Governments don't understand cyber warfare. We need hackers | Rodrigo Bijou

翻译人员: Zhiting Chen 校对人员: Chen Zou

In 2008, Burhan Hassan, age 17,

2008年，一个17岁 名叫伯翰 哈赛的孩子

boarded a flight from Minneapolis

搭乘上了一架从明尼阿波利斯

to the Horn of Africa.

到非洲之角的飞机

And while Burhan was the youngest recruit,

虽然伯翰是新兵中最年轻的

he was not alone.

但他并不孤独

Al-Shabaab managed to recruit over two dozen young men

“青年党”要招募大概二十多个 年轻人

in their late teens and early 20s

这些年轻人在他们的青少年晚期和20岁早期

with a heavy presence on social media platforms like Facebook.

他们在像脸书这样的社交媒体平台上 频频露脸

With the Internet and other technologies,

有了网络和其他的科技

they've changed our everyday lives,

他们改变了我们每天的生活

but they've also changed recruitment, radicalization

但是他们也改变了 招募新兵，激进化的活动

and the front lines of conflict today.

以及当今战争冲突的前线

What about the links connecting Twitter,

那么关于连接维特

Google and protesters fighting for democracy?

谷歌和那些民主斗士之间 的联系

These numbers represent Google's public DNS servers,

这些数字代表谷歌的 公共DNS服务器

effectively the only digital border crossing

这是唯一有效的数字边境

protesters had and could use

抗议者们所拥有的 以及可以使用的

to communicate with each other, to reach the outside world

来互相沟通 来与外面的世界连接

and to spread viral awareness

以及对他们国内发生的事情

of what was happening in their own country.

进行快速意识的传播

Today, conflict is essentially borderless.

现在，冲突实际上是没有边境的

If there are bounds to conflict today,

如果今天还有冲突的边境

they're bound by digital, not physical geography.

那也是以数字为边界 而不是以自然地理的边界

And under all this is a vacuum of power

而且在那所有之下的 是权力的真空地带

where non-state actors, individuals and private organizations

在那里非国家组织，个人 和私人组织

have the advantage over slow, outdated military and intelligence agencies.

比迟钝的，过时的 军事情报机构有优势

And this is because, in the digital age of conflict,

这是因为 在数字化冲突的时代

there exists a feedback loop

存在着一种反馈回路

where new technologies, platforms like the ones I mentioned,

在这种回路中新的技术 像我刚才提到的平台

and more disruptive ones,

以及那些更具破坏性的平台

can be adapted, learned, and deployed by individuals and organizations

可以很好地被个人和组织 适应，学习和运用

faster than governments can react.

比政府的反应还要快

To understand the pace of our own government thinking on this,

为了了解我们政府 对这个问题考虑的情况

I like to turn to something aptly named

我想要给大家介绍一个恰当命名的

the Worldwide Threat Assessment,

全球威胁评估

where every year the Director of National Intelligence in the US

在那里每年 美国国家情报局局长

looks at the global threat landscape,

观察全球范围内的威胁局面

and he says, "These are the threats, these are the details,

然后他说，“这些是威胁 这些是细节

and this is how we rank them."

这是我们如何把危险分级的”

In 2007, there was absolutely no mention of cyber security.

在2007年，绝对没有人提到 网络安全问题

It took until 2011, when it came at the end,

这种情况一直持续到2011年 网络安全终于开始被重视

where other things, like West African drug trafficking, took precedence.

但当时在网络上, 其它事情 比如西非的毒品交易，占据优势

In 2012, it crept up, still behind things like terrorism and proliferation.

2012年，网络安全讨论开始升温 但仍然落后于恐怖主义和核扩散问题

In 2013, it became the top threat,

在2013年，这成为了最大的威胁

in 2014 and for the foreseeable future.

在2014年以及接下来可以预见的未来

What things like that show us

这样的事情告诉我们

is that there is a fundamental inability today

今天在政府方面 去适应和学习数字化冲突

on the part of governments to adapt and learn in digital conflict,

存在着一个 很基本的无能

where conflict can be immaterial, borderless, often wholly untraceable.

在那里冲突可以是无形的 无边界的，经常完全难以捉摸

And conflict isn't just online to offline, as we see with terrorist radicalization,

而且冲突不仅仅是从线上到线下 就像我们看到的恐怖主义激进化活动

but it goes the other way as well.

它也可以是从线下到线上的

We all know the horrible events that unfolded in Paris this year

大家都知道今年在巴黎发生的 那些恐怖事件

with the Charlie Hebdo terrorist attacks.

查理周刊遭到恐怖袭击

What an individual hacker or a small group of anonymous individuals did

个人黑客或者匿名者小团体所做的

was enter those social media conversations that so many of us took part in.

是进入到那些我们很多人都会 参与的社交媒体对话里

#JeSuisCharlie.

#我是查理这个话题

On Facebook, on Twitter, on Google,

在脸书，推特，谷歌上

all sorts of places where millions of people, myself included,

在各种平台上 数百万的人们，也包括我自己

were talking about the events

都在谈论这次事件

and saw images like this,

然后看到了这样的照片

the emotional, poignant image of a baby with "Je suis Charlie" on its wrist.

在这张令人百感交集的照片上 婴儿的手腕上套着“我是查理”的字样

And this turned into a weapon.

这变成了一件武器

What the hackers did was weaponize this image,

黑客们所做的 是把这张照片武装了起来

where unsuspecting victims,

那些毫无戒心的受害者

like all of us in those conversations,

就像在这个话题中的我们所有人

saw this image, downloaded it

看到了这张图片，下载下来

but it was embedded with malware.

但这张图片是被植入了恶意程序的

And so when you downloaded this image,

当你下载了这张图片的时候

it hacked your system.

你的系统就被黑客攻击了

It took six days to deploy a global malware campaign.

部署全球黑客活动花了6天的时间

The divide between physical and digital domains today

今天地理领域和数字领域的区别

ceases to exist,

已经不复存在了

where we have offline attacks like those in Paris

在那里我们遭到了线下的袭击 就像那些在巴黎的人们

appropriated for online hacks.

这样的袭击演变成了线上的黑客攻击

And it goes the other way as well, with recruitment.

从线上到线下也同样如此 比如那个招募新兵活动

We see online radicalization of teens,

我们在网上看到激进化的青年人

who can then be deployed globally for offline terrorist attacks.

这些青年人会被全球部署 在线下进行恐怖袭击活动

With all of this, we see that there's a new 21st century battle brewing,

综合所有这些，我们可以看到 21世纪新的战斗已经打响

and governments don't necessarily take a part.

而政府不见得会介入进来

So in another case, Anonymous vs. Los Zetas.

举另一个例子 匿名者 VS 洛斯哲塔斯

In early September 2011 in Mexico,

2011年九月初，在墨西哥

Los Zetas, one of the most powerful drug cartels,

“洛斯哲塔斯”是最有势力的 贩毒集团之一

hung two bloggers with a sign that said,

对两个写博客的人处以了绞刑 并展示着标语：

"This is what will happen to all Internet busybodies."

“所有在网络上爱管闲事的人 都会遭到这样的下场”

A week later, they beheaded a young girl.

一周后，他们把一个年轻女孩斩首了

They severed her head, put it on top of her computer

他们割下了她的头 放在了她的电脑上面

with a similar note.

也写了同样的标语

And taking the digital counteroffensive

他们还进行了数字化的反攻

because governments couldn't even understand what was going on or act,

因为政府甚至都不知道 发生了什么或者该怎么做

Anonymous, a group we might not associate as the most positive force in the world,

“匿名者”，一个我们可能不会和 这个世界上最正义力量联系在一起的团体

took action,

开始行动了

not in cyber attacks, but threatening information to be free.

他们不是进行网络攻击 而是威胁公开信息

On social media, they said,

在社交媒体上，他们说

"We will release information

“我们会释放信息

that ties prosecutors and governors to corrupt drug deals with the cartel."

这些信息关系到检察官和政府公务人员 和贩毒集团进行贪腐的毒品交易”

And escalating that conflict,

事态冲突升级了

Los Zetas said, "We will kill 10 people for every bit of information you release."

洛斯哲塔斯说，“你们每发一条信息 我们就杀10个人”

And so it ended there because it would become too gruesome to continue.

所以这此事件也随之结束了 因为如果再继续下去太可怕了

But what was powerful about this

但在这件事情中不可忽视的

was that anonymous individuals,

是那些匿名者

not federal policia, not military, not politicians,

他们并不是联邦警察 不是军人，也不是政客

could strike fear deep into the heart

却可以沉重地打击到

of one of the most powerful, violent organizations in the world.

这个世界上最有势力的 最暴力组织之一的内心深处

And so we live in an era

那么我们生活在这样一个

that lacks the clarity of the past in conflict,

缺乏对过去的冲突 有明晰认知的时代

in who we're fighting, in the motivations behind attacks,

我们不了解我们在与谁斗争 不了解袭击背后的动机

in the tools and techniques used,

不了解他们使用的武器和技术

and how quickly they evolve.

以及他们发展得有多快

And the question still remains:

而且问题仍然存在

what can individuals, organizations and governments do?

个人，组织和政府 能做些什么呢

For answers to these questions, it starts with individuals,

对于这些问题的答案 从个人方面开始

and I think peer-to-peer security is the answer.

我认为对等网络安全性 是这些问题的答案

Those people in relationships that bought over teens online,

对于那些在线上 收买年轻激进分子的人来说

we can do that with peer-to-peer security.

我们可以运用 对等网络安全

Individuals have more power than ever before

个人现在在影响 国家和国际安全方面

to affect national and international security.

和以前相比更有影响力

And we can create those positive peer-to-peer relationships

我们可以创造积极的 对等关系

on and offline,

在线上和线下

we can support and educate the next generation of hackers, like myself,

我们可以支持和培养 下一代的黑客，比如我

instead of saying, "You can either be a criminal or join the NSA."

而不是说，“你要不就加入国家安全局 要不就是个罪犯”

That matters today.

这在今天是很关键的

And it's not just individuals -- it's organizations, corporations even.

而且这也不仅仅在个人方面-- 是组织，甚至是企业

They have an advantage to act across more borders,

因为他们在跨越界限方面 很有优势

more effectively and more rapidly than governments can,

他们比政府的行动 更加快速和有效

and there's a set of real incentives there.

并且这里有一系列 真实的动机

It's profitable and valuable

在数字化时代

to be seen as trustworthy in the digital age,

能被人觉得值得信赖 是很值的

and will only be more so in future generations to come.

并且在未来的后代 也只会越来越值

But we still can't ignore government,

但我们仍然不能忽视政府作用

because that's who we turn to for collective action

因为政府是我们指望 采取集体行动

to keep us safe and secure.

来保卫我们安全的人

But we see where that's gotten us so far,

但我们看到的是到目前为止

where there's an inability to adapt and learn in digital conflict,

政府在适应和学习数字化冲突方面 是毫无能力的

where at the highest levels of leadership,

那些最高层领导人

the Director of the CIA, Secretary of Defense,

比如中情局局长和国防部长

they say, "Cyber Pearl Harbor will happen." "Cyber 9/11 is imminent."

他们说，“网络珍珠港事件会发生” “网络911事件也即将来临”

But this only makes us more fearful, not more secure.

但这样的言论只会使我们 更加恐惧，而不是感到更安全

By banning encryption in favor of mass surveillance and mass hacking,

当然了，通过禁止加密来达到 大量监视和大量黑客

sure, GCHQ and the NSA can spy on you.

英国政府通讯总部 和美国国家安全局可以监视你

But that doesn't mean that they're the only ones that can.

但这不意味着他们是唯一可以 做到这一点的人

Capabilities are cheap, even free.

获得这样的能力很便宜，甚至免费

Technical ability is rising around the world,

全世界的技术能力 在增强

and individuals and small groups have the advantage.

个人和小团体有优势

So today it might just be the NSA and GCHQ,

所以，今天或许只有美国国家安全局 和英国政府通讯总部监视你

but who's to say that the Chinese can't find that backdoor?

但谁能保证中国人 不会找到系统的后门呢

Or in another generation, some kid in his basement in Estonia?

或者是在下一代 某个爱沙尼亚少年在他的地下室

And so I would say that it's not what governments can do,

所以，我认为这不是关于 政府能够做什么

it's that they can't.

是关于他们不能做什么

Governments today need to give up power and control

现今的政府需要 放弃权力和控制力

in order to help make us more secure.

来让我们更加安全

Giving up mass surveillance and hacking and instead fixing those backdoors

放弃大范围的监控和黑客行为 修补系统的后门和漏洞

means that, yeah, they can't spy on us,

这意味着 是的，政府不能监视我们

but neither can the Chinese

但是中国人也不能

or that hacker in Estonia a generation from now.

或是那个爱沙尼亚的 下一代年轻人

And government support for technologies like Tor and Bitcoin

并且，政府支持 Tor浏览器和比特币等技术

mean giving up control,

意味着他们正在放松控制权

but it means that developers, translators, anybody with an Internet connection,

但这也意味着开发者，翻译者 以及任何拥有网路连接的人

in countries like Cuba, Iran and China, can sell their skills, their products,

在一些像是古巴，伊朗和中国这样的国家 能销售他们的技能，他们的产品

in the global marketplace,

在全球市场中

but more importantly sell their ideas,

但是更重要的是兜售他们的想法

show us what's happening in their own countries.

向我们展示在他们自己的国家 正在发生什么

And so it should be not fearful,

所以这不应该是可怕的

it should be inspiring to the same governments

这应该对上个世纪 同样的政府

that fought for civil rights, free speech and democracy

那些为争取公民权利 自由言论和民主制度

in the great wars of the last century,

激烈斗争的政府有所激励

that today, for the first time in human history,

直到今天 人类史上的第一次

we have a technical opportunity

我们有一个技术机会

to make billions of people safer around the world

能使全球数亿人生活得更安全

that we've never had before in human history.

在人类历史上 这是首次

It should be inspiring.

这应该非常令人振奋

(Applause)

（掌声）