Andy Yen: Think your email's private? Think again

Prevodilac: Mile Živković Lektor: Anja Saric

Twenty-five years ago, scientists at CERN created the World Wide Web.

Svetsku mrežu su stvorili naučnici u u CERN-u pre 25 godina.

Since then, the Internet has transformed the way we communicate,

Od tada nam je internet promenio način komunikacije,

the way we do business, and even the way we live.

način poslovanja, način života.

In many ways,

Ideje koje su stvorile

the ideas that gave birth to Google, Facebook, Twitter, and so many others,

Gugl, Fejsbuk, Tviter i ostalo,

have now really transformed our lives,

u mnogome su promenile naše živote,

and this has brought us many real benefits such as a more connected society.

i zaista su korisne, jer je društvo sada povezanije.

However, there are also some downsides to this.

Međutim, postoje i mnogi nedostaci.

Today, the average person has an astounding amount

Danas, prosečan čovek ima zapanjujuću količinu

of personal information online,

ličnih informacija na internetu,

and we add to this online information every single time we post on Facebook,

uključujući i svaki status na Fejsbuku,

each time we search on Google,

svaku pretragu na Guglu,

and each time we send an email.

svaki imejl.

Now, many of us probably think,

Mnogi će pomisliti:

well, one email, there's nothing in there, right?

pa nema ništa lošeg u jednom imejlu.

But if you consider a year's worth of emails,

Ali ako uzmemo godišnju količinu imejlova

or maybe even a lifetime of email,

ili imejlove tokom celog života,

collectively, this tells a lot.

zbirno, to mnogo govori.

It tells where we have been, who we have met,

To govori gde smo bili, koga smo upoznali,

and in many ways, even what we're thinking about.

čak i to o čemu razmišljamo.

And the more scary part about this is our data now lasts forever,

Najstrašnije je to što naši podaci ostaju zauvek,

so your data can and will outlive you.

pa vas mogu nadživeti.

What has happened is that we've largely lost control over our data

Desilo se to da smo izgubili kontrolu nad podacima,

and also our privacy.

a izgubili smo i privatnost.

So this year, as the web turns 25,

Sada, na dvadesetpetogodišnjicu svetske mreže,

it's very important for us to take a moment

važno je da na trenutak zastanemo

and think about the implications of this.

i razmislimo o posledicama.

We have to really think.

Zaista.

We've lost privacy, yes,

Da, izgubili smo privatnost,

but actually what we've also lost is the idea of privacy itself.

ali smo izgubili i sam pojam privatnosti.

If you think about it,

Kada razmišljate o tome,

most of us here today probably remember what life was like before the Internet,

većina se seti života pre interneta,

but today, there's a new generation

a danas je tu nova generacija,

that is being taught from a very young age to share everything online,

koja se od malena uči da sve deli na internetu,

and this is a generation that is not going to remember when data was private.

i ova generacija se neće sećati vremena kada su podaci bili privatni.

So we keep going down this road, 20 years from now,

Ako nastavimo ovim putem, za 20 godina

the word 'privacy' is going to have a completely different meaning

sama reč "privatnost" će imati sasvim drugačije značenje

from what it means to you and I.

od onoga što nama znači.

So, it's time for us to take a moment and think,

Vreme je da stanemo i razmislimo

is there anything we can do about this?

možemo li da učinimo nešto u vezi sa tim.

And I believe there is.

Verujem da možemo.

Let's take a look at one of the most widely used forms of communication

Hajde da pogledamo najrašireniji oblik komunikacije danas:

in the world today: email.

imejl.

Before the invention of email, we largely communicated using letters,

Pre pronalaska imejla, uglavnom smo pisali pisma,

and the process was quite simple.

i to je bilo skroz jednostavno.

You would first start by writing your message on a piece of paper,

Prvo biste poruku napisali na parčetu papira,

then you would place it into a sealed envelope,

zatim biste je stavili u zapečaćen koverat

and from there, you would go ahead and send it

pa biste je poslali

after you put a stamp and address on it.

pošto stavite markicu i adresu.

Unfortunately, today,

Nažalost danas,

when we actually send an email, we're not sending a letter.

kada šaljemo imejl, mi ne šaljemo pismo.

What you are sending, in many ways, is actually a postcard,

Ono što šaljemo je, u stvari, razglednica,

and it's a postcard in the sense that everybody that sees it

u tom smislu, da svako ko je vidi

from the time it leaves your computer to when it gets to the recipient

od momenta kada ona napusti vaš računar i stigne do primaoca,

can actually read the entire contents.

može da pročita njen sadržaj.

So, the solution to this has been known for some time,

Neko vreme je već poznato rešenje ovog problema

and there's many attempts to do it.

a ima još mnogo pokušaja da se on reši.

The most basic solution is to use encryption,

Najosnovnije rešenje je upotreba enkripcije,

and the idea is quite simple.

i ideja je prilično jednostavna.

First, you encrypt the connection

Prvo, šifrirate vezu između

between your computer and the email server.

vašeg računara i imejl servera.

Then, you also encrypt the data as it sits on the server itself.

Zatim šifrirate podatak koji stiže na server.

But there's a problem with this,

Ali tu postoji problem:

and that is, the email servers also hold the encryption keys,

serveri takođe imaju ključ za šifru,

so now you have a really big lock with a key placed right next to it.

vi u stvari imate ogroman katanac i pored samog njega ključ.

But not only that, any government could lawfully ask for

I ne samo to, već svaka vlada može zakonski da traži

and get the key to your data,

i da dobije ključ vašeg podatka,

and this is all without you being aware of it.

a da toga niste ni svesni.

So the way we fix this problem is actually relatively easy, in principle:

Ovaj problem u principu rešavamo lako:

You give everybody their own keys,

svakom date svoj ključ

and then you make sure the server doesn't actually have the keys.

i onda se uverite da server nema ključeve.

This seems like common sense, right?

Ovo ima smisla, zar ne?

So the question that comes up is, why hasn't this been done yet?

Pitanje je, zašto se ovo dosad nije radilo?

Well, if we really think about it,

Kada razmišljamo o tome, vidimo

we see that the business model of the Internet today

da se poslovni model današnjeg interneta

really isn't compatible with privacy.

ne podudara sa privatnošću.

Just take a look at some of the biggest names on the web,

Pogledajte samo najveća imena na mreži

and you see that advertising plays a huge role.

i videćete da reklamiranje igra ogromnu ulogu.

In fact, this year alone, advertising is 137 billion dollars,

Samo ove godine reklamiranje iznosi 137 milijardi dolara,

and to optimize the ads that are shown to us,

i da bi nam optimizirali prikazane reklame,

companies have to know everything about us.

kompanije moraju da znaju o nama sve.

They need to know where we live,

Treba da znaju gde živimo,

how old we are, what we like, what we don't like,

koliko imamo godina, šta volimo a šta ne volimo

and anything else they can get their hands on.

i još mnogo toga, čega mogu da se dokopaju.

And if you think about it,

Kada razmišljate o ovome,

the best way to get this information is really just to invade our privacy.

do ovih informacija se najlakše dolazi napadom na našu privatnost.

So these companies aren't going to give us our privacy.

Zato nam ove kompanije neće pružiti privatnost.

If we want to have privacy online,

Ako želimo privatnost na internetu,

what we have to do is we've got to go out and get it ourselves.

moramo se sami izboriti za to.

For many years, when it came to email,

Tokom mnogo godina, što se tiče imejla,

the only solution was something known as PGP,

jedino rešenje je bilo takozvano PGP,

which was quite complicated and only accessible to the tech-savvy.

prilično komplikovano i dostupno samo poznavaocima tehnologije.

Here's a diagram that basically shows

Evo dijagrama koji prikazuje proces

the process for encrypting and decrypting messages.

šifrovanja i dešifrovanja poruka.

So needless to say, this is not a solution for everybody,

Nepotrebno je reći da ovo nije za svakoga,

and this actually is part of the problem,

ovo i jeste deo problema,

because if you think about communication,

jer u komunikaciji

by definition, it involves having someone to communicate with.

morate imati i drugu stranu.

So while PGP does a great job of what it's designed to do,

PGP je dobro zamišljen,

for the people out there who can't understand how to use it,

ali ko se u to ne razume,

the option to communicate privately simply does not exist.

ne postoji mogućnost za privatnu komunikaciju.

And this is a problem that we need to solve.

Ovo je problem koji moramo da rešimo.

So if we want to have privacy online,

Jedini način za onlajn privatnost je

the only way we can succeed is if we get the whole world on board,

da se ceo svet uključi,

and this is only possible if we bring down the barrier to entry.

a to je moguće samo ako srušimo prepreku za ulaz.

I think this is actually the key challenge that lies in the tech community.

Ovo je jedini ključni izazov za tehnološku zajednicu.

What we really have to do is work and make privacy more accessible.

Moramo raditi na tome da privatnost bude pristupačnija.

So last summer, when the Edward Snowden story came out,

Prošlog leta, kada se pojavila priča o Edvardu Snoudenu,

several colleagues and I decided to see if we could make this happen.

sa nekoliko kolega sam pokušao da vidim da li bismo mi uspeli u ovome.

At that time, we were working at the European Organization for Nuclear Research

U to vreme smo radili u Evropskoj organizaciji za nuklearna istraživanja,

at the world's largest particle collider, which collides protons, by the way.

u najvećem sudaraču čestica, gde se sudaraju protoni.

We were all scientists, so we used our scientific creativity

Svi smo bili naučnici, koristili smo naučnu kreativnost,

and came up with a very creative name for our project:

pa smo stvorili vrlo kreativni naziv za naš projekat:

ProtonMail. (Laughter)

ProtonMejl. (Smeh)

Many startups these days actually begin in people's garages

Danas se mnogo toga pokreće iz garaža

or people's basements.

ili podruma.

We were a bit different.

Mi smo se malo razlikovali.

We started out at the CERN cafeteria,

Mi smo počeli u kantini CERN-a,

which actually is great, because look,

što je sjajno,

you have all the food and water you could ever want.

jer smo imali dovoljno hrane i vode.

But even better than this is that every day

Još bolje je to što svakog dana

between 12 p.m. and 2 p.m., free of charge,

između 12 i 14 sati, besplatno se nalazimo

the CERN cafeteria comes with several thousand scientists and engineers,

sa nekoliko hiljada naučnika i inženjera,

and these guys basically know the answers to everything.

koji znaju odgovor na sve.

So it was in this environment that we began working.

U ovakvom okruženju smo počeli da radimo.

What we actually want to do is we want to take your email

Ono što želimo je da vaš imejl

and turn it into something that looks more like this,

pretvorimo u nešto što liči na ovo,

but more importantly, we want to do it in a way

a još važnije je da to želimo da uradimo tako

that you can't even tell that it's happened.

da vi to ni ne primetite.

So to do this, we actually need a combination of technology

Za ovo nam treba kombinacija tehnologije

and also design.

i dizajna.

So how do we go about doing something like this?

Kako ćemo uraditi tako nešto?

Well, it's probably a good idea not to put the keys on the server.

Verovatno je dobra ideja ne staviti ključ na server.

So what we do is we generate encryption keys on your computer,

Generišemo ključ za šifru na vašem računaru,

and we don't generate a single key, but actually a pair of keys,

ne samo jedan, već par ključeva,

so there's an RSA private key and an RSA public key,

tako da ima jedan privatni RSA ključ i jedan javni RSA ključ,

and these keys are mathematically connected.

i oni su matematički povezani.

So let's have a look and see how this works

Hajde da pogledamo kako to radi

when multiple people communicate.

kada više ljudi komunicira.

So here we have Bob and Alice, who want to communicate privately.

Tu su Bob i Alis, koji žele da komuniciraju privatno.

So the key challenge is to take Bob's message

Ključni izazov je da prenesemo Bobovu poruku

and to get it to Alice in such a way that the server cannot read that message.

do Elis, tako da server ne može da je pročita.

So what we have to do is we have to encrypt it

Moramo da je šifriramo

before it even leaves Bob's computer,

pre nego što poruka napusti Bobov kompjuter,

and one of the tricks is, we encrypt it using the public key from Alice.

trik je u tome, da je šifriramo koristeći Alisin javni ključ.

Now this encrypted data is sent through the server to Alice,

Ovaj šifrirani podatak je poslat Alis preko servera,

and because the message was encrypted using Alice's public key,

i pošto je poruka šifrirana upotrebom Alisinog javnog ključa,

the only key that can now decrypt it is a private key that belongs to Alice,

jedini ključ koji može da je dešifruje pripada Alis

and it turns out Alice is the only person that actually has this key.

i ispada da je Alis jedina osoba koja ima ključ.

So we've now accomplished the objective,

Sada smo postigli cilj, prosledili smo

which is to get the message from Bob to Alice

poruku od Boba za Alis,

without the server being able to read what's going on.

a da server nije mogao da pročita.

Actually, what I've shown here is a highly simplified picture.

Ovo je, u stvari, pojednostavljena slika.

The reality is much more complex

Stvarnost je mnogo komplikovanija

and it requires a lot of software that looks a bit like this.

i potrebno je mnogo softvera koji izgleda ovako.

And that's actually the key design challenge:

To je zapravo ključni izazov dizajna -

How do we take all this complexity, all this software,

kako da se izborimo sa složenošću, sa svim softverom,

and implement it in a way that the user cannot see it.

i da ga primenimo tako da ga korisnik ne vidi.

I think with ProtonMail, we have gotten pretty close to doing this.

Mislim da je ProtonMejl blizu rešenja.

So let's see how it works in practice.

Hajde da vidimo to u praksi.

Here, we've got Bob and Alice again,

Evo, opet su tu Bob i Alis,

who also want to communicate securely.

koji žele bezbedno da komuniciraju.

They simply create accounts on ProtonMail,

Otvore nalog na ProtonMejlu,

which is quite simple and takes a few moments,

što je jednostavno i traje nekolio trenutaka,

and all the key encryption and generation

a šifriranje i generisanje ključeva

is happening automatically in the background

se dešava automatski u pozadini

as Bob is creating his account.

dok Bob kreira svoj nalog.

Once his account is created, he just clicks "compose,"

Kada je nalog gotov, on samo klikne na pisanje nove poruke

and now he can write his email like he does today.

i može da piše imejl kao danas.

So he fills in his information,

On popuni podatke

and then after that, all he has to do is click "send,"

i posle toga samo klikne "šalji",

and just like that, without understanding cryptography,

i bez razumevanja kriptografije,

and without doing anything different from how he writes email today,

ne radeći ništa drugačije od onog kako danas piše imejl,

Bob has just sent an encrypted message.

Bob je sada poslao šifrovanu poruku.

What we have here is really just the first step,

Ovo je samo prvi korak,

but it shows that with improving technology,

ali on pokazuje da sa tehnologijom koja se poboljšava,

privacy doesn't have to be difficult, it doesn't have to be disruptive.

privatnost ne mora biti teška, ne mora da remeti.

If we change the goal from maximizing ad revenue to protecting data,

Ako promenimo cilj sa uvećavanja zarade od oglasa na zaštitu podataka,

we can actually make it accessible.

ovo možemo načiniti dostupnim.

Now, I know a question on everybody's minds is,

Sada se svi verovatno pitaju,

okay, protecting privacy, this is a great goal,

u redu, zaštita privatnosti je sjajan cilj,

but can you actually do this

ali možete li zapravo da uradite ovo

without the tons of money that advertisements give you?

bez hrpe novca koji se dobija od reklama?

And I think the answer is actually yes,

Mislim da je odgovor zapravo da,

because today, we've reached a point

jer smo danas stigli do tačke

where people around the world really understand how important privacy is,

gde ljudi širom sveta zaista razumeju koliko je privatnost bitna,

and when you have that, anything is possible.

a kada imate to, sve je moguće.

Earlier this year,

Početkom ove godine,

ProtonMail actually had so many users that we ran out of resources,

Protonmejl je imao toliko korisnika da nam je nestalo sredstava,

and when this happened, our community of users got together

a kada se ovo desilo, zajednica naših korisnika se udružila

and donated half a million dollars.

i donirala pola miliona dolara.

So this is just an example of what can happen

Ovo je samo primer toga šta može da se desi

when you bring the community together towards a common goal.

kada spojite zajednicu sa istim ciljem.

We can also leverage the world.

Takođe možemo pokrenuti svet.

Right now,

Ovog trenutka

we have a quarter of a million people that have signed up for ProtonMail,

imamo četvrt miliona ljudi koji su se prijavili za Protonmejl

and these people come from everywhere,

i ovi ljudi su od svuda

and this really shows that privacy

i ovo zapravo pokazuje da privatnost

is not just an American or a European issue,

nije samo pitanje Amerikanaca ili Evropljana,

it's a global issue that impacts all of us.

to je globalni problem koji utiče na sve nas.

It's something that we really have to pay attention to going forward.

To je nešto na šta ćemo zaista morati da obratimo pažnju u budućnosti.

So what do we have to do to solve this problem?

Šta moramo da uradimo da bismo rešili ovaj problem?

Well, first of all,

Pre svega,

we need to support a different business model for the Internet,

moramo da podržimo drugačiji poslovni model za internet,

one that does not rely entirely on advertisements

model koji se ne oslanja potpuno na reklame

for revenue and for growth.

kako bi zarađivao i rastao.

We actually need to build a new Internet

Zapravo moramo da izgradimo nov internet,

where our privacy and our ability to control our data is first and foremost.

gde su najbitniji naša privatnost i mogućnost kontrolisanja naših podataka.

But even more importantly,

Ali još je bitnije

we have to build an Internet where privacy is no longer just an option

da izgradimo internet gde privatnost više nije opcija

but is also the default.

već se podrazumeva.

We have done the first step with ProtonMail,

Sa Protonmejlom smo načinili prvi korak,

but this is really just the first step in a very, very long journey.

ali ovo je samo prvi korak na veoma dugom putovanju.

The good news I can share with you guys today,

Dobre vesti mogu da podelim danas sa vama,

the exciting news, is that we're not traveling alone.

uzbudljive vesti su to da ne putujemo sami.

The movement to protect people's privacy and freedom online

Pokret za zaštitu privatnosti i slobode na internetu

is really gaining momentum,

zaista dobija zamah

and today, there are dozens of projects from all around the world

i danas postoji desetine projekata širom sveta

who are working together to improve our privacy.

gde ljudi rade zajedno kako bi unapredili našu privatnost.

These projects protect things from our chat to voice communications,

Ovi projekti štite razne stvari, od četovanja do komunikacija glasom,

also our file storage, our online search,

skladištenja podataka, pretraga na internetu,

our online browsing, and many other things.

surfovanje na internetu i mnoge druge stvari.

And these projects are not backed by billions of dollars in advertising,

Ovi projekti nisu finansirani milijardama dolara od reklama

but they've found support really from the people,

već ih zaista podržavaju ljudi,

from private individuals like you and I from all over the world.

od privatnih pojedinaca poput mene i vas, širom sveta.

This really matters, because ultimately,

Ovo je zaista bitno, jer privatnost na kraju

privacy depends on each and every one of us,

zavisi od svakog od nas pojedinačno

and we have to protect it now because our online data

i moramo da je zaštitimo sada jer su naši podaci na internetu

is more than just a collection of ones and zeros.

više od skupa nula i jedinica.

It's actually a lot more than that.

To je puno više od toga.

It's our lives, our personal stories,

To su naši životi, lične priče,

our friends, our families,

prijatelji, porodice,

and in many ways, also our hopes and our aspirations.

i na mnoge načine, naše nade i težnje.

We need to spend time now to really protect our right

Moramo sada da uložimo vreme da istinski zaštitimo svoje pravo

to share this only with people that we want to share this with,

da ovo delimo samo sa ljudima sa kojima to želimo

because without this, we simply can't have a free society.

jer bez ovoga jednostavno ne možemo da imamo slobodno društvo

So now's the time for us to collectively stand up and say,

Sada je vreme da kolektivno ustanemo i kažemo:

yes, we do want to live in a world with online privacy,

da želimo da živimo u svetu sa privatnošću na internetu

and yes, we can work together to turn this vision into a reality.

i da, zajedno možemo raditi na tome da ovu viziju pretvorimo u stvarnost.

Thank you.

Hvala vam.

(Applause)

(Aplauz)