James Lyne: Everyday cybercrime -- and what you can do about it

Prevodilac: Sonja Rodić Lektor: Mile Živković

I'm going to be showing some of the cybercriminals'

Pokazaću vam neke od najnovijih

latest and nastiest creations.

i najopasnijih kreacija sajberkriminalaca.

So basically, please don't go and download

Uglavnom, molim vas da ne skidate

any of the viruses that I show you.

bilo koji od virusa koje vam pokažem.

Some of you might be wondering what a cybersecurity specialist looks like,

Neki od vas se možda pitaju kako izgleda jedan stručnjak za sajberkriminal

and I thought I'd give you a quick insight

pa sam mislio da vam ukratko predstavim

into my career so far.

svoju dosadašnju karijeru.

It's a pretty accurate description.

Ovo je prilično tačan opis.

This is what someone that specializes

Ovako izgleda neko ko je specijalizovan

in malware and hacking looks like.

za malver i hakovanje.

So today, computer viruses and trojans,

Danas su kompjuterski virusi i trojanci

designed to do everything from stealing data

dizajnirani tako da mogu da urade bilo šta, od krađe podataka

to watching you in your webcam

preko toga da vas posmatraju kroz vašu veb kameru

to the theft of billions of dollars.

pa do krađe milijardi dolara.

Some malicious code today goes as far

U današnje vreme neki maliciozni kodovi

as targeting power, utilities and infrastructure.

kao metu imaju struju, komunalne usluge i infrastrukturu.

Let me give you a quick snapshot

Daću vam brz prikaz

of what malicious code is capable of today.

onoga za šta je danas sposoban maliciozan kod.

Right now, every second, eight new users

Ovog trenutka, svake sekunde,

are joining the Internet.

osam novih korisnika nakači se na internet.

Today, we will see 250,000 individual new computer viruses.

Danas će nastati 250.000 novih individualnih kompjuterskih virusa.

We will see 30,000 new infected websites.

Biće zaraženo ukupno 30.000 novih vebsajtova.

And, just to kind of tear down a myth here,

I samo da srušim jedan mit,

lots of people think that when you get infected

mnogi misle da je onaj ko se zarazi

with a computer virus, it's because you went to a porn site.

kompjuterskim virusom posećivao pornografske sajtove.

Right? Well, actually, statistically speaking,

Zar ne? Zapravo, statistički gledano,

if you only visit porn sites, you're safer.

ako posećujete isključivo porno sajtove, sigurniji ste.

People normally write that down, by the way. (Laughter)

Uzgred, ljudi obično pribeleže ovaj podatak. (Smeh)

Actually, about 80 percent of these

U stvari, oko 80 posto ovih slučajeva

are small business websites getting infected.

čine vebsajtovi malih preduzeća koji se zaraze.

Today's cybercriminal, what do they look like?

Kako danas izgleda jedan sajberkriminalac?

Well, many of you have the image, don't you,

Mnogi od vas, zar ne, zamišljaju

of the spotty teenager sitting in a basement,

bubuljičavog tinejdžera koji sedi u podrumu

hacking away for notoriety.

i hakuje da bi postao ozloglašen.

But actually today, cybercriminals

Međutim, sajberkriminalci su u današnje vreme

are wonderfully professional and organized.

čudesno profesionalni i organizovani.

In fact, they have product adverts.

U stvari, oni imaju i reklame za svoje proizvode.

You can go online and buy a hacking service

Možete da odete onlajn i kupite uslugu hakovanja

to knock your business competitor offline.

da biste skinuli svog poslovnog konkurenta sa interneta.

Check out this one I found.

Pogledajte jednu koju sam pronašao.

(Video) Man: So you're here for one reason,

(Video) Čovek: Dakle, ovde ste iz jednog razloga,

and that reason is

a taj razlog je

because you need your business competitors,

to što želite da vašu poslovnu konkurenciju,

rivals, haters, or whatever the reason is, or who,

rivale, one koji vas mrze ili šta god da je razlog

they are to go down.

ili ko god da je u pitanju, srušite.

Well you, my friend, you've came to the right place.

Prijatelju, došao si na pravo mesto.

If you want your business competitors to go down,

Ako želiš da slomiš svoju poslovnu konkurenciju,

well, they can.

to i možeš.

If you want your rivals to go offline, well, they will.

Ako želiš da tvoji rivali budu oflajn, tako će i biti.

Not only that, we are providing a short-term-to-long-term

I ne samo to, mi obezbeđujemo i kratkoročnu i dugoročnu

DDOS service or scheduled attack,

DDOS uslugu ili isplanirani napad,

starting five dollars per hour for small personal websites

počev od pet dolara na sat za male privatne vebsajtove

to 10 to 50 dollars per hour.

preko 10 do 50 dolara na sat.

James Lyne: Now, I did actually pay

Džejms Lin: Ja sam stvarno i platio

one of these cybercriminals to attack my own website.

jednom od ovih sajberkriminalaca da napadne moj sopstveni vebsajt.

Things got a bit tricky when I tried to expense it at the company.

Stvari su postale malo nezgodne kada sam pokušao da svalim troškove na kompaniju.

Turns out that's not cool.

Ispalo je da to baš i nije kul.

But regardless, it's amazing how many products

Bez obzira, neverovatno je koliko mnogo proizvoda

and services are available now to cybercriminals.

i usluga je sada dostupno sajberkriminalcima.

For example, this testing platform,

Na primer, ova platforma za testiranje,

which enables the cybercriminals

koja omogućava sajberkriminalcima

to test the quality of their viruses

da testiraju kvalitet svojih virusa

before they release them on the world.

pre nego što ih puste u svet.

For a small fee, they can upload it

Za malu naknadu, mogu da ga aplouduju

and make sure everything is good.

i uvere se da je sve u redu.

But it goes further.

Ali ovo nije kraj.

Cybercriminals now have crime packs

Sajberkriminalci sada imaju krimi pakovanja

with business intelligence reporting dashboards

sa komandnim tablama koje pokazuju izveštaje poslovanja kompanija

to manage the distribution of their malicious code.

da bi upravljali širenjem svog štetnog koda.

This is the market leader in malware distribution,

Ovo je predvodnik na tržištu distribucije malvera,

the Black Hole Exploit Pack,

Black Hole Exploit Pack,

responsible for nearly one third of malware distribution

odgovoran za oko trećinu širenja malvera

in the last couple of quarters.

nekoliko tromesečja unazad.

It comes with technical installation guides,

Uz njega se dobije tehničko uputstvo za instalaciju

video setup routines,

postupci za podešavanje videa,

and get this, technical support.

i pazite sada: tehnička podrška.

You can email the cybercriminals and they'll tell you

Možete da pošaljete imejl sajberkriminalcima i oni će vam reći

how to set up your illegal hacking server.

kako da podesite svoj ilegalni hakerski server.

So let me show you what malicious code looks like today.

Pokazaću vam kako maliciozan kod danas izgleda.

What I've got here is two systems,

Ovde imam dva sistema,

an attacker, which I've made look all Matrix-y and scary,

napadač, koji sam napravio da podseća na Matriks i da bude pomalo strašan,

and a victim, which you might recognize from home or work.

i žrtva, koji izgleda poput onog kod kuće ili na poslu.

Now normally, these would be on different sides

U normalnim okolnostima, oni bi se nalazili na različitim stranama

of the planet or of the Internet,

planete ili interneta,

but I've put them side by side

ali ja sam ih stavio jedan do drugog

because it makes things much more interesting.

jer je tako mnogo interesantnije.

Now, there are many ways you can get infected.

Postoji mnogo načina da se zarazite.

You will have come in contact with some of them.

Sa nekima od njih ste već imali dodira.

Maybe some of you have received an email

Neki od vas su možda primili imejl

that says something like, "Hi, I'm a Nigerian banker,

koji je glasio nešto poput: "Ćao, ja sam bankar iz Nigerije,

and I'd like to give you 53 billion dollars

i želeo bih da vam dam 53 milijarde dolara

because I like your face."

jer mi se sviđa vaše lice."

Or funnycats.exe, which rumor has it

Ili funnycats.exe, za koji se šuška

was quite successful in China's recent campaign against America.

da je imao dosta uspeha u skorašnjoj kampanji Kine protiv Amerike.

Now there are many ways you can get infected.

Postoji mnogo načina da se zarazite.

I want to show you a couple of my favorites.

Želeo bih da vam pokažem neke od mojih omiljenih.

This is a little USB key.

Ovo je jedan mali USB stik.

Now how do you get a USB key to run in a business?

Kako da uvedete USB u nečiji posao?

Well, you could try looking really cute.

Pa, mogli biste pokušati tako što ćete izgledati neodoljivo.

Awww.

Aaaa.

Or, in my case, awkward and pathetic.

Ili, u mom slučaju, nespretno i jadno.

So imagine this scenario: I walk into one of your businesses,

Zamislite ovaj scenario: ušetam u jednu od Vaših poslovnih prostorija,

looking very awkward and pathetic, with a copy of my C.V.

izgledajući veoma nespretno i jadno, sa kopijom svog CV-ja

which I've covered in coffee,

polivenom kafom,

and I ask the receptionist to plug in this USB key

i zamolim recepcionara da ubaci moj USB

and print me a new one.

i odštampa mi novi.

So let's have a look here on my victim computer.

Hajde da pogledamo moj kompjuter-žrtvu.

What I'm going to do is plug in the USB key.

Uguraću USB.

After a couple of seconds,

Nakon par sekundi,

things start to happen on the computer on their own,

stvari na kompjuteru počinju da se odvijaju same od sebe,

usually a bad sign.

što je obično loš znak.

This would, of course, normally happen

Ovo bi se, naravno, u normalnim okolnostima odigralo

in a couple of seconds, really, really quickly,

u roku od nekoliko sekundi, veoma, veoma brzo,

but I've kind of slowed it down

ali ja sam pomalo usporio stvari

so you can actually see the attack occurring.

da biste mogli da vidite kako se napad odvija.

Malware is very boring otherwise.

Malver je inače veoma dosadan.

So this is writing out the malicious code,

Ovo je ispisivanje malicioznog koda,

and a few seconds later, on the left-hand side,

i nekoliko sekundi kasnije, na levoj strani,

you'll see the attacker's screen get some interesting new text.

viećete da se na napadačevom ekranu pojavio neki novi zanimljivi tekst.

Now if I place the mouse cursor over it,

Ako pređem kursorom miša preko njega,

this is what we call a command prompt,

ovo je ono što nazivamo komandnom linijom,

and using this we can navigate around the computer.

koristeći ovo možemo da pretražujemo po kompjuteru.

We can access your documents, your data.

Možemo da pristupimo vašim dokumentima, vašim podacima.

You can turn on the webcam.

Možete da uključite veb kameru.

That can be very embarrassing.

To može da bude veoma neprijatno.

Or just to really prove a point,

Samo da dokažemo nešto,

we can launch programs like my personal favorite,

možemo da pokrenemo neki od programa kao što je moj lični favorit,

the Windows Calculator.

Windows Calculator.

So isn't it amazing how much control

Nije li čudesno koliko mnogo kontrole

the attackers can get with such a simple operation?

napadači mogu da steknu jednom ovako jednostavnom operacijom?

Let me show you how most malware

Pokazaću vam kako se najveći deo malvera danas distribuira.

is now distributed today.

Pokazaću vam kako se najveći deo malvera danas distribuira.

What I'm going to do is open up a website

Otvoriću jedan vebsajt

that I wrote.

koji sam napravio.

It's a terrible website. It's got really awful graphics.

To je užasan vebsajt. Grafika mu je stvarno odvratna.

And it's got a comments section here

Sadrži odeljak za komentare

where we can submit comments to the website.

u kom možemo da ostavimo komentar na sajtu.

Many of you will have used something a bit like this before.

Mnogi od vas su već koristili nešto slično.

Unfortunately, when this was implemented,

Nažalost, kada je ovo bilo ubacivano,

the developer was slightly inebriated

kreator je bio pomalo pijan

and managed to forget

i uspeo je da zaboravi

all of the secure coding practices he had learned.

sve postupke sigurnog kodiranja koje je naučio.

So let's imagine that our attacker,

Hajde da zamislimo da naš napadač,

called Evil Hacker just for comedy value,

nazovimo ga Zli Haker, duhovitosti radi,

inserts something a little nasty.

ubaci nešto malo nevaljalo.

This is a script.

Ovo je skript.

It's code which will be interpreted on the webpage.

To je kod koji će biti protumačen na veb stranici.

So I'm going to submit this post,

Poslaću ovaj post,

and then, on my victim computer,

a onda ću na svom kompjuteru-žrtvi

I'm going to open up the web browser

otvoriti novi veb pretraživač

and browse to my website,

i otići na svoj sajt,

www.incrediblyhacked.com.

www.incrediblyhacked.com.

Notice that after a couple of seconds,

Primetićete da, nakon nekoliko sekundi,

I get redirected.

bivam preusmeren.

That website address at the top there,

Ona veb adresa tamo na vrhu

which you can just about see, microshaft.com,

koju taman možete i da vidite, microshaft.com,

the browser crashes as it hits one of these exploit packs,

pretraživač zakucava kada naiđe na neki od ovih eksploit paketa,

and up pops fake antivirus.

i iskače lažni antivirus.

This is a virus pretending to look like antivirus software,

Ovo je virus koji se pretvara da je pravi antivirusni softver

and it will go through and it will scan the system,

i on će proći i skenirati sistem,

have a look at what its popping up here.

pogledajte šta ovde iskače.

It creates some very serious alerts.

On stvara neka veoma ozbiljna upozorenja.

Oh look, a child porn proxy server.

O pogledajte, proksi server sa dečjom pornografijom.

We really should clean that up.

To bi stvarno trebalo iščistiti.

What's really insulting about this is

Ono što je stvarno uvredljivo u vezi sa ovim

not only does it provide the attackers with access to your data,

je to što on ne samo da dopušta napadačima pristup vašim podacima,

but when the scan finishes, they tell you

već što kada se skeniranje završi, oni vam kažu

in order to clean up the fake viruses,

da treba da registrujete proizvod

you have to register the product.

kako biste očistili lažne viruse.

Now I liked it better when viruses were free.

E pa meni se više sviđalo kada su virusi bili besplatni.

(Laughter)

(Smeh)

People now pay cybercriminals money

Ljudi sada plaćaju sajberkriminalce

to run viruses,

da upravljaju virusima,

which I find utterly bizarre.

što je meni potpuno bizarno.

So anyway, let me change pace a little bit.

Kako god, dozvolite da malo promenim tempo.

Chasing 250,000 pieces of malware a day

Juriti 250.000 komada malvera na dan

is a massive challenge,

je ogroman izazov,

and those numbers are only growing

i te cifre samo još rastu

directly in proportion to the length of my stress line, you'll note here.

direktno proporcionalno mojoj bori stresa, kao što možete primetiti.

So I want to talk to you briefly

Sad bih želeo da vam ukratko ispričam

about a group of hackers we tracked for a year

o hakerskoj grupi koju smo pratili godinu dana

and actually found --

i zaista pronašli -

and this is a rare treat in our job.

a to je retka poslastica u našem poslu.

Now this was a cross-industry collaboration,

Ovo je bila saradnja više industrija,

people from Facebook, independent researchers,

ljudi iz Fejsbuka, nezavisnih istraživača,

guys from Sophos.

momaka iz Sofosa.

So here we have a couple of documents

Ovde imamo par dokumenata

which our cybercriminals had uploaded

koje su naši sajberkriminalci aploudovali

to a cloud service, kind of like Dropbox or SkyDrive,

na oblak servis, poput Dropboksa ili Skajdrajva,

like many of you might use.

koje mnogi od vas možda koriste.

At the top, you'll notice a section of source code.

Na vrhu se da primetiti odeljak izvornog koda.

What this would do is send the cybercriminals

On bi sajberkriminalcima svakog dana poslao

a text message every day telling them how much money

tekstualnu poruku u kojoj bi pisalo koliko su novca

they'd made that day,

zaradili tog dana,

so a kind of cybercriminal billings report, if you will.

znači neka vrsta sajberkriminalnog izvoda s računa, da tako kažem.

If you look closely, you'll notice a series

Ako pažljivije pogledate, primetićete niz

of what are Russian telephone numbers.

ruskih telefonskih brojeva.

Now that's obviously interesting,

To je očigledno zanimljivo,

because that gives us a way of finding our cybercriminals.

jer nam to pruža način da pronađemo naše sajberkriminalce.

Down below, highlighted in red,

Dole ispod, markirano crvenom,

in the other section of source code,

u drugom delu izvornog koda,

is this bit "leded:leded."

je ovaj delić "leded:leded."

That's a username,

To je korisničko ime,

kind of like you might have on Twitter.

poput onoga koje možda koristite na Tviteru.

So let's take this a little further.

Idemo malo dalje.

There are a few other interesting pieces

Postoji još nekoliko zanimljivih stvarčica

the cybercriminals had uploaded.

koje su sajberkriminalci aploudovali.

Lots of you here will use smartphones

Mnogi od ovde prisutnih će upotrebiti inteligentne telefone

to take photos and post them from the conference.

da slikaju i postave slike sa konferencije na internet.

An interesting feature of lots of modern smartphones

Zanimljiva opcija mnogih modernih inteligentnih telefona

is that when you take a photo,

je da kada nešto uslikate

it embeds GPS data about where that photo was taken.

telefon umetne GPS podatke o mestu na kom je ta fotografija nastala.

In fact, I've been spending a lot of time

U stvari, nedavno sam proveo dosta vremena

on Internet dating sites recently,

na sajtovima za upoznavanje preko interneta,

obviously for research purposes,

u svrhu istraživanja, naravno,

and I've noticed that about 60 percent

i primetio sam da oko 60 procenata

of the profile pictures on Internet dating sites

profilnih slika na sajtovima za upoznavanje

contain the GPS coordinates of where the photo was taken,

sadrži GPS koordinate mesta gde je fotografija nastala,

which is kind of scary

što je pomalo zastrašujuće

because you wouldn't give out your home address

jer ne biste podelili svoju kućnu adresu

to lots of strangers,

sa mnoštvom stranaca,

but we're happy to give away our GPS coordinates

ali zato rado odajemo svoje GPS koordinate

to plus or minus 15 meters.

plus ili minus 15 metara.

And our cybercriminals had done the same thing.

Naši sajberkriminalci su uradili istu stvar.

So here's a photo which resolves to St. Petersburg.

Ovde je slika koja vodi do Sankt Petersburga.

We then deploy the incredibly advanced hacking tool.

Mi onda razvijamo neverovatno napredan hakerski alat.

We used Google.

Koristili smo Gugl.

Using the email address, the telephone number

Koristeći imejl adresu, telefonski broj

and the GPS data, on the left you see an advert

i GPS podatke, levo vidite oglas

for a BMW that one of our cybercriminals is selling,

za BMW koji prodaje jedan od naših sajberkriminalaca,

on the other side an advert for the sale of sphynx kittens.

na drugoj strani oglas za prodaju sfinks mačića.

One of these was more stereotypical for me.

Jedan od ovih mi je bio stereotipniji.

A little more searching, and here's our cybercriminal.

Još malo istrage i eto našeg sajberkriminalca.

Imagine, these are hardened cybercriminals

Zamislite, ovo su okoreli sajberkriminalci

sharing information scarcely.

koji jedva da dele informacije.

Imagine what you could find

Zamislite samo šta biste mogli pronaći

about each of the people in this room.

o svakoj osobi u ovoj prostoriji.

A bit more searching through the profile

Malo više pretraživanja po profilu

and there's a photo of their office.

i eto fotografije njihove kancelarije.

They were working on the third floor.

Radili su na trećem spratu.

And you can also see some photos

A možete da vidite i neke od slika

from his business companion

njegovog poslovnog partnera

where he has a taste in a certain kind of image.

kome se sviđa određena vrsta fotografije.

It turns out he's a member of the Russian Adult Webmasters Federation.

Ispostavlja se da je on član Ruske federacije sajtova za odrasle.

But this is where our investigation starts to slow down.

Ali tu naša istraga počinje da se usporava.

The cybercriminals have locked down their profiles quite well.

Sajberkriminalci su prilično dobro zaključali svoje profile.

And herein is the greatest lesson

U ovome se krije najveća lekcija

of social media and mobile devices for all of us right now.

iz društvenih medija i mobilnih uređaja za sve nas sada.

Our friends, our families and our colleagues

Naši prijatelji, naše porodice i naše kolege

can break our security even when we do the right things.

mogu da probiju naše zaštite čak i kada radimo ispravne stvari.

This is MobSoft, one of the companies

Ovo je MobSoft, jedna od kompanija

that this cybercriminal gang owned,

koju je posedovala ova banda sajberkriminalaca,

and an interesting thing about MobSoft

i zanimljiva stvar u vezi sa MobSoftom

is the 50-percent owner of this

je što je vlasnik 50 posto ove kompanije

posted a job advert,

postavio oglas za posao,

and this job advert matched one of the telephone numbers

i što se taj oglas poklapao sa jednim od telefonskih brojeva

from the code earlier.

iz prethodnog koda.

This woman was Maria,

Ova žena se zove Marija,

and Maria is the wife of one of our cybercriminals.

a Marija je supruga jednog od naših sajberkriminalaca.

And it's kind of like she went into her social media settings

Činilo se kao da je ušla u svoja podešavanja na društvenoj mreži

and clicked on every option imaginable

i kliknula na svaku moguću opciju

to make herself really, really insecure.

da bi učinila sebe veoma, veoma nezaštićenom.

By the end of the investigation,

Do okončanja istrage,

where you can read the full 27-page report at that link,

o kojoj možete da pročitate pun izveštaj od 27 strana na ovom linku,

we had photos of the cybercriminals,

imali smo fotografije sajberkriminalaca,

even the office Christmas party

čak i božićne žurke u kancelariji

when they were out on an outing.

kada su bili napolju na izletu.

That's right, cybercriminals do have Christmas parties,

Tako je, izgleda da sajberkriminalci

as it turns out.

imaju božićne žurke.

Now you're probably wondering what happened to these guys.

Verovatno se pitate šta se desilo ovim momcima.

Let me come back to that in just a minute.

Dozvolite mi da se na to vratim za minut.

I want to change pace to one last little demonstration,

Želeo bih da pređem na poslednju malu demonstraciju,

a technique that is wonderfully simple and basic,

tehniku koja je čudesno jednostavna i bazična,

but is interesting in exposing how much information

ali je zanimljiva za otkrivanje koliko mnogo informacija

we're all giving away,

svi mi odajemo,

and it's relevant because it applies to us as a TED audience.

i relevantna je jer je primenljiva na nas kao TED publiku.

This is normally when people start kind of shuffling in their pockets

Ovde ljudi obično počnu da kopaju po džepovima

trying to turn their phones onto airplane mode desperately.

očajnički pokušavajući da prebace svoje telefone u mod letenja.

Many of you all know about the concept

Mnogima od vas je poznat koncept

of scanning for wireless networks.

skeniranja u potrazi za bežičnim mrežama.

You do it every time you take out your iPhone or your Blackberry

Činite to svaki put kad izvadite svoj Ajfon ili Blekberi

and connect to something like TEDAttendees.

i konektujete se na nešto poput TEDAttendees.

But what you might not know

Ali ono što možda ne znate

is that you're also beaming out a list of networks

je da vi emitujete i listu mreža

you've previously connected to,

na koje ste se prethodno konektovali,

even when you're not using wireless actively.

čak i kada aktivno ne koristite wireless.

So I ran a little scan.

Ja sam izvršio malo skeniranje.

I was relatively inhibited compared to the cybercriminals,

Bio sam relativno suzdržan u poređenju sa sajberkriminalcima,

who wouldn't be so concerned by law,

koji se ne bi toliko zabrinjavali oko zakona,

and here you can see my mobile device.

i ovde možete da vidite moj mobilni uređaj.

Okay? So you can see a list of wireless networks.

Okej? Znači možete da vidite listu bežičnih mreža.

TEDAttendees, HyattLB. Where do you think I'm staying?

TEDAttendees, HyattLB. Šta mislite, gde sam odseo?

My home network, PrettyFlyForAWifi,

Moja kućna mreža PrettyFlyForAWifi,

which I think is a great name.

što je sjajno ime, po mom mišljenju,

Sophos_Visitors, SANSEMEA, companies I work with.

Sophos_Visitors, SANSEMEA, kompanije sa kojima radim.

Loganwifi, that's in Boston. HiltonLondon.

Loganwifi, to je u Bostonu. HiltonLondon.

CIASurveillanceVan.

CIASurveillanceVan.

We called it that at one of our conferences

Tako smo je nazvali na jednoj od naših konferencija.

because we thought that would freak people out,

jer smo mislili da će to zastrašiti ljude,

which is quite fun.

što je prilično zabavno.

This is how geeks party.

Tako se štreberi zabavljaju.

So let's make this a little bit more interesting.

Hajde da učinimo ovo malo zanimljivijim.

Let's talk about you.

Hajde da pričamo o vama.

Twenty-three percent of you have been to Starbucks

Dvadeset tri posto vas je nedavno bilo u Starbaksu

recently and used the wireless network.

i koristili ste wireless mrežu.

Things get more interesting.

Stvari postaju još zanimljivije.

Forty-six percent of you I could link to a business,

Četrdeset šest posto vas bih mogao da povežem sa poslom,

XYZ Employee network.

XYZ mreža za zaposlene.

This isn't an exact science, but it gets pretty accurate.

Ovo nije egzaktna nauka, ali prilično je tačno.

Seven hundred and sixty-one of you I could identify a hotel you'd been to recently,

Za 761 od vas mogao bih da identifikujem hotel u kom ste nedavno bili,

absolutely with pinpoint precision somewhere on the globe.

sa potpunom preciznošću negde na zemaljskoj kugli.

Two hundred and thirty-four of you, well, I know where you live.

Za 234 vas, pa, znam gde živite.

Your wireless network name is so unique

Ime vaše wireless mreže je toliko jedinstveno

that I was able to pinpoint it

da sam mogao da je lociram

using data available openly on the Internet

koristeći podatke otvoreno dostupne na internetu

with no hacking or clever, clever tricks.

bez hakovanja ili pametnih trikova.

And I should mention as well that

Trebalo bi takođe i da napomenem

some of you do use your names,

da neki od vas koriste svoja imena,

"James Lyne's iPhone," for example.

"Ajfon Džejmsa Lina", na primer.

And two percent of you have a tendency to extreme profanity.

A dva posto od vas ima tendenciju ka ekstremnoj vulgarnosti.

So something for you to think about:

Dakle, nešto o čemu bi trebalo da razmislite:

As we adopt these new applications and mobile devices,

Dok usvajamo sve te nove aplikacije i mobilne uređaje,

as we play with these shiny new toys,

dok se igramo tim sjajnim novim igračkama,

how much are we trading off convenience

u kolikoj meri mi menjamo

for privacy and security?

privatnost i sigurnost za udobnost?

Next time you install something,

Sledeći put kad nešto instalirate,

look at the settings and ask yourself,

pogledajte podešavanja i zapitajte se,

"Is this information that I want to share?

"Da li su ovo informacije koje želim da delim?

Would someone be able to abuse it?"

Da li bi neko mogao da ih zloupotrebi?"

We also need to think very carefully

Takođe, trebalo bi veoma pažljivo razmisliti

about how we develop our future talent pool.

o tome kako razvijamo svoje talente u budućnosti.

You see, technology's changing at a staggering rate,

Vidite, tehnologija se menja vrtoglavim tempom

and that 250,000 pieces of malware

i tih 250.000 komada malvera

won't stay the same for long.

neće još dugo ostati isti.

There's a very concerning trend

Postoji veoma zabrinjavajući trend

that whilst many people coming out of schools now

da dok mnogi ljudi trenutno izlaze iz škola

are much more technology-savvy, they know how to use technology,

sa mnogo boljim poznavanjem tehnologije, oni umeju da koriste tehnologije,

fewer and fewer people are following the feeder subjects

sve manje i manje ljudi prati dodatne predmete

to know how that technology works under the covers.

da bi znali kako ta tehnologija funkcioniše iza kulisa.

In the U.K., a 60 percent reduction since 2003,

U UK, broj maturanata koji su pohađali dodatne predmete iz IT-ja

and there are similar statistics all over the world.

opao je 60 posto u odnosu na 2003, a statistike su slične u celom svetu.

We also need to think about the legal issues in this area.

Moramo da razmislimo i o pravnim problemima u ovom području.

The cybercriminals I talked about,

Sajberkriminalci o kojima sam pričao,

despite theft of millions of dollars,

uprkos krađi miliona dolara,

actually still haven't been arrested,

još uvek nisu uhapšeni,

and at this point possibly never will.

i moguće je da nikada neće ni biti.

Most laws are national in their implementation,

Većina zakona se primenjuje u nacionalnim okvirima,

despite cybercrime conventions, where the Internet

uprkos prirodi sajberkriminala, pošto je internet

is borderless and international by definition.

bez granica i internacionalan po svojoj definiciji.

Countries do not agree, which makes this area

Države se ne slažu, što čini ovo područje

exceptionally challenging from a legal perspective.

izuzetno problematičnim iz pravne perspektive.

But my biggest ask is this:

Ali, moje najveće pitanje je ovo:

You see, you're going to leave here

vidite, vi ćete izaći odavde

and you're going to see some astonishing stories in the news.

i videćete neke neverovatne priče u vestima.

You're going to read about malware doing incredible

Čitaćete kako malver radi neverovatne

and terrifying, scary things.

i zastrašujuće, užasne stvari.

However, 99 percent of it works

Međutim, 99 posto toga funkcioniše

because people fail to do the basics.

jer ljudi ne obave osnovne stvari.

So my ask is this: Go online,

Dakle, moja molba je sledeća: idite na internet,

find these simple best practices,

pronađite ove jednostavne postupke

find out how to update and patch your computer.

saznajte kako da apdejtujete i nadogradite svoj kompjuter.

Get a secure password.

Postavite sigurnu lozinku.

Make sure you use a different password

Pobrinite se da koristite drugačiju lozinku

on each of your sites and services online.

na svakom od sajtova i onlajn servisa.

Find these resources. Apply them.

Pronađite ova sredstva. Primenite ih.

The Internet is a fantastic resource

Internet je fantastičan resurs

for business, for political expression,

za biznis, političko izražavanje,

for art and for learning.

za umetnost i za učenje.

Help me and the security community

Pomozite meni i društvu za bezbednost

make life much, much more difficult

zagorčajte život sajberkriminalcima.

for cybercriminals.

zagorčajte život sajberkriminalcima.

Thank you.

Hvala vam.

(Applause)

(Aplauz)