Hackers: the internet's immune system | Keren Elazari

翻译人员: Keke Gu 校对人员: Wei Wu

Four years ago,

四年前，

a security researcher,

一个安全研究员，

or, as most people would call it, a hacker,

或者按照大多数人的叫法，“黑客”，

found a way to literally

找到了一个方法

make ATMs throw money at him.

能够使提款机自动吐出钞票。

His name was Barnaby Jack,

他的名字叫巴纳比·杰克(Barnaby Jack)，

and this technique was later called "jackpotting"

这个技术随后被称为“中大奖(Jackpotting)”

in his honor.

以此向他致敬。

I'm here today because I think

我今天来到这里是因为我想

we actually need hackers.

我们需要黑客的存在。

Barnaby Jack

巴纳比·杰克

could have easily turned

利用他掌握的技术，

into a career criminal or James Bond villain

可以轻而易举地成为一个职业犯罪分子

with his knowledge,

或者詹姆斯·邦德那样的恶棍

but he chose to show the world

然而他选择向世界展示

his research instead.

他的研究成果。

He believed that sometimes

他相信有的时候

you have to demo a threat

你必须亮出真实的威胁

to spark a solution.

来迫使人们寻求解决方案。

And I feel the same way.

我也是这样认为的。

That's why I'm here today.

这就是我今天来到这的原因。

We are often terrified and fascinated

我们经常被吓到和觉得不可思议

by the power hackers now have.

黑客如今拥有如此的力量。

They scare us.

他们让我们觉得害怕。

But the choices they make

而他们做出的选择

have dramatic outcomes

有着戏剧化的结果

that influence us all.

从而影响到我们所有人。

So I am here today because I think we need hackers,

我今天来是想要证明这个世界需要黑客，

and in fact, they just might be

事实上，他们也许就是

the immune system for the information age.

这个信息时代的免疫系统。

Sometimes they make us sick,

有时候他们使我们觉得讨厌，

but they also find those hidden threats

但他们也找到那些隐藏的威胁

in our world,

存在于我们的世界里，

and they make us fix it.

他们迫使我们修正这些漏洞。

I knew that I might get hacked

我知道在演讲之后

for giving this talk,

我可能会被（其他黑客）攻击

so let me save you the effort.

所以我自己先自黑为敬

In true TED fashion,

按照TED流行的演讲风格

here is my most embarrassing picture.

这是让我最难堪的照片。

But it would be difficult for you to find me in it,

你可能很难在照片里找到我，

because I'm the one who looks like a boy

因为我是那个看起来像男生

standing to the side.

站在边上的人。

I was such a nerd back then

那时的我是那么一个书呆子

that even the boys on the Dungeons and Dragons team

甚至龙与地下城团队的男孩子

wouldn't let me join.

都不愿意我加入。

This is who I was,

这就是当时的我，

but this is who I wanted to be:

然而我想成为这样的人:

Angelina Jolie.

安吉丽娜·朱莉。

She portrayed Acid Burn

她塑造了“酸蚀”这个角色

in the '95 film "Hackers."

在95年电影《黑客》中。

She was pretty and she could rollerblade,

她很漂亮而且会滑旱冰，

but being a hacker, that made her powerful.

但作为一个黑客，让她很强大。

And I wanted to be just like her,

我那时就想跟她一样。

so I started spending a lot of time

所以我开始花很多时间

on hacker chat rooms and online forums.

在黑客聊天室和网络论坛上。

I remember one late night

我记得有一天很晚，

I found a bit of PHP code.

我找到了一些PHP代码。

I didn't really know what it did,

我不知道它到底做了什么，

but I copy-pasted it

我剪切并粘贴了它

and used it anyway

就这么用了

to get into a password-protected site

结果就黑进了一个有密码保护的网站

like that.

就这么简单。

Open Sesame.

芝麻开门。

It was a simple trick,

这是一个简单的把戏，

and I was just a script kiddie back then,

我当时也只是一个毛小子，

but to me, that trick,

但对我来说，那个把戏，

it felt like this,

让我觉得好像这样，

like I had discovered limitless potential

好像我发现了无限的可能

at my fingertips.

存在于我的指尖。

This is the rush of power that hackers feel.

这就是黑客所能感受到的力量冲击。

It's geeks just like me

像我这样的极客

discovering they have access to superpower,

发现他们有渠道可以获得超能量

one that requires the skill and tenacity

这个超能量需要技术和韧性

of their intellect,

来自于他们的智慧，

but thankfully no radioactive spiders.

而不需要放射性蜘蛛。

But with great power

但俗话说能力越大

comes great responsibility,

责任越大。

and you all like to think that if we had such powers,

你们所有人都希望 如果我们有这样的威力，

we would only use them for good.

我们只用它来做好事。

But what if you could read your ex's emails,

但如果你可以读你前任恋人的邮件，

or add a couple zeros to your bank account.

或者在你的银行账户上添几个零呢？

What would you do then?

你会做什么?

Indeed, many hackers do not resist

的确，很多黑客没有能够抗拒

those temptations,

这些诱惑，

and so they are responsible in one way or another

所以他们从某个方面来说 应担当一定的责任

to billions of dollars lost each year

每年上亿美元的损失

to fraud, malware or plain old identity theft,

蒙骗，恶意软件 或者纯粹的旧身份盗窃，

which is a serious issue.

都是严重的问题。

But there are other hackers,

但还有其他黑客，

hackers who just like to break things,

只是想破坏东西，

and it is precisely those hackers

也正是这些黑客

that can find the weaker elements in our world

能够找到我们的世界里 最脆弱的元素

and make us fix it.

并使我们修补它。

This is what happened last year

这是去年发生的事

when another security researcher

另一个安全研究员

called Kyle Lovett

叫做凯尔 劳维特

discovered a gaping hole

发现了一个大漏洞

in the design of certain wireless routers

存在于某无线路由器的设计中

like you might have in your home or office.

就像在你家里或办公室的那种。

He learned that anyone could remotely connect

他了解到任何人都可以

to these devices over the Internet

通过网络远程 连接到这些设备上

and download documents from hard drives

并从硬盘下载

attached to those routers,

附在这些路由器上的文件，

no password needed.

不需要密码。

He reported it to the company, of course,

他理所当然地汇报给了公司，

but they ignored his report.

但他们忽视了他的报告。

Perhaps they thought universal access

也许他们认为全球通用

was a feature, not a bug,

是一个特色，而不是一个错误，

until two months ago

直到两个月前

when a group of hackers used it

有一群黑客使用它

to get into people's files.

来获取人们的资料。

But they didn't steal anything.

但他们并没有盗取任何东西。

They left a note:

他们留下了一个信息：

Your router and your documents

“你的路由器和文件

can be accessed by anyone in the world.

可以被世界上任何一个人获取。”

Here's what you should do to fix it.

这里有你应该采用的修复方法。

We hope we helped.

我们希望这个有所帮助。

By getting into people's files like that,

像这样获取人们的文件，

yeah, they broke the law,

是的，他们触犯了法律，

but they also forced that company

但他们同时也逼迫那个公司

to fix their product.

来修复他们的产品。

Making vulnerabilities known to the public

将漏洞公之于众

is a practice called full disclosure

是一个叫做“完全暴露”的做法

in the hacker community,

这存在于黑客社区中，

and it is controversial,

它也是具有争论性的，

but it does make me think of how hackers

但它让我思考黑客

have an evolving effect on technologies we use

在我们使用的技术上 如何发挥进化的作用

every day.

在日常的每一天里。

This is what Khalil did.

这是哈里利所做的。

Khalil is a Palestinian hacker from the West Bank,

哈里利是一位来自西岸（注：约旦河西岸地区）的巴勒斯坦黑客，

and he found a serious privacy flaw on Facebook

他在脸书（Facebook）上发现了 一个很严重的隐私漏洞

which he attempted to report

为此他尝试通过这家公司的

through the company's bug bounty program.

漏洞报告奖励系统报告这个漏洞。

These are usually great arrangements for companies

通常公司都会有很好的安排

to reward hackers disclosing vulnerabilities

来奖励公开漏洞的黑客

they find in their code.

如果他们能在程序中找到漏洞的话。

Unfortunately, due to some miscommunications,

不幸的是，因为一些沟通问题，

his report was not acknowledged.

他的报告没有得到肯定。

Frustrated with the exchange,

由于交流不顺而感到沮丧的他

he took to use his own discovery

决定将他自己的发现

to post on Mark Zuckerberg's wall.

张贴在马克 扎克伯格的脸书上，

This got their attention, all right,

这个引起了他们的注意，

and they fixed the bug,

他们修正了错误，

but because he hadn't reported it properly,

但因为他没有恰当地提出报告，

he was denied the bounty usually paid out

他没有获得奖金，

for such discoveries.

通常这些奖金是用来奖励此类发现的。

Thankfully for Khalil,

对于哈里利，幸运的是，

a group of hackers were watching out for him.

一群黑客保护着他。

In fact, they raised more than 13,000 dollars

事实上，他们筹集了13,000多美元

to reward him for this discovery,

来奖励他的这个发现，

raising a vital discussion in the technology industry

这件事在科技领域引起了重要的讨论

about how we come up with incentives

我们应该如何用奖励

for hackers to do the right thing.

来引导黑客做正确的事。

But I think there's a greater story here still.

但我认为这还有一个更重要的信息。

Even companies founded by hackers,

即使是黑客建立的公司，

like Facebook was,

就像脸书一样，

still have a complicated relationship

依然有着很复杂的关系

when it comes to hackers.

存在于黑客之间。

And so for more conservative organizations,

对于那些更保守一些的公司来说，

it is going to take time and adapting

他们将需要更长的时间来调整

in order to embrace hacker culture

从而接受黑客文化

and the creative chaos that it brings with it.

以及随之而来的创意杂烩。

But I think it's worth the effort,

但我觉得一切努力是值得的，

because the alternative,

因为相反的，

to blindly fight all hackers,

如果盲目地抵抗所有黑客，

is to go against the power you cannot control

就相当于抵抗你不能操控的力量

at the cost of stifling innovation

并付出扼杀创新

and regulating knowledge.

和控制知识的代价。

These are things that will come back and bite you.

这些事情会带来严重的后果。

It is even more true

更加真实的是，

if we go after hackers

如果我们对抗黑客

that are willing to risk their own freedom

这些愿意用自己的自由来冒险

for ideals like the freedom of the web,

而维护网络自由的人，

especially in times like this, like today even,

特别是像现在这个时代，像今天，

as governments and corporates

政府和公司

fight to control the Internet.

为掌控网络而战，

I find it astounding

我觉得很惊讶

that someone from the shadowy corners of cyberspace

某个来自数字空间阴暗角落的人

can become its voice of opposition,

能够成为反对面的声音，

its last line of defense even,

甚至是其防御的最后一道防线，

perhaps someone like Anonymous,

也许某人就像匿名者，

the leading brand of global hacktivism.

国际黑客组织的首领。

This universal hacker movement

这个国际黑客行动

needs no introduction today,

今天不需要做介绍，

but six years ago

但在六年前

they were not much more than an Internet subculture

他们不过是网络上的亚文化

dedicated to sharing silly pictures of funny cats

致力于分享搞笑猫咪的无聊照片

and Internet trolling campaigns.

和网络讼棍活动。

Their moment of transformation was in early 2008

他们的转型是在2008年初

when the Church of Scientology

当时山达基教会

attempted to remove certain leaked videos

尝试消除某些被泄露的录像

from appearing on certain websites.

从而不在某些网站出现。

This is when Anonymous was forged

匿名者就在这个时候成立了

out of the seemingly random collection

由一群似乎任意组合起来的

of Internet dwellers.

网民组成。

It turns out,

事实证明，

the Internet doesn't like it

互联网并不喜欢

when you try to remove things from it,

你尝试从上面删除东西，

and it will react with cyberattacks

而且它会用网络攻击作为回应

and elaborate pranks

同时制造恶作剧

and with a series of organized protests

和一系列有组织的抗议

all around the world,

在全世界范围进行，

from my hometown of Tel Aviv

从我的故乡特拉维夫

to Adelaide, Australia.

到澳大利亚的阿德莱德。

This proved that Anonymous and this idea

这证明了匿名和这个主意

can rally the masses from the keyboards

能够将大众团结起来，

to the streets,

由键盘到街道，

and it laid the foundations

它同时也奠定了基础

for dozens of future operations

为了未来很多的行动

against perceived injustices

反对偏见

to their online and offline world.

针对他们线上和线下的世界。

Since then, they've gone after many targets.

从那时起，他们就为了很多目标 而努力。

They've uncovered corruption, abuse.

他们揭露贪污，暴力。

They've hacked popes and politicians,

他们网络袭击了教皇和政客，

and I think their effect is larger

我觉得他们的作用

than simple denial of service attacks

大过于对服务攻击单纯的抵赖

that take down websites

这些攻击包括击垮网站

or even leak sensitive documents.

或者泄露敏感文件。

I think that, like Robin Hood,

我认为，就像罗宾汉一样，

they are in the business of redistribution,

他们所做的是重新分配，

but what they are after isn't your money.

但他们追求的并不是你的钱。

It's not your documents. It's your attention.

不是你的文件。是你的关注。

They grab the spotlight for causes they support,

为了他们所支持的事业， 他们抓住聚光点，

forcing us to take note,

强迫我们去注意，

acting as a global magnifying glass

跟一个全球放大镜一样

for issues that we are not as aware of

为了那些我们没注意到

but perhaps we should be.

却恰恰也许是 我们应该注意的问题。

They have been called many names

他们有许多名字

from criminals to terrorists,

从犯罪分子到恐怖分子，

and I cannot justify their illegal means,

我不能为他们非法的方式辩护，

but the ideas they fight for

但他们所为之奋斗的想法

are ones that matter to us all.

确是对于我们所有人都很重要的。

The reality is,

事实上，

hackers can do a lot more than break things.

比起搞破坏，黑客能做的有很多。

They can bring people together.

他们能把人们团结起来。

And if the Internet doesn't like it

如果互联网不喜欢

when you try to remove things from it,

你尝试从上面删除东西，

just watch what happens

你只需要看看会发生什么

when you try to shut the Internet down.

当你尝试关闭互联网。

This took place in Egypt in January 2011,

2011年1月在埃及就发生了这样的事，

and as President Hosni Mubarak

总统胡斯尼·穆巴拉克

attempted a desperate move

企图做出一个不顾一切的举动

to quash the rising revolution on the streets of Cairo,

那就是熄灭在开罗街头 日益渐长的革命，

he sent his personal troops

他派出了他的私人军队

down to Egypt's Internet service providers

以及埃及的网络服务供应者

and had them physically kill the switch

让他们切断了开关

on the country's connection to the world overnight.

一夜之间，整个国家失去了与世界的联系。

For a government to do a thing like that

对于一个国家来说做这样一件事

was unprecedented,

是史无前例的，

and for hackers, it made it personal.

对于黑客来说，这是对个人的攻击。

Hackers like the Telecomix group

Telecomix group 的黑客们

were already active on the ground,

已经在民间积极活动，

helping Egyptians bypass censorship

帮助埃及人民翻越审查

using clever workarounds like Morse code

他们使用聪明的解决方法，例如摩尔斯电码

and ham radio.

和业余的无线电设备。

It was high season for low tech,

这是一个老技术重新流行的时期，

which the government couldn't block,

政府阻止不了它，

but when the Net went completely down,

可是当整个网络全线塌落的时候，

Telecomix brought in the big guns.

Telecomix拿出了杀手锏。

They found European service providers

他们找到了欧洲服务供应者

that still had 20-year-old

这些供应者依然有20年之久的

analog dial-up access infrastructure.

模拟拨号接入基础设施。

They opened up 300 of those lines

他们开通了300条这样的线路

for Egyptians to use,

供于埃及人们使用，

serving slow but sweet Internet connection

提供慢速但美好的网络连接

for Egyptians.

给埃及人民。

This worked.

这个方法成功了。

It worked so well, in fact,

它如此有效，

one guy even used it to download an episode

以至于有人用它来下载电视剧

of "How I Met Your Mother."

《老爸老妈的浪漫史》

But while Egypt's future is still uncertain,

然而在埃及的未来还不确定的时候，

when the same thing happened in Syria

同样的事在叙利亚发生了

just one year later,

就在一年之后，

Telecomix were prepared with those Internet lines,

Telecomix准备好了这些网络线路，

and Anonymous,

还有匿名者，

they were perhaps the first international group

或许是第一个国际组织

to officially denounce the actions

正式谴责

of the Syrian military

叙利亚军队的行为

by defacing their website.

并污损了他们的网站。

But with this sort of power,

可是拥有这样的威力，

it really depends on where you stand,

完全取决于你的立场，

because one man's hero

因为一个人的英雄

can be another's villain,

对于另一个人来说可能是恶棍，

and so the Syrian Electronic Army

叙利亚电子部队

is a pro-Assad group of hackers

是一群拥护阿萨德的黑客

who support his contentious regime.

他们拥护他具有争议性的政权。

They've taken down multiple high-profile targets

他们拿下了几个高调的目标

in the past few years,

在过去的几年中，

including the Associated Press's Twitter account,

包括相关媒体的推特账户，

in which they posted a message

并在其上发布信息

about an attack on the White House

说已经攻击白宫

injuring President Obama.

总统奥巴马受伤

This tweet was fake, of course,

当然，这个推文是捏造的，

but the resulting drop in the Dow Jones index

可是道琼斯指数当天下滑的结果

that day was most certainly not,

确是无容置疑的，

and a lot of people lost a lot of money.

有很多人损失了很多钱。

This sort of thing is happening all over the world right now.

这样的事正在全世界范围发生着。

In conflicts from the Crimean Peninsula

这些冲突从克里米亚半岛

to Latin America,

到拉丁美洲，

from Europe to the United States,

从欧洲到美国，

hackers are a force for social,

黑客是一股力量，影响社会，

political and military influence.

政治以及军事。

As individuals or in groups,

作为个人或集团，

volunteers or military conflicts,

自愿者或军事冲突，

there are hackers everywhere.

黑客无所不在。

They come from all walks of life,

他们来自于各行各业，

ethnicities, ideologies and genders, I might add.

来自不同的种族、性别和意识形态。

They are now shaping the world's stage.

他们正塑造着世界舞台。

Hackers represent an exceptional force for change

黑客代表一股推动改变的优越力量

in the 21st century.

就在21世纪。

This is because access to information

这是因为获得信息的途径

is a critical currency of power,

是一个关键的力量流通。

one which governments would like to control,

这是一个政府希望能够控制，

a thing they attempt to do by setting up

并通过尝试建立

all-you-can-eat surveillance programs,

自助餐型监督项目来控制的事。

a thing they need hackers for, by the way.

顺便说一下，这事他们也需要黑客。

And so the establishment has long had

所以在设立过程中一直都是

a love-hate relationship when it comes to hackers,

对黑客又爱又恨的一种关系，

because the same people who demonize hacking

因为将黑客妖魔化的同一群人

also utilize it at large.

也在广泛地利用黑客。

Two years ago,

两年前，

I saw General Keith Alexander.

我见到了凯斯·亚历山大将军。

He's the NSA director and U.S. cyber commander,

他是当时美国国家安全局局长 以及美国网战司令部首任司令，

but instead of his four star general uniform,

他当时没有穿四星司令制服，

he was wearing jeans and a t-shirt.

而是穿着牛仔裤和一件T恤。

This was at DEF CON,

那是在DEFCON大会上，

the world's largest hacker conference.

全球规模最大的黑客会议。

Perhaps like me, General Alexander

或者和我一样，亚历山大将军

didn't see 12,000 criminals that day in Vegas.

那天在拉斯维加斯 并没有看到12000名罪犯，

I think he saw untapped potential.

我认为他看到了未被开发的潜力。

In fact, he was there to give a hiring pitch.

事实上，他在那做了一个招聘会。

"In this room right here," he said,

"就在这个房间里，"他说，

"is the talent our nation needs."

"有我们国家需要的人才。"

Well, hackers in the back row replied,

然后，坐在后排的黑客回答，

"Then stop arresting us."

"那就停止逮捕我们。"

(Applause)

（掌声）

Indeed, for years,

正是如此，多年以来，

hackers have been on the wrong side of the fence,

黑客总是错误的一方

but in light of what we know now,

但当我们了解之后，

who is more watchful of our online world?

谁其实更关注我们的线上世界呢？

The rules of the game are not that clear anymore,

游戏规则不再清晰，

but hackers are perhaps the only ones

然而黑客也许是仅有的

still capable of challenging overreaching governments

能够挑战不自量力的政府

and data-hoarding corporates

和积攒数据公司的力量，

on their own playing field.

并是在他们自己的领域内。

To me, that represents hope.

对于我来说，这就意味着希望。

For the past three decades,

过去的30年以来，

hackers have done a lot of things,

黑客做过很多事，

but they have also impacted civil liberties,

他们也影响过公民自由，

innovation and Internet freedom,

创新和网络自由，

so I think it's time we take a good look

所以我认识现在是时候让我们来看看

at how we choose to portray them,

我们应该选择如何看待他们，

because if we keep expecting them to be the bad guys,

因为如果我们一直觉得他们是坏人，

how can they be the heroes too?

他们又如何同时成为英雄呢？

My years in the hacker world

我在黑客世界的这些年

have made me realize

让我意识到

both the problem and the beauty about hackers:

黑客的问题和美好两方面：

They just can't see something broken in the world

他们就是不能看到 这个世界上有缺陷的东西

and leave it be.

而置之不顾。

They are compelled

他们被迫

to either exploit it or try and change it,

开发或者尝试改变它，

and so they find the vulnerable aspects

所以他们找到脆弱的地方

in our rapidly changing world.

在我们这样一个日益巨变的世界。

They make us, they force us to fix things

他们让我们，强迫我们去修复东西，

or demand something better,

或者要求更好的东西，

and I think we need them

我想我们需要他们

to do just that,

做这些事，

because after all, it is not information

因为毕竟不是信息

that wants to be free, it's us.

需要自由，是我们需要它。

Thank you very much.

非常感谢。

Thank you. (Applause)

谢谢。（掌声）

Hack the planet!

侵入地球！