Governments don't understand cyber warfare. We need hackers | Rodrigo Bijou

Prevodilac: Milenka Okuka Lektor: Mile Živković

In 2008, Burhan Hassan, age 17,

Godine 2008, Burhan Hasan, star 17 godina,

boarded a flight from Minneapolis

se ukrcao na let od Mineapolisa

to the Horn of Africa.

do Afričkog roga.

And while Burhan was the youngest recruit,

Iako je Burhan bio najmlađi regrut,

he was not alone.

nije bio sam.

Al-Shabaab managed to recruit over two dozen young men

Al-Šabab je uspeo da regrutuje preko dvadeset mladića

in their late teens and early 20s

kasnog tinejdžerskog uzrasta i u ranim dvadesetim,

with a heavy presence on social media platforms like Facebook.

koji su bili prilično prisutni na društvenim mrežama, poput Fejsbuka.

With the Internet and other technologies,

Internet i druga tehnologija

they've changed our everyday lives,

su promenili našu svakodnevicu,

but they've also changed recruitment, radicalization

ali su takođe promenili regrutovanja, radikalizaciju

and the front lines of conflict today.

i prve redove današnjih konflikata.

What about the links connecting Twitter,

Šta je sa vezama koje spajaju Tviter,

Google and protesters fighting for democracy?

Gugl i protestante koji se bore za demokratiju?

These numbers represent Google's public DNS servers,

Ovi brojevi predstavljaju Guglove javne DNS servere,

effectively the only digital border crossing

to je u suštini bio jedini granični prelaz koji su protestanti mogli da koriste,

protesters had and could use

a koristili su ih

to communicate with each other, to reach the outside world

da bi međusobno komunicirali, da bi doprli do spoljnjeg sveta

and to spread viral awareness

i da bi širili svest

of what was happening in their own country.

o onome što se dešava u njihovoj državi.

Today, conflict is essentially borderless.

Današnji konflikti su u suštini bez granica.

If there are bounds to conflict today,

Ukoliko postoje granice za današnje konflikte,

they're bound by digital, not physical geography.

ograničeni su digitalnom, ne fizičkom geografijom.

And under all this is a vacuum of power

A ispod svega ovoga počiva vakuum moći

where non-state actors, individuals and private organizations

gde nedržavotvorni akteri, pojedinci i privatne organizacije,

have the advantage over slow, outdated military and intelligence agencies.

imaju prednost nad sporim, zastarelim vojnim i obaveštajnim jedinicama.

And this is because, in the digital age of conflict,

A ovo je stoga što u dgitalnom dobu konflikata,

there exists a feedback loop

postoji lanac povratnih informacija

where new technologies, platforms like the ones I mentioned,

gde nove tehnologije, platforme poput već pomenutih,

and more disruptive ones,

i neke anarhičnije,

can be adapted, learned, and deployed by individuals and organizations

mogu da budu prilagođene, savladane i iskorišćene

od strane pojedinaca i organizacija

faster than governments can react.

brže nego što vlade mogu da reaguju.

To understand the pace of our own government thinking on this,

Kako bismo razumeli ritam kojim naše vlade razmišljaju o ovome,

I like to turn to something aptly named

volim da se osvrnem na nešto što se prigodno zove

the Worldwide Threat Assessment,

Svetska procena pretnje,

where every year the Director of National Intelligence in the US

gde svake godine direktor nacionalne bezbednosti u SAD-u

looks at the global threat landscape,

posmatra pejzaž globalnih pretnji

and he says, "These are the threats, these are the details,

i kaže: "Ovo su pretnje, ovo su detalji

and this is how we rank them."

i ovako ih rangiramo."

In 2007, there was absolutely no mention of cyber security.

Godine 2007, uopšte nije pominjana sajber bezbednost.

It took until 2011, when it came at the end,

Sve do 2011, kada je uvrštena na kraju,

where other things, like West African drug trafficking, took precedence.

gde su druge stvari imale prednost, poput zapadnoafričke trgovine drogom,

In 2012, it crept up, still behind things like terrorism and proliferation.

Godine 2012, vukla se i dalje iza stvari, poput terorizma i proliferacije.

In 2013, it became the top threat,

Godine 2013, postala je glavna pretnja,

in 2014 and for the foreseeable future.

tako je i 2014. i biće tako i u skorijoj budućnosti.

What things like that show us

Ovakve stvari nam govore

is that there is a fundamental inability today

da danas imamo temeljnu nesposobnost

on the part of governments to adapt and learn in digital conflict,

od strane naših vlada da se prilagode i da savladaju digitalni konflikt,

where conflict can be immaterial, borderless, often wholly untraceable.

gde konflikt može da bude nematerijalan, bez granica, često bez ikakvih tragova.

And conflict isn't just online to offline, as we see with terrorist radicalization,

A konflikt nije samo na i van interneta, kako vidimo kod terorističkog radikalizma,

but it goes the other way as well.

već ide i u suprotnom smeru.

We all know the horrible events that unfolded in Paris this year

Svi znamo za užasne događaje koji su se desili u Parizu ove godine,

with the Charlie Hebdo terrorist attacks.

teroristički napadi na Šarli Ebdo.

What an individual hacker or a small group of anonymous individuals did

Pojedinačni hakeri iliti male ekipe anonimnih pojedinaca

was enter those social media conversations that so many of us took part in.

su ulazile na razgovore na društvenim mrežama,

u kojima su mnogi od nas učestvovali.

#JeSuisCharlie.

#JeSuisCharlie.

On Facebook, on Twitter, on Google,

Na Fejsbuku, Tviteru, Guglu,

all sorts of places where millions of people, myself included,

na raznim mestima gde su milioni ljudi, uključujući i mene,

were talking about the events

razgovarali o događajima

and saw images like this,

i gledali su ovakve prizore,

the emotional, poignant image of a baby with "Je suis Charlie" on its wrist.

emotivan, dirljiv prizor bebe sa "Je suis Charlie" na ruci.

And this turned into a weapon.

I ovo se pretvorilo u oružje.

What the hackers did was weaponize this image,

Hakeri su ovaj prizor pretvorili u oružje,

where unsuspecting victims,

gde su nesvesne žrtve,

like all of us in those conversations,

poput svih nas, učesnika u razgovorima,

saw this image, downloaded it

videle ovaj przor, skinuli ga,

but it was embedded with malware.

ali u njemu je bio malver.

And so when you downloaded this image,

Pa kad ste skinuli ovaj prizor,

it hacked your system.

hakovao je vaš sistem.

It took six days to deploy a global malware campaign.

Trebalo je šest dana da se pokrene globalna malver kampanja.

The divide between physical and digital domains today

Podela između fizičkog i digitalnog domena danas

ceases to exist,

više ne postoji,

where we have offline attacks like those in Paris

gde imamo napade van interneta, poput onih u Parizu

appropriated for online hacks.

predodređene za onlajn hakovanja.

And it goes the other way as well, with recruitment.

A ide i u suprotnom smeru, regrutacijama.

We see online radicalization of teens,

Vidimo radikalizaciju tinejdžera na internetu,

who can then be deployed globally for offline terrorist attacks.

koje potom mogu da razvrstaju širom sveta u terorističkim napadima van interneta.

With all of this, we see that there's a new 21st century battle brewing,

Sve nam ovo daje do znanja da ključa nova bitka u 21. veku

and governments don't necessarily take a part.

a vlade ne uzimaju nužno učešća.

So in another case, Anonymous vs. Los Zetas.

U drugom slučaju, Anonimusi protiv Los Zetasa.

In early September 2011 in Mexico,

Početkom septembra 2011. u Meksiku,

Los Zetas, one of the most powerful drug cartels,

Los Zetas, jedan od najmoćnijih narkokartela,

hung two bloggers with a sign that said,

su obesili dva blogera uz natpis na kom je pisalo:

"This is what will happen to all Internet busybodies."

"Evo šta će da se desi svim njuškalima na internetu."

A week later, they beheaded a young girl.

Nedelju dana kasnije su odsekli glavu devojci.

They severed her head, put it on top of her computer

Otkinuli su joj glavu, stavili je na njen kompjuter

with a similar note.

uz sličnu poruku.

And taking the digital counteroffensive

Krećući u digitalnu kontraofanzivu

because governments couldn't even understand what was going on or act,

jer vlade nisu mogle ni da shvate o čemu se radilo, a ne da delaju,

Anonymous, a group we might not associate as the most positive force in the world,

Anonimusi, grupa koju nužno ne vidimo kao najpozitivniju silu na svetu,

took action,

je preduzela mere,

not in cyber attacks, but threatening information to be free.

ne sajber napadima, već pretnjom da će objaviti informacije.

On social media, they said,

Na društvenim mrežama su objavili:

"We will release information

"Objavićemo informacije

that ties prosecutors and governors to corrupt drug deals with the cartel."

koje dovode u vezu tužioce i guvernere s korumpiranim ugovorima s kartelom."

And escalating that conflict,

A konflikt je eskalirao kada su Los Zetas rekli:

Los Zetas said, "We will kill 10 people for every bit of information you release."

"Ubićemo 10 ljudi za svaki delić informacije koji objavite."

And so it ended there because it would become too gruesome to continue.

Tu se sve završilo jer bi bilo suviše gnusno da se nastavilo.

But what was powerful about this

Međutim, ovde je moćno

was that anonymous individuals,

to što su anonimni pojedinci,

not federal policia, not military, not politicians,

ne federalna policija, ne vojska, ne političari,

could strike fear deep into the heart

mogli da unesu strah duboko u srce

of one of the most powerful, violent organizations in the world.

jedne od najmoćnijih nasilnih organizacija u svetu.

And so we live in an era

Dakle, živimo u dobu

that lacks the clarity of the past in conflict,

gde nisu jasne okolnosti konflikta,

in who we're fighting, in the motivations behind attacks,

ne znamo protiv koga se borimo, šta su uzroci napada,

in the tools and techniques used,

koja se oruđa i tehnike koriste,

and how quickly they evolve.

i koliko brzo se razvijaju.

And the question still remains:

A pitanje i dalje ostaje:

what can individuals, organizations and governments do?

šta mogu pojedinci, organizacije i vlade da urade?

For answers to these questions, it starts with individuals,

Da bi odgovorili na ova pitanja, krenućemo s pojedincima

and I think peer-to-peer security is the answer.

i mislim da je P2P mrežna bezbednost odgovor.

Those people in relationships that bought over teens online,

Ti ljudi koji su povezani s regrutacijom tinejdžera na na internetu,

we can do that with peer-to-peer security.

možemo to rešiti P2P mrežnom bezbednošću.

Individuals have more power than ever before

Pojedinci imaju više moći nego ikad pre

to affect national and international security.

da utiču na nacionalnu i međunarodnu bezbednost.

And we can create those positive peer-to-peer relationships

I možemo da stvorimo pozitivne P2P veze

on and offline,

na internetu i van njega,

we can support and educate the next generation of hackers, like myself,

možemo da podržimo i obučimo sledeću generaciju hakera, poput mene,

instead of saying, "You can either be a criminal or join the NSA."

umesto što govorimo: "Pridružite se NSA ili ste kriminalci."

That matters today.

To je važno danas.

And it's not just individuals -- it's organizations, corporations even.

I ne radi se samo o pojedincima - već o organizacijama, korporacijama čak.

They have an advantage to act across more borders,

One imaju prednost da delaju izvan granica,

more effectively and more rapidly than governments can,

efikasnije i brže od vlada

and there's a set of real incentives there.

i tu je čitav niz istinskih podsticaja.

It's profitable and valuable

Profitabilno je i dragoceno

to be seen as trustworthy in the digital age,

kada vam veruju u digitalnom dobu

and will only be more so in future generations to come.

i samo će da bude još vrednije kod budućih generacija.

But we still can't ignore government,

Ali i dalje ne možemo da ignorišemo vladu

because that's who we turn to for collective action

jer se njoj obraćamo zbog kolektivnog delanja

to keep us safe and secure.

na očuvanju naše sigurnosti i bezbednosti.

But we see where that's gotten us so far,

Međutim, vidimo koliko smo odmakli zbog toga,

where there's an inability to adapt and learn in digital conflict,

gde nema mogućnosti za prilagođavanjem i učenjem u digitalnom konfliktu,

where at the highest levels of leadership,

gde na najvišim rukovodstvenim instancama,

the Director of the CIA, Secretary of Defense,

direktor CIA-e, sekretar odbrane, kažu:

they say, "Cyber Pearl Harbor will happen." "Cyber 9/11 is imminent."

"Desiće se sajber verzija Perl Harbora." "Sajber 11. septembar je blizu."

But this only makes us more fearful, not more secure.

Međutim zbog ovoga se samo još više plašimo, nismo bezbedniji.

By banning encryption in favor of mass surveillance and mass hacking,

Zabranom enkripcije zarad masovnog nadzora i masovnog hakovanja,

sure, GCHQ and the NSA can spy on you.

svakako, GCHQ i NSA vas mogu špijunirati.

But that doesn't mean that they're the only ones that can.

Međutim to ne znači da samo oni mogu.

Capabilities are cheap, even free.

Sredstva za to su jeftina, čak besplatna.

Technical ability is rising around the world,

Tehničke sposobnosti su usponu u svetu,

and individuals and small groups have the advantage.

a pojedinci i male grupe su u prednosti.

So today it might just be the NSA and GCHQ,

Dakle, danas su to možda samo NSA i GCHQ,

but who's to say that the Chinese can't find that backdoor?

ali ko kaže da Kinezi ne mogu da nađu taj zakulisni prolaz?

Or in another generation, some kid in his basement in Estonia?

Ili u narednoj generaciji neki klinac u svom podrumu u Estoniji?

And so I would say that it's not what governments can do,

Zato bih rekao da se ne radi o tome šta vlade mogu da urade,

it's that they can't.

već da ne mogu ništa.

Governments today need to give up power and control

Današnje vlade moraju da se odreknu moći i kontrole

in order to help make us more secure.

kako bi nam pomogle da budemo bezbedniji.

Giving up mass surveillance and hacking and instead fixing those backdoors

Odricanje od masovnog nadzora i hakovanja, a popravljanje tog zakulisnog prolaza

means that, yeah, they can't spy on us,

značilo bi, da, da nas ne mogu špijunirati,

but neither can the Chinese

ali ne bi mogli ni Kinezi

or that hacker in Estonia a generation from now.

ili taj haker iz Estonije, za generaciju od sad.

And government support for technologies like Tor and Bitcoin

Vladina podrška tehnologijama, poput Tora i Bitkoina,

mean giving up control,

znači odricanje kontrole,

but it means that developers, translators, anybody with an Internet connection,

ali znači da programeri, prevodioci, svako s internet vezom

in countries like Cuba, Iran and China, can sell their skills, their products,

u zemljama, poput Kube, Irana i Kine, može da prodaje svoje veštine, proizvode

in the global marketplace,

na globalnom tržištu,

but more importantly sell their ideas,

i što je još važnije mogu da prodaju ideje,

show us what's happening in their own countries.

da nam pokazuju šta se dešava u njihovim zemljama.

And so it should be not fearful,

Zato ne bi trebalo da se plaše,

it should be inspiring to the same governments

trebalo bi da ih podstakne, iste te vlade

that fought for civil rights, free speech and democracy

koje su se borile za građanska prava, slobodu govora i demokratiju

in the great wars of the last century,

u velikim ratovima iz prošlog veka,

that today, for the first time in human history,

da danas, prvi put u ljudskoj istoriji,

we have a technical opportunity

imamo tehničke mogućnosti

to make billions of people safer around the world

da učinimo bezbednim milijarde ljudi širom sveta,

that we've never had before in human history.

koje nismo imali nikad pre u ljudskoj istoriji.

It should be inspiring.

To bi trebalo da bude inspirativno.

(Applause)

(Aplauz)