
355761
2492
佢哋攞咗好多 FBI 嘅文件
06:10
detailing their next generation
of surveillance technologies.
of surveillance technologies.
152
358253
2848
裏邊寫低 FBI 下一代嘅監聽科技會係點
06:13
Most of these documents were heavily redacted,
153
361101
2634
呢啲文件大多數內容都俾人大執過
06:15
but what you can see from the slides,
154
363735
2816
但若果我放大熒幕上面嘅嘢
06:18
if I zoom in, is this term:
155
366551
1962
你會見到呢行字：
遠端營運單位
06:20
Remote Operations Unit.
156
368513
1820
06:22
Now, when I first looked into this,
157
370333
2234
當我第一次見到呢樣嘢
06:24
I'd never heard of this unit before.
158
372567
2070
我從來未聽過呢個單位
06:26
I've been studying surveillance
for more than six years.
for more than six years.
159
374637
2302
我已經研究咗監控呢樣嘢超過六年啦
06:28
I'd never heard of it.
160
376939
1285
但我由未聽過呢個單位
06:30
And so I went online and I did some research,
161
378224
1963
於是我上網搵
最後我搵到答案
06:32
and ultimately I hit the mother lode
162
380187
2125
06:34
when I went to LinkedIn,
163
382312
1634
就係我上 Linkedin
06:35
the social networking site for job seekers.
164
383946
2569
一個求職者嘅社交網站嗰時
06:38
There were lots of former
U.S. government contractors
U.S. government contractors
165
386515
2913
嗰度有好多美國政府嘅前合約僱員
06:41
who had at one point worked
166
389428
1387
佢哋都曾經都喺
呢個遠端營運單位裏面做
呢個遠端營運單位裏面做
06:42
for the Remote Operating Unit,
167
390815
1309
06:44
and were describing in surprising detail on their CVs
168
392124
3414
佢哋仲係履歷上面詳細描述
06:47
what they had done in their former job.
169
395538
2031
佢哋做呢份工嗰陣做過啲乜
06:49
(Laughter)
170
397569
2222
(笑聲)
06:51
So I took this information
171
399791
1987
我將呢啲資料
06:53
and I gave it to a journalist that I know
and trust at the Wall Street Journal,
and trust at the Wall Street Journal,
172
401778
3744
交俾一個我識得同信得過嘅
華爾街日報記者
華爾街日報記者
06:57
and she was able to contact several other
173
405522
1801
佢聯絡咗一啲前執法人員
06:59
former law enforcement officials
174
407323
1754
07:01
who spoke on background and confirmed
175
409077
1806
佢哋喺背後承認同證實
07:02
that yes, in fact, the FBI has a dedicated team
176
410883
3359
FBI 的確有一個專責單位
07:06
that does nothing but hack into the computers
177
414242
2136
入侵監控對象嘅電腦
07:08
of surveillance targets.
178
416378
1526
07:09
Like Gamma and Hacking Team,
179
417904
1888
好似 Gamma 同駭客團隊噉
FBI 都有能力
07:11
the FBI also has the capability
180
419792
2117
07:13
to remotely activate webcams, microphones,
181
421909
3394
遙控啟動網絡攝錄機、麥克風
07:17
steal documents, get web browsing information,
182
425303
2202
去偷文件、攞上網紀錄、電腦檔案
07:19
the works.
183
427505
1684
07:21
There's sort of a big problem
184
429189
1822
政府入侵電腦係一個大問題
07:23
with governments going into hacking,
185
431011
1600
07:24
and that's that terrorists, pedophiles,
186
432611
2519
恐怖分子、戀童癖嘅人
07:27
drug dealers, journalists and human rights activists
187
435130
2911
毒販、記者同埋從事人權運動嘅人
07:30
all use the same kinds of computers.
188
438041
2271
全部都用同一款電腦
07:32
There's no drug dealer phone
189
440312
2047
嗰度冇專為毒販而設嘅電話
07:34
and there's no journalist laptop.
190
442359
1966
冇專為記者而設嘅手提電腦
07:36
We all use the same technology,
191
444325
2234
我哋都係梗用同一種科技
07:38
and what that means then is that for governments
192
446559
1894
咁代表咗
政府有能力入侵真正壞人嘅電腦
07:40
to have the capability to hack into the computers
193
448453
2117
07:42
of the real bad guys,
194
450570
1699
07:44
they also have to have the capability
195
452269
1976
同時政府都有能力入侵我哋嘅電腦
07:46
to hack into our devices too.
196
454245
2185
07:48
So governments around the world
197
456430
1752
所以全世界嘅政府都好鍾意用呢種技術
07:50
have been embracing this technology.
198
458182
1461
07:51
They've been embracing hacking
199
459643
1605
佢哋鍾意將監控當係一種執法工具
07:53
as a law enforcement technique,
200
461248
1820
07:55
but without any real debate.
201
463068
1950
但啲人從來冇辯論過呢樣嘢
07:57
In the United States, where I live,
202
465018
1819
喺美國，我生活嘅國家
07:58
there have been no congressional hearings.
203
466837
1825
國會從來冇聽證過
08:00
There's no law that's been passed
204
468662
1961
或者冇通過任何嘅法律
明確授權政府使用呢種技術
08:02
specifically authorizing this technique,
205
470623
2073
08:04
and because of its power and potential for abuse,
206
472696
2669
鑒於監控力量之大同埋有可能被濫用
08:07
it's vital that we have an informed public debate.
207
475365
2947
我哋必須要有一場公開辯論
等公眾知道呢回事
等公眾知道呢回事
08:10
Thank you very much.
208
478312
1946
多謝晒
(掌聲)
08:12
(Applause)
209
480258
1556
ABOUT THE SPEAKER
Christopher Soghoian - Privacy researcher and activistChristopher Soghoian researches and exposes the high-tech surveillance tools that governments use to spy on their own citizens, and he is a champion of digital privacy rights.
Why you should listen
TED Fellow Christopher Soghoian is a champion of digital privacy rights, with a focus on the role that third-party service providers play in enabling governments to monitor citizens. As the principal technologist at the American Civil Liberties Union, he explores the intersection of federal surveillance and citizen's rights.
Before joining the ACLU, he was the first-ever technologist for the Federal Trade Commision's Division of Privacy and Identity Protection, where he worked on investigations of Facebook, Twitter, MySpace and Netflix. Soghoian is also the creator of Do Not Track, an anti-tracking device that all major web browsers now use, and his work has been cited in court.
Christopher Soghoian | Speaker | TED.com