James Lyne: Everyday cybercrime -- and what you can do about it

翻译人员: Riyan Song 校对人员: Viv Yang

I'm going to be showing some of the cybercriminals'

我将向你们展示网络罪犯们的一些

latest and nastiest creations.

最新、最邪恶的作品。

So basically, please don't go and download

所以，请不要去下载

any of the viruses that I show you.

我将展示的病毒。

Some of you might be wondering what a cybersecurity specialist looks like,

你们可能会好奇网络安全专家是什么样子的

and I thought I'd give you a quick insight

那就让我来简要介绍一下

into my career so far.

我迄今为止的工作经历吧。 （电脑奇客 ->苹果忠粉->Linux研究“猿”->TED演讲人）

It's a pretty accurate description.

这幅图描述得相当准确 （电脑奇客 ->苹果忠粉->Linux研究“猿”->TED演讲人）

This is what someone that specializes

这就是一个研究

in malware and hacking looks like.

恶意软件和黑客的人

So today, computer viruses and trojans,

今天，计算机病毒和木马程序

designed to do everything from stealing data

被用来做各种事情，如盗取数据，

to watching you in your webcam

打开你的网络摄像头偷窥，

to the theft of billions of dollars.

甚至窃取数十亿美金。

Some malicious code today goes as far

有些恶意代码甚至能

as targeting power, utilities and infrastructure.

攻击能源、公共和基础设施。

Let me give you a quick snapshot

让我们先迅速了解一下

of what malicious code is capable of today.

如今的恶意代码有多大能耐。

Right now, every second, eight new users

现在，每秒钟就有8名新用户

are joining the Internet.

加入互联网

Today, we will see 250,000 individual new computer viruses.

今天，共有25万种新型计算机病毒诞生

We will see 30,000 new infected websites.

3万个中毒网站

And, just to kind of tear down a myth here,

对了，在此澄清一个流言，

lots of people think that when you get infected

很多人认为他们的电脑之所以会感染病毒，

with a computer virus, it's because you went to a porn site.

是因为他们访问了色情网站

Right? Well, actually, statistically speaking,

对吧？但其实，据数字统计，

if you only visit porn sites, you're safer.

如果你只访问色情网站，那还更安全些。

People normally write that down, by the way. (Laughter)

顺便提一句，人们通常会记下这点 （笑）

Actually, about 80 percent of these

事实上，80%的电脑病毒来自

are small business websites getting infected.

受到病毒感染的商业网站。

Today's cybercriminal, what do they look like?

如今的网络罪犯到底长什么样子？

Well, many of you have the image, don't you,

很多人脑中会浮现出这样的画面，

of the spotty teenager sitting in a basement,

一个满脸粉刺的小伙子窝在地下室里，

hacking away for notoriety.

为了出名肆意发动黑客袭击。

But actually today, cybercriminals

但如今的网络罪犯

are wonderfully professional and organized.

具有高度的专业性和组织性。

In fact, they have product adverts.

事实上，他们甚至推出了产品广告。

You can go online and buy a hacking service

你可以上网购买黑客服务

to knock your business competitor offline.

拉黑你商业对手的网站。

Check out this one I found.

一起来看看我找到的这条广告。

(Video) Man: So you're here for one reason,

（视频）你来这里只有一个原因，

and that reason is

那就是

because you need your business competitors,

你希望打倒你的商业对手、

rivals, haters, or whatever the reason is, or who,

敌人、仇人，无论什么人、什么原因，

they are to go down.

他们就要完蛋了

Well you, my friend, you've came to the right place.

嘿，朋友，你找对地方了！

If you want your business competitors to go down,

想让你的商业对手死机？

well, they can.

是的，他们会的。

If you want your rivals to go offline, well, they will.

想让你的对手掉线？好的，他们会的。

Not only that, we are providing a short-term-to-long-term

不仅如此，我们还提供短期至长期的

DDOS service or scheduled attack,

分布式拒绝服务(DDos)攻击和定时攻击。

starting five dollars per hour for small personal websites

攻击小型个人网站，每小时起价只需5美金

to 10 to 50 dollars per hour.

至10~50美金价格不等。

James Lyne: Now, I did actually pay

其实我曾经付钱

one of these cybercriminals to attack my own website.

给一个这样的网络罪犯来攻击我自己的网站。

Things got a bit tricky when I tried to expense it at the company.

但我在向公司报销这笔费用时有点麻烦

Turns out that's not cool.

结果不太理想。

But regardless, it's amazing how many products

但不管怎样，如今竟有如此多产品和服务

and services are available now to cybercriminals.

可为网络罪犯们提供方便。

For example, this testing platform,

比方说，这个测试平台

which enables the cybercriminals

可以让网络罪犯们

to test the quality of their viruses

在将病毒传播出去之前

before they release them on the world.

测试它们的效果。

For a small fee, they can upload it

只需花少量的钱，他们就能上传病毒

and make sure everything is good.

检查代码是否一切正常。

But it goes further.

不仅如此，

Cybercriminals now have crime packs

网络罪犯们现在还拥有犯罪工具包，

with business intelligence reporting dashboards

包括智能商业报告

to manage the distribution of their malicious code.

来管理恶意代码的传播。

This is the market leader in malware distribution,

这就是流氓软件传播的市场领导者，

the Black Hole Exploit Pack,

“黑洞开发包”

responsible for nearly one third of malware distribution

在过去的半年里，近三分之一流氓软件的散播

in the last couple of quarters.

都与其有关。

It comes with technical installation guides,

它自带安装指南，

video setup routines,

视频设置程序，

and get this, technical support.

听听这个，技术支持。

You can email the cybercriminals and they'll tell you

你可以给网络罪犯们发邮件，然后他们就会告诉你

how to set up your illegal hacking server.

如何建立你的非法黑客服务器。

So let me show you what malicious code looks like today.

现在，我给各位展示一下今天的恶意代码如何工作。

What I've got here is two systems,

这里有两个系统，

an attacker, which I've made look all Matrix-y and scary,

一个是攻击系统，我给它弄了个恐怖的矩阵形界面，

and a victim, which you might recognize from home or work.

另一个是受害人系统，也就是你的家用或办公电脑。

Now normally, these would be on different sides

通常来说，它们在地球或互联网的

of the planet or of the Internet,

不同两端，

but I've put them side by side

但我把他们放在一起

because it makes things much more interesting.

因为这样让事情变得更有趣。

Now, there are many ways you can get infected.

现在，有许多途径可使你的电脑被感染。

You will have come in contact with some of them.

你们可能经历过其中的一些。

Maybe some of you have received an email

例如你们可能收到封邮件说：

that says something like, "Hi, I'm a Nigerian banker,

“嗨，我是一名尼日利亚的银行家，

and I'd like to give you 53 billion dollars

我打算给你530亿美元

because I like your face."

因为我喜欢你的长相。”

Or funnycats.exe, which rumor has it

或收到 funnycats.exe （“有趣的小猫”)文件，据说

was quite successful in China's recent campaign against America.

它在最近的中美网络对抗中功不可没。

Now there are many ways you can get infected.

你会从很多渠道受到病毒攻击。

I want to show you a couple of my favorites.

我想展示我最喜欢的几个。

This is a little USB key.

这是一只小U盘

Now how do you get a USB key to run in a business?

然而你怎么才能将你的U盘插到一个公司的电脑里呢？

Well, you could try looking really cute.

你可以尝试卖萌。

Awww.

喔～～～

Or, in my case, awkward and pathetic.

或者像我一样，装可怜。

So imagine this scenario: I walk into one of your businesses,

请想象这样的情景：我可怜兮兮地走进你的公司，

looking very awkward and pathetic, with a copy of my C.V.

手里拿着我的简历，

which I've covered in coffee,

上面留着咖啡渍，

and I ask the receptionist to plug in this USB key

我请求前台人员插入我的U盘

and print me a new one.

来帮我打印一份新的简历。

So let's have a look here on my victim computer.

让我们来看看这边受攻击的电脑。

What I'm going to do is plug in the USB key.

我将要插入这只U盘。

After a couple of seconds,

几秒钟后，

things start to happen on the computer on their own,

有些东西开始在这台电脑里自动运行了，

usually a bad sign.

通常这是个坏兆头。

This would, of course, normally happen

当然，这些通常会在

in a couple of seconds, really, really quickly,

几秒之内发生，非常非常快，

but I've kind of slowed it down

但我让这个过程慢了下来，

so you can actually see the attack occurring.

这样你就能实际看到攻击是如何发生的。

Malware is very boring otherwise.

不然，恶意程序是很无聊的。

So this is writing out the malicious code,

这是在写出恶意代码，

and a few seconds later, on the left-hand side,

几秒后，在左侧，

you'll see the attacker's screen get some interesting new text.

你会看到攻击者的电脑屏幕上出现了一些有趣的新文本。

Now if I place the mouse cursor over it,

现在如果我把光标移过去，

this is what we call a command prompt,

就会出现一个所谓的命令提示符，

and using this we can navigate around the computer.

通过它，我们就可以随意操纵受害者电脑了。

We can access your documents, your data.

我们可以访问你的文件，你的数据。

You can turn on the webcam.

还可以打开网络摄像头。

That can be very embarrassing.

这有点尴尬。

Or just to really prove a point,

为了进一步证明我的观点，

we can launch programs like my personal favorite,

我们可以启动一些程序，比如说我最喜欢的，

the Windows Calculator.

Windows 计算器。

So isn't it amazing how much control

这难道不令人惊讶吗？

the attackers can get with such a simple operation?

一个简单操作竟可让攻击者尽在掌控。

Let me show you how most malware

请让我展示一下今天的恶意程序

is now distributed today.

是如何传播的。

What I'm going to do is open up a website

我要打开一个

that I wrote.

我自己编的网站。

It's a terrible website. It's got really awful graphics.

这是一个糟糕的网站，页面很丑。

And it's got a comments section here

这里有一个留言板

where we can submit comments to the website.

我们可以在此提交评论。

Many of you will have used something a bit like this before.

你们以前可能用过类似的东西。

Unfortunately, when this was implemented,

可惜，当评论提交成功后，

the developer was slightly inebriated

开发者就会有些自我陶醉，

and managed to forget

以至于忘记了

all of the secure coding practices he had learned.

他接受过的所有的安全编程训练。

So let's imagine that our attacker,

想象一下，我们的攻击系统，

called Evil Hacker just for comedy value,

为了好玩，就叫它“邪恶黑客”吧，

inserts something a little nasty.

它嵌入了一些有点邪恶的东西。

This is a script.

这是一个脚本。

It's code which will be interpreted on the webpage.

它是一段可通过网页读取的代码。

So I'm going to submit this post,

下面我将发出这条讯息，

and then, on my victim computer,

然后，在我的受害电脑上，

I'm going to open up the web browser

我要打开网页浏览器，

and browse to my website,

浏览我的网站，

www.incrediblyhacked.com.

www.incrediblyhacked.com.

Notice that after a couple of seconds,

请注意，几秒钟后，

I get redirected.

页面跳转了，

That website address at the top there,

你马上就能看到，

which you can just about see, microshaft.com,

屏幕上方的网址是：microshaft.com

the browser crashes as it hits one of these exploit packs,

浏览器读取了某个开发包而崩溃

and up pops fake antivirus.

并弹出了假冒的杀毒软件提示。

This is a virus pretending to look like antivirus software,

其实这是病毒伪装成了杀毒软件，

and it will go through and it will scan the system,

它将开始运行，并扫面你的系统。

have a look at what its popping up here.

看一下这里弹出来了什么。

It creates some very serious alerts.

它制造了一些严重警告，

Oh look, a child porn proxy server.

快看，一个儿童色情代理服务器。

We really should clean that up.

我们应该彻底清除它。

What's really insulting about this is

最不能忍受的是，

not only does it provide the attackers with access to your data,

它不仅能让黑客获取你的数据，

but when the scan finishes, they tell you

在扫描完成后，它还会通知你

in order to clean up the fake viruses,

为彻底杀掉假病毒，

you have to register the product.

你必须要注册此产品。

Now I liked it better when viruses were free.

现在我不得不说，我更喜欢病毒免费的日子。

(Laughter)

（笑）

People now pay cybercriminals money

现在的人们付钱给网络罪犯们

to run viruses,

让他们运行病毒程序。

which I find utterly bizarre.

对此我完全无法理解。

So anyway, let me change pace a little bit.

不管怎样，让我变换一下节奏，

Chasing 250,000 pieces of malware a day

每天追踪25万种恶意程序

is a massive challenge,

实在是很大的挑战，

and those numbers are only growing

而数字仍在上升，

directly in proportion to the length of my stress line, you'll note here.

你可以看到，这和我皱纹的长度成正比。

So I want to talk to you briefly

所以我想很快地介绍一下

about a group of hackers we tracked for a year

我们追踪了一年的一个黑客团体，

and actually found --

事实上，我们已经找到了他们，

and this is a rare treat in our job.

这是我们的工作中少有的成果。

Now this was a cross-industry collaboration,

现在，追踪黑客已成为一项跨界合作，

people from Facebook, independent researchers,

Fackbook网友、独立研究者、

guys from Sophos.

Sophos防毒软件专家等均在其中。

So here we have a couple of documents

这里有一些文件，

which our cybercriminals had uploaded

是网络罪犯们上传到

to a cloud service, kind of like Dropbox or SkyDrive,

Dropbox或SkyDrive一类云服务器中的。

like many of you might use.

就像你们使用的方法一样。

At the top, you'll notice a section of source code.

在文件上方能看到一段源代码

What this would do is send the cybercriminals

它的作用是每天发给网络罪犯们

a text message every day telling them how much money

一条讯息，告诉他们

they'd made that day,

每天的收入

so a kind of cybercriminal billings report, if you will.

你也可以把它看做网络罪犯们的对账单。

If you look closely, you'll notice a series

如果你仔细看，就会发现一连串的

of what are Russian telephone numbers.

俄罗斯电话号码。

Now that's obviously interesting,

这就很有趣了，

because that gives us a way of finding our cybercriminals.

因为这就为我们的追踪提供了一条线索。

Down below, highlighted in red,

下方，红色显示的，

in the other section of source code,

另一段源代码，

is this bit "leded:leded."

这里写道：“leded:leded.”

That's a username,

这个是用户名，

kind of like you might have on Twitter.

有点类似于你在推特上用的。

So let's take this a little further.

让我们再进一步了解一下

There are a few other interesting pieces

网络罪犯们还上传了

the cybercriminals had uploaded.

一些其他的有意思的东西。

Lots of you here will use smartphones

你们当中有很多人会在开会时，

to take photos and post them from the conference.

用智能手机拍照并上传。

An interesting feature of lots of modern smartphones

很多现代智能手机都有一个有趣的特点，

is that when you take a photo,

就是当你拍了一张照片时，

it embeds GPS data about where that photo was taken.

它都会自动嵌入GPS数据以显示照片的拍摄位置。

In fact, I've been spending a lot of time

事实上，最近，我在交友网站上

on Internet dating sites recently,

花费了很多时间，

obviously for research purposes,

当然，我是为了做研究。

and I've noticed that about 60 percent

我注意到，在交友网站上

of the profile pictures on Internet dating sites

约有60%的头像照片

contain the GPS coordinates of where the photo was taken,

包含了照片的GPS定位信息。

which is kind of scary

这有点恐怖，

because you wouldn't give out your home address

因为你肯定不愿意把你的家庭住址

to lots of strangers,

告诉陌生人，

but we're happy to give away our GPS coordinates

但是我们愿意将自己的GPS坐标

to plus or minus 15 meters.

公布给你周围15米左右人，

And our cybercriminals had done the same thing.

我们的网络罪犯们也做了同样的事情。

So here's a photo which resolves to St. Petersburg.

这里有一张拍摄于圣彼得堡的照片。

We then deploy the incredibly advanced hacking tool.

我们随后部署了非常先进的黑客工具，

We used Google.

也就是谷歌。

Using the email address, the telephone number

利用电子邮件地址，电话号码

and the GPS data, on the left you see an advert

和GPS数据，在左侧，你可以看到一则

for a BMW that one of our cybercriminals is selling,

网络罪犯正在出售的宝马车广告，

on the other side an advert for the sale of sphynx kittens.

另一侧广告在出售一只斯芬克斯小猫。

One of these was more stereotypical for me.

对于我来讲，其中一则更常见。

A little more searching, and here's our cybercriminal.

经过进一步调查，这位网络罪犯浮出水面。

Imagine, these are hardened cybercriminals

别忘了，这是些顽固的网络罪犯，

sharing information scarcely.

几乎从不分享他们的信息。

Imagine what you could find

想象一下你能从中发现

about each of the people in this room.

这间房中每个人的哪些信息。

A bit more searching through the profile

透过个人资料进一步搜寻，

and there's a photo of their office.

找到了一张他办公室的照片。

They were working on the third floor.

他的办公室在三楼，

And you can also see some photos

还有一些照片，

from his business companion

来自于他的工作伙伴，

where he has a taste in a certain kind of image.

看来他对某一类照片情有独钟。

It turns out he's a member of the Russian Adult Webmasters Federation.

结果发现，他是“俄罗斯成人网络管理联盟”成员。

But this is where our investigation starts to slow down.

但随后，我们的调查开始进展缓慢。

The cybercriminals have locked down their profiles quite well.

网络罪犯们完全锁住了他们的资料。

And herein is the greatest lesson

接下来，就是我们在使用

of social media and mobile devices for all of us right now.

社交媒体和手机时最大的教训：

Our friends, our families and our colleagues

即使我们没有做任何事，

can break our security even when we do the right things.

我们的朋友，家人和同事也可能破坏我们的安全。

This is MobSoft, one of the companies

Mob Soft是这群网络罪犯

that this cybercriminal gang owned,

拥有的公司之一，

and an interesting thing about MobSoft

有趣的是，Mob Soft公司

is the 50-percent owner of this

50%的所有者

posted a job advert,

上传过一则招聘广告，

and this job advert matched one of the telephone numbers

这则广告显示的联系电话，刚好在

from the code earlier.

之前的代码里出现过。

This woman was Maria,

这位女士叫玛利亚，

and Maria is the wife of one of our cybercriminals.

她是一名网络罪犯的妻子。

And it's kind of like she went into her social media settings

她似乎在自己的社交网页设置中，

and clicked on every option imaginable

开放了所有你能想象的选项，

to make herself really, really insecure.

这时她的网络状态非常不安全。

By the end of the investigation,

在调查的最后，

where you can read the full 27-page report at that link,

你能够通过链接阅读整整27页的报告，

we had photos of the cybercriminals,

我们拥有了网络罪犯的照片，

even the office Christmas party

甚至他们他们在圣诞派对上

when they were out on an outing.

在户外拍摄的照片

That's right, cybercriminals do have Christmas parties,

你没听错，网络罪犯也会举办

as it turns out.

圣诞节派对。

Now you're probably wondering what happened to these guys.

现在，你会问他们到底是怎么回事。

Let me come back to that in just a minute.

我们回头再说这个。

I want to change pace to one last little demonstration,

现在我想做最后一次展示，

a technique that is wonderfully simple and basic,

这是一个非常简单、基本的技巧

but is interesting in exposing how much information

但它将生动地告诉我们究竟有多少个人信息

we're all giving away,

我们正在泄漏出去，

and it's relevant because it applies to us as a TED audience.

而且这和每位在座的TED观众有关。

This is normally when people start kind of shuffling in their pockets

听到这，人们通常赶紧把手伸进口袋

trying to turn their phones onto airplane mode desperately.

试图把手机调成飞行模式。

Many of you all know about the concept

你们基本都会用

of scanning for wireless networks.

搜索无线网络的功能。

You do it every time you take out your iPhone or your Blackberry

每当你拿出苹果或者黑莓手机时，你都会搜索

and connect to something like TEDAttendees.

并连接类似于“TED出席者”名称的网络。

But what you might not know

但是你可能不知道，

is that you're also beaming out a list of networks

你同时也发出了一连串

you've previously connected to,

之前连接过的网络信息，

even when you're not using wireless actively.

就算你并不经常使用无线网络。

So I ran a little scan.

所以我稍微扫描了一下。

I was relatively inhibited compared to the cybercriminals,

比起不法分子，

who wouldn't be so concerned by law,

我更加节制一些。

and here you can see my mobile device.

这里，你能看到我的移动设备。

Okay? So you can see a list of wireless networks.

看到了吗？你能看到一串无线网络列表。

TEDAttendees, HyattLB. Where do you think I'm staying?

有TEDAttendees,HyattLB等。你知道我住在哪儿了吗？

My home network, PrettyFlyForAWifi,

这是我家的网络，PrettyFlyForAWifi(找网络的小苍蝇),

which I think is a great name.

我觉得名字起得不错。

Sophos_Visitors, SANSEMEA, companies I work with.

Sophos_Visitors, SANSEMEA.这是我的工作网络。

Loganwifi, that's in Boston. HiltonLondon.

Loganwifi,这是在波士顿，HiltonLondon（伦敦希尔顿）

CIASurveillanceVan.

还有CIA SurveillanceVan（CIA 监控车）.

We called it that at one of our conferences

这是我们在会议上起的名字，

because we thought that would freak people out,

因为我们觉得它挺唬人的，

which is quite fun.

很好玩。

This is how geeks party.

这就是网络奇客们的娱乐方式。

So let's make this a little bit more interesting.

让我们把事情变得更有趣些。

Let's talk about you.

说说你们吧。

Twenty-three percent of you have been to Starbucks

在座有23%的人最近去过星巴克

recently and used the wireless network.

并用了那里的无线网络。

Things get more interesting.

越来越有意思了。

Forty-six percent of you I could link to a business,

你们当中，有46%的人连接过

XYZ Employee network.

叫做 “某某某雇员”的公司网络。

This isn't an exact science, but it gets pretty accurate.

这并不算科学验算，但是它准确率很高。

Seven hundred and sixty-one of you I could identify a hotel you'd been to recently,

我能说出你们当中761个人最近去过的酒店。

absolutely with pinpoint precision somewhere on the globe.

并且可以准确定位。

Two hundred and thirty-four of you, well, I know where you live.

我知道在场234个人的家庭住址。

Your wireless network name is so unique

你们的无线网络名称太独特了，

that I was able to pinpoint it

因此我能准确定位。

using data available openly on the Internet

我不需要黑客技术或聪明的技巧，

with no hacking or clever, clever tricks.

只需网络上公开可得的数据就可以办到。

And I should mention as well that

我还要提一下，

some of you do use your names,

有些人用自己的名字命名网络，

"James Lyne's iPhone," for example.

比如说“詹姆士·莱恩的苹果手机”。

And two percent of you have a tendency to extreme profanity.

还有2%的人用了不雅的名称。

So something for you to think about:

因此我们要思考一下：

As we adopt these new applications and mobile devices,

当我们使用新的应用和移动设备时，

as we play with these shiny new toys,

当我们把玩这些亮闪闪的新玩具时，

how much are we trading off convenience

为了方便，我们交换出了多少

for privacy and security?

隐私和安全？

Next time you install something,

下次当你安装东西时，

look at the settings and ask yourself,

看一下设置，同时问问自己，

"Is this information that I want to share?

“ 这些信息是我愿意分享的吗？

Would someone be able to abuse it?"

它们是否会被人滥用？”

We also need to think very carefully

我们还要非常仔细地想一下，

about how we develop our future talent pool.

我们如何建设未来的人才库。

You see, technology's changing at a staggering rate,

想想看，科技发展日新月异，

and that 250,000 pieces of malware

那25万种恶意软件

won't stay the same for long.

不会一成不变。

There's a very concerning trend

还有一个令人堪忧的趋势，

that whilst many people coming out of schools now

就是现在很多毕业生

are much more technology-savvy, they know how to use technology,

科技水平很高，他们知道如何应用科技，

fewer and fewer people are following the feeder subjects

但越来越少的人关注编程课题

to know how that technology works under the covers.

去了解科技背后的运行方式。

In the U.K., a 60 percent reduction since 2003,

在英国，2003年以来，IT成绩优异的学生减少了60%，

and there are similar statistics all over the world.

全世界皆是如此。

We also need to think about the legal issues in this area.

我们还要考虑这一领域中的法律问题。

The cybercriminals I talked about,

我提到过的网络罪犯，

despite theft of millions of dollars,

尽管盗取了数百万美元，

actually still haven't been arrested,

事实上仍然逍遥法外，

and at this point possibly never will.

目前看来，很难让他们落网。

Most laws are national in their implementation,

虽然有打击网络犯罪的国际公约，

despite cybercrime conventions, where the Internet

大部分法律却在国家层面执行，

is borderless and international by definition.

而网络实际上就是无国界、全球性的。

Countries do not agree, which makes this area

国家间无法达成协议，使得这一领域

exceptionally challenging from a legal perspective.

在法律层面上充满挑战。

But my biggest ask is this:

但是，我今天最大的请求是：

You see, you're going to leave here

你们即将离开这里，

and you're going to see some astonishing stories in the news.

今后会在新闻里看到一些惊人的消息。

You're going to read about malware doing incredible

你们会读到关于恶意软件所做的

and terrifying, scary things.

无法想象的恐怖行为。

However, 99 percent of it works

然而，其中的99%能够生效

because people fail to do the basics.

是因为人们没能做到最基本的事情。

So my ask is this: Go online,

所以我的请求是：上网，

find these simple best practices,

找到这些简单且有效的方法，

find out how to update and patch your computer.

找出如何更新并修补你的电脑。

Get a secure password.

设置一个安全的密码，

Make sure you use a different password

确定在每个网站和在线服务中

on each of your sites and services online.

使用不同的密码。

Find these resources. Apply them.

找到并应用这些资源。

The Internet is a fantastic resource

互联网无论对于经济、政治、

for business, for political expression,

艺术或学习，

for art and for learning.

都是极好的资源。

Help me and the security community

帮助我和网络安全人员

make life much, much more difficult

让网络罪犯更加

for cybercriminals.

难以生存。

Thank you.

谢谢。

(Applause)

（掌声）