Christopher Soghoian: Government surveillance — this is just the beginning

Translator: Marie Søndergaard Reviewer: Jette Thrane

The 2011 Arab Spring

Det arabiske forår i 2011

captured the attention of the world.

fangede hele verdens opmærksomhed.

It also captured the attention

Det fik også opmærksomhed fra

of authoritarian governments in other countries,

autoritære regimer i andre lande, som

who were worried that revolution would spread.

frygtede at en revolution ville sprede sig

To respond, they ramped up surveillance

Som modsvar begyndte de at overvåge

of activists, journalists and dissidents

aktivister, journalister og opposition

who they feared would inspire revolution

som de frygtede ville inspirere til

in their own countries.

en revolution i deres egne lande.

One prominent Bahraini activist,

En prominent aktivist fra Bahrain

who was arrested and tortured by his government,

som blev arresteret og tortureret af sin regering

has said that the interrogators showed him

har fortalt at forhørslederne

transcripts of his telephone calls

viste ham udskrifter af

and text messages.

telefonopkald og sms'er.

Of course, it's no secret

Det er naturligvis ingen hemmelighed

that governments are able to intercept telephone calls and text messages.

at regeringer er i stand til at aflytte telefonopkald og læse sms'er.

It's for that reason that many activists

Det er derfor at mange aktivister

specifically avoid using the telephone.

specifikt undgår at bruge telefonen.

Instead, they use tools like Skype,

I stedet bruger de værktøjer som Skype

which they think are immune to interception.

som de tror er umulige at aflytte.

They're wrong.

De tager fejl.

There have now been over the last few years

Indenfor de sidste år er der opstået

an industry of companies

en industri af virksomheder som

who provide surveillance technology to governments,

tilbyder overvågningsteknologi til regeringer

specifically technology that allows those governments

specielt teknologi som tillader disse regeringer at

to hack into the computers

hacke computere som tilhører

of surveillance targets.

dem de vil overvåge.

Rather than intercepting the communications as they go over the wire,

I stedet for at aflytte kommunikation

instead they now hack into your computer,

kan de nu hacke din computer,

enable your webcam, enable your microphone,

tænde for dit webcam, tænde din microfon

and steal documents from your computer.

og stjæle dokumenter fra din computer.

When the government of Egypt fell in 2011,

Da regeringen i Egypten blev væltet i 2011

activists raided the office of the secret police,

rensagede aktivisterne det hemmelige politis

and among the many documents they found

kontorer, og blandt de mange dokumenter

was this document by the Gamma Corporation,

de fandt var dette dokument fra Gamma

by Gamma International.

Corporation, af Gamma International.

Gamma is a German company

Gamma er et tysk firma, som

that manufactures surveillance software

fremstiller overvågningssoftware

and sells it only to governments.

og udelukkende sælger det til regeringer.

It's important to note that most governments

Det er vigtigt at bemærke at de fleste

don't really have the in-house capabilities

regeringer ikke har in-house kompetencer

to develop this software.

til at udvikle dette software.

Smaller ones don't have the resources

De mindre har ikke ressourcer

or the expertise,

eller ekspertise,

and so there's this market of Western companies

og derfor er der et marked for vestlige

who are happy to supply them with the tools

virksomheder, som gerne vil sælge dem

and techniques for a price.

disse værktøjer og teknikker.

Gamma is just one of these companies.

Gamma er blot én af disse virksomheder.

I should note also that Gamma never actually sold

Jeg bør også nævne, at Gamma faktisk

their software to the Egyptian government.

aldrig solgte deres software til den

They'd sent them an invoice for a sale,

egyptiske regering. De sendte en faktura,

but the Egyptians never bought it.

men egypterne købte det ikke.

Instead, apparently, the Egyptian government

I stedet brugte den egyptiske regering

used a free demo version of Gamma's software.

tilsyneladende den gratis demo version af

(Laughter)

Gammas software. (Latter)

So this screenshot is from a sales video

Det her screenshot er fra en salgsvideo

that Gamma produced.

som Gamma har produceret.

Really, they're just emphasizing

De understreger i virkeligheden,

in a relatively slick presentation

i en relativ smart præsentation,

the fact that the police can sort of sit

at politiet kan sidde

in an air-conditioned office

i et kontor med air-condition

and remotely monitor someone

og overvåge andre på afstand

without them having any idea that it's going on.

uden at de har nogen anelse om hvad der foregår.

You know, your webcam light won't turn on.

Lyset på dit webcam vil ikke blive tændt.

There's nothing to indicate that the microphone is enabled.

Der er ikke noget der indikerer at mikrofonen er slået til.

This is the managing director of Gamma International.

Det her er den administrerende direktør for Gamma International.

His name is Martin Muench.

Hans navn er Martin Muench.

There are many photos of Mr. Muench that exist.

Der er mange billeder af Hr. Muench.

This is perhaps my favorite.

Det her er nok mit favoritbillede.

I'm just going to zoom in a little bit onto his webcam.

Jeg zoomer lige lidt ind på hans webcam.

You can see there's a little sticker

Du kan se, at der er et lille klistermærke

that's placed over his camera.

over hans kamera.

He knows what kind of surveillance is possible,

Han ved hvilken type overvågning der er mulig,

and so clearly he doesn't want it to be used

og han ønsker helt klart ikke

against him.

at det bliver brugt mod ham.

Muench has said that he intends

Muench har sagt at hans intention er

for his software to be used

at hans software bliver brugt til

to capture terrorists and locate pedophiles.

at fange terrorister og lokalisere pædofile.

Of course, he's also acknowledged that once

Han anerkender naturligvis også

the software has been sold to governments,

at når programmet er solgt til regeringer,

he has no way of knowing how it can be used.

har han ingen måde at vide hvordan det bliver brugt.

Gamma's software has been located on servers

Gammas software er fundet på servere

in countries around the world,

i mange af verdens lande

many with really atrocious track records

som har en grusom historik, og mange

and human rights violations.

krænkelser af menneskerettighederne.

They really are selling their software around the world.

De sælger deres software i hele verden.

Gamma is not the only company in the business.

Gamma er ikke den eneste virksomhed.

As I said, it's a $5 billion industry.

Som sagt er det en industri som er 5 mia. USD værd.

One of the other big guys in the industry

En af de andre store virksomheder i industrien

is an Italian company called Hacking Team.

er et italiensk firma ved navn Hacking Team.

Now, Hacking Team has what is probably

Hacking Team har nok den

the slickest presentation.

smarteste præsentation.

The video they've produced is very sexy,

Deres video er meget sexet,

and so I'm going to play you a clip

og jeg vil vise et klip,

just so you can get a feel

bare så I kan få en fornemmelse

both for the capabilities of the software

af både hvad deres software kan

but also how it's marketed

og hvordan det er markedsført

to their government clients.

til deres regeringskunder.

(Video) Narrator: You want to look through your target's eyes.

(Video) Fortæller: Du ønsker at se gennem dit overvågingsmåls øjne.

(Music)

(Musik)

You have to hack your target.

Du er nødt til at hacke dit mål.

["While your target is browsing the web, exchanging documents, receiving SMS, crossing the borders"]

["Mens dit mål surfer på nettet, deler dokumenter, modtager SMS'er, krydser grænserne"]

You have to hit many different platforms.

Du er nødt til at ramme mange platforme.

["Windows, OS X, iOS, Android, Blackberry, Symbian, Linux"]

["Windows, OS X, iOS, Android, Blackberry, Symbian, Linux"]

You have to overcome encryption

Du skal overvinde kryptering

and capture relevant data.

og indsamle relevant data.

[Skype & encrypted calls, target location, messaging, relationships,

[Skype & krypterede opkald, målets lokation, chats, forhold,

web browsing, audio & video"]

web browsing, lyd & video"

Being stealth and untraceable.

Mens du forbliver skjult og usporlig.

["Immune to any protection system Hidden collection infrastructure"]

["Immun overfor sikkerhedssystemer. Skjult infrastruktur til dataindsamling"]

Deployed all over your country.

Implementeret over hele landet.

["Up to hundreds of thousands of targets Managed from a single spot"]

["Op til flere hundrede tusinde mål. Styret fra ét sted."]

Exactly what we do.

Det er præcis hvad vi gør.

Christopher Soghoian: So, it would be funny if it wasn't true,

Christopher Soghoian: så, det ville være sjovt hvis det ikke var sandt

but, in fact, Hacking Team's software

men faktisk bliver Hacking Teams software

is being sold to governments around the world.

solgt til regeringer i hele verden.

Last year we learned, for example,

Sidste år opdagede vi f.eks. at det

that it's been used to target Moroccan journalists by the Moroccan government.

er blevet brugt til at ramme marokkanske journalister af den marokkanske regering

Many, many countries it's been found in.

Det er fundet i rigtig mange lande.

So, Hacking Team has also been actively courting

Så, Hacking Team har også arbejdet for at komme ind

the U.S. law enforcement market.

på det amerikanske marked for retshåndhævelse.

In the last year or so, the company

Indenfor det sidste års tid har virksomheden

has opened a sales office in Maryland.

åbnet et salgskontor i Maryland.

The company has also hired a spokesperson.

Virksomheden har også ansat en talsperson.

They've been attending

De har deltaget i

surveillance industry conferences

overvågningsindustriens konferencer

where law enforcement officials show up.

hvor embedsmænd indenfor retsområdet også deltager

They've spoken at the conferences.

De har talt til konferencerne.

What I thought was most fascinating was

Det jeg fandt mest fascinerende

they've actually paid for the coffee break

var at de faktisk betalte for kaffepausen

at one of the law enforcement conferences

på en af konferencerne om retsvæsnet

earlier this year.

tidligere på året.

I can't tell you for sure that Hacking Team

Jeg kan ikke sige med sikkerhed at Hacking Team

has sold their technology in the United States,

har solgt deres teknologi til USA,

but what I can tell you that if they haven't sold it,

men jeg kan sige, at hvis de ikke har

it isn't because they haven't been trying hard.

er det ikke fordi de ikke har forsøgt.

So as I said before,

Så, som jeg sagde før, så vil

governments that don't really have the resources

regeringer som ikke har ressourcerne

to build their own tools will buy

til at bygge deres egne redskaber

off-the-shelf surveillance software,

købe færdigt software til overvågning

and so for that reason,

og af den grund

you see that the government of, say, Tunisia,

kan du se at f.eks. Turnesien

might use the same software as the government of Germany.

måske bruger samme software som regeringen i Tyskland.

They're all buying off-the-shelf stuff.

De køber allesammen det samme.

The Federal Bureau of Investigation in the United States

FBI i USA

does have the budget to build their own surveillance technology,

har et budget til at bygge deres egne overvågningsteknologier

and so for several years, I've been trying

og i mange år har jeg forsøgt

to figure out if and how the FBI

at finde ud af hvordan FBI

is hacking into the computers of surveillance targets.

hacker computere der tilhører deres overvågningsmål.

My friends at an organization called the Electronic Frontier Foundation --

Mine venner i en organisation kaldet "the Electronic Frontier Foundation"--

they're a civil society group —

de er en civil samfundsgruppe--

obtained hundreds of documents from the FBI

har skaffet hundredevis af dokumenter fra FBI

detailing their next generation of surveillance technologies.

som indeholder detaljer om næste generation af overvågningsteknologier.

Most of these documents were heavily redacted,

De fleste dokumenter var stærkt censurerede,

but what you can see from the slides,

men som det ses af mine slides,

if I zoom in, is this term:

hvis man zoomer ind, så står der:

Remote Operations Unit.

"Remote Operations Unit."

Now, when I first looked into this,

Da jeg først så det

I'd never heard of this unit before.

havde jeg aldrig hørt om den enhed før.

I've been studying surveillance for more than six years.

Jeg har studeret overvågning i mere end seks år.

I'd never heard of it.

Jeg havde aldrig hørt om det.

And so I went online and I did some research,

Så jeg lavede noget online research,

and ultimately I hit the mother lode

og til sidst ramte jeg en guldåre

when I went to LinkedIn,

da jeg gik på LinkedIn,

the social networking site for job seekers.

det sociale netværk for jobsøgende.

There were lots of former U.S. government contractors

Der var en masse tidligere statslige ansatte

who had at one point worked

som engang havde arbejdet

for the Remote Operating Unit,

for "the Remote Operation Unit",

and were describing in surprising detail on their CVs

og som beskrev hvad de havde lavet i deres tidligere jobs

what they had done in their former job.

overraskende detaljeret i deres Cv'er.

(Laughter)

(Latter)

So I took this information

Så jeg tog den information

and I gave it to a journalist that I know and trust at the Wall Street Journal,

og gav det til en journalist som jeg kender og stoler på fra Wall Street Journal

and she was able to contact several other

og hun var i stand til at kontakte flere andre

former law enforcement officials

tidligere ansatte i retsvæsnet

who spoke on background and confirmed

som fortalte om deres baggrund og bekræftede

that yes, in fact, the FBI has a dedicated team

at FBI har et dedikeret team

that does nothing but hack into the computers

som ikke laver andet end at hacke computere

of surveillance targets.

som tilhører mål for overvågning.

Like Gamma and Hacking Team,

Ligesom Gamma og Hacking Team,

the FBI also has the capability

er FBI i stand til, på afstand,

to remotely activate webcams, microphones,

at aktivere webcams, microfoner,

steal documents, get web browsing information,

stjæle dokumenter, få browsing information

the works.

og lignende.

There's sort of a big problem

Der er et stort problem

with governments going into hacking,

med at regeringer begynder at hacke,

and that's that terrorists, pedophiles,

og det er at terrorister, pædofile

drug dealers, journalists and human rights activists

pushere, journalister og menneskerettighedsforkæmpere

all use the same kinds of computers.

alle samme bruger den samme type af computere.

There's no drug dealer phone

Der er ikke en "pushertelefon"

and there's no journalist laptop.

og der er ingen "journalistcomputer".

We all use the same technology,

Vi bruger alle den samme teknologi

and what that means then is that for governments

og det betyder at for at regeringer

to have the capability to hack into the computers

har mulighed for at hacke computere

of the real bad guys,

som tilhører fjenderne,

they also have to have the capability

også er nødt til at være i stand til

to hack into our devices too.

at hacke vores enheder.

So governments around the world

Regeringer fra hele verden

have been embracing this technology.

har tager denne teknologi i brug.

They've been embracing hacking

De har taget hacking i brug

as a law enforcement technique,

som en teknik til retsforfølgelse

but without any real debate.

men uden nogen reel debat.

In the United States, where I live,

I USA, hvor jeg bor,

there have been no congressional hearings.

har der ikke været nogle høringer i kongressen.

There's no law that's been passed

Der er ikke vedtaget love

specifically authorizing this technique,

som specifikt autoriserer denne teknik,

and because of its power and potential for abuse,

og fordi det er så stærkt et værktøj som har potentiale for misbrug

it's vital that we have an informed public debate.

er det vigtigt at vi har en informeret offentlig debat.

Thank you very much.

Mange tak.

(Applause)

(Bifald)