Andy Yen: Think your email's private? Think again

Prevoditelj: Izidora Zganjer Recezent: Ivan Stamenković

Twenty-five years ago, scientists at CERN created the World Wide Web.

Prije 25 godina znanstvenici na CERN-u su stvorili World Wide Web.

Since then, the Internet has transformed the way we communicate,

Od tada, Internet je promijenio način na koji komuniciramo,

the way we do business, and even the way we live.

kako poslujemo, čak i kako živimo.

In many ways,

Na mnogo načina,

the ideas that gave birth to Google, Facebook, Twitter, and so many others,

ideje koje su udahnule život Googleu, Facebooku, Twitteru i drugima,

have now really transformed our lives,

zaista su promijenile naše živote

and this has brought us many real benefits such as a more connected society.

i donijele nam korist u vidu umreženijeg društva.

However, there are also some downsides to this.

No, postoje i neke mane.

Today, the average person has an astounding amount

Danas, prosječna osoba ima ogromnu količinu

of personal information online,

osobnih podataka on-line,

and we add to this online information every single time we post on Facebook,

dodajmo tome i informacije koje dajemo svaki put kada nešto objavimo na Facebooku

each time we search on Google,

svaku put kada pretražujemo nešto na Googleu

and each time we send an email.

i svaki put kada pošaljemo e-mail.

Now, many of us probably think,

Mnogi će sada pomisliti

well, one email, there's nothing in there, right?

što može biti u jednom mailu?

But if you consider a year's worth of emails,

Ali ako gledate godišnju količinu mailova

or maybe even a lifetime of email,

ili cijelo-životnu količinu,

collectively, this tells a lot.

sveukupno, to može reći puno.

It tells where we have been, who we have met,

Govori gdje ste bili, koga ste upoznali,

and in many ways, even what we're thinking about.

a na neki način, čak i o čemu razmišljate.

And the more scary part about this is our data now lasts forever,

No strašnije je što naši podaci sada mogu trajati vječno,

so your data can and will outlive you.

što znači da mogu i nadživjeti će nas.

What has happened is that we've largely lost control over our data

Dogodilo se to da smo izgubili kontrolu nad većinom naših podataka

and also our privacy.

i također naše privatnosti.,

So this year, as the web turns 25,

Ove godine, dok web slavi 25-ti rođendan,

it's very important for us to take a moment

trebali bismo stati na tren

and think about the implications of this.

i razmisliti o posljedicama svega ovoga.

We have to really think.

Trebali bismo razmisliti.

We've lost privacy, yes,

Da, izgubili smo privatnost,

but actually what we've also lost is the idea of privacy itself.

ali smo zapravo izgubili i samu ideju privatnosti.

If you think about it,

Razmislite,

most of us here today probably remember what life was like before the Internet,

većina nas ovdje se vjerojatno sjeća kako je život izgledao prije Interneta,

but today, there's a new generation

ali danas postoji nova generacija

that is being taught from a very young age to share everything online,

koja je odmalena naučena dijeliti sve on-line

and this is a generation that is not going to remember when data was private.

i ta generacija se neće sjećati da su podaci bili privatni.

So we keep going down this road, 20 years from now,

Ako nastavimo ovim putem, za dvadeset godina

the word 'privacy' is going to have a completely different meaning

riječ "privatnost" će imati posve različito značenje

from what it means to you and I.

od onoga što znači nama.

So, it's time for us to take a moment and think,

Zato je vrijeme da stanemo i razmislimo

is there anything we can do about this?

možemo li mi nešto učiniti u vezi toga

And I believe there is.

Ja vjerujem da možemo.

Let's take a look at one of the most widely used forms of communication

Pogledajmo jedan od najviše korištenih oblika komunikacije

in the world today: email.

danas u svijetu: e-mail.

Before the invention of email, we largely communicated using letters,

Prije nego je e-mail izmišljen, naveliko smo komunicirali pismima,

and the process was quite simple.

i proces je poprilično jednostavan.

You would first start by writing your message on a piece of paper,

Počinjete pisanjem poruke na papir,

then you would place it into a sealed envelope,

koju biste umetnuli u omot koji biste zapečatili,

and from there, you would go ahead and send it

onda biste ga poslali,

after you put a stamp and address on it.

nakon što ste zalijepili marku i napisali adresu.

Unfortunately, today,

Nažalost, danas,

when we actually send an email, we're not sending a letter.

kada šaljemo e-mail, ne šaljemo pismo.

What you are sending, in many ways, is actually a postcard,

Ono što šaljete, je ustvari razglednica,

and it's a postcard in the sense that everybody that sees it

u smislu da svi koji je vide

from the time it leaves your computer to when it gets to the recipient

od kada napusti vaše računalo do kada stigne primatelju,

can actually read the entire contents.

mogu pročitati čitav sadržaj.

So, the solution to this has been known for some time,

Rješenje ovoga problema je već neko vrijeme poznato,

and there's many attempts to do it.

i postoji nekoliko načina na koji je to moguće.

The most basic solution is to use encryption,

Najosnovnije je koristiti enkripciju,

and the idea is quite simple.

i sama ideja je poprilično jednostavna.

First, you encrypt the connection

Prvo, enkriptirate vezu

between your computer and the email server.

između vašeg računala i mail servera.

Then, you also encrypt the data as it sits on the server itself.

Tada, enkriptirate podatke jer se i oni nalaze na serveru.

But there's a problem with this,

No, problem kod toga je

and that is, the email servers also hold the encryption keys,

da e-mail serveri pohranjuju i enkripcijske ključeve,

so now you have a really big lock with a key placed right next to it.

tako da zapravo imate velik lokot čiji ključ se nalazi odmah do njega.

But not only that, any government could lawfully ask for

Ali ne samo to, nego svaka vlada ima zakonsko pravo zatražiti

and get the key to your data,

i dobiti ključeve za vaše podatke,

and this is all without you being aware of it.

i sve to bez vašeg znanja.

So the way we fix this problem is actually relatively easy, in principle:

U principu, način rješavanja ovoga problema je relativno jednostavan:

You give everybody their own keys,

Svakome date njegove ključeve

and then you make sure the server doesn't actually have the keys.

i pobrinete se da server nema ključeve.

This seems like common sense, right?

Čini se zdravorazumski, zar ne?

So the question that comes up is, why hasn't this been done yet?

Postavlja se pitanje zašto to već nije učinjeno?

Well, if we really think about it,

Pa, kad bolje razmislimo,

we see that the business model of the Internet today

vidimo da poslovni model današnjeg Interneta

really isn't compatible with privacy.

nije baš kompatibilan s privatnosti.

Just take a look at some of the biggest names on the web,

Pogledajte neka najveća imena na webu

and you see that advertising plays a huge role.

i vidjeti ćete da oglašavanje igra veliku ulogu.

In fact, this year alone, advertising is 137 billion dollars,

Zapravo, ove godine, kompanije su oglašavanjem zaradile 137 milijardi dolara,

and to optimize the ads that are shown to us,

a kako bi optimizirale oglase koji nam se prikazuju,

companies have to know everything about us.

kompanije moraju znati sve o nama.

They need to know where we live,

Moraju znati gdje živimo,

how old we are, what we like, what we don't like,

koliko smo stari, što volimo, što ne volimo,

and anything else they can get their hands on.

i sve ostalo što im može koristiti.

And if you think about it,

I kad razmislite,

the best way to get this information is really just to invade our privacy.

najbolji način za dobiti te informacije je ugrožavanjem privatnosti.

So these companies aren't going to give us our privacy.

Dakle, te kompanije nam neće dopustiti privatnost.

If we want to have privacy online,

Ako želimo imati on-line privatnost,

what we have to do is we've got to go out and get it ourselves.

moramo se izboriti za nju.

For many years, when it came to email,

Godinama, kad se radi o e-mailu,

the only solution was something known as PGP,

jedino rješenje je bio PGP, što je poprilično teško za objasnit

which was quite complicated and only accessible to the tech-savvy.

i dostupno samo poznavateljima napredne tehnologije.

Here's a diagram that basically shows

Ovo je dijagram koji pokazuje

the process for encrypting and decrypting messages.

proces enkriptiranja i dekriptiranja poruka.

So needless to say, this is not a solution for everybody,

Bespotrebno je reći da ovo nije rješenje za svakoga,

and this actually is part of the problem,

što je zapravo i dio problema,

because if you think about communication,

jer komunikacija po definiciji,

by definition, it involves having someone to communicate with.

mora uključivati nekoga s kime možete komunicirati.

So while PGP does a great job of what it's designed to do,

Iako PGP dobro obavlja posao za koji je dizajniran,

for the people out there who can't understand how to use it,

ljudi koji ga ne znaju koristiti

the option to communicate privately simply does not exist.

nemaju opciju privatnog komuniciranja.

And this is a problem that we need to solve.

To je problem koji moramo riješiti.

So if we want to have privacy online,

Ako želimo imati on-line privatnost,

the only way we can succeed is if we get the whole world on board,

ako želimo uspjeti moramo dići cijeli svijet na noge,

and this is only possible if we bring down the barrier to entry.

a to je moguće samo ako srušimo 'ulazne barijere'.

I think this is actually the key challenge that lies in the tech community.

Mislim da je to ključan izazov za tehnološku industriju.

What we really have to do is work and make privacy more accessible.

Moramo raditi na tome da privatnost postane dostupnija.

So last summer, when the Edward Snowden story came out,

Prošlog ljeta, kada je priča Edwarda Snowdena izašla,

several colleagues and I decided to see if we could make this happen.

nekoliko kolega i ja smo odlučili pokušati to ostvariti.

At that time, we were working at the European Organization for Nuclear Research

U to vrijeme smo radili u Europskoj organizaciji za nuklearna istraživanja

at the world's largest particle collider, which collides protons, by the way.

na najvećem svjetskom sudarivaču čestica, onom gdje se sudaraju protoni, inače.

We were all scientists, so we used our scientific creativity

Svi smo bili znanstvenici, pa smo iskoristili našu znanstvenu kreativnost

and came up with a very creative name for our project:

i smislili jako kreativno ime za naš projekt:

ProtonMail. (Laughter)

ProtonMail. (Smijeh)

Many startups these days actually begin in people's garages

Mnogi start-upovi ovih dana krenu iz nečijih garaža

or people's basements.

ili nečijeg podruma.

We were a bit different.

Kod nas je bilo drugačije.

We started out at the CERN cafeteria,

Mi smo startali iz CERN-ove kantine,

which actually is great, because look,

koja je zapravo super, jer pogledajte,

you have all the food and water you could ever want.

tu imate svu hranu i vodu koja vam je potrebna.

But even better than this is that every day

Ali još je bolje što svaki dan

between 12 p.m. and 2 p.m., free of charge,

između 12 i 2 popodne, besplatno,

the CERN cafeteria comes with several thousand scientists and engineers,

CERN kantina se ispuni s nekoliko tisuća znanstvenika i inženjera,

and these guys basically know the answers to everything.

a ti likovi znaju odgovor na sve.

So it was in this environment that we began working.

U takvoj okolini smo počeli s radom.

What we actually want to do is we want to take your email

Ono što želimo učiniti je pretvoriti e-mail

and turn it into something that looks more like this,

u nešto što više sliči ovome,

but more importantly, we want to do it in a way

i što je važnije, želimo to učiniti na način

that you can't even tell that it's happened.

da se to niti ne primijeti.

So to do this, we actually need a combination of technology

Da bismo to učinili, potrebna nam

and also design.

je kombinacija tehnologije i dizajna.

So how do we go about doing something like this?

Kako takvo nešto napraviti?

Well, it's probably a good idea not to put the keys on the server.

Pa, vjerojatno je dobra ideja ne staviti ključeve na server.

So what we do is we generate encryption keys on your computer,

Ono što radimo je - generiramo enkripcijske ključeve na vašem računalu,

and we don't generate a single key, but actually a pair of keys,

pritom ne generiramo jedan ključ, nego par ključeva,

so there's an RSA private key and an RSA public key,

tako da postoji privatni RSA ključ i javni RSA ključ,

and these keys are mathematically connected.

a ti ključevi su matematički povezani.

So let's have a look and see how this works

Pogledajmo kako to funkcionira

when multiple people communicate.

kada komunicira više ljudi.

So here we have Bob and Alice, who want to communicate privately.

Tu imamo Boba i Alice, koji žele komunicirati privatno.

So the key challenge is to take Bob's message

Ključni izazov je Bobovu poruku

and to get it to Alice in such a way that the server cannot read that message.

prenijeti Alice na način da je server ne može pročitati.

So what we have to do is we have to encrypt it

Ono što trebamo napraviti je enkriptirati

before it even leaves Bob's computer,

poruku prije nego ona napusti Bobovo računalo.

and one of the tricks is, we encrypt it using the public key from Alice.

Jedan od načina je koristeći Alicein javni ključ.

Now this encrypted data is sent through the server to Alice,

Tako enkriptirani podaci su poslani Alice preko servera,

and because the message was encrypted using Alice's public key,

a zato što je poruka poslana Aliceinim javnim ključem,

the only key that can now decrypt it is a private key that belongs to Alice,

jedini ključ kojim se ona može dekriptirati je Alicein privatni ključ,

and it turns out Alice is the only person that actually has this key.

a Alice je jedina osoba s tim ključem.

So we've now accomplished the objective,

Postigli smo cilj,

which is to get the message from Bob to Alice

proslijedili smo poruku između Boba i Alice,

without the server being able to read what's going on.

a da je server ne može pročitati.

Actually, what I've shown here is a highly simplified picture.

Ovdje je to pojednostavljeno prikazano.

The reality is much more complex

Stvarnost je puno kompleksnija

and it requires a lot of software that looks a bit like this.

i zahtjeva puno softvera koji izgledaju ovako nekako.

And that's actually the key design challenge:

To je zapravo ključni dizajnerski izazov:

How do we take all this complexity, all this software,

kako svu tu kompleksnost i sav taj softver,

and implement it in a way that the user cannot see it.

implementirati na način da krajnji korisnik to ne primijeti.

I think with ProtonMail, we have gotten pretty close to doing this.

Mislim da smo se s ProtonMailom poprilično približili tome.

So let's see how it works in practice.

Idemo vidjeti kako to funkcionira u praksi.

Here, we've got Bob and Alice again,

Imamo Boba i Alice,

who also want to communicate securely.

koji žele komunicirati sigurno.

They simply create accounts on ProtonMail,

Jednostavno kreiraju ProtonMail račun,

which is quite simple and takes a few moments,

što je vrlo jednostavno i traje nekoliko minuta,

and all the key encryption and generation

dok se sva ključna enkripcija i generacija

is happening automatically in the background

odvija automatski u pozadini

as Bob is creating his account.

za vrijeme kreiranja računa.

Once his account is created, he just clicks "compose,"

Kada mu je račun kreiran, treba kliknuti na "Compose"

and now he can write his email like he does today.

i može pisati mailove kako to čini i danas.

So he fills in his information,

Ispuni svojim informacijama,

and then after that, all he has to do is click "send,"

i poslije toga sve što treba je kliknuti na "Send",

and just like that, without understanding cryptography,

i samo tako bez razumijevanja kriptografije,

and without doing anything different from how he writes email today,

bez da radi išta drugačije od onoga što radi danas,

Bob has just sent an encrypted message.

Bob je upravo poslao enkriptiranu poruku.

What we have here is really just the first step,

Ovo je tek prvi korak,

but it shows that with improving technology,

ali pokazuje da s poboljšanjem tehnologije,

privacy doesn't have to be difficult, it doesn't have to be disruptive.

privatnost ne mora biti teška i ne mora se remetiti.

If we change the goal from maximizing ad revenue to protecting data,

Ako nam cilj, umjesto povećanja dobiti od reklama, postane zaštita podataka,

we can actually make it accessible.

može nam postati dostupno.

Now, I know a question on everybody's minds is,

Znam da se sada svi pitaju

okay, protecting privacy, this is a great goal,

"Dobro, zaštita podataka je super cilj,

but can you actually do this

ali možete li to zapravo napraviti

without the tons of money that advertisements give you?

bez novaca koje vam oglašivači daju?"

And I think the answer is actually yes,

Ja mislim da je odgovor "Da",

because today, we've reached a point

jer smo danas, došli do do točke

where people around the world really understand how important privacy is,

gdje ljudi širom svijeta zaista razumiju koliko je privatnost važna,

and when you have that, anything is possible.

a kada to imate, sve je moguće.

Earlier this year,

Ranije ove godine,

ProtonMail actually had so many users that we ran out of resources,

ProtonMail je imao toliko korisnika da smo ostali bez sredstava,

and when this happened, our community of users got together

a kada se to dogodilo, naša zajednica korisnika se udružila

and donated half a million dollars.

i donirala pola milijuna dolara.

So this is just an example of what can happen

Ovo je primjer što se može dogoditi

when you bring the community together towards a common goal.

kada zajednicu usmjerite zajedničkom cilju.

We can also leverage the world.

Također možemo pokrenuti svijet.

Right now,

Upravo sada,

we have a quarter of a million people that have signed up for ProtonMail,

ProtonMail ima četiri milijuna korisnika,

and these people come from everywhere,

i oni su od svuda,

and this really shows that privacy

što pokazuje da privatnost

is not just an American or a European issue,

nije problem samo u Americi ili Europi,

it's a global issue that impacts all of us.

nego je globalna stvar koja utječe na sve nas.

It's something that we really have to pay attention to going forward.

Na to zbilja trebamo obratiti pažnju dok napredujemo.

So what do we have to do to solve this problem?

Što trebamo učiniti kako bismo riješili ovaj problem?

Well, first of all,

Pa, prvenstveno,

we need to support a different business model for the Internet,

moramo dati potporu drugačijim poslovnim modelima na Internetu,

one that does not rely entirely on advertisements

onima koji se ne oslanjaju u potpunosti na oglase

for revenue and for growth.

u svojim prihodima.

We actually need to build a new Internet

Moramo izgraditi novi Internet

where our privacy and our ability to control our data is first and foremost.

gdje je naša privatnost i mogućnost kontrole naših podataka najvažnija.

But even more importantly,

Ali, što je važnije,

we have to build an Internet where privacy is no longer just an option

moramo izgraditi Internet gdje privatnost nije samo opcija

but is also the default.

nego zadana postavka.

We have done the first step with ProtonMail,

S ProtonMailom smo napravili prvi korak,

but this is really just the first step in a very, very long journey.

ali to je prvi korak na dugom putovanju.

The good news I can share with you guys today,

Dobra vijest koju mogu podijeliti s vama,

the exciting news, is that we're not traveling alone.

uzbudljiva vijest je da na tom putu nismo sami.

The movement to protect people's privacy and freedom online

Pokret za zaštitu privatnosti i on-line slobode

is really gaining momentum,

je pridobio pažnju,

and today, there are dozens of projects from all around the world

i danas, deseci projekata širom svijeta

who are working together to improve our privacy.

surađuju zajedno kako bi poboljšali našu privatnosti.

These projects protect things from our chat to voice communications,

Ti projekti štite našu pisanu i zvučnu komunikaciju,

also our file storage, our online search,

arhive podataka, povijest pretraživanja,

our online browsing, and many other things.

povijest pregledavanja i puno drugih stvari.

And these projects are not backed by billions of dollars in advertising,

Ti projekti nemaju milijunsku potporu u obliku oglašavanja,

but they've found support really from the people,

već su je pronašli u ljudima,

from private individuals like you and I from all over the world.

privatnim osobama, kao što smo vi i ja širom svijeta.

This really matters, because ultimately,

To je zaista bitno, jer na kraju,

privacy depends on each and every one of us,

privatnost ovisi o svakome od nas,

and we have to protect it now because our online data

a moramo je štititi sada jer naši on-line podaci

is more than just a collection of ones and zeros.

nisu samo niz jedinica i nula.

It's actually a lot more than that.

Puno su više od toga.

It's our lives, our personal stories,

To su naši životi, naše osobne priče,

our friends, our families,

naši prijatelji, naše obitelji,

and in many ways, also our hopes and our aspirations.

a na neki način, to su naše nade i težnje.

We need to spend time now to really protect our right

Moramo trošiti vrijeme danas kako bismo zaštitili naše pravo

to share this only with people that we want to share this with,

dijeljenja podataka samo s osobama s kojima ih želimo dijeliti,

because without this, we simply can't have a free society.

jer bez toga, ne možemo imati slobodno društvo.

So now's the time for us to collectively stand up and say,

Sada je vrijeme da svi zajedno ustanemo i kažemo

yes, we do want to live in a world with online privacy,

"Da, mi želimo živjeti u svijetu s on-line privatnosti,

and yes, we can work together to turn this vision into a reality.

i zajedničkim radom taj san možemo ostvariti."

Thank you.

Hvala.

(Applause)

(Pljesak)