Mikko Hypponen: Fighting viruses, defending the net

270,034 views ใƒป 2011-07-20

TED


ืื ื ืœื—ืฅ ืคืขืžื™ื™ื ืขืœ ื”ื›ืชื•ื‘ื™ื•ืช ื‘ืื ื’ืœื™ืช ืœืžื˜ื” ื›ื“ื™ ืœื”ืคืขื™ืœ ืืช ื”ืกืจื˜ื•ืŸ.

ืžืชืจื’ื: Chen Harel ืžื‘ืงืจ: Ido Dekkers
00:15
I love the Internet.
0
15260
3000
ืื ื™ ืื•ื”ื‘ ืืช ื”ืื™ื ื˜ืจื ื˜.
00:18
It's true.
1
18260
2000
ื‘ืืžืช.
00:20
Think about everything it has brought us.
2
20260
2000
ืชื—ืฉื‘ื• ืขืœ ื›ืœ ื”ื“ื‘ืจื™ื ืฉืงื™ื‘ืœื ื• ื‘ื–ื›ื•ืชื•.
00:22
Think about all the services we use,
3
22260
3000
ืชื—ืฉื‘ื• ืขืœ ื›ืœ ื”ืฉื™ืจื•ืชื™ื ืฉืื ื• ืžืฉืชืžืฉื™ื,
00:25
all the connectivity,
4
25260
2000
ื›ืœ ื”ืงื™ืฉื•ืจื™ื•ืช,
00:27
all the entertainment,
5
27260
2000
ื›ืœ ื”ื‘ื™ื“ื•ืจ,
00:29
all the business, all the commerce.
6
29260
3000
ื›ืœ ื”ืขืกืงื™ื, ื›ืœ ื”ืžืกื—ืจ,
00:32
And it's happening during our lifetimes.
7
32260
3000
ื•ื–ื” ืงื•ืจื” ื‘ืชืงื•ืคืช ื”ื—ื™ื™ื ืฉืœื ื•.
00:35
I'm pretty sure that one day
8
35260
3000
ืื ื™ ื‘ื˜ื•ื— ืฉื™ื•ื ืื—ื“
00:38
we'll be writing history books
9
38260
2000
ืฉื™ื›ืชื‘ื• ืกืคืจื™ ื”ื™ืกื˜ื•ืจื™ื”
00:40
hundreds of years from now. This time
10
40260
3000
ืžืื•ืช ืฉื ื™ื ืžืขื›ืฉื™ื•. ื”ื–ืžืŸ ืฉืœื ื•,
00:43
our generation will be remembered
11
43260
3000
ื”ื“ื•ืจ ืฉืœื ื• ื™ื–ื›ืจ
00:46
as the generation that got online,
12
46260
3000
ื›ื“ื•ืจ ืฉื”ืคืš ืœืžืงื•ื•ืŸ.
00:49
the generation
13
49260
2000
ื”ื“ื•ืจ
00:51
that built something really and truly global.
14
51260
3000
ืฉื‘ื ื” ืžืฉื”ื• ื‘ืืžืช ื’ืœื•ื‘ืœื™.
00:54
But yes, it's also true
15
54260
3000
ื•ื›ืŸ, ื–ื” ื’ื ื ื›ื•ืŸ
00:57
that the Internet has problems, very serious problems,
16
57260
3000
ืฉืœืื™ื ื˜ืจื ื˜ ื™ืฉ ื‘ืขื™ื•ืช, ื‘ืขื™ื•ืช ื—ืžื•ืจื•ืช,
01:00
problems with security
17
60260
3000
ื‘ืขื™ื•ืช ืขื ืื‘ื˜ื—ื”,
01:03
and problems with privacy.
18
63260
3000
ื‘ืขื™ื•ืช ืขื ืคืจื˜ื™ื•ืช.
01:06
I've spent my career
19
66260
2000
ื”ืงื“ืฉืชื™ ืืช ื”ืงืจื™ื™ืจื” ืฉืœื™
01:08
fighting these problems.
20
68260
3000
ืœื”ืœื—ื ื‘ื‘ืขื™ื•ืช ื”ืืœื•.
01:11
So let me show you something.
21
71260
3000
ื‘ื•ื ืืจืื” ืœื›ื ืžืฉื”ื•.
01:15
This here
22
75260
2000
ื›ืืŸ ืื ื™ ืžื—ื–ื™ืง
01:17
is Brain.
23
77260
2000
ืืช Brain (ืžื•ื—)
01:19
This is a floppy disk
24
79260
2000
ื–ื” ืชืงืœื™ื˜ื•ืŸ
01:21
-- five and a quarter-inch floppy disk
25
81260
2000
ืชืงืœื™ื˜ื•ืŸ 5.25
01:23
infected by Brain.A.
26
83260
2000
ืžื•ื“ื‘ืง ื‘ื•ื™ืจื•ืก Brain.A.
01:25
It's the first virus we ever found
27
85260
2000
ื–ื”ื• ื”ื•ื™ืจื•ืก ื”ืจืืฉื•ืŸ ืฉืžืฆืื•
01:27
for PC computers.
28
87260
2000
ืœืžื—ืฉื‘ื™ PC.
01:30
And we actually know
29
90260
2000
ื•ืื ื• ืืคื™ืœื• ื™ื•ื“ืขื™ื
01:32
where Brain came from.
30
92260
2000
ืžืื™ืคื” Brain ื”ื’ื™ืข.
01:34
We know because it says so
31
94260
2000
ืื ื• ื™ื•ื“ืขื™ื ืžืคื ื™ ืฉื”ื•ื ืืžืจ ืœื ื•
01:36
inside the code.
32
96260
2000
ื‘ืชื•ืš ื”ืงื•ื“.
01:38
Let's take a look.
33
98260
3000
ื‘ื•ื ื ืกืชื›ืœ ื‘ื™ื—ื“.
01:45
All right.
34
105260
3000
ื‘ืกื“ืจ.
01:48
That's the boot sector of an infected floppy,
35
108260
3000
ื–ื”ื• ืกืงื˜ื•ืจ ื”ืืชื—ื•ืœ ืฉืœ ืชืงืœื™ื˜ื•ืŸ ืžื•ื“ื‘ืง.
01:51
and if we take a closer look inside,
36
111260
3000
ื•ืื ื ืกืชื›ืœ ืขืžื•ืง ืคื ื™ืžื”,
01:54
we'll see that right there,
37
114260
2000
ื ืจืื” ืฉื‘ื“ื™ื•ืง ื‘ืžืงื•ื ื”ื–ื”,
01:56
it says, "Welcome to the dungeon."
38
116260
4000
ื›ืชื•ื‘: "ื‘ืจื•ื›ื™ื ื”ื‘ืื™ื ืœืฆื™ื ื•ืง."
02:00
And then it continues,
39
120260
2000
ื•ื–ื” ืžืžืฉื™ืš,
02:02
saying, 1986, Basit and Amjad.
40
122260
3000
1986, ื‘ื–ื™ื˜ ื•ืืžื’'ื“.
02:05
And Basit and Amjad are first names,
41
125260
3000
ื‘ื–ื™ื˜ ื•ืืžื’'ื“ ื”ื ืฉืžื•ืช ืคืจื˜ื™ื™ื,
02:08
Pakistani first names.
42
128260
2000
ืฉืžื•ืช ืคืจื˜ื™ื™ื ืคืงื™ืกื˜ื ื™ื.
02:10
In fact, there's a phone number and an address in Pakistan.
43
130260
3000
ืœืžืขืฉื”, ื›ืชื•ื‘ ื’ื ืžืกืคืจ ื˜ืœืคื•ืŸ ื•ื›ืชื•ื‘ืช ื‘ืคืงื™ืกื˜ืŸ.
02:13
(Laughter)
44
133260
5000
(ืฆื—ื•ืง)
02:18
Now, 1986.
45
138260
3000
ื–ื” 1986.
02:21
Now it's 2011.
46
141260
2000
ื”ื™ื•ื ืื ื—ื ื• ื‘ 2011.
02:23
That's 25 years ago.
47
143260
2000
ืžื“ื•ื‘ืจ ืขืœ 25 ืฉื ื”.
02:25
The PC virus problem is 25 years old now.
48
145260
4000
ื‘ืขื™ื™ืช ื”ื•ื™ืจื•ืกื™ื ื‘ PC ื”ื™ื ื‘ืช 25.
02:29
So half a year ago,
49
149260
2000
ืœืคื ื™ ื—ืฆื™ ืฉื ื”,
02:31
I decided to go to Pakistan myself.
50
151260
3000
ื ืกืขืชื™ ืœืคืงื™ืกื˜ืŸ ื‘ืขืฆืžื™.
02:34
So let's see, here's a couple of photos I took while I was in Pakistan.
51
154260
3000
ื•ื”ื ื” ื›ืžื” ืชืžื•ื ื•ืช ืฉืฆื™ืœืžืชื™ ื‘ืคืงื™ืกื˜ืŸ.
02:37
This is from the city of Lahore,
52
157260
2000
ื–ื” ืžื”ืขื™ืจ ืœืื”ื•ืจ,
02:39
which is around 300 kilometers south
53
159260
2000
ืฉื”ื™ื 300 ืง"ืž ื“ืจื•ืžื™ืช
02:41
from Abbottabad, where Bin Laden was caught.
54
161260
3000
ืœืื‘ื•ื˜ืื‘ืื“ ืฉืฉื ื‘ืŸ ืœืื“ืŸ ื ืชืคืก.
02:44
Here's a typical street view.
55
164260
3000
ื–ื” ืจื—ื•ื‘ ื˜ื™ืคื•ืกื™.
02:47
And here's the street or road leading to this building,
56
167260
3000
ื•ื”ื ื” ื”ืจื—ื•ื‘ ื•ื”ื“ืจืš ื”ืžื•ื‘ื™ืœื™ื ืœื‘ื ื™ื™ืŸ ื”ื–ื”,
02:50
which is 730 Nizam block at Allama Iqbal Town.
57
170260
4000
ื“ืจืš ื ื™ืฆื 730 ื‘ืืœืžื” ืื™ืงื‘ืœ.
02:54
And I knocked on the door.
58
174260
2000
ื•ืื ื™ ื“ื•ืคืง ื‘ื“ืœืช.
02:56
(Laughter)
59
176260
2000
(ืฆื—ื•ืง)
02:58
You want to guess who opened the door?
60
178260
2000
ืจื•ืฆื™ื ืœื ื—ืฉ ืžื™ ืคืชื— ืืช ื”ื“ืœืช?
03:00
Basit and Amjad; they are still there.
61
180260
2000
ื‘ื–ื™ื˜ ื•ืืžื’'ื“, ืขื“ื™ื™ืŸ ืฉื.
03:02
(Laughter)
62
182260
2000
(ืฆื—ื•ืง)
03:04
(Applause)
63
184260
4000
(ืžื—ื™ืื•ืช ื›ืคื™ื™ื)
03:08
So here standing up is Basit.
64
188260
3000
ื•ื›ืŸ, ื›ืืŸ ืขื•ืžื“ ื‘ื–ื™ื˜.
03:11
Sitting down is his brother Amjad.
65
191260
3000
ื™ื•ืฉื‘ ื–ื” ืื—ื™ื• ืืžื’'ื“.
03:14
These are the guys who wrote the first PC virus.
66
194260
3000
ื”ื ื”ืื ืฉื™ื ืฉื›ืชื‘ื• ืืช ื”ื•ื™ืจื•ืก PC ื”ืจืืฉื•ืŸ.
03:17
Now of course, we had a very interesting discussion.
67
197260
3000
ื›ืžื•ื‘ืŸ, ื”ื™ื” ืœื ื• ื“ื™ื•ืŸ ืžืขื ื™ื™ืŸ.
03:20
I asked them why.
68
200260
2000
ืฉืืœืชื™ ืื•ืชื ืžื“ื•ืข.
03:22
I asked them how they feel about what they started.
69
202260
3000
ืฉืืœืชื™ ืื•ืชื ืื™ืš ื”ื ืžืจื’ื™ืฉื™ื ืœื’ื‘ื™ ืžื” ืฉื”ื ื”ื—ืœื•.
03:25
And I got some sort of satisfaction
70
205260
3000
ื•ื”ื™ื” ืœื™ ืกื™ืคื•ืง ืžืกื•ื™ื
03:28
from learning that both Basit and Amjad
71
208260
3000
ื›ืฉืฉืžืขืชื™ ืฉืฉื ื™ื”ื
03:31
had had their computers infected dozens of times
72
211260
3000
ื”ื•ืชืงืคื• ื•ื”ื•ื“ื‘ืงื• ืขืฉืจื•ืช ืคืขืžื™ื
03:34
by completely unrelated other viruses
73
214260
2000
ืžื•ื™ืจื•ืกื™ื ืœื ืงืฉื•ืจื™ื
03:36
over these years.
74
216260
2000
ื‘ืžื”ืœืš ื”ืฉื ื™ื.
03:38
So there is some sort of justice
75
218260
2000
ื•ืœื›ืŸ ื™ืฉ ืงืฆืช ืฆื“ืง
03:40
in the world after all.
76
220260
3000
ื‘ืขื•ืœื ืื—ืจื™ ื”ื›ืœ.
03:44
Now, the viruses that we used to see
77
224260
2000
ื”ื•ื™ืจื•ืกื™ื ืฉื”ืชืจื’ืœื ื• ืœืจืื•ืช
03:46
in the 1980s and 1990s
78
226260
2000
ื‘ืฉื ื•ืช ื”-80 ื•ื”-90
03:48
obviously are not a problem any more.
79
228260
3000
ืœื ืžื”ื•ื•ื™ื ื‘ืขื™ื” ื™ื•ืชืจ.
03:51
So let me just show you a couple of examples
80
231260
2000
ืื ื™ ืืจืื” ืœื›ื ืžืกืคืจ ื“ื•ื’ืžืื•ืช
03:53
of what they used to look like.
81
233260
2000
ืœืื™ืš ื”ื ื ืจืื• ืื–.
03:55
What I'm running here
82
235260
2000
ืื ื™ ืžืจื™ืฅ ื›ืืŸ
03:57
is a system that enables me
83
237260
2000
ืžืขืจื›ืช ืฉืžืืคืฉืจืช ืœื™
03:59
to run age-old programs on a modern computer.
84
239260
3000
ืœื”ืจื™ืฅ ืชื•ื›ื ื•ืช ืžืื“ ื™ืฉื ื•ืช ืขืœ ืžื—ืฉื‘ ืžื•ื“ืจื ื™.
04:02
So let me just mount some drives. Go over there.
85
242260
3000
ืื ื™ ืื›ื™ืŸ ื›ืžื” ื›ื•ื ื ื™ื. ืืขื‘ื•ืจ ืœืฉื.
04:05
What we have here is a list of old viruses.
86
245260
3000
ื›ืืŸ ื™ืฉ ืœื ื• ืจืฉื™ืžื” ืฉืœ ื•ื™ืจื•ืกื™ื ื™ืฉื ื™ื.
04:08
So let me just run some viruses on my computer.
87
248260
3000
ืื ื™ ืืจื™ืฅ ื›ืžื” ืžื”ื ืขืœ ื”ืžื—ืฉื‘.
04:11
For example,
88
251260
2000
ืœื“ื•ื’ืžื,
04:13
let's go with the Centipede virus first.
89
253260
2000
ื‘ื•ืื• ื ืชื—ื™ืœ ืขื ื•ื™ืจื•ืก Centipede (ืžืจื‘ื” ืจื’ืœื™ื™ื)
04:15
And you can see at the top of the screen,
90
255260
2000
ืืชื ื™ื›ื•ืœื™ื ืœืจืื•ืช ื‘ืžืกืš ืœืžืขืœื”,
04:17
there's a centipede scrolling across your computer
91
257260
2000
ื™ืฉ ืžืจื‘ื” ืจื’ืœื™ื™ื ืฉืจืฅ ืขืœ ื”ืžืกืš
04:19
when you get infected by this one.
92
259260
2000
ื›ืฉืืชื ื ื“ื‘ืงื™ื ื‘ื•ื™ืจื•ืก.
04:21
You know that you're infected
93
261260
2000
ืืชื ื™ื•ื“ืขื™ื ืฉื ื“ื‘ืงืชื,
04:23
because it actually shows up.
94
263260
2000
ื›ื™ ื”ื•ื ืžื•ืคื™ืข.
04:25
Here's another one. This is the virus called Crash,
95
265260
3000
ื”ื ื” ืขื•ื“ ืื—ื“, ื•ื™ืจื•ืก ืฉื ืงืจื Crash (ืงืจื™ืกื”)
04:28
invented in Russia in 1992.
96
268260
2000
ื”ื ื•ืฆืจ ื‘ืจื•ืกื™ื” ื‘ 1992.
04:30
Let me show you one which actually makes some sound.
97
270260
3000
ืขื›ืฉื™ื• ืื—ื“ ืฉื’ื ืขื•ืฉื” ืจืขืฉ.
04:34
(Siren noise)
98
274260
6000
(ืจืขืฉ ืกื™ืจื ื”)
04:40
And the last example,
99
280260
2000
ื•ื”ื“ื•ื’ืžื ื”ืื—ืจื•ื ื”,
04:42
guess what the Walker virus does?
100
282260
2000
ื ื—ืฉื• ืžื” ื”ื•ื™ืจื•ืก Walker (ื”ื•ืœืš) ืขื•ืฉื”.
04:44
Yes, there's a guy walking across your screen
101
284260
2000
ื›ืŸ, ื‘ื—ื•ืจ ื”ื•ืœืš ืœื›ื ืขืœ ื”ืžืกืš
04:46
once you get infected.
102
286260
2000
ื›ืฉืืชื ื ื“ื‘ืงื™ื.
04:48
So it used to be fairly easy to know
103
288260
3000
ื•ื‘ื›ืŸ, ื‘ืขื‘ืจ ื”ื™ื” ืงืœ ืœื“ืขืช
04:51
that you're infected by a virus,
104
291260
3000
ืฉื ื“ื‘ืงืชื ื‘ื•ื™ืจื•ืก,
04:54
when the viruses were written by hobbyists
105
294260
2000
ื›ืฉื”ื•ื™ืจื•ืก ื ื›ืชื‘ ืข"ื™ ื—ื•ื‘ื‘ื ื™ื
04:56
and teenagers.
106
296260
2000
ื•ื ืขืจื™ื.
04:58
Today, they are no longer being written
107
298260
2000
ื”ื™ื•ื, ื”ื ื›ื‘ืจ ืœื ื ื›ืชื‘ื™ื ืข"ื™
05:00
by hobbyists and teenagers.
108
300260
2000
ื—ื•ื‘ื‘ื ื™ื ื•ื ืขืจื™ื.
05:02
Today, viruses are a global problem.
109
302260
3000
ื”ื™ื•ื, ื•ื™ืจื•ืกื™ื ื”ื ื‘ืขื™ื” ื’ืœื•ื‘ืœื™ืช.
05:05
What we have here in the background
110
305260
2000
ืžื” ืฉืจื•ืื™ื ืคื” ื‘ืจืงืข
05:07
is an example of our systems that we run in our labs,
111
307260
3000
ื–ื• ื“ื•ื’ืžื ืœืื—ืช ื”ืžืขืจื›ื•ืช ืฉืื ื• ืžืจื™ืฆื™ื ื‘ืžืขื‘ื“ื”,
05:10
where we track virus infections worldwide.
112
310260
2000
ืฉืื ื• ืขื•ืงื‘ื™ื ืื—ืจื™ ื”ื™ื“ื‘ืงื•ื™ื•ืช ื‘ืขื•ืœื.
05:12
So we can actually see in real time
113
312260
2000
ืื ื—ื ื• ื™ื›ื•ืœื™ื ืœืจืื•ืช ื‘ื–ืžืŸ ืืžืช
05:14
that we've just blocked viruses in Sweden and Taiwan
114
314260
3000
ืฉืขืฆืจื ื• ื•ื™ืจื•ืกื™ื ื‘ืฉื‘ื“ื™ื” ื•ื‘ื˜ื™ื™ื•ื•ืืŸ
05:17
and Russia and elsewhere.
115
317260
2000
ื•ืจื•ืกื™ื” ื•ื‘ืขื•ื“ ืžืงื•ืžื•ืช.
05:19
In fact, if I just connect back to our lab systems
116
319260
3000
ื‘ืขืฆื, ืื ืื ื™ ืืชื—ื‘ืจ ืฉื•ื‘ ืœืžื—ืฉื‘ ื‘ืžืขื‘ื“ื”
05:22
through the Web,
117
322260
2000
ื“ืจืš ื”ืจืฉืช,
05:24
we can see in real time
118
324260
2000
ื ื•ื›ืœ ืœืจืื•ืช ื‘ื–ืžืŸ ืืžืช
05:26
just some kind of idea of how many viruses,
119
326260
3000
ื˜ืขื™ืžื” ืžื›ืžื•ืช ื”ื•ื™ืจื•ืกื™ื,
05:29
how many new examples of malware we find every single day.
120
329260
3000
ื›ืžื” ื“ื•ื’ืžืื•ืช ื—ื“ืฉื•ืช ืฉืœ ืชื•ื›ื ื” ื–ื“ื•ื ื™ืช ืื ื• ืžื•ืฆืื™ื ื›ืœ ื™ื•ื.
05:32
Here's the latest virus we've found,
121
332260
2000
ื”ื ื” ื”ื•ื™ืจื•ืก ื”ืื—ืจื•ืŸ ืฉืžืฆืื ื•
05:34
in a file called Server.exe.
122
334260
2000
ื‘ืงื•ื‘ืฅ ืฉื ืงืจื Server.exe
05:36
And we found it right over here three seconds ago --
123
336260
3000
ื•ืžืฆืื ื• ืื•ืชื• ื›ืืŸ ืœืคื ื™ ืฉืœื•ืฉ ืฉื ื™ื•ืช.
05:39
the previous one, six seconds ago.
124
339260
2000
ืื—ื“ ืœืคื ื™ื•, ืœืคื ื™ ืฉืฉ ืฉื ื™ื•ืช.
05:41
And if we just scroll around,
125
341260
3000
ื•ืื ื ื’ืœื•ืœ ืœืžื˜ื”,
05:44
it's just massive.
126
344260
2000
ื”ืžื™ื“ืข ืขืฆื•ื.
05:46
We find tens of thousands, even hundreds of thousands.
127
346260
3000
ืื ื• ืžื•ืฆืื™ื ืขืฉืจื•ืช ื•ืื•ืœื™ ืืคื™ืœื• ืžืื•ืช ืืœืคื™ื
05:49
And that's the last 20 minutes of malware
128
349260
3000
ื•ื–ื” ืžื”ืขืฉืจื™ื ื“ืงื•ืช ื”ืื—ืจื•ื ื•ืช
05:52
every single day.
129
352260
2000
ื‘ื›ืœ ื™ื•ื.
05:54
So where are all these coming from then?
130
354260
3000
ืื– ืžืื™ืคื” ื›ืœ ื–ื” ืžื’ื™ืข?
05:57
Well today, it's the organized criminal gangs
131
357260
4000
ื•ื‘ื›ืŸ ื”ื™ื•ื, ืืœื• ื›ื ื•ืคื™ื•ืช ืคืฉืข ืžืื•ืจื’ื ื•ืช
06:01
writing these viruses
132
361260
2000
ืฉื›ื•ืชื‘ื•ืช ืืช ื”ื•ื™ืจื•ืกื™ื
06:03
because they make money with their viruses.
133
363260
2000
ืžื›ื™ื•ื•ืŸ ืฉื”ืŸ ืžืจื•ื•ื™ื—ื•ืช ื›ืกืฃ ืžื›ืš.
06:05
It's gangs like --
134
365260
2000
ื›ื ื•ืคื™ื•ืช ื›ื’ื•ืŸ -
06:07
let's go to GangstaBucks.com.
135
367260
3000
ื‘ื•ื ื ื›ื ืก ืœืืชืจ GangstaBucks.com
06:10
This is a website operating in Moscow
136
370260
3000
ื–ื”ื• ืืชืจ ืฉืžื•ืคืขืœ ืžืžื•ืกืงื‘ื”
06:13
where these guys are buying infected computers.
137
373260
4000
ืฉืœ ืื ืฉื™ื ืฉืงื•ื ื™ื ืžื—ืฉื‘ื™ื ืฉื ื“ื‘ืงื• ื‘ื•ื™ืจื•ืกื™ื.
06:17
So if you are a virus writer
138
377260
2000
ืื ืืชื” ื›ื•ืชื‘ ื•ื™ืจื•ืกื™ื
06:19
and you're capable of infecting Windows computers,
139
379260
2000
ื•ืืชื” ืžืกื•ื’ืœ ืœื”ื“ื‘ื™ืง ืžื—ืฉื‘ื™ Windows,
06:21
but you don't know what to do with them,
140
381260
2000
ื•ืืชื” ืœื ื™ื•ื“ืข ืžื” ืœืขืฉื•ืช ืื™ืชื,
06:23
you can sell those infected computers --
141
383260
2000
ืืชื” ื™ื›ื•ืœ ืœืžื›ื•ืจ ืืช ื”ืžื—ืฉื‘ื™ื ื”ืœืœื• --
06:25
somebody else's computers -- to these guys.
142
385260
2000
ืžื—ืฉื‘ื™ื ืฉืœ ืื ืฉื™ื ืื—ืจื™ื -- ืœื—ื‘ืจ'ื” ื”ืืœื•.
06:27
And they'll actually pay you money for those computers.
143
387260
4000
ื•ื”ื ื‘ืืžืช ื™ืฉืœืžื• ืœืš ื›ืกืฃ ืขื‘ื•ืจ ื”ืžื—ืฉื‘ื™ื.
06:31
So how do these guys then monetize
144
391260
3000
ื•ื‘ื›ืŸ ืื™ืš ื”ื—ื‘ืจ'ื” ื”ืืœื” ืžืจื•ื•ื™ื—ื™ื ื›ืกืฃ
06:34
those infected computers?
145
394260
2000
ืžื”ืžื—ืฉื‘ื™ื ื”ื ื’ื•ืขื™ื?
06:36
Well there's multiple different ways,
146
396260
2000
ื™ืฉ ืžืกืคืจ ื“ืจื›ื™ื,
06:38
such as banking trojans, which will steal money from your online banking accounts
147
398260
3000
ื›ืžื• ื‘ื ืงืื•ืช ื˜ืจื•ื™ืื ื™ืช, ืฉืชื’ื ื•ื‘ ื›ืกืฃ ืžื”ื—ืฉื‘ื•ืŸ ื‘ื ืง ืฉืœืš
06:41
when you do online banking,
148
401260
3000
ื›ืฉืืชื” ืžื‘ืฆืข ืคืขื•ืœื•ืช ื‘ืืชืจ ื”ื‘ื ืง,
06:44
or keyloggers.
149
404260
3000
ืื• ืจื™ืฉื•ื ื”ืงืฉื•ืช.
06:47
Keyloggers silently sit on your computer, hidden from view,
150
407260
4000
ืจื•ืฉื ื”ืงืฉื•ืช, ื ืกืชืจ ืžื”ืชืฆื•ื’ื”, ื ืžืฆื ื‘ืžื—ืฉื‘
06:51
and they record everything you type.
151
411260
3000
ื•ืžืงืœื™ื˜ ื›ืœ ืชื• ืฉืžื•ืงืœื“ ื‘ืžืงืœื“ืช.
06:54
So you're sitting on your computer and you're doing Google searches.
152
414260
3000
ืืชื” ื™ื•ืฉื‘ ืžื•ืœ ื”ืžื—ืฉื‘ ื•ืžื—ืคืฉ ื“ื‘ืจื™ื ื‘ื’ื•ื’ืœ.
06:57
Every single Google search you type
153
417260
2000
ื›ืœ ื—ื™ืคื•ืฉ ืฉืœืš ื‘ื’ื•ื’ืœ
06:59
is saved and sent to the criminals.
154
419260
3000
ื ืฉืžืจ ื•ื ืฉืœื— ืœืคื•ืฉืขื™ื.
07:02
Every single email you write is saved and sent to the criminals.
155
422260
3000
ื›ืœ ืื™-ืžื™ื™ืœ ืฉืืชื” ื›ื•ืชื‘ ื ืฉืžืจ ื•ื ืฉืœื— ืœืคื•ืฉืขื™ื.
07:05
Same thing with every single password and so on.
156
425260
4000
ื›ืžื• ื›ืŸ ื›ืœ ืกื™ืกืžื” ืฉืืชื” ืžืงืœื™ื“ ื•ื›ื•'.
07:09
But the thing that they're actually looking for most
157
429260
2000
ืืš ื”ื“ื‘ืจ ืฉื”ื ื”ื›ื™ ืžื—ืคืฉื™ื
07:11
are sessions where you go online
158
431260
2000
ื–ื” ื˜ืจื ื–ืงืฆื™ื•ืช ืื•ื ืœื™ื™ืŸ
07:13
and do online purchases in any online store.
159
433260
3000
ืจื›ื™ืฉื” ืื•ื ืœื™ื™ืŸ ืžื—ื ื•ื™ื•ืช ื‘ืื™ื ื˜ืจื ื˜.
07:16
Because when you do purchases in online stores,
160
436260
2000
ืžื›ื™ื•ื•ืŸ ืฉื›ืฉืืชื” ืจื•ื›ืฉ ื‘ืื™ื ื˜ืจื ื˜,
07:18
you will be typing in your name, the delivery address,
161
438260
3000
ืืชื” ืžืงืœื™ื“ ืืช ื”ืฉื, ืืช ื”ื›ืชื•ื‘ืช ืœืžืฉืœื•ื—,
07:21
your credit card number and the credit card security codes.
162
441260
3000
ืืช ืžืกืคืจ ื›ืจื˜ื™ืก ื”ืืฉืจืื™ ื•ืงื•ื“ ื”ืื‘ื˜ื—ื”.
07:24
And here's an example of a file
163
444260
2000
ื•ื”ื ื” ื“ื•ื’ืžื” ืœืงื•ื‘ืฅ
07:26
we found from a server a couple of weeks ago.
164
446260
2000
ืฉืžืฆืื ื• ื‘ืฉืจืช ืœืคื ื™ ืžืกืคืจ ืฉื‘ื•ืขื•ืช.
07:28
That's the credit card number,
165
448260
2000
ื–ื” ืžืกืคืจ ื›ืจื˜ื™ืก ื”ืืฉืจืื™,
07:30
that's the expiration date, that's the security code,
166
450260
2000
ื–ื” ื”ืชื•ืงืฃ ืฉืœื•, ื–ื” ืงื•ื“ ื”ืื‘ื˜ื—ื”,
07:32
and that's the name of the owner of the card.
167
452260
2000
ื•ื–ื”ื• ืฉืžื• ืฉืœ ื‘ืขืœ ื”ื›ืจื˜ื™ืก.
07:34
Once you gain access to other people's credit card information,
168
454260
3000
ื›ืฉืืชื” ืžืงื‘ืœ ื’ื™ืฉื” ืœืคืจื˜ื™ื ื”ืœืœื•
07:37
you can just go online and buy whatever you want
169
457260
2000
ืืชื” ื™ื›ื•ืœ ืœื”ื–ืžื™ืŸ ืžื” ืฉืืชื” ืจื•ืฆื”
07:39
with this information.
170
459260
3000
ืขืœ ืฉืžื.
07:42
And that, obviously, is a problem.
171
462260
2000
ื•ื–ื•ื”ื™ ื›ืžื•ื‘ืŸ, ื‘ืขื™ื”.
07:44
We now have a whole underground marketplace
172
464260
4000
ื™ืฉ ืœื ื• ืขื›ืฉื™ื• ืฉื•ืง ืžื—ืชืจืชื™
07:48
and business ecosystem
173
468260
3000
ื•ืืงื•ืกื™ืกื˜ืžื” ืขืกืงื™ืช
07:51
built around online crime.
174
471260
3000
ื”ื‘ื ื•ื™ื” ืกื‘ื™ื‘ ืคืฉืข ืื•ื ืœื™ื™ืŸ.
07:54
One example of how these guys
175
474260
2000
ื“ื•ื’ืžื ืื—ืช ืœืื™ืš ื”ื—ื‘ืจ'ื” ื”ืืœื”
07:56
actually are capable of monetizing their operations:
176
476260
3000
ืžืกื•ื’ืœื™ื ืœื”ืจื•ื•ื™ื— ื›ืกืฃ ืžื”ืคืขื™ืœื•ืช ืฉืœื”ื.
07:59
we go and have a look at the pages of INTERPOL
177
479260
3000
ืื ื• ื”ื•ืœื›ื™ื ื•ืžืกืชื›ืœื™ื ื‘ื“ืคื™ ื”ืื™ื ื˜ืจืคื•ืœ
08:02
and search for wanted persons.
178
482260
2000
ื•ืžื—ืคืฉื™ื ืื ืฉื™ื ืžื‘ื•ืงืฉื™ื.
08:04
We find guys like Bjorn Sundin, originally from Sweden,
179
484260
3000
ืื ื• ื ืžืฆื ืื ืฉื™ื ื›ืžื• ื‘ื™ื•ืจืŸ ืกืื ื“ื™ืŸ, ื‘ืžืงื•ื ืžืฉื‘ื“ื™ื”,
08:07
and his partner in crime,
180
487260
2000
ื•ืฉื•ืชืคื• ืœืคืฉืข,
08:09
also listed on the INTERPOL wanted pages,
181
489260
2000
ื’ื ืจืฉื•ื ื‘ื“ืคื™ ื”ืžื‘ื•ืงืฉื™ื ืฉืœ ื”ืื™ื ื˜ืจืคื•ืœ,
08:11
Mr. Shaileshkumar Jain,
182
491260
2000
ืžืจ. ืฉืœืฉืงื•ืžืจ ื’'ื™ื™ืŸ,
08:13
a U.S. citizen.
183
493260
2000
ืื–ืจื— ืืจื”"ื‘.
08:15
These guys were running an operation called I.M.U.,
184
495260
3000
ื”ื ื”ืจื™ืฆื• ืžื‘ืฆืข ืฉื ืงืจื I.M.U,
08:18
a cybercrime operation through which they netted millions.
185
498260
3000
ืžื‘ืฆืข ืคืฉืข ื‘ืืžืฆืขื•ืช ืžื—ืฉื‘ ืฉื”ืจื•ื•ื™ื— ืžื™ืœื™ื•ื ื™ื.
08:21
They are both right now on the run.
186
501260
3000
ืฉื ื™ื”ื ื›ืจื’ืข ื‘ืžืฆื•ื“.
08:24
Nobody knows where they are.
187
504260
2000
ืืฃ ืื—ื“ ืœื ื™ื•ื“ืข ื”ื™ื›ืŸ ื”ื.
08:26
U.S. officials, just a couple of weeks ago,
188
506260
2000
ืคืงื™ื“ื™ื ื‘ืืจื”"ื‘ ืœืคื ื™ ืžืกืคืจ ืฉื‘ื•ืขื•ืช,
08:28
froze a Swiss bank account
189
508260
2000
ื”ืงืคื™ืื• ื—ืฉื‘ื•ืŸ ื‘ื ืง ื‘ืฉื•ื•ื™ืฅ
08:30
belonging to Mr. Jain,
190
510260
2000
ื”ืฉื™ื™ืš ืœืžืจ. ื’'ื™ื™ืŸ,
08:32
and that bank account had 14.9 million U.S. dollars on it.
191
512260
4000
ื‘ื—ืฉื‘ื•ืŸ ื‘ื ืง ื–ื” ื”ื™ื• 14.9 ืžื™ืœื™ื•ืŸ ื“ื•ืœืจ.
08:36
So the amount of money online crime generates
192
516260
3000
ื•ืœื›ืŸ ื›ืžื•ืช ื”ื›ืกืฃ ืฉืคืฉืข ืื•ื ืœื™ื™ืŸ ืžื™ื™ืฆืจ
08:39
is significant.
193
519260
2000
ื”ื•ื ืžืฉืžืขื•ืชื™.
08:41
And that means that the online criminals
194
521260
2000
ื•ื–ื” ืื•ืžืจ ืฉื”ืคื•ืฉืขื™ื ื”ืœืœื•
08:43
can actually afford to invest into their attacks.
195
523260
3000
ื™ื›ื•ืœื™ื ืœื”ืฉืงื™ืข ื›ืกืฃ ื‘ื”ืชืงืคื•ืช.
08:46
We know that online criminals
196
526260
2000
ืื ื• ื™ื•ื“ืขื™ื ืฉืคื•ืฉืขื™ื ืืœื•
08:48
are hiring programmers, hiring testing people,
197
528260
3000
ืžื’ื™ื™ืกื™ื ืžืชื›ื ืชื™ื, ืื ืฉื™ ื‘ื“ื™ืงื•ืช,
08:51
testing their code,
198
531260
2000
ืฉื™ื‘ื“ืงื• ืืช ื”ืงื•ื“,
08:53
having back-end systems with SQL databases.
199
533260
3000
ื™ืฉ ืœื”ื ืžืขืจื›ื•ืช ื ื™ื”ื•ืœ ื•ืžืกื“ื™ ื ืชื•ื ื™ื.
08:56
And they can afford to watch how we work --
200
536260
3000
ื•ื”ื ื™ื›ื•ืœื™ื ืœื”ืจืฉื•ืช ืœืขืฆืžื ืœื‘ื—ื•ืŸ ืื™ืš ืื ื• ืคื•ืขืœื™ื,
08:59
like how security people work --
201
539260
2000
ืื™ืš ืื ืฉื™ ืื‘ื˜ื—ื” ืคื•ืขืœื™ื,
09:01
and try to work their way around
202
541260
2000
ื•ืœื ืกื•ืช ืœืขืงื•ืฃ ืื•ืชื ื•
09:03
any security precautions we can build.
203
543260
2000
ื•ืืช ืžืขืจื›ื•ืช ื”ื”ื’ื ื” ืฉืื ื• ื‘ื•ื ื™ื.
09:05
They also use the global nature of Internet
204
545260
3000
ื”ื ื’ื ืžืฉืชืžืฉื™ื ื‘ื˜ื‘ืข ื”ื’ืœื•ื‘ืœื™ ืฉืœ ื”ืื™ื ื˜ืจื ื˜
09:08
to their advantage.
205
548260
2000
ืœื™ืชืจื•ื ื.
09:10
I mean, the Internet is international.
206
550260
2000
ื›ืœื•ืžืจ, ื”ืื™ื ื˜ืจื ื˜ ื‘ื™ื ืœืื•ืžื™.
09:12
That's why we call it the Internet.
207
552260
2000
ืœื›ืŸ ื”ื•ื ื ืงืจื ื”ืื™ื ื˜ืจื ื˜.
09:14
And if you just go and take a look
208
554260
2000
ื•ืื ืชืœื›ื• ื•ืชืกืชื›ืœื•
09:16
at what's happening in the online world,
209
556260
3000
ืขืœ ืžื” ืงื•ืจื” ื‘ืขื•ืœื ื”ืžืงื•ื•ืŸ,
09:19
here's a video built by Clarified Networks,
210
559260
2000
ื”ื ื” ื•ื™ื“ืื• ืž Clarified Networks,
09:21
which illustrates how one single malware family is able to move around the world.
211
561260
4000
ื”ืžื“ื’ื™ื ืื™ืš ืžื–ื™ืง ืื—ื“ ื ืข ื‘ืจื—ื‘ื™ ื”ืขื•ืœื.
09:25
This operation, believed to be originally from Estonia,
212
565260
3000
ื”ื”ืœื™ืš ื”ื–ื”, ืกื‘ื•ืจื™ื ืฉื”ืชื—ื™ืœ ื‘ืืกื˜ื•ื ื™ื”,
09:28
moves around from one country to another
213
568260
2000
ืขื•ื‘ืจ ืžืžื“ื™ื ื” ืœืžื“ื™ื ื”
09:30
as soon as the website is tried to shut down.
214
570260
2000
ื‘ืจื’ืข ืฉื ื™ืกื• ืœื›ื‘ื•ืช ืืช ื”ืืชืจ.
09:32
So you just can't shut these guys down.
215
572260
3000
ืืชื ืœื ื™ื›ื•ืœื™ื ืœื›ื‘ื•ืช ืื•ืชื.
09:35
They will switch from one country to another,
216
575260
2000
ื”ื ื™ืขื‘ืจื• ืžืžื“ื™ื ื” ืœืžื“ื™ื ื”,
09:37
from one jurisdiction to another --
217
577260
2000
ืžืชื—ื•ื ืฉื™ืคื•ื˜ ืื—ื“ ืœืื—ืจ,
09:39
moving around the world,
218
579260
2000
ื‘ื›ืœ ื”ืขื•ืœื.
09:41
using the fact that we don't have the capability
219
581260
2000
ื”ื ืžืฉืชืžืฉื™ื ื‘ืขื•ื‘ื“ื” ืฉืœื ื• ืื™ืŸ ืืช ื”ื™ื›ื•ืœืช
09:43
to globally police operations like this.
220
583260
3000
ืœืชืื ืคืขื•ืœื•ืช ืฉื™ื˜ื•ืจ ื’ืœื•ื‘ืœื™ื•ืช ื›ืืœื•.
09:46
So the Internet is as if
221
586260
2000
ื•ืœื›ืŸ ื”ืื™ื ื˜ืจื ื˜ ืžื“ื•ืžื” ืœืžืฆื‘
09:48
someone would have given free plane tickets
222
588260
2000
ืฉื‘ื• ื™ื”ื™ื• ื›ืจื˜ื™ืกื™ ื˜ื™ืกื” ื—ื™ื ื
09:50
to all the online criminals of the world.
223
590260
3000
ืœื›ืœ ืคื•ืฉืขื™ ื”ืžื—ืฉื‘ื™ื ื‘ืขื•ืœื.
09:53
Now, criminals who weren't capable of reaching us before
224
593260
3000
ืขื›ืฉื™ื•, ื”ืคื•ืฉืขื™ื ืฉืœื ื™ื›ืœื• ืœื”ื’ื™ืข ืืœื™ื ื• ืœืคื ื™
09:56
can reach us.
225
596260
2000
ืžื’ื™ืขื™ื ืืœื™ื ื• ืขื›ืฉื™ื•.
09:58
So how do you actually go around finding online criminals?
226
598260
3000
ืื– ืื™ืš ื‘ืขืฆื ืžื•ืฆืื™ื ืคื•ืฉืขื™ื ืื•ื ืœื™ื™ืŸ?
10:01
How do you actually track them down?
227
601260
2000
ืื™ืš ืฆื“ื™ื ืื•ืชื?
10:03
Let me give you an example.
228
603260
2000
ืื ื™ ืืชืŸ ืœื›ื ื“ื•ื’ืžื”.
10:05
What we have here is one exploit file.
229
605260
3000
ื™ืฉ ืœื ื• ื›ืืŸ ืงื•ื‘ืฅ ืžื ืฆืœ.
10:08
Here, I'm looking at the Hex dump of an image file,
230
608260
4000
ื›ืืŸ ืื ื™ ืžืกืชื›ืœ ืขืœ ื”ืžื™ื“ืข ื”ื”ืงืกื“ืฆื™ืžืœื™ ืฉืœ ืงื•ื‘ืฅ ืชืžื•ื ื”,
10:12
which contains an exploit.
231
612260
2000
ืฉื›ื•ืœืœ ืงื•ื“ ื–ื“ื•ื ื™.
10:14
And that basically means, if you're trying to view this image file on your Windows computer,
232
614260
3000
ื•ื–ื” ืื•ืžืจ ื‘ืขืฆื ืฉืื ืชื ืกื• ืœืคืชื•ื— ืืช ื”ืชืžื•ื ื” ื‘ืžื—ืฉื‘ ื”ืžืจื™ืฅ Windows,
10:17
it actually takes over your computer and runs code.
233
617260
3000
ื”ืงื•ื“ ื”ื–ื“ื•ื ื™ ื™ืฉืชืœื˜ ืœื›ื ืขืœ ื”ืžื—ืฉื‘ ื•ื™ืจื™ืฅ ืงื•ื“.
10:20
Now, if you'll take a look at this image file --
234
620260
3000
ืขื›ืฉื™ื• ืื ื ืกืชื›ืœ ืขืœ ืงื•ื‘ืฅ ื”ืชืžื•ื ื”,
10:23
well there's the image header,
235
623260
2000
ื”ื ื” ื”ืชืงื•ืจื” ืฉืœ ื”ืชืžื•ื ื”,
10:25
and there the actual code of the attack starts.
236
625260
3000
ื•ื›ืืŸ ื”ืงื•ื“ ืฉืœ ื”ืžืชืงืคื” ืžืชื—ื™ืœ.
10:28
And that code has been encrypted,
237
628260
2000
ื•ืงื•ื“ ื–ื” ืžื•ืฆืคืŸ,
10:30
so let's decrypt it.
238
630260
2000
ื‘ื•ื ื ืคืขื ื— ืื•ืชื•.
10:32
It has been encrypted with XOR function 97.
239
632260
2000
ื”ื•ื ื”ื•ืฆืคืŸ ืขื ืคื•ื ืงืฆื™ื™ืช XOR 97.
10:34
You just have to believe me,
240
634260
2000
ืคืฉื•ื˜ ื”ืืžื™ื ื• ืœื™,
10:36
it is, it is.
241
636260
2000
ื›ื›ื”, ื›ื›ื”.
10:38
And we can go here
242
638260
2000
ื•ืื ื• ื™ื›ื•ืœื™ื ืœืœื›ืช ืœื›ืืŸ
10:40
and actually start decrypting it.
243
640260
2000
ื•ืžืžืฉ ื›ื›ื” ืœืคืขื ื— ืื•ืชื•.
10:42
Well the yellow part of the code is now decrypted.
244
642260
2000
ื”ื—ืœืง ื”ืฆื”ื•ื‘ ื‘ืงื•ื“ ืขื›ืฉื™ื• ืžืคื•ืขื ื—.
10:44
And I know, it doesn't really look much different from the original.
245
644260
3000
ื•ืื ื™ ื™ื•ื“ืข, ื–ื” ืœื ื ืจืื” ืฉื•ื ื” ื›"ื› ืžื”ืžืงื•ืจ.
10:47
But just keep staring at it.
246
647260
2000
ืื‘ืœ ืชืžืฉื™ื›ื• ืœื‘ื”ื•ืช ื‘ื–ื”.
10:49
You'll actually see that down here
247
649260
2000
ืฉื™ืžื• ืœื‘ ืฉื›ืืŸ ืœืžื˜ื”
10:51
you can see a Web address:
248
651260
2000
ื™ืฉื ื” ื›ืชื•ื‘ืช ืื™ื ื˜ืจื ื˜.
10:53
unionseek.com/d/ioo.exe
249
653260
6000
unionseek.com/d/ioo.exe
10:59
And when you view this image on your computer
250
659260
2000
ื•ื›ืฉืืชื ืฆื•ืคื™ื ื‘ืชืžื•ื ื” ื‘ืžื—ืฉื‘
11:01
it actually is going to download and run that program.
251
661260
2000
ื”ื•ื ื™ืœืš ืœื›ืชื•ื‘ืช ื”ื–ืืช, ื™ื•ืจื™ื“ ื•ื™ืจื™ืฅ ืืช ื”ืชื•ื›ื ื”.
11:03
And that's a backdoor which will take over your computer.
252
663260
3000
ื•ื–ื•ื”ื™ ื“ืœืช ืื—ื•ืจื™ืช ืœื”ืฉืชืœื˜ื•ืช ืขืœ ืžื—ืฉื‘.
11:06
But even more interestingly,
253
666260
2000
ืืš ืืคื™ืœื• ื™ื•ืชืจ ืžืขื ื™ื™ืŸ,
11:08
if we continue decrypting,
254
668260
2000
ืื ื ืžืฉื™ืš ืœืคืขื ื—.
11:10
we'll find this mysterious string,
255
670260
2000
ื ืžืฆื ืืช ื”ื˜ืงืกื˜ ื”ืžืกืชื•ืจื™ ื”ื‘ื
11:12
which says O600KO78RUS.
256
672260
5000
ืฉืื•ืžืจ O600KO78RUS.
11:17
That code is there underneath the encryption
257
677260
2000
ื”ืงื•ื“ ื”ื–ื” ื”ื•ื ืžืชื—ืช ืœื”ืฆืคื ื”
11:19
as some sort of a signature.
258
679260
2000
ื›ืกื•ื’ ืฉืœ ื—ืชื™ืžื”.
11:21
It's not used for anything.
259
681260
2000
ื”ื•ื ืœื ืžืฉืžืฉ ืœืฉื•ื ื“ื‘ืจ.
11:23
And I was looking at that, trying to figure out what it means.
260
683260
3000
ื•ืื ื™ ื”ืกืชื›ืœื™ ืขืœ ื”ืงื•ื“, ื•ื ื™ืกื™ืชื™ ืœื”ื‘ื™ืŸ ืืช ืžืฉืžืขื•ืชื•.
11:26
So obviously I Googled for it.
261
686260
2000
ื›ืžื•ื‘ืŸ ืฉื’ื™ื’ืœืชื™ ืื•ืชื•.
11:28
I got zero hits; wasn't there.
262
688260
2000
ืงื™ื‘ืœืชื™ ืืคืก ืชื•ืฆืื•ืช, ื”ื•ื ืœื ื”ื™ื” ืฉื.
11:30
So I spoke with the guys at the lab.
263
690260
2000
ืื– ื“ื™ื‘ืจืชื™ ืขื ื—ื‘ืจ'ื” ื‘ืžืขื‘ื“ื”.
11:32
And we have a couple of Russian guys in our labs,
264
692260
2000
ื•ื™ืฉ ืœื ื• ื›ืžื” ื—ื‘ืจ'ื” ืจื•ืกื™ื™ื ื‘ืžืขื‘ื“ื”,
11:34
and one of them mentioned,
265
694260
2000
ื•ืื—ื“ ืžื”ื ื”ื–ื›ื™ืจ,
11:36
well, it ends in RUS like Russia.
266
696260
2000
ื–ื” ืžืกืชื™ื™ื ื‘ RUS, ื›ืžื• ืจื•ืกื™ื”.
11:38
And 78 is the city code
267
698260
2000
ื• 78 ื–ื” ืงื•ื“ ืขื™ืจ
11:40
for the city of St. Petersburg.
268
700260
2000
ื”ืขื™ืจ ืกื ื˜ ืคื˜ืจืกื‘ื•ืจื’.
11:42
For example, you can find it from some phone numbers
269
702260
2000
ืœื“ื•ื’ืžื”, ื ื™ืชืŸ ืœืžืฆื•ื ื–ืืช ื‘ืžืกืคืจื™ ื˜ืœืคื•ืŸ
11:44
and car license plates and stuff like that.
270
704260
3000
ื•ื‘ืœื•ื—ื™ื•ืช ืจื™ืฉื•ื™ ื•ื›ื•'.
11:47
So I went looking for contacts in St. Petersburg,
271
707260
3000
ืื– ื—ื™ืคืฉืชื™ ืื ืฉื™ ืงืฉืจ ื‘ืกื ื˜ ืคื˜ืจืกื‘ื•ืจื’.
11:50
and through a long road,
272
710260
2000
ื•ืื—ืจื™ ื“ืจืš ืืจื•ื›ื”,
11:52
we eventually found this one particular website.
273
712260
4000
ืžืฆืื ื• ื‘ืกื•ืฃ ืืชืจ ืื—ื“ ืกืคืฆื™ืคื™.
11:56
Here's this Russian guy who's been operating online for a number of years
274
716260
3000
ื”ื ื” ื”ื‘ื—ื•ืจ ื”ืจื•ืกื™ ืฉืžืคืขื™ืœ ืืช ื”ืืชืจ ืฉื ื™ื
11:59
who runs his own website,
275
719260
2000
ื”ืžืจื™ืฅ ืืชืจ ืžืฉืœ ืขืฆืžื•,
12:01
and he runs a blog under the popular Live Journal.
276
721260
3000
ื•ื”ื•ื ื›ื•ืชื‘ ื‘ืœื•ื’ ืชื—ืช Live Journal ื”ืคื•ืคื•ืœืจื™.
12:04
And on this blog, he blogs about his life,
277
724260
2000
ื•ื‘ื‘ืœื•ื’, ื”ื•ื ื›ื•ืชื‘ ืขืœ ื”ื—ื™ื™ื ืฉืœื•,
12:06
about his life in St. Petersburg --
278
726260
2000
ื•ื—ื™ื™ื• ื‘ืกื ื˜ ืคื˜ืจืกื‘ื•ืจื’.
12:08
he's in his early 20s --
279
728260
2000
ื”ื•ื ื‘ืฉื ื•ืช ื” - 20 ื”ืžื•ืงื“ืžื•ืช,
12:10
about his cat,
280
730260
2000
ื›ื•ืชื‘ ืขืœ ื”ื—ืชื•ืœ ืฉืœื•,
12:12
about his girlfriend.
281
732260
2000
ืขืœ ื”ื—ื‘ืจื” ืฉืœื•.
12:14
And he drives a very nice car.
282
734260
2000
ื•ื”ื•ื ื ื•ื”ื’ ื‘ืžื›ื•ื ื™ืช ืžืื“ ื ื—ืžื“ื”.
12:16
In fact, this guy drives
283
736260
3000
ืœืžืขืŸ ื”ืืžืช, ื”ื‘ื—ื•ืจ ื ื•ื”ื’ ื‘
12:19
a Mercedes-Benz S600
284
739260
2000
ืžืจืฆื“ืก S600
12:21
V12
285
741260
2000
V12
12:23
with a six-liter engine
286
743260
2000
ืžื ื•ืข 6.0 ืœื™ื˜ืจ
12:25
with more than 400 horsepower.
287
745260
2000
ืขื ื™ื•ืชืจ ืž 400 ื›ื•ื—ื•ืช ืกื•ืก.
12:27
Now that's a nice car for a 20-something year-old kid in St. Petersburg.
288
747260
4000
ืขื›ืฉื™ื•, ื–ื•ื”ื™ ืžื›ื•ื ื™ืช ืžืื“ ื ื—ืžื“ื” ืœื™ืœื“ ื‘ืŸ 20 ื•ืžืฉื”ื• ื‘ืกื ื˜ ืคื˜ืจืกื‘ื•ืจื’.
12:31
How do I know about this car?
289
751260
2000
ืื™ืš ืื ื™ ื™ื•ื“ืข ืขืœ ื”ืžื›ื•ื ื™ืช?
12:33
Because he blogged about the car.
290
753260
2000
ื›ื™ ื”ื•ื ื›ื•ืชื‘ ื’ื ืขืœื™ื” ื‘ื‘ืœื•ื’.
12:35
He actually had a car accident.
291
755260
2000
ื”ื™ื™ืชื” ืœื• ืชืื•ื ื”,
12:37
In downtown St. Petersburg,
292
757260
2000
ื‘ืžืจื›ื– ื”ืขื™ืจ ืกื ืงื˜ ืคื˜ืจื‘ื•ืจื’,
12:39
he actually crashed his car into another car.
293
759260
2000
ื”ื•ื ื ื›ื ืก ืขื ื”ืžื›ื•ื ื™ืช ื‘ืžื›ื•ื ื™ืช ืื—ืจืช.
12:41
And he put blogged images about the car accident --
294
761260
2000
ื•ื”ื•ื ืฉื ื›ืžื” ืชืžื•ื ื•ืช ืžื”ืชืื•ื ื” ื‘ื‘ืœื•ื’.
12:43
that's his Mercedes --
295
763260
2000
ื–ื• ื”ืžืจืฆื“ืก ืฉืœื•,
12:45
right here is the Lada Samara he crashed into.
296
765260
4000
ื”ื ื” ื”ืžื›ื•ื ื™ืช, ืœืื“ื” ืกืžืจื”, ืฉื”ื•ื ื ื›ื ืก ื‘ื”.
12:49
And you can actually see that the license plate of the Samara
297
769260
3000
ื•ืืชื ื™ื›ื•ืœื™ื ืœืจืื•ืช ืืช ื”ืœื•ื—ื™ืช ืจื™ืฉื•ื™ ืฉืœ ื”ืกืžืจื”
12:52
ends in 78RUS.
298
772260
2000
ื ื’ืžืจืช ื‘ 78RUS.
12:54
And if you actually take a look at the scene picture,
299
774260
3000
ื•ืื ืชืกืชื›ืœื• ืขืœ ื”ืชืžื•ื ื” ื›ื•ืœื”,
12:57
you can see that the plate of the Mercedes
300
777260
2000
ืชื•ื›ืœื• ืœืจืื•ืช ืฉื”ืœื•ื—ื™ืช ืจื™ืฉื•ื™ ืฉืœ ื”ืžืจืฆื“ืก
12:59
is O600KO78RUS.
301
779260
6000
ื”ื™ื O600KO78RUS/
13:05
Now I'm not a lawyer,
302
785260
2000
ืขื›ืฉื™ื•, ืื ื™ ืœื ืขื•ืจืš ื“ื™ืŸ,
13:07
but if I would be,
303
787260
2000
ืื‘ืœ ืื ื”ื™ื™ืชื™,
13:09
this is where I would say, "I rest my case."
304
789260
3000
ื–ื” ื”ืฉืœื‘ ืฉื‘ื• ื”ื™ื™ืชื™ ืื•ืžืจ "ืกื™ื™ืžืชื™ ืืช ื˜ื™ืขื•ื ื™ื™".
13:12
(Laughter)
305
792260
2000
(ืฆื—ื•ืง)
13:14
So what happens when online criminals are caught?
306
794260
3000
ืื– ืžื” ืงื•ืจื” ื›ืฉืชื•ืคืกื™ื ืคื•ืฉืขื™ ืžื—ืฉื‘ื™ื?
13:17
Well in most cases it never gets this far.
307
797260
3000
ื”ืืžืช - ืœืจื•ื‘ ื–ื” ืœื ืžื’ื™ืข ืœืฉื.
13:20
The vast majority of the online crime cases,
308
800260
2000
ื‘ืจื•ื‘ ื”ืžื•ื—ืœื˜ ืฉืœ ืžืงืจื™ ื”ืคืฉืข ืื•ื ืœื™ื™ืŸ,
13:22
we don't even know which continent the attacks are coming from.
309
802260
3000
ืื ื• ืืคื™ืœื• ืœื ื™ื•ื“ืขื™ื ืžืื™ื–ื• ื™ื‘ืฉืช ื”ื’ื™ืขื” ื”ืžืชืงืคื”.
13:25
And even if we are able to find online criminals,
310
805260
3000
ืืคื™ืœื• ืื ื”ื™ื™ื ื• ื™ื›ื•ืœื™ื ืœืžืฆื•ื ืื•ืชื,
13:28
quite often there is no outcome.
311
808260
2000
ืœืจื•ื‘ ืื™ืŸ ืชื•ืฆืื”.
13:30
The local police don't act, or if they do, there's not enough evidence,
312
810260
3000
ื”ืžืฉื˜ืจื” ื”ืžืงื•ืžื™ืช ืœื ืคื•ืขืœืช, ื•ืื ื›ืŸ - ืื™ืŸ ืžืกืคื™ืง ืจืื™ื•ืช.
13:33
or for some reason we can't take them down.
313
813260
2000
ืื• ืžืกื™ื‘ื•ืช ืื—ืจื•ืช ืื™ ืืคืฉืจ ืœื”ืคื™ืœ ืื•ืชื.
13:35
I wish it would be easier;
314
815260
2000
ื”ื™ื™ืชื™ ืฉืžื— ืื ื–ื” ื”ื™ื” ืงืœ ื™ื•ืชืจ,
13:37
unfortunately it isn't.
315
817260
2000
ืœืฆืขืจื™ ื–ื” ืœื.
13:39
But things are also changing
316
819260
3000
ืื‘ืœ ื“ื‘ืจื™ื ืžืฉืชื ื™ื
13:42
at a very rapid pace.
317
822260
3000
ื‘ืงืฆื‘ ืžื”ื™ืจ ืžืื“.
13:45
You've all heard about things like Stuxnet.
318
825260
3000
ื›ื•ืœื›ื ืฉืžืขืชื ืขืœ ืกื˜ื•ืงืกื ื˜.
13:48
So if you look at what Stuxnet did
319
828260
3000
ืื ืชืกืชื›ืœื• ืขืœ ืžื” ืกื˜ื•ืงืกื ื˜ ืขืฉืชื”
13:51
is that it infected these.
320
831260
2000
ื”ื™ื ื”ื“ื‘ื™ืงื” ื›ืืœื•.
13:53
That's a Siemens S7-400 PLC,
321
833260
3000
ื–ื” ืกื™ืžื ืก S7-400 PLC,
13:56
programmable logic [controller].
322
836260
2000
ื‘ืงืจ ืœื•ื’ื™ ืžื™ืชื›ื ืช.
13:58
And this is what runs our infrastructure.
323
838260
3000
ื•ื–ื” ืžื” ืฉืžืจื™ืฅ ืืช ื”ืชืฉืชื™ื•ืช ืฉืœื ื•.
14:01
This is what runs everything around us.
324
841260
3000
ื–ื” ืžื” ืฉืžืจื™ืฅ ืืช ื›ืœ ืžื” ืฉืžืกื‘ื™ื‘ื ื•.
14:04
PLC's, these small boxes which have no display,
325
844260
3000
PLC's, ื”ืงื•ืคืกืื•ืช ื”ืงื˜ื ื•ืช ื”ืœืœื• ื‘ืœื™ ืฆื’,
14:07
no keyboard,
326
847260
2000
ื‘ืœื™ ืžืงืœื“ืช,
14:09
which are programmed, are put in place, and they do their job.
327
849260
2000
ืฉืžืชื•ื›ื ืชื™ื, ืžื•ื›ื ืกื™ื ืœืคืขื•ืœื” ื•ืขื•ืฉื™ื ืืช ื”ืขื‘ื•ื“ื”.
14:11
For example, the elevators in this building
328
851260
2000
ืœื“ื•ื’ืžื”, ื”ืžืขืœื™ื•ืช ื‘ื‘ื ื™ื™ืŸ ื”ื–ื”
14:13
most likely are controlled by one of these.
329
853260
4000
ื›ื ืจืื” ืฉื ืฉืœื˜ื•ืช ืข"ื™ ื›ืืœื•.
14:17
And when Stuxnet infects one of these,
330
857260
3000
ื•ืฉืกื˜ื•ืงืกื ื˜ ืžื“ื‘ื™ืงื” ืื—ื“ ื›ื–ื”,
14:20
that's a massive revolution
331
860260
2000
ื–ื•ื”ื™ ืžื”ืคื›ื” ืขื ืงื™ืช
14:22
on the kinds of risks we have to worry about.
332
862260
3000
ื‘ืกื›ื ื•ืช ืฉืื™ืชืŸ ืื ื• ืžืชืžื•ื“ื“ื™ื.
14:25
Because everything around us is being run by these.
333
865260
3000
ืžื›ื™ื•ื•ืŸ ืฉื›ืœ ืžื” ืฉืกื‘ื™ื‘ื ื• ื ืฉืœื˜ ืข"ื™ ื›ืืœื•.
14:28
I mean, we have critical infrastructure.
334
868260
2000
ืื ื™ ืžื“ื‘ืจ ืขืœ ืชืฉืชื™ื•ืช ืงืจื™ื˜ื™ื•ืช.
14:30
You go to any factory, any power plant,
335
870260
3000
ืžืคืขืœื™ื, ืชื—ื ื•ืช ื›ื•ื—,
14:33
any chemical plant, any food processing plant,
336
873260
2000
ืžืคืขืœื™ื ื›ื™ืžื™ื™ื, ืžืคืขืœื™ื ืœืื•ื›ืœ,
14:35
you look around --
337
875260
2000
ืชืกืชื›ืœื• ืกื‘ื™ื‘ -
14:37
everything is being run by computers.
338
877260
2000
ื”ื›ืœ ืžื ื•ื”ืœ ืข"ื™ ืžื—ืฉื‘ื™ื.
14:39
Everything is being run by computers.
339
879260
2000
ื”ื›ืœ ืžื ื•ื”ืœ ืข"ื™ ืžื—ืฉื‘ื™ื.
14:41
Everything is reliant on these computers working.
340
881260
3000
ื”ื›ืœ ืžืกืชืžืš ืขืœ ื”ืžื—ืฉื‘ื™ื ื”ืขื•ื‘ื“ื™ื.
14:44
We have become very reliant
341
884260
3000
ืื ื• ื”ืคื›ื ื• ืœืชืœื•ื™ื™ื
14:47
on Internet,
342
887260
2000
ื‘ืื™ื ื˜ืจื ื˜,
14:49
on basic things like electricity, obviously,
343
889260
3000
ืชืœื•ื™ื™ื ื‘ื“ื‘ืจื™ื ื‘ืกื™ืกื™ื™ื ื›ืžื• ื—ืฉืžืœ,
14:52
on computers working.
344
892260
2000
ื‘ืžื—ืฉื‘ื™ื ืขื•ื‘ื“ื™ื.
14:54
And this really is something
345
894260
2000
ื•ื–ื” ืžืฉื”ื• ื’ื“ื•ืœ
14:56
which creates completely new problems for us.
346
896260
2000
ื”ื™ื•ืฆืจ ื‘ืขื™ื•ืช ื—ื“ืฉื•ืช ืขื‘ื•ืจื ื•.
14:58
We must have some way
347
898260
2000
ืื ื• ื—ื™ื™ื‘ื™ื ืœื™ืฆื•ืจ ื“ืจืš
15:00
of continuing to work
348
900260
2000
ืœื”ืžืฉื™ืš ืœืขื‘ื•ื“
15:02
even if computers fail.
349
902260
3000
ืœืžืจื•ืช ืฉื”ืžื—ืฉื‘ื™ื ื”ืคืกื™ืงื•.
15:12
(Laughter)
350
912260
2000
(ืฆื—ื•ืง)
15:14
(Applause)
351
914260
10000
(ืžื—ื™ืื•ืช ื›ืคื™ื™ื)
15:24
So preparedness means that we can do stuff
352
924260
3000
ื”ื›ื•ื•ื ื” ื‘ืžื•ื›ื ื•ืช ื”ื™ื ืฉื ื•ื›ืœ ืœืขืฉื•ืช ื“ื‘ืจื™ื
15:27
even when the things we take for granted
353
927260
2000
ืขืœ ืืฃ ืฉื”ื“ื‘ืจื™ื ืฉืœืงื—ื ื• ื›ืžื•ื‘ืŸ ืžืืœื™ื•
15:29
aren't there.
354
929260
2000
ืœื ืฉื.
15:31
It's actually very basic stuff --
355
931260
2000
ืืœื• ื“ื‘ืจื™ื ื‘ืกื™ืกื™ื™ื,
15:33
thinking about continuity, thinking about backups,
356
933260
3000
ืœื—ืฉื•ื‘ ืขืœ ื”ืžืฉื›ื™ื•ืช, ืขืœ ื’ื™ื‘ื•ื™ื™ื,
15:36
thinking about the things that actually matter.
357
936260
3000
ืœื—ืฉื•ื‘ ืขืœ ื”ื“ื‘ืจื™ื ื”ืจืœื•ื•ื ื˜ื™ื.
15:39
Now I told you --
358
939260
3000
ืืžืจืชื™ ืœื›ื,
15:42
(Laughter)
359
942260
2000
(ืฆื—ื•ืง)
15:44
I love the Internet. I do.
360
944260
4000
ืื ื™ ืื•ื”ื‘ ืืช ื”ืื™ื ื˜ืจื ื˜, ื‘ืืžืช.
15:48
Think about all the services we have online.
361
948260
3000
ืชื—ืฉื‘ื• ืขืœ ื›ืœ ื”ืฉื™ืจื•ืชื™ื ืฉื™ืฉ ืœื ื• ืื•ื ืœื™ื™ืŸ.
15:51
Think about if they are taken away from you,
362
951260
3000
ืชื—ืฉื‘ื• ืขืœ ืžืฆื‘ ืฉืœื•ืงื—ื™ื ืœื›ื ืื•ืชื,
15:54
if one day you don't actually have them
363
954260
2000
ื™ื•ื ืื—ื“ ืื™ืŸ ืœื›ื ืื•ืชื
15:56
for some reason or another.
364
956260
2000
ืžืกื™ื‘ื” ื–ื• ืื• ืื—ืจืช.
15:58
I see beauty in the future of the Internet,
365
958260
3000
ืื ื™ ืจื•ืื” ืืช ื”ื™ื•ืคื™ ื‘ืขืชื™ื“ ื”ืื™ื ื˜ืจื ื˜,
16:01
but I'm worried
366
961260
2000
ืืš ืื ื™ ืžื•ื“ืื’
16:03
that we might not see that.
367
963260
2000
ืฉืื•ืœื™ ืœื ื ื–ื›ื” ืœืจืื•ืชื•.
16:05
I'm worried that we are running into problems
368
965260
2000
ืื ื™ ืžื•ื“ืื’ ืฉืื ื• ื ืชืงืœื™ื ื‘ื‘ืขื™ื•ืช
16:07
because of online crime.
369
967260
2000
ื‘ื’ืœืœ ืคืฉืขื™ื ืื•ื ืœื™ื™ืŸ.
16:09
Online crime is the one thing
370
969260
2000
ืคืฉืขื™ื ืื•ื ืœื™ื™ืŸ ื–ื” ื”ื“ื‘ืจ
16:11
that might take these things away from us.
371
971260
2000
ืฉืขืœื•ืœ ืœืงื—ืช ืืช ื›ืœ ื”ืขืชื™ื“ ื”ื–ื” ืžืื™ืชื ื•.
16:13
(Laughter)
372
973260
3000
(ืฆื—ื•ืง)
16:16
I've spent my life
373
976260
2000
ื›ืœ ื—ื™ื™ ืื ื™
16:18
defending the Net,
374
978260
3000
ืžื’ืŸ ืขืœ ื”ืจืฉืช.
16:21
and I do feel that if we don't fight online crime,
375
981260
3000
ื•ืื ื™ ืžืจื’ื™ืฉ ืฉืื ืœื ื ืœื—ื ื‘ืคืฉื™ืขืช ืื•ื ืœื™ื™ืŸ,
16:24
we are running a risk of losing it all.
376
984260
4000
ืื ื• ืœื•ืงื—ื™ื ืกื™ื›ื•ืŸ ืฉืœ ืœืื‘ื“ ืืช ื”ื›ืœ.
16:28
We have to do this globally,
377
988260
3000
ืื ื• ื—ื™ื™ื‘ื™ื ืœืขืฉื•ืช ืืช ื–ื” ื’ืœื•ื‘ืœื™,
16:31
and we have to do it right now.
378
991260
3000
ื•ืื ื• ื—ื™ื™ื‘ื™ื ืœืขืฉื•ืช ื–ืืช ืขื›ืฉื™ื•.
16:34
What we need
379
994260
2000
ืžื” ืฉืื ื• ืฆืจื™ื›ื™ื
16:36
is more global, international law enforcement work
380
996260
3000
ื–ื• ืžืขืจื›ืช ืื›ื™ืคื” ื’ืœื•ื‘ืœื™ืช, ื‘ื™ื ืœืื•ืžื™ืช
16:39
to find online criminal gangs --
381
999260
2000
ืœืžืฆื™ืืช ื”ืคืฉื™ืขื” ื”ื–ื•,
16:41
these organized gangs
382
1001260
2000
ื”ื›ื ื•ืคื™ื•ืช ื”ืžืื•ืจื’ื ื•ืช ื”ืœืœื•
16:43
that are making millions out of their attacks.
383
1003260
2000
ืฉืžืจื•ื•ื™ื—ื•ืช ืžื™ืœื™ื•ื ื™ื ืžื”ื”ืชืงืคื•ืช.
16:45
That's much more important
384
1005260
2000
ื–ื” ื”ืจื‘ื” ื™ื•ืชืจ ื—ืฉื•ื‘
16:47
than running anti-viruses or running firewalls.
385
1007260
2000
ืžื”ืจืฆื” ืฉืœ ืื ื˜ื™-ื•ื™ืจื•ืก ืื• ื—ื•ืžืช ืืฉ.
16:49
What actually matters
386
1009260
2000
ืžื” ืฉื‘ืืžืช ื—ืฉื•ื‘
16:51
is actually finding the people behind these attacks,
387
1011260
2000
ื–ื” ืœืžืฆื•ื ืืช ื”ืื ืฉื™ื ืฉืžืื—ื•ืจื™ ื”ืžืชืงืคื•ืช.
16:53
and even more importantly,
388
1013260
2000
ื•ืืคื™ืœื• ื™ื•ืชืจ ื—ืฉื•ื‘,
16:55
we have to find the people
389
1015260
2000
ืื ื• ื—ื™ื™ื‘ื™ื ืœืžืฆื•ื ืืช ื”ืื ืฉื™ื
16:57
who are about to become
390
1017260
2000
ืฉืขื•ืžื“ื™ื ืœื”ืคื•ืš
16:59
part of this online world of crime,
391
1019260
2000
ืœื—ืœืง ืžืขื•ืœื ื”ืคืฉื™ืขื” ืฉืœ ื”ืžื—ืจ
17:01
but haven't yet done it.
392
1021260
2000
ื•ืขื“ื™ืŸ ืœื ื”ื’ื™ืขื• ืœืฉื.
17:03
We have to find the people with the skills,
393
1023260
3000
ืื ื• ื—ื™ื™ื‘ื™ื ืœืžืฆื•ื ืืช ื”ืื ืฉื™ื ืขื ื”ื™ื›ื•ืœื•ืช,
17:06
but without the opportunities
394
1026260
2000
ืืš ื‘ืœื™ ื”ื”ื–ื“ืžื ื•ื™ื•ืช.
17:08
and give them the opportunities
395
1028260
2000
ื ื™ืชืŸ ืœื”ื ื”ื–ื“ืžื ื•ื™ื•ืช
17:10
to use their skills for good.
396
1030260
3000
ืœื”ืฉืชืžืฉ ื‘ื™ื›ื•ืœื•ืช ืฉืœื”ื ืœื˜ื•ื‘ืช ื”ื›ืœืœ.
17:13
Thank you very much.
397
1033260
2000
ืชื•ื“ื” ืจื‘ื” ืœื›ื.
17:15
(Applause)
398
1035260
13000
(ืžื—ื™ืื•ืช ื›ืคื™ื™ื)
ืขืœ ืืชืจ ื–ื”

ืืชืจ ื–ื” ื™ืฆื™ื’ ื‘ืคื ื™ื›ื ืกืจื˜ื•ื ื™ YouTube ื”ืžื•ืขื™ืœื™ื ืœืœื™ืžื•ื“ ืื ื’ืœื™ืช. ืชื•ื›ืœื• ืœืจืื•ืช ืฉื™ืขื•ืจื™ ืื ื’ืœื™ืช ื”ืžื•ืขื‘ืจื™ื ืขืœ ื™ื“ื™ ืžื•ืจื™ื ืžื”ืฉื•ืจื” ื”ืจืืฉื•ื ื” ืžืจื—ื‘ื™ ื”ืขื•ืœื. ืœื—ืฅ ืคืขืžื™ื™ื ืขืœ ื”ื›ืชื•ื‘ื™ื•ืช ื‘ืื ื’ืœื™ืช ื”ืžื•ืฆื’ื•ืช ื‘ื›ืœ ื“ืฃ ื•ื™ื“ืื• ื›ื“ื™ ืœื”ืคืขื™ืœ ืืช ื”ืกืจื˜ื•ืŸ ืžืฉื. ื”ื›ืชื•ื‘ื™ื•ืช ื’ื•ืœืœื•ืช ื‘ืกื ื›ืจื•ืŸ ืขื ื”ืคืขืœืช ื”ื•ื•ื™ื“ืื•. ืื ื™ืฉ ืœืš ื”ืขืจื•ืช ืื• ื‘ืงืฉื•ืช, ืื ื ืฆื•ืจ ืื™ืชื ื• ืงืฉืจ ื‘ืืžืฆืขื•ืช ื˜ื•ืคืก ื™ืฆื™ืจืช ืงืฉืจ ื–ื”.

https://forms.gle/WvT1wiN1qDtmnspy7