Christopher Soghoian: Government surveillance — this is just the beginning

翻译人员: Eve Elliott 校对人员: William Choi

The 2011 Arab Spring

2011年的阿拉伯之春

captured the attention of the world.

引起全世界的关注，

It also captured the attention

也受到其他国家

of authoritarian governments in other countries,

独裁政府的关注，

who were worried that revolution would spread.

那些担心革命蔓延的政府。

To respond, they ramped up surveillance

为此，他们加强

of activists, journalists and dissidents

对激进分子、记者 和异己分子的监控，

who they feared would inspire revolution

害怕他们受到启发

in their own countries.

在自己国家发动革命。

One prominent Bahraini activist,

一个著名的巴林激进分子

who was arrested and tortured by his government,

被政府抓捕并受到拷问，

has said that the interrogators showed him

他说讯问人给他看

transcripts of his telephone calls

他的电话记录

and text messages.

和短信誊本，

Of course, it's no secret

当然，政府可以监听电话和监视短信，

that governments are able to intercept telephone calls and text messages.

这并不是秘密，

It's for that reason that many activists

正因如此，很多激进分子

specifically avoid using the telephone.

也特别避免使用电话，

Instead, they use tools like Skype,

而使用其他工具比如 SKYPE（网络电话），

which they think are immune to interception.

他们认为这样就可以避免受到监视，

They're wrong.

他们错了。

There have now been over the last few years

在过去几年，

an industry of companies

一个专门提供

who provide surveillance technology to governments,

监听技术给政府的公司，

specifically technology that allows those governments

特别是让政府

to hack into the computers

入侵监视目标的电脑，

of surveillance targets.

入侵监视目标的电脑，

Rather than intercepting the communications as they go over the wire,

他们除了通过窃听截听信息外，

instead they now hack into your computer,

现在他们也会入侵你的电脑，

enable your webcam, enable your microphone,

通过你的网络摄像机，或者麦克风

and steal documents from your computer.

盗取电脑上的文件。

When the government of Egypt fell in 2011,

2011年，当埃及政府倒台，

activists raided the office of the secret police,

激进分子突袭秘密警局的办公室，

and among the many documents they found

在他们发现的很多文件中，

was this document by the Gamma Corporation,

有一份来自伽玛公司，

by Gamma International.

属于伽玛国际。

Gamma is a German company

伽玛是一间德国公司，

that manufactures surveillance software

生产监控软件，

and sells it only to governments.

产品只卖给政府，

It's important to note that most governments

需要注意的是很多政府

don't really have the in-house capabilities

自身并没有实力

to develop this software.

来开发软件，

Smaller ones don't have the resources

较小的政府甚至没有资源

or the expertise,

或者经验去开发，

and so there's this market of Western companies

所以西方的公司就有了这样的市场，

who are happy to supply them with the tools

他们很愿意提供各样的工具

and techniques for a price.

和技术，

Gamma is just one of these companies.

伽玛就是这样的一间公司，

I should note also that Gamma never actually sold

我还注意到实际上伽玛

their software to the Egyptian government.

并没有把软件卖给埃及政府，

They'd sent them an invoice for a sale,

他们只是给埃及政府报价，

but the Egyptians never bought it.

但是埃及人并没有买，

Instead, apparently, the Egyptian government

而很明显埃及政府

used a free demo version of Gamma's software.

使用的是免费版本，

(Laughter)

（笑声）

So this screenshot is from a sales video

所以这个截图是来自

that Gamma produced.

一个伽玛生产的销售视频，

Really, they're just emphasizing

事实上，他们只是强调，

in a relatively slick presentation

通过一个简单的演讲，

the fact that the police can sort of sit

警察可以坐在空调办公室里，

in an air-conditioned office

警察可以坐在空调办公室里，

and remotely monitor someone

远程监控某些人，

without them having any idea that it's going on.

而被监视的人却无从所知。

You know, your webcam light won't turn on.

你知道，网络摄像机的灯不会亮起，

There's nothing to indicate that the microphone is enabled.

没有任何显示麦克风是开着的。

This is the managing director of Gamma International.

这是伽玛国际的管理总裁

His name is Martin Muench.

他的名字是 Martin Muench

There are many photos of Mr. Muench that exist.

现有很多 Muench 先生的照片,

This is perhaps my favorite.

这是我最喜欢的一张,

I'm just going to zoom in a little bit onto his webcam.

我只是放大一点点他的网络摄像机，

You can see there's a little sticker

你可以看到有一张小纸条,

that's placed over his camera.

那个是他的网络摄像机，

He knows what kind of surveillance is possible,

他知道会发生什么样的监控,

and so clearly he doesn't want it to be used

并且很明显他也不想被利用

against him.

来对抗他。

Muench has said that he intends

Muench　说过他希望

for his software to be used

他的软件被使用

to capture terrorists and locate pedophiles.

来捕捉恐怖分子和定位恋童癖的人

Of course, he's also acknowledged that once

当然，他也承认一旦

the software has been sold to governments,

软件卖给政府，

he has no way of knowing how it can be used.

他也不知道将被如何使用，

Gamma's software has been located on servers

伽玛软件已经服务于

in countries around the world,

世界各地的国家，

many with really atrocious track records

很多是骇人听闻的跟踪记录

and human rights violations.

和侵犯人权的事件，

They really are selling their software around the world.

他们会卖软件给世界各地，

Gamma is not the only company in the business.

伽玛不是这个产业里唯一的公司，

As I said, it's a $5 billion industry.

正如我说，这是一个50亿美金的行业，

One of the other big guys in the industry

另外一个巨头是

is an Italian company called Hacking Team.

一间意大利公司名为骇客团队　 （Hacking Team）,

Now, Hacking Team has what is probably

骇客团队可能做出了

the slickest presentation.

最花言巧语的广告,

The video they've produced is very sexy,

他们做的视频很性感,

and so I'm going to play you a clip

我现在就给你们展示一个短片,

just so you can get a feel

就是让你们感受下

both for the capabilities of the software

软件究竟能做什么,

but also how it's marketed

同样也看看他们是怎么推销产品

to their government clients.

给政府顾客的

(Video) Narrator: You want to look through your target's eyes.

（视频）叙述：你想看穿目标的眼睛

(Music)

（音乐）

You have to hack your target.

你必须骇客你的目标，

["While your target is browsing the web, exchanging documents, receiving SMS, crossing the borders"]

［“当你的目标浏览网页、 收发文件、接收信息、跨越边境”］

You have to hit many different platforms.

你必须击中不同的平台

["Windows, OS X, iOS, Android, Blackberry, Symbian, Linux"]

［“视窗、OS X、iOS、安卓、 黑莓、Symbian，Linux”］

You have to overcome encryption

你必须通过加密软件

and capture relevant data.

来获得相关数据

[Skype & encrypted calls, target location, messaging, relationships,

[Skype 和加密电话、 目标地、短信、关系、

web browsing, audio & video"]

网页、音频和视频“］

Being stealth and untraceable.

变得隐秘和无法追踪

["Immune to any protection system Hidden collection infrastructure"]

［不受任何保护系统影响 隐藏在基础设施中］

Deployed all over your country.

部署在你们国家的各个角落

["Up to hundreds of thousands of targets Managed from a single spot"]

［”由一个单一的地方 来控制超过成百上千的目标］

Exactly what we do.

正是我们所做的。

Christopher Soghoian: So, it would be funny if it wasn't true,

柯里斯．索侯恩：所以， 如果那不是真的就很有趣，

but, in fact, Hacking Team's software

但事实上，骇客团队的软件

is being sold to governments around the world.

已经卖给世界各地的政府。

Last year we learned, for example,

例如，去年我们知道，

that it's been used to target Moroccan journalists by the Moroccan government.

摩洛哥政府已经用它 来监控摩洛哥的记者。

Many, many countries it's been found in.

很多很多国家已经被发现使用。

So, Hacking Team has also been actively courting

所以，骇客团队也主动地推销给

the U.S. law enforcement market.

美国执法部门市场。

In the last year or so, the company

去年左右，

has opened a sales office in Maryland.

公司在马里兰开了销售部门，

The company has also hired a spokesperson.

并雇佣了一个发言人。

They've been attending

他们参加了

surveillance industry conferences

各式各樣的监控行业业內会议，

where law enforcement officials show up.

执法官员都有参加。

They've spoken at the conferences.

他们在会议上发言。

What I thought was most fascinating was

我认为最有意思的是

they've actually paid for the coffee break

今年较早前

at one of the law enforcement conferences

的其中一个执法会议，

earlier this year.

在中场休息时，他们請客喝咖啡。

I can't tell you for sure that Hacking Team

我不能确切地告诉你骇客团队

has sold their technology in the United States,

是否在美国卖过他们的技术，

but what I can tell you that if they haven't sold it,

但是我可以告诉你们， 如果他们没卖出去，

it isn't because they haven't been trying hard.

并不是因为他们没有尽力。

So as I said before,

所以正如我所说的，

governments that don't really have the resources

那些政府真的没有资源

to build their own tools will buy

生产自家工具，

off-the-shelf surveillance software,

就会购买现成的监视软件，

and so for that reason,

也正因为如此，

you see that the government of, say, Tunisia,

你会看到例如突尼斯政府，

might use the same software as the government of Germany.

可能使用跟德国政府相同的软件，

They're all buying off-the-shelf stuff.

他们都在购买现成的东西。

The Federal Bureau of Investigation in the United States

美国联邦调查局的预算

does have the budget to build their own surveillance technology,

包括建立自己监听技术

and so for several years, I've been trying

并且已有数年，

to figure out if and how the FBI

我正在尝试弄明白

is hacking into the computers of surveillance targets.

FBI 有没有和怎样 入侵监视目标的电脑。

My friends at an organization called the Electronic Frontier Foundation --

我一个在电子前哨基金会工作的朋友，

they're a civil society group —

这是一个民间社会组织，

obtained hundreds of documents from the FBI

得到 FBI 数百份文件，

detailing their next generation of surveillance technologies.

详细描述他们下一代的监视技术，

Most of these documents were heavily redacted,

很多文件都被批量遮挡，

but what you can see from the slides,

但是字里行间，

if I zoom in, is this term:

如果我放大，就是这些：

Remote Operations Unit.

远程控制单元。

Now, when I first looked into this,

现在，当我第一次看到这些，

I'd never heard of this unit before.

我从来没听过这个单元。

I've been studying surveillance for more than six years.

我研究监视技术已经有六年多了，

I'd never heard of it.

却从来没有听过。

And so I went online and I did some research,

所以我上网做了些调查，

and ultimately I hit the mother lode

最终找到了出处。

when I went to LinkedIn,

当我进入linkedin，

the social networking site for job seekers.

找工作的社交网站。

There were lots of former U.S. government contractors

有很多前美国政府的承包商

who had at one point worked

在远程控制单元

for the Remote Operating Unit,

那块领域工作，

and were describing in surprising detail on their CVs

在简历中详述很多细节，

what they had done in their former job.

有关他们所做的事情，

(Laughter)

（笑声）

So I took this information

所以我做了这个信息，

and I gave it to a journalist that I know and trust at the Wall Street Journal,

并且交给一个我认识信任的 华尔街日报记者，

and she was able to contact several other

他能够联系上

former law enforcement officials

其他的前执法官员，

who spoke on background and confirmed

那些证实

that yes, in fact, the FBI has a dedicated team

事实上，FBI确实存在一个团队，

that does nothing but hack into the computers

专门骇客

of surveillance targets.

所监视的电脑。

Like Gamma and Hacking Team,

像伽玛和骇客团队，

the FBI also has the capability

FBI 也有能力

to remotely activate webcams, microphones,

通过远程监控摄像头，麦克风，

steal documents, get web browsing information,

来盗取资料，获得网页信息，

the works.

文件。

There's sort of a big problem

这是一个大问题，

with governments going into hacking,

就是政府监听问题，

and that's that terrorists, pedophiles,

和那些恐怖分子，恋童癖者，

drug dealers, journalists and human rights activists

毒品交易者，记者们，和人权活动家

all use the same kinds of computers.

所有使用同类电脑的人，

There's no drug dealer phone

没有毒品交易者的电话

and there's no journalist laptop.

也没有记者的笔记本。

We all use the same technology,

我们都使用相同的技术，

and what that means then is that for governments

并且那意味着对政府而言，

to have the capability to hack into the computers

有能力通过电脑监视

of the real bad guys,

真正的坏人，

they also have to have the capability

他们还有能力

to hack into our devices too.

也监听我们的设备。

So governments around the world

所以全世界的政府

have been embracing this technology.

已拥有这项技术。

They've been embracing hacking

他们利用骇客

as a law enforcement technique,

作为一个执法技术，

but without any real debate.

但是没有真正意义的舆论。

In the United States, where I live,

在美国，我生活的地方，

there have been no congressional hearings.

没有国会听证会。

There's no law that's been passed

没有法律通过

specifically authorizing this technique,

特别授权这项技术，

and because of its power and potential for abuse,

并且因为它的权力和潜在的滥用，

it's vital that we have an informed public debate.

我们很有必要让公众知晓这些事实，并且就此展开辩论。

Thank you very much.

谢谢大家。

(Applause)

(掌声）