James Lyne: Everyday cybercrime -- and what you can do about it

Prevoditelj: Ivan Stamenković Recezent: Mislav Ante Omazić - EFZG

I'm going to be showing some of the cybercriminals'

Pokazat ću neke od posljednjih i najopasnijih

latest and nastiest creations.

djela cyber-kriminalaca.

So basically, please don't go and download

Dakle, molim vas, nemojte preuzimati

any of the viruses that I show you.

niti jedan od virusa koje ću vam pokazati.

Some of you might be wondering what a cybersecurity specialist looks like,

Neki od vas se možda pitaju kako izgleda specijalist za cyber sigurnost,

and I thought I'd give you a quick insight

pa ću vam dati kratak pregled

into my career so far.

svoje karijere do sada.

It's a pretty accurate description.

Ovo je prilično točan opis.

This is what someone that specializes

Ovako izgleda osoba koja specijalizira

in malware and hacking looks like.

malware i hakiranje.

So today, computer viruses and trojans,

Danas su računalni virusi i trojanci

designed to do everything from stealing data

dizajnirani da rade sve: od krađe podataka

to watching you in your webcam

preko gledanja kroz tvoju web kameru

to the theft of billions of dollars.

do krađe milijarde dolara.

Some malicious code today goes as far

Neki zlonamjerni kodovi danas idu tako daleko

as targeting power, utilities and infrastructure.

da mogu udariti na struju, usluge i infrastrukturu.

Let me give you a quick snapshot

Dati ću vam kratki pregled onoga

of what malicious code is capable of today.

što zlonamjerni kod može danas učiniti.

Right now, every second, eight new users

Upravo sada, svake sekunde, osam novih korisnika

are joining the Internet.

pridružuje se Internetu.

Today, we will see 250,000 individual new computer viruses.

Danas ćemo vidjeti 250.000 novih individualnih virusa.

We will see 30,000 new infected websites.

Vidjet ćemo 30.000 novih zaraženih web stranica.

And, just to kind of tear down a myth here,

I, malo da razbijemo mit,

lots of people think that when you get infected

mnogi ljudi misle da je razlog zaraze virusom

with a computer virus, it's because you went to a porn site.

posjećivanje porno web stranica.

Right? Well, actually, statistically speaking,

Zar ne? Zapravo, statistički gledano,

if you only visit porn sites, you're safer.

ako posjećuješ samo porno stranice, sigurniji si.

People normally write that down, by the way. (Laughter)

Usput, ljudi to obično zapišu. (Smijeh)

Actually, about 80 percent of these

U stvarnosti, oko 80 posto su

are small business websites getting infected.

web stranice malih tvrtki koje su zaražene.

Today's cybercriminal, what do they look like?

Današnji cyber-kriminalci, kako oni izgledaju?

Well, many of you have the image, don't you,

Dakle, mnogi od vas imaju sliku

of the spotty teenager sitting in a basement,

pjegavog tinejdžera koji sjedi u podrumu

hacking away for notoriety.

i hakiranjem se probija do ozloglašenosti.

Ali današnji su cyber-kriminaci, zapravo,

But actually today, cybercriminals

are wonderfully professional and organized.

prekrasno profesionalni i organizirani.

In fact, they have product adverts.

Naime, imaju oglase za proizvode.

You can go online and buy a hacking service

Možeš otići on-line i kupiti servis za hakiranje

to knock your business competitor offline.

kako bi uništio posao svojeg suparnika.

Check out this one I found.

Pogledajte ovaj koji sam pronašao.

(Video) Man: So you're here for one reason,

(Video) Čovjek: Ovdje ste zbog jednog razloga,

and that reason is

a to je zato što

because you need your business competitors,

vam je potrebno da vaši poslovni suparnici,

rivals, haters, or whatever the reason is, or who,

konkurenti, mrzitelji ili tko god drugi, zbog kojeg god drugog razloga,

they are to go down.

padnu.

Well you, my friend, you've came to the right place.

Ti si, dakle, prijatelju došao na pravo mjesto.

If you want your business competitors to go down,

Ako želiš srušiti svoje poslovne suparnike,

well, they can.

možeš to postići.

If you want your rivals to go offline, well, they will.

Ako želiš da tvoji konkurenti budu offline, bit će.

Not only that, we are providing a short-term-to-long-term

Ne samo to, omogućavamo i kratkoročno-dugoročni

DDOS service or scheduled attack,

DDOS servis ili zakazani napad,

starting five dollars per hour for small personal websites

počevši od 5 dolara po satu za web stranice malih osobnih tvrtki

to 10 to 50 dollars per hour.

do 10 do 50 dolara po satu.

James Lyne: Now, I did actually pay

James Lyne: Naime, zaista sam platio

one of these cybercriminals to attack my own website.

jednom od tih cyber-kriminalaca da napadnu moju web stranicu.

Things got a bit tricky when I tried to expense it at the company.

Stvari su se zakomplicirale kada sam pokušao trošak staviti na račun poduzeća.

Turns out that's not cool.

Ispalo je da to nije baš u redu.

But regardless, it's amazing how many products

Bez obzira na to, zanimljivo je kako su mnogi proizvodi

and services are available now to cybercriminals.

i usluge sada dostupni cyber-kriminalcima.

For example, this testing platform,

Na primjer, ova testna platforma,

which enables the cybercriminals

koja omogućuje cyber-kriminacima

to test the quality of their viruses

testiranje kvalitete vlastitih virusa

before they release them on the world.

prije nego ih puste u svijet.

For a small fee, they can upload it

Za malu naknadu mogu ga postaviti on-line

and make sure everything is good.

i osigurati da je sve u redu.

But it goes further.

Ali ide to i dalje.

Cybercriminals now have crime packs

Cyber-kriminalci sada imaju krimi pakete

with business intelligence reporting dashboards

sa sučeljima za poslovnu inteligenciju

to manage the distribution of their malicious code.

kako bi mogli distribuirati svoje zlonamjerne kodove.

This is the market leader in malware distribution,

Ovo je predvodnik na tržištu u distribuciji malwarea,

the Black Hole Exploit Pack,

Black Hole Exploit Pack,

responsible for nearly one third of malware distribution

odgovoran za distribuciju gotovo jedne trećine malwarea

in the last couple of quarters.

u posljednjih nekoliko kvartala.

It comes with technical installation guides,

Dolazi s tehničkim uputama za instalaciju,

video setup routines,

videom za postavljanje,

and get this, technical support.

i, pazite ovo, tehničkom podrškom.

You can email the cybercriminals and they'll tell you

Možeš poslati e-poruku cyber-kriminalcu i reći će ti

how to set up your illegal hacking server.

kako postaviti svoj ilegalni server za hakiranje.

So let me show you what malicious code looks like today.

Dopustite mi da vam pokažem kako danas izgleda zlonamjerni kod.

What I've got here is two systems,

Ovdje imam dva sustava,

an attacker, which I've made look all Matrix-y and scary,

napadača, koji izgleda kao Matrix i zastrašujuće,

and a victim, which you might recognize from home or work.

i žrtvu, koju možete prepoznati od kuće ili s posla.

Now normally, these would be on different sides

Ovo bi se događalo na različitim stranama

of the planet or of the Internet,

planeta ili Interneta,

but I've put them side by side

ali ja sam ih stavio jedan do drugoga

because it makes things much more interesting.

jer su tako stvari mnogo zanimljivije.

Now, there are many ways you can get infected.

E sad, postoji mnogo načina na koji se možete zaraziti.

You will have come in contact with some of them.

Već ste došli u kontakt s nekima od njih.

Maybe some of you have received an email

Možda su neki od vas primili e-poruku

that says something like, "Hi, I'm a Nigerian banker,

koji kaže nešto poput ovoga: "Bok, ja sam nigerijski bankar,

and I'd like to give you 53 billion dollars

i želio bih ti dati 53 milijarde dolara

because I like your face."

jer mi se sviđa tvoje lice".

Or funnycats.exe, which rumor has it

Ili funnycats.exe, za koje kažu da je

was quite successful in China's recent campaign against America.

bio vrlo uspješan u Kini za vrijeme posljednje kampanje protiv Amerike.

Now there are many ways you can get infected.

Postoji mnogo načina na koje se možete zaraziti.

I want to show you a couple of my favorites.

Želim vam pokazati nekoliko meni najdražih.

This is a little USB key.

Ovo je mali USB ključ.

Now how do you get a USB key to run in a business?

Kako postići da se USB ključ pokrene u poduzeću?

Well, you could try looking really cute.

Pa, možete probati tako da izgledate jako slatko.

Awww.

Aaaaaa.

Or, in my case, awkward and pathetic.

Ili, u mojem slučaju, nespretno i jadno.

So imagine this scenario: I walk into one of your businesses,

Zamislite ovaj scenarij: ulazim u jedno od vaših poduzeća,

looking very awkward and pathetic, with a copy of my C.V.

izgledam nespretno i jadno, s kopijom svojeg životopisa

which I've covered in coffee,

koji je zamrljan kavom,

and I ask the receptionist to plug in this USB key

i zamolim recepcionara da ukopča moj USB

and print me a new one.

i isprinta mi novi.

So let's have a look here on my victim computer.

Pogledajmo sad računalo moje žrtve.

What I'm going to do is plug in the USB key.

Sada ću ukopčati ovaj USB ključ.

After a couple of seconds,

Nakon nekoliko sekundi,

things start to happen on the computer on their own,

stvari se počnu događati same od sebe na računalu,

usually a bad sign.

obično je to loš znak.

This would, of course, normally happen

Ovo bi se, obično, dogodilo

in a couple of seconds, really, really quickly,

u nekoliko sekundi, vrlo, vrlo brzo,

but I've kind of slowed it down

ali ja sam to malo usporio

so you can actually see the attack occurring.

tako da možete vidjeti napad.

Malware is very boring otherwise.

Malware je inače jako dosadan.

So this is writing out the malicious code,

Ovako izgleda ispisivanje zlonamjernog koda,

and a few seconds later, on the left-hand side,

i nekoliko sekundi kasnije, na lijevoj strani,

you'll see the attacker's screen get some interesting new text.

vidjet ćete napadačev ekran sa zanimljivim novim tekstom.

Now if I place the mouse cursor over it,

Ako postavim pokazivač preko toga,

this is what we call a command prompt,

ovo zovemo prozor naredbenog retka,

and using this we can navigate around the computer.

i pomoću toga možemo upravljati računalom.

Možemo pristupiti vašim dokumentima, podatcima.

We can access your documents, your data.

You can turn on the webcam.

Možete upaliti web kameru.

That can be very embarrassing.

To može biti neugodno.

Or just to really prove a point,

Ili samo da stvarno dokažem,

we can launch programs like my personal favorite,

možemo pokrenuti programe, poput mojeg omiljenog,

the Windows Calculator.

Windows kalkulator.

So isn't it amazing how much control

Nije li nevjerojatno koliko kontrole

the attackers can get with such a simple operation?

ima napadač tako malom radnjom?

Dozvolite da vam pokažem kako se većina malwarea

Let me show you how most malware

is now distributed today.

danas distribuira.

What I'm going to do is open up a website

Otvorit ću web stranicu

that I wrote.

koju sam napisao.

It's a terrible website. It's got really awful graphics.

Grozna je stranica. Ima baš užasnu grafiku.

And it's got a comments section here

I ima dio za komentare ovdje

where we can submit comments to the website.

gdje možemo postavljati komentare na web stranicu.

Many of you will have used something a bit like this before.

Mnogi od vas su koristili nešto slično prije.

Unfortunately, when this was implemented,

Na žalost, kada je ovo implementirano,

the developer was slightly inebriated

programer je bio malo opijen

and managed to forget

i uspio je zaboraviti

all of the secure coding practices he had learned.

svo znanje za sigurnosno kodiranje koje je imao.

So let's imagine that our attacker,

Zamislimo da naš napadač,

called Evil Hacker just for comedy value,

zvan Zločesti Haker, da bude zanimljivije,

inserts something a little nasty.

umetnuo nešto opasno.

This is a script.

Ovo je skripta.

It's code which will be interpreted on the webpage.

To je kod koji će se interpretirati na web stranici.

So I'm going to submit this post,

Stoga ću objaviti ovaj komentar,

and then, on my victim computer,

i tada, na računalu moje žrtve,

I'm going to open up the web browser

otvorit ću pretraživač

and browse to my website,

i pretražiti svoju web stranicu,

www.incrediblyhacked.com.

www.incrediblyhacked.com.

Notice that after a couple of seconds,

Primijetite da sam nakon nekoliko sekundi,

I get redirected.

preusmjeren.

That website address at the top there,

Web adresa na vrhu ovdje,

which you can just about see, microshaft.com,

koju možete upravo vidjeti, microshaft.com,

the browser crashes as it hits one of these exploit packs,

pretraživač se ruši čim pogodi jedan od ovih paketa za iskorištavanje,

and up pops fake antivirus.

i iskače lažni antivirus.

This is a virus pretending to look like antivirus software,

Ovo je virus koji izgleda kao antivirusni software,

and it will go through and it will scan the system,

i proći će kroz sustav te skenirati,

have a look at what its popping up here.

pogledajte što je ovdje iskočilo.

It creates some very serious alerts.

Stvara veoma važna upozorenja.

Oh look, a child porn proxy server.

Oh pogledajte, proxy poslužitelj dječje pornografije.

We really should clean that up.

Stvarno bismo to trebali počistiti.

What's really insulting about this is

A najuvredljivije je što

not only does it provide the attackers with access to your data,

ne samo da daje dozvolu napadačima da pristupe vašim podacima,

but when the scan finishes, they tell you

već će vam, kada skeniranje završi, reći da morate,

in order to clean up the fake viruses,

kako biste očistili lažne viruse,

you have to register the product.

registrirati proizvod.

Now I liked it better when viruses were free.

Meni se više sviđalo kada su virusi bili besplatni.

(Laughter)

(Smijeh)

People now pay cybercriminals money

Danas ljudi plaćaju cyber-kriminalcima

to run viruses,

da pokreću viruse,

which I find utterly bizarre.

što je, smatram, krajnje bizarno.

So anyway, let me change pace a little bit.

Dakle, da malo promijenim priču.

Chasing 250,000 pieces of malware a day

Jurnjava za 250.000 komada malwarea na dan

is a massive challenge,

je veliki izazov,

and those numbers are only growing

i taj broj se povećava

directly in proportion to the length of my stress line, you'll note here.

proporcionalno s dužinom moje linije stresa, ovdje.

So I want to talk to you briefly

Želim vam kratko ispričati

about a group of hackers we tracked for a year

o grupi hakera koju smo pratili godinu dana

and actually found --

i zaista ih pronašli --

and this is a rare treat in our job.

a to je rijetka čast u našem poslu.

Now this was a cross-industry collaboration,

Ovo je bila suradnja više industrija,

people from Facebook, independent researchers,

ljudi s Facebooka, neovisnih istraživača,

guys from Sophos.

dečkiju is Sophosa.

So here we have a couple of documents

Ovdje imamo nekoliko dokumenata

which our cybercriminals had uploaded

koje su naši cyber-kriminalci postavili

to a cloud service, kind of like Dropbox or SkyDrive,

na cloud servis, poput Dropboxa ili SkyDrivea,

like many of you might use.

koje mnogi od vas možda koristite.

At the top, you'll notice a section of source code.

Na vrhu možete primijetiti dio s izvornim kodom.

What this would do is send the cybercriminals

Ovo radi na način da šalje cyber kriminalcima

a text message every day telling them how much money

tekstualnu poruku svaki dan o tome koliko su novaca

zaradili taj dan,

they'd made that day,

so a kind of cybercriminal billings report, if you will.

kao stanje računa cyber-kriminalca.

If you look closely, you'll notice a series

Ako pogledate pažljivije, primijetit ćete niz

of what are Russian telephone numbers.

ruskih telefonskih brojeva.

Now that's obviously interesting,

To nam je, očito, zanimljivo

because that gives us a way of finding our cybercriminals.

jer daje način pronalaženja cyber-kriminalaca.

Down below, highlighted in red,

Dolje na dnu, označeno crvenim,

in the other section of source code,

u drugom dijelu izvornog koda,

is this bit "leded:leded."

je ova sitnica "leded:leded".

That's a username,

To je korisničko ime,

kind of like you might have on Twitter.

kao ono koje koristite za Twitter.

So let's take this a little further.

Krenimo još malo dalje.

There are a few other interesting pieces

Postoji još nekoliko zanimljivih dijelova

the cybercriminals had uploaded.

koje su cyber-kriminalci postavili.

Lots of you here will use smartphones

Mnogi od vas ovdje koriste pametne telefone

to take photos and post them from the conference.

za slikanje i postavljanje slika s konferencije.

An interesting feature of lots of modern smartphones

Zanimljiva mogućnost mnogih modernih pametnih telefona

is that when you take a photo,

jest ta da slika

it embeds GPS data about where that photo was taken.

sadrži GPS podatke o tome gdje je slika napravljena.

In fact, I've been spending a lot of time

Naime, proveo sam dosta vremena

on Internet dating sites recently,

na stranicama za upoznavanje nedavno,

obviously for research purposes,

zbog istraživačke prirode, naravno,

and I've noticed that about 60 percent

i primijetio sam da oko 60 posto

of the profile pictures on Internet dating sites

profilnih slika na stranicama za upoznavanje

contain the GPS coordinates of where the photo was taken,

sadrže GPS koordinate gdje je slika napravljena,

which is kind of scary

što je, zapravo, zastrašujuće

because you wouldn't give out your home address

jer ne biste dali podatke o adresi stanovanja

to lots of strangers,

strancima,

but we're happy to give away our GPS coordinates

ali rado dajemo GPS koordinate

to plus or minus 15 meters.

na plus ili minus 15 metara.

And our cybercriminals had done the same thing.

I naši cyber-kriminalci su napravili istu stvar.

So here's a photo which resolves to St. Petersburg.

Ovo je slika koja nas dovodi do St. Petersburga.

We then deploy the incredibly advanced hacking tool.

Nakon toga smo postavili nevjerojatno napredni hakerski alat.

We used Google.

Koristili smo Google.

Using the email address, the telephone number

Koristeći e-adresu, broj telefona

and the GPS data, on the left you see an advert

i GPS koordinate, s lijeve strane vidite oglas

for a BMW that one of our cybercriminals is selling,

za BMW koji jedan od naših cyber kriminalca prodaje,

on the other side an advert for the sale of sphynx kittens.

na drugoj strani oglas za prodaju sphynx mačića.

One of these was more stereotypical for me.

Jedan od ta dva je više stereotipan za mene.

A little more searching, and here's our cybercriminal.

Još malo pretraživanja, i evo našeg cyber-kriminalca.

Imagine, these are hardened cybercriminals

Zamislite, to su okorjeli cyber-kriminalci

sharing information scarcely.

koji dijele informacije na kapaljku.

Imagine what you could find

Zamislite što biste mogli pronašli

about each of the people in this room.

o ljudima koji se nalaze u ovoj prostoriji.

A bit more searching through the profile

Još malo pretraživanja po profilu

and there's a photo of their office.

i evo slike njihovog ureda.

They were working on the third floor.

Radili su na trećem katu.

And you can also see some photos

I, također, možete vidjeti neke slike

from his business companion

njegovog poslovnog partnera

where he has a taste in a certain kind of image.

kojemu je po ukusu posebna vrsta fotografije.

It turns out he's a member of the Russian Adult Webmasters Federation.

Ispada da je član Ruske federacije za odrasle webmastere.

But this is where our investigation starts to slow down.

Ali ovdje naše istraživanje počinje usporavati.

The cybercriminals have locked down their profiles quite well.

Cyber-kriminalci su zaključali svoje profile jako dobro.

And herein is the greatest lesson

A ovo je najveća lekcija

of social media and mobile devices for all of us right now.

društvenih medija i mobilnih uređaja za sve nas.

Our friends, our families and our colleagues

Naši prijatelji, naše obitelji i kolege

can break our security even when we do the right things.

mogu probiti našu sigurnost i kada napravimo sve pravilno.

This is MobSoft, one of the companies

Ovo je MobSoft, jedna od tvrtki

that this cybercriminal gang owned,

koju je ova cyber-kriminalna banda posjedovala,

and an interesting thing about MobSoft

a zanimljiva stvar u vezi MobSofta

is the 50-percent owner of this

jest da je 50-postotni vlasnik

posted a job advert,

postavio oglas za posao,

and this job advert matched one of the telephone numbers

a taj oglas za posao je odgovarao jednom od telefonskih brojeva

from the code earlier.

iz ranije prikazanog koda.

This woman was Maria,

Ova žena je Maria,

and Maria is the wife of one of our cybercriminals.

a Maria je žena jednog od cyber-kriminalaca.

And it's kind of like she went into her social media settings

I izgleda kao da je u svim postavkama na društvenim mrežama

and clicked on every option imaginable

kliknula na svaku moguću opciju

to make herself really, really insecure.

da joj profil bude jako, jako nesiguran.

By the end of the investigation,

Do kraja istrage,

where you can read the full 27-page report at that link,

gdje možete pročitati 27 stranica dug izvještaj na ovom linku,

we had photos of the cybercriminals,

imali smo slike cyber-kriminalaca,

even the office Christmas party

čak i poslovne božićne zabave

when they were out on an outing.

kada su bili na izlasku.

That's right, cybercriminals do have Christmas parties,

Tako je, cyber-kriminalci imaju božićne zabave,

as it turns out.

prema svemu sudeći.

Now you're probably wondering what happened to these guys.

Sigurno se pitate što se s njima dogodilo.

Let me come back to that in just a minute.

Vratit ćemo se na to za minutu.

I want to change pace to one last little demonstration,

Želim vam samo još nešto demonstrirati,,

a technique that is wonderfully simple and basic,

tehniku koja je prekrasno jednostavna i bazična,

but is interesting in exposing how much information

ali je zanimljiva za otkrivanje koliko informacija

we're all giving away,

dajemo na uvid;

and it's relevant because it applies to us as a TED audience.

i važna je jer se odnosi na nas, TED-ovu publiku.

Obično je ovo dio kada ljudi počnu prevrtati po džepovima

This is normally when people start kind of shuffling in their pockets

trying to turn their phones onto airplane mode desperately.

u očajničkim pokušajima stavljanja postavki telefona na zrakoplovni način rada.

Many of you all know about the concept

Mnogi od vas znaju za pojam

of scanning for wireless networks.

skeniniranja bežičnih mreža.

You do it every time you take out your iPhone or your Blackberry

Radite to svaki put kad uzmete svoj iPhone ili Blackberry

and connect to something like TEDAttendees.

i povežete se na nešto poput TEDAttendees.

But what you might not know

Ali ono što možda ne znate

is that you're also beaming out a list of networks

jest da također odašiljete popis mreža

you've previously connected to,

na koje ste prije bili spojeni,

even when you're not using wireless actively.

čak i kad ne koristite bežičnu mrežu aktivno.

So I ran a little scan.

Napravio sam malo pretraživanje.

I was relatively inhibited compared to the cybercriminals,

Bio sam relativno sputan u odnosu na cyber-kriminace

who wouldn't be so concerned by law,

koji se ne bi toliko zamarali zakonom.

and here you can see my mobile device.

Ovdje možete vidjeti moj mobilni uređaj.

Okay? So you can see a list of wireless networks.

U redu? Vidite popis bežičnih mreža.

TEDAttendees, HyattLB. Where do you think I'm staying?

TEDAttendees, HyattLB. Što mislite, gdje odsjedam?

My home network, PrettyFlyForAWifi,

Moja mreža kod kuće, PrettyFlyForAWifi,

which I think is a great name.

što je, po mom mišljenju, super ime.

Sophos_Visitors, SANSEMEA, companies I work with.

Sophos_Visitors, SANSEMEA, tvrtke za koje radim.

Loganwifi, that's in Boston. HiltonLondon.

Loganwifi, to je u Bostonu. HiltonLondon.

CIASurveillanceVan.

CIASurveillanceVan.

Tako smo je nazvali na jednoj od naših konferencija

We called it that at one of our conferences

because we thought that would freak people out,

jer smo mislili da će se ljudi uplašiti;

which is quite fun.

što je zapravo vrlo zabavno.

This is how geeks party.

Tako se štreberi zabavljaju.

So let's make this a little bit more interesting.

Učinimo ovo još malo zanimljivijim.

Let's talk about you.

Pričajmo o vama.

Dvadeset i tri posto vas je bilo u Starbucksu

Twenty-three percent of you have been to Starbucks

recently and used the wireless network.

nedavno i koristili ste njihovu bežičnu mrežu.

Stvari postaju još zanimljivije.

Things get more interesting.

Forty-six percent of you I could link to a business,

Četrdeset i šest posto vas mogao sam povezati s privredom,

XYZ Employee network.

XYZ mreža zaposlenika.

This isn't an exact science, but it gets pretty accurate.

Ovo nije egzaktna znanost, ali može biti vrlo precizno.

Seven hundred and sixty-one of you I could identify a hotel you'd been to recently,

Vas 761 mogao sam povezati s hotelom u kojem ste nedavno bili,

absolutely with pinpoint precision somewhere on the globe.

i točno locirati točkicom na karti.

Two hundred and thirty-four of you, well, I know where you live.

Za vas 234, dakle, znam gdje živite.

Your wireless network name is so unique

Ime vaše bežične mreže je toliko jedinstveno

that I was able to pinpoint it

da sam mogao točno locirati

using data available openly on the Internet

pomoću podataka koji su dostupni na Internetu

with no hacking or clever, clever tricks.

bez hakerskih ili pametnih trikova.

And I should mention as well that

I trebao bih spomenuti, također,

some of you do use your names,

da neki od vas koriste vlastito ime,

"James Lyne's iPhone," for example.

"James Lyne's iPhone", na primjer.

And two percent of you have a tendency to extreme profanity.

A dva posto vas je sklono iznimnoj vulgarnosti.

So something for you to think about:

Nešto o čemu biste trebali razmisliti jest:

As we adopt these new applications and mobile devices,

kada prihvaćamo nove aplikacije i mobilne uređaje,

as we play with these shiny new toys,

i kada se igramo s tim sjajnim novim igračkama,

how much are we trading off convenience

koliko udobnosti mijenjamo

for privacy and security?

za privatnosti i sigurnost?

Next time you install something,

Sljedeći put kad nešto instalirate,

look at the settings and ask yourself,

pogledajte u postavke i zapitajte se:

"Is this information that I want to share?

"Jesu li to informacije koje želim dijeliti

Would someone be able to abuse it?"

Bi li ih netko mogao zloupotrijebiti?"

We also need to think very carefully

Moramo, također, pažljivo razmišljati

about how we develop our future talent pool.

o tome kako razvijamo budući bazen talenata.

You see, technology's changing at a staggering rate,

Vidite, tehnologija se mijenja zapanjujućom brzinom,

and that 250,000 pieces of malware

i onih 250.000 malwarea

won't stay the same for long.

neće ostati isti zadugo.

There's a very concerning trend

Zabrinjavajuć je trend što,

that whilst many people coming out of schools now

dok su mnogi ljudi koji završavaju škole

are much more technology-savvy, they know how to use technology,

tehnološki potkovani, znaju kako koristiti tehnologiju,

fewer and fewer people are following the feeder subjects

sve je manje i manje ljudi koji prate dodatne izvore

to know how that technology works under the covers.

da bi shvatili kako tehnologija zapravo funkcionira.

In the U.K., a 60 percent reduction since 2003,

U Velikoj Britaniji smanjenje od 60 posto od 2003.,

and there are similar statistics all over the world.

a slične su statistike i diljem svijeta.

We also need to think about the legal issues in this area.

Moramo misliti i na pravna pitanje u ovom području.

Cyber kriminalci o kojima sam pričao,

The cybercriminals I talked about,

despite theft of millions of dollars,

unatoč krađi milijuna dolara,

actually still haven't been arrested,

još uvijek nisu uhićeni,

and at this point possibly never will.

a možda nikad niti neće biti.

Most laws are national in their implementation,

Većina je zakona nacionalna u primjeni,

despite cybercrime conventions, where the Internet

unatoč konvencijama o cyber-kriminalu, dok je Internet

is borderless and international by definition.

bezgraničan i međunarodan prema definiciji.

Countries do not agree, which makes this area

Države se ne slažu, što ovo područje čini

exceptionally challenging from a legal perspective.

iznimno izazovnim s pravne perspektive.

But my biggest ask is this:

No, moje najveće pitanje je sljedeće.

You see, you're going to leave here

Vidite, otići ćete odavde

and you're going to see some astonishing stories in the news.

i vidjet ćete neke iznenađujuće priče u vijestima.

You're going to read about malware doing incredible

Čitat ćete kako malwarei rade nevjerojatne

and terrifying, scary things.

i zastrašujuće stvari.

However, 99 percent of it works

Ipak, 99 posto toga radi

because people fail to do the basics.

jer ljudi ne znaju osnove.

So my ask is this: Go online,

Stoga vas molim: idite on-line,

find these simple best practices,

pronađite jednostavne najbolje prakse,

find out how to update and patch your computer.

pronađite kako ažurirati i popraviti svoje računalo.

Postavite sigurnu lozinku.

Get a secure password.

Make sure you use a different password

Pobrinite se da koristite drugačiji lozinku

on each of your sites and services online.

za svaku vašu stranicu ili on-line servis.

Find these resources. Apply them.

Pronađite te izvore. Upotrijebite ih.

The Internet is a fantastic resource

Internet je izvanredan izvor informacija

for business, for political expression,

za posao, političko izražavanje,

for art and for learning.

umjetnost i učenje.

Help me and the security community

Pomozite meni i sigurnosnoj zajednici

make life much, much more difficult

da učinimo život mnogo, mnogo težim

for cybercriminals.

za cyber-kriminalce.

Thank you.

Hvala.

(Applause)

(Pljesak)