Misha Glenny: Hire the hackers!

翻译人员: Jiwei Qu 校对人员: Guo Tang

Now this is a very un-TED-like thing to do,

这是一件非常不像TED风格的事情

but let's kick off the afternoon

但是让我们用一条来自

with a message

神秘赞助商

from a mystery sponsor.

的信息开始这个下午

Anonymous: Dear Fox News,

匿名：亲爱的福克斯新闻

it has come to our unfortunate attention

很不幸得引起了我们的注意

that both the name and nature of Anonymous

所有匿名者的名称和性质

has been ravaged.

已经被破坏

We are everyone. We are no one.

我们无所不在

We are anonymous. We are legion.

我们没有姓名，我们代表着大众

We do not forgive. We do not forget.

我们不会原谅 我们不会遗忘

We are but the base of chaos.

我们只是混乱的根源

Misha Glenny: Anonymous, ladies and gentlemen --

美莎·格伦尼：匿名者，女士们先生们--

a sophisticated group

一个老练的

of politically motivated hackers

有政治动机的黑客团体

who have emerged in 2011.

出现于2011年

And they're pretty scary.

他们非常可怕

You never know when they're going to attack next,

你不会知道他们下次什么时候发动攻击

who or what the consequences will be.

谁是受害者或后果是什么

But interestingly,

可有趣的是

they have a sense of humor.

他们很有幽默感

These guys hacked into Fox News' Twitter account

他们盗取福克斯新闻的推特帐号

to announce President Obama's assassination.

并宣布奥巴马总统被暗杀

Now you can imagine the panic that would have generated

你可以想象当时在福克斯新闻编辑室内

in the newsroom at Fox.

有多么的恐慌

"What do we do now?

“我们现在该怎么办？

Put on a black armband, or crack open the champagne?"

是该臂缠黑纱，还是开香槟庆祝？”

(Laughter)

（笑声）

And of course, who could escape the irony

当然，谁又能逃避默多克新闻集团的一员

of a member of Rupert Murdoch's News Corp.

竟成为了黑客的受害者

being a victim of hacking for a change.

这么具有讽刺意味的转变

(Laughter)

（笑声）

(Applause)

（掌声）

Sometimes you turn on the news

有时你打开新闻节目

and you say, "Is there anyone left to hack?"

你会说“还有谁没被黑吗？”

Sony Playstation Network -- done,

索尼游戏平台网络--被侵入

the government of Turkey -- tick,

土耳其政府--被侵入

Britain's Serious Organized Crime Agency -- a breeze,

英国严重有组织犯罪署--易如反掌

the CIA -- falling off a log.

美国中央情报局--轻而易举被侵入

In fact, a friend of mine from the security industry

事实上，我的一位安保行业的朋友

told me the other day

不久前告诉我

that there are two types of companies in the world:

世界上有两种公司：

those that know they've been hacked, and those that don't.

已知被侵入的和还不知道已被侵入的

I mean three companies

我知道有三家

providing cybersecurity services to the FBI

为美国联邦调查局提供网络安全服务的公司

have been hacked.

已经被侵入了

Is nothing sacred anymore, for heaven's sake?

天啊，难道已经没有什么是不可侵入的了吗？

Anyway, this mysterious group Anonymous --

总之，这个神秘的匿名组织--

and they would say this themselves --

他们自己这么称呼自己--

they are providing a service

他们提供一种服务

by demonstrating how useless companies are

来证明企业在保护我们的数据上

at protecting our data.

是多么的没用

But there is also a very serious aspect to Anonymous --

但对于匿名者还是有一个非常严重方面--

they are ideologically driven.

他们是基于意识形态的

They claim that they are battling

他们声称他们正在和卑鄙的

a dastardly conspiracy.

阴谋集团斗争

They say that governments are trying

他们说政府正试图

to take over the Internet and control it,

接管网络并加以控制

and that they, Anonymous,

同时他们，匿名者们

are the authentic voice of resistance --

才是反抗的可信的声音--

be it against Middle Eastern dictatorships,

他们反对中东独裁者

against global media corporations,

反对全球媒体

or against intelligence agencies,

或是反对情报机构

or whoever it is.

或是其他等等

And their politics are not entirely unattractive.

他们的政治理念并不是完全没有吸引力

Okay, they're a little inchoate.

好，他们只是刚刚开始

There's a strong whiff

他们大力鼓吹

of half-baked anarchism about them.

还不成熟的无政府主义

But one thing is true:

但有一个事实

we are at the beginning

我们正处在控制网络

of a mighty struggle

这场强势斗争的

for control of the Internet.

初始阶段

The Web links everything,

网络连接着一切

and very soon

且不久的将来

it will mediate most human activity.

大多数人类活动都离不开网络

Because the Internet has fashioned

因为网络已经为旧时代的进退两难

a new and complicated environment

塑造了一个全新的复杂环境

for an old-age dilemma

使得对安全的需求

that pits the demands of security

添加了

with the desire for freedom.

对于自由的渴望

Now this is a very complicated struggle.

如今这是个非常复杂的斗争

And unfortunately, for mortals like you and me,

遗憾的是，对于像你我一样的凡人

we probably can't understand it very well.

也许不会对此了解很多

Nonetheless,

尽管如此

in an unexpected attack of hubris

在数年前一次意外的

a couple of years ago,

狂妄的攻击下

I decided I would try and do that.

我决定试着去做些事情

And I sort of get it.

我获得了些成果

These were the various things that I was looking at

这些是我之前试着去弄懂的

as I was trying to understand it.

不同的事情

But in order to try and explain the whole thing,

但为了解释清整件事情

I would need another 18 minutes or so to do it,

我需要再一个18分钟

so you're just going to have to take it on trust from me on this occasion,

所以在这种情况下你要对我信任

and let me assure you that all of these issues

我向大家保证所有的这些事情

are involved in cybersecurity and control of the Internet

都与网络安全和对网络的控制多多少少

one way or the other,

有关系

but in a configuration

但是

that even Stephen Hawking would probably have difficulty

即使是史蒂夫·霍金都有困难

trying to get his head around.

去转动他的头部

So there you are.

所有就在那

And as you see, in the middle,

就像大家看到的，在中间

there is our old friend, the hacker.

有一位我们的老朋友， 黑客

The hacker is absolutely central

黑客在许多政治、

to many of the political, social

社会以及经济事件中

and economic issues affecting the Net.

都处于绝对重要的位置

And so I thought to myself,

所以我心想

"Well, these are the guys who I want to talk to."

“好，他们就是我要聊聊的家伙”

And what do you know,

你知道吗

nobody else does talk to the hackers.

没有其他人真正跟黑客交流过

They're completely anonymous, as it were.

他们完全是匿名的

So despite the fact

尽管现实中

that we are beginning to pour billions,

我们开始花费了数十亿

hundreds of billions of dollars,

数千亿美元

into cybersecurity --

在网络安全上--

for the most extraordinary technical solutions --

花费在那些最出色的技术解决方案上--

no one wants to talk

却没有人希望和

to these guys, the hackers,

那些从事各行各业

who are doing everything.

的黑客们聊聊

Instead, we prefer these really dazzling technological solutions,

反之，他们更青睐于这些着实让人眼花缭乱

which cost a huge amount of money.

且成本巨大的解决方案上

And so nothing is going into the hackers.

从没人试着走近黑客的生活

Well, I say nothing,

我说的是没有人

but actually there is one teeny weeny little research unit

但事实上，还是有一个非常小的研究机构

in Turin, Italy

在意大利都灵

called the Hackers Profiling Project.

叫做黑客分析项目

And they are doing some fantastic research

他们从事着非常棒的研究

into the characteristics,

关于黑客特征

into the abilities

才能

and the socialization of hackers.

和社会化方面

But because they're a U.N. operation,

但因为他们是联合国运作的

maybe that's why governments and corporations

所以政府和企业

are not that interested in them.

对他们兴趣不大

Because it's a U.N. operation,

因为联合国的项目

of course, it lacks funding.

当然，就缺乏资金

But I think they're doing very important work.

但是我认为他们正做着非常重要的工作

Because where we have a surplus of technology

因为在网络安全行业

in the cybersecurity industry,

其实是科技过剩的

we have a definite lack of --

我们实际缺乏的是--

call me old-fashioned --

你可以说我是保守派--

human intelligence.

人类的智慧

Now, so far I've mentioned

我到现在为止所提到的

the hackers Anonymous

匿名的黑客

who are a politically motivated hacking group.

都是政治导向型的黑客组织

Of course, the criminal justice system

当然，刑事司法系统

treats them as common old garden criminals.

把它们视为犯罪分子

But interestingly,

但有趣的是

Anonymous does not make use of its hacked information

匿名者从来不用他们所盗取的信息

for financial gain.

进行营利

But what about the real cybercriminals?

但是真正的网络罪犯又是怎样的呢？

Well real organized crime on the Internet

真正的有组织网络犯罪要

goes back about 10 years

追溯到10年前

when a group of gifted Ukrainian hackers

当乌克兰一个天才黑客组织

developed a website,

开发了一个网站

which led to the industrialization

形成了网络犯罪的

of cybercrime.

产业化

Welcome to the now forgotten realm of CarderPlanet.

欢迎来到已经被遗忘的了CarderPlanet王国

This is how they were advertising themselves

10年前在网络上他们就是这样

a decade ago on the Net.

宣传自己的

Now CarderPlanet was very interesting.

现在CarderPlanet变得非常有趣

Cybercriminals would go there

网络罪犯们登录网站

to buy and sell stolen credit card details,

去买卖盗来的信用卡信息

to exchange information

来换取新的

about new malware that was out there.

恶意软件的信息

And remember, this is a time

记住，这是第一次

when we're seeing for the first time

我们看到

so-called off-the-shelf malware.

所谓现成的恶意软件

This is ready for use, out-of-the-box stuff,

这已经是成品了，即装即用

which you can deploy

即使你不是一个

even if you're not a terribly sophisticated hacker.

资深的黑客 你照样可以应用

And so CarderPlanet became a sort of supermarket

于是CarderPlanet成为了一个有点像网络罪犯超市

for cybercriminals.

的地方

And its creators

它的创造者

were incredibly smart and entrepreneurial,

非常聪明且有企业家头脑

because they were faced

因为他们作为网络罪犯

with one enormous challenge as cybercriminals.

面临着一个巨大的挑战

And that challenge is:

这个挑战是：

How do you do business,

如何去经营

how do you trust

你怎么去信任

somebody on the Web who you want to do business with

在网络上你想与之交易的人

when you know that they're a criminal?

当你明知他们就是罪犯的时候？

(Laughter)

（笑声）

It's axiomatic that they're dodgy,

不说也知道他们都很狡猾

and they're going to want to try and rip you off.

而且试图诈骗你

So the family, as the inner core of CarderPlanet was known,

CarderPlanet 的内部核心人员对此很清楚

came up with this brilliant idea

于是想出了个很棒的点子

called the escrow system.

叫做托管系统

They appointed an officer

他们任命一位职员

who would mediate between the vendor and the purchaser.

负责在买卖双方进行协调

The vendor, say, had stolen credit card details;

卖方说，有一个盗来的信用卡信息

the purchaser wanted to get a hold of them.

买方如果希望买

The purchaser would send the administrative officer

需要把出价发给

some dollars digitally,

管理员

and the vendor would sell the stolen credit card details.

同时卖方把盗来的信用卡信息发给管理员

And the officer would then verify

管理员然后进行核实

if the stolen credit card worked.

看看信用卡信息是否有效

And if they did,

如果真实有效

he then passed on the money to the vendor

他就会把钱转给卖方

and the stolen credit card details to the purchaser.

同时把信用卡信息转给买方

And it was this

这是

which completely revolutionized cybercrime on the Web.

网络犯罪彻底的变革

And after that, it just went wild.

从那之后，网络犯罪变的肆无忌惮

We had a champagne decade

对于那些我们称之为Carders的人

for people who we know as Carders.

拥有那黄金十年

Now I spoke to one of these Carders

现在我和他们之中一员交谈

who we'll call RedBrigade --

我们叫他红军 --

although that wasn't even his proper nickname --

虽然那绰号不完全适合他--

but I promised I wouldn't reveal who he was.

但是我许诺了不会说出他的身份

And he explained to me how in 2003 and 2004

他还向我解释了他是如何在2003和2004年

he would go on sprees in New York,

在纽约狂欢的时候

taking out $10,000 from an ATM here,

用复制的假信用卡

$30,000 from an ATM there,

从一台ATM机上取出1万美元

using cloned credit cards.

另一台上取出3万美元

He was making, on average a week,

他平均每周盗取

$150,000 --

15万美元--

tax free of course.

当然是免税的

And he said

他还说

that he had so much money

他有很多钱

stashed in his upper-East side apartment at one point

藏匿在上东侧的公寓内

that he just didn't know what to do with it

他都不知道用这些钱干什么

and actually fell into a depression.

事实上还很沮丧

But that's a slightly different story,

现在形势不同了

which I won't go into now.

我不会去做了

Now the interesting thing about RedBrigade

现在关于红军有趣的是

is that he wasn't an advanced hacker.

他并不是一个高级的黑客

He sort of understood the technology,

他略懂技术

and he realized that security was very important

同时意识到安全非常重要

if you were going to be a Carder,

如果你想成为Carder的一员

but he didn't spend his days and nights

但是他不会日以继夜干着

bent over a computer, eating pizza,

在电脑前工作，吃着批萨

drinking coke and that sort of thing.

喝着可乐之类的事情

He was out there on the town

他在一个镇上

having a fab time enjoying the high life.

享受着高质量生活

And this is because

这是因为

hackers are only one element

黑客只是网络犯罪业

in a cybercriminal enterprise.

的一个环节

And often they're the most vulnerable element of all.

而且他们通常是所有环节中最脆弱的

And I want to explain this to you

这点我想通过向大家介绍6位

by introducing you to six characters

我做调查时遇到的人

who I met

来进行

while I was doing this research.

解释

Dimitry Golubov, aka SCRIPT --

迪米特里·戈卢博夫，亦称“脚本”--

born in Odessa, Ukraine in 1982.

1982年生于乌克兰奥德萨市

Now he developed his social and moral compass

上世纪90年代，他在黑海港口的生活

on the Black Sea port during the 1990s.

塑造了他的人生观

This was a sink-or-swim environment

那是一个生死完全靠自己的环境

where involvement in criminal or corrupt activities

那种环境中，犯罪、腐败行为

was entirely necessary

是生存的

if you wanted to survive.

必要条件

As an accomplished computer user,

最为一名熟练的电脑使用者

what Dimitry did

迪米特里所做的是

was to transfer the gangster capitalism of his hometown

把他家乡的强盗资本主义那一套

onto the Worldwide Web.

移植到了互联网上

And he did a great job in it.

他干的非常棒

You have to understand though

你要知道

that from his ninth birthday,

从他9岁生日开始

the only environment he knew

他所处的环境就只有

was gangsterism.

强盗

He knew no other way of making a living

除此之外他根本不懂如何用其他方法

and making money.

维持生计

Then we have Renukanth Subramaniam,

下一位是 瑞努坎斯·撒布莱姆尼安

aka JiLsi --

亦称JiLsi --

founder of DarkMarket,

黑市创始人

born in Colombo, Sri Lanka.

生于斯里兰卡的科伦坡

As an eight year-old,

在他八岁时

he and his parents fled the Sri Lankan capital

他随父母逃离了斯里兰卡首都

because Singhalese mobs were roaming the city,

因为僧伽罗人在他们的城市里搜寻并杀害

looking for Tamils like Renu to murder.

像他全家这样的泰米尔族人

At 11, he was interrogated by the Sri Lankan military,

11岁的时候，他被斯里兰卡军方审讯

accused of being a terrorist,

并控告其为恐怖分子

and his parents sent him on his own to Britain

他的父母把他一个人送到了英国

as a refugee seeking political asylum.

作为难民寻求政治庇护

At 13,

13岁时

with only little English and being bullied at school,

仅会一点点英文的他在学校被欺负

he escaped into a world of computers

于是他逃进了电脑的世界

where he showed great technical ability,

这是个能展示他伟大才能的地方

but he was soon being seduced

但是他不久就被网上的人

by people on the Internet.

怂恿

He was convicted of mortgage and credit card fraud,

他因抵押贷狂和信用卡欺诈被定罪

and he will be released from Wormwood Scrubs jail in London

他将于2012年从伦敦Wormwood Scrubs监狱

in 2012.

被释放

Matrix001,

马提克斯001

who was an administrator at DarkMarket.

一位黑市管理员

Born in Southern Germany

生于德国南部

to a stable and well-respected middle class family,

一个稳定而且受人尊重的中产家庭中

his obsession with gaming as a teenager

他青年时期沉迷于游戏 并因此

led him to hacking.

开始了黑客行为

And he was soon controlling huge servers around the world

不久就控制了世界上大量的服务器

where he stored his games

并在这些服务器上储存

that he had cracked and pirated.

盗版来的破解版游戏

His slide into criminality

他逐步滑向了

was incremental.

犯罪的深渊

And when he finally woke up to his situation

当他终于意识到自己所处的境地

and understood the implications,

清楚了自己的所作所为时

he was already in too deep.

他早已深陷其中

Max Vision, aka ICEMAN --

Max Vision，亦称 冰人--

mastermind of CardersMarket.

cardersMarket的幕后操纵者

Born in Meridian, Idaho.

生于密烈地安，爱达荷州

Max Vision was one of the best penetration testers

他是最好的侵入测试人员之一

working out of Santa Clara, California

在90年代后期加利福尼亚州圣克拉拉

in the late 90s for private companies

供职于私营企业，并以自由形式

and voluntarily for the FBI.

服务于美国联邦调查局

Now in the late 1990s,

在90年代后期

he discovered a vulnerability

他开始为美国政府的

on all U.S. government networks,

所有网络服务

and he went in and patched it up --

他参与并为其进行补丁工作--

because this included nuclear research facilities --

因为这其中包括了原子研究设施--

sparing the American government

节约了美国政府

a huge security embarrassment.

大笔安全维护费用

But also, because he was an inveterate hacker,

但同时，因为他毕竟是个黑客出身

he left a tiny digital wormhole

他留了个微小数字漏洞

through which he alone could crawl.

只有他自己了解

But this was spotted by an eagle-eye investigator,

但是这些都被叫鹰眼的调查员发现

and he was convicted.

他因此被定罪

At his open prison,

在开放式监狱中

he came under the influence of financial fraudsters,

他被金融犯所影响

and those financial fraudsters

同时那些金融犯

persuaded him to work for them

教唆他出狱后为其

on his release.

工作

And this man with a planetary-sized brain

这位拥有天才头脑的家伙

is now serving a 13-year sentence

正在在加利福尼亚服13年的

in California.

刑期

Adewale Taiwo, aka FreddyBB --

阿德瓦勒·泰沃， 亦称FeddyBB--

master bank account cracker

著名银行账户黑客

from Abuja in Nigeria.

生于尼日利亚阿布贾

He set up his prosaically entitled newsgroup,

他成立了自己的银行诈骗组织

[email protected]

[email protected]

before arriving in Britain

在2005年

in 2005

进入

to take a Masters in chemical engineering

英国曼彻斯特大学学习

at Manchester University.

化学工程硕士之前

He impressed in the private sector,

在私营企业中

developing chemical applications for the oil industry

他不仅在石油化学方面表现出色

while simultaneously running

同时运作着

a worldwide bank and credit card fraud operation that was worth millions

一家全球性的银行账户和信用卡欺诈网络，资产高达百万

until his arrest in 2008.

直至2008年被捕

And then finally, Cagatay Evyapan,

最后一位，卡格特·艾维亚潘

aka Cha0 --

外号 Cha0--

one of the most remarkable hackers ever,

曾经最牛的黑客之一

from Ankara in Turkey.

生于土耳其安卡拉

He combined the tremendous skills of a geek

他是有着天才头脑的科学怪人

with the suave social engineering skills

同时又兼有高级罪犯所具有的

of the master criminal.

优雅的社会工程技巧

One of the smartest people I've ever met.

我所见过的最聪明的人之一

He also had the most effective

他拥有

virtual private network security arrangement

警方所遇到过的全球网络罪犯中

the police have ever encountered

最有效的

amongst global cybercriminals.

虚拟私人网络安全管理方案

Now the important thing

最重要的是

about all of these people

关于所有这些人

is they share certain characteristics

他们都共有同一种特性

despite the fact that they come from very different environments.

尽管他们来自完全不同的生活环境

They are all people who learned their hacking skills

但都是在十几岁的时候

in their early to mid-teens.

学习的黑客技术

They are all people

并且都

who demonstrate advanced ability

在数学和科学领域展现了

in maths and the sciences.

高超的才能

Remember that, when they developed those hacking skills,

记住一点，当他们开始开发自己的黑客技术之时

their moral compass had not yet developed.

都还没有成熟的价值观

And most of them, with the exception of SCRIPT and Cha0,

他们中的大多数，除了SCRIPT 和 Cha0

they did not demonstrate

都没有展示出

any real social skills in the outside world --

真正的社会技能--

only on the Web.

仅在网络中展现了

And the other thing is

另一个问题是

the high incidence of hackers like these

黑客高发于

who have characteristics which are consistent

具有唐氏综合症

with Asperger's syndrome.

的人群中

Now I discussed this

我和西蒙·拜龙·库何教授

with Professor Simon Baron-Cohen

讨论过这个问题

who's the professor of developmental psychopathology at Cambridge.

他是剑桥大学发展心理学的教授

And he has done path-breaking work on autism

在自闭症方面作了开创性的研究

and confirmed, also for the authorities here,

并且确认

that Gary McKinnon --

加里·麦金农--

who is wanted by the United States

被美国因侵入五角大楼

for hacking into the Pentagon --

通缉的罪犯--

suffers from Asperger's

患有唐氏综合症

and a secondary condition

和中度的

of depression.

抑郁症

And Baron-Cohen explained

拜龙·库何解释到

that certain disabilities

某些缺陷

can manifest themselves in the hacking and computing world

可以让他们在黑客和电脑世界中展现

as tremendous skills,

惊人的技能

and that we should not be throwing in jail

同时我们不应该把

people who have such disabilities and skills

拥有这些缺陷和技能的人关进监狱

because they have lost their way socially

因为他们已经失去了社交能力

or been duped.

且容易被骗

Now I think we're missing a trick here,

我觉得这个问题上我们得不偿失

because I don't think people like Max Vision should be in jail.

因为我不认为像Max Vision这样的人应该被抓进监狱

And let me be blunt about this.

我说的直接一点

In China, in Russia and in loads of other countries

在中国，俄罗斯和许多国家

that are developing cyber-offensive capabilities,

都在发展网络攻击能力

this is exactly what they are doing.

这就是他们在做的

They are recruiting hackers

他们雇用黑客

both before and after they become involved

不论从事网络犯罪还是间谍活动的黑客

in criminal and industrial espionage activities --

或是还未参与的--

are mobilizing them

把他们组织起来

on behalf of the state.

为国家工作

We need to engage

我们要雇用他们

and find ways of offering guidance

同时找到一种方法

to these young people,

为这些年轻人提供指导

because they are a remarkable breed.

因为他们都是了不起的人

And if we rely, as we do at the moment,

如果我们像现在这样仅仅依靠

solely on the criminal justice system

刑事司法系统

and the threat of punitive sentences,

和惩罚性的刑罚

we will be nurturing a monster we cannot tame.

将会培养出我们无法驯服的怪兽

Thank you very much for listening.

谢谢大家的倾听

(Applause)

（掌声）

Chris Anderson: So your idea worth spreading

克里斯·安德森：你的想法很值得推广

is hire hackers.

即雇用黑客

How would someone get over that kind of fear

可是如何让人消除这样的顾虑呢

that the hacker they hire

所雇用的黑客

might preserve that little teensy wormhole?

也许会带来微小的隐患

MG: I think to an extent,

MG:我认为在一定程度上

you have to understand

你应该了解

that it's axiomatic among hackers that they do that.

他们明白自己在做什么

They're just relentless and obsessive

只是对于所作的事情已经

about what they do.

无法自拔

But all of the people who I've spoken to

但我所交流过触犯了法律底线

who have fallen foul of the law,

的所有黑客

they have all said, "Please, please give us a chance

他们都说“求求你，请给我们一次机会

to work in the legitimate industry.

为合法的领域工作

We just never knew how to get there, what we were doing.

因为我们以前根本不知道如何用于正道，才做了那些

We want to work with you."

我们希望为你效力”

Chris Anderson: Okay, well that makes sense. Thanks a lot Misha.

克里斯·安德森：好，这就说的通了，非常感谢美莎

(Applause)

（掌声）