Christopher Soghoian: Government surveillance — this is just the beginning

Translator: Alan Watson Reviewer: 潘 可儿

The 2011 Arab Spring

2011 年阿拉伯之春引起世界嘅關注

captured the attention of the world.

It also captured the attention

亦都引起其他國家獨裁政府嘅警覺性

of authoritarian governments in other countries,

who were worried that revolution would spread.

佢哋擔心運動會蔓延

To respond, they ramped up surveillance

為咗應對

佢哋加強對社會運動人士、 記者同異議分子嘅監控

of activists, journalists and dissidents

who they feared would inspire revolution

佢哋驚呢班人會喺自己國家裏面

in their own countries.

引發一場革命

One prominent Bahraini activist,

一個巴林出名嘅社運人士

who was arrested and tortured by his government,

被政府拘捕同虐待

has said that the interrogators showed him

佢話，問話嘅人俾佢睇

transcripts of his telephone calls

佢電話嘅通話內容同短訊內容

and text messages.

Of course, it's no secret

當然

政府能夠截聽電話同埋短訊 早已經唔係咩秘密

that governments are able to intercept telephone calls and text messages.

It's for that reason that many activists

正因為係咁

好多社運人士都避免用電話

specifically avoid using the telephone.

Instead, they use tools like Skype,

佢哋會用类似 Skype 嘅工具

which they think are immune to interception.

因為佢哋認為咁樣就唔會俾人截聽到

They're wrong.

但佢哋錯啦

There have now been over the last few years

从前幾年開始

an industry of companies

已經有好多公司向政府提供監控技術

who provide surveillance technology to governments,

specifically technology that allows those governments

尤其係

俾政府可以入侵監察對象電腦嘅科技

to hack into the computers

of surveillance targets.

由佢哋以前喺線路中間一半截聽通訊

Rather than intercepting the communications as they go over the wire,

instead they now hack into your computer,

改為宜家直接入侵你嘅電腦

enable your webcam, enable your microphone,

启动你嘅網絡攝錄機、麥克風

and steal documents from your computer.

盜取你電腦裡邊嘅文件

When the government of Egypt fell in 2011,

當埃及政府喺 2011 年倒台時

activists raided the office of the secret police,

社運人士搜查咗秘密警察嘅辦公室

and among the many documents they found

喺好多文件裏面

was this document by the Gamma Corporation,

發現一份嚟自 Gamma International

by Gamma International.

旗下子公司 Gamma Corporation 嘅文件

Gamma International 係一間德國公司

Gamma is a German company

that manufactures surveillance software

佢研發監控軟件同埋剩係向政府售卖

and sells it only to governments.

It's important to note that most governments

值得注意嘅係

大部分政府本身係冇能力開發呢啲軟件

don't really have the in-house capabilities

to develop this software.

Smaller ones don't have the resources

更細規模嘅政府更加冇

or the expertise,

咁樣嘅資源同人才

and so there's this market of Western companies

因此

西方企業好樂意提供呢啲工具同技術

who are happy to supply them with the tools

and techniques for a price.

以換取收入

Gamma is just one of these companies.

Gamma 只係其中一間咁樣嘅公司

I should note also that Gamma never actually sold

我亦都要強調事實上 Gamma

從來冇賣軟件俾埃及政府

their software to the Egyptian government.

They'd sent them an invoice for a sale,

佢哋有寄過報價嘅發票

but the Egyptians never bought it.

但係埃及從來冇買過

Instead, apparently, the Egyptian government

好明顯

used a free demo version of Gamma's software.

埃及政府係用紧 Gamma 嘅免費試用版

(Laughter)

（笑聲）

呢個截圖係嚟自 Gamma 銷售推廣嘅片

So this screenshot is from a sales video

that Gamma produced.

佢哋喺呢個比較簡潔流暢嘅影片裏面強調

Really, they're just emphasizing

in a relatively slick presentation

the fact that the police can sort of sit

其實警察坐喺冷氣辦公室

in an air-conditioned office

and remotely monitor someone

就能夠遙控地監控著某人

without them having any idea that it's going on.

而被監聽嘅人係唔知情嘅

You know, your webcam light won't turn on.

你知嗎？

網絡攝錄機嘅燈唔會著

There's nothing to indicate that the microphone is enabled.

唔會有嘢話你知個麥克風被人開咗

This is the managing director of Gamma International.

呢位係 Gamma International 嘅董事總經理

His name is Martin Muench.

Martin Muench

There are many photos of Mr. Muench that exist.

佢出現過喺好多相裏邊

This is perhaps my favorite.

呢張係我最鍾意嘅

I'm just going to zoom in a little bit onto his webcam.

我哋放大佢嘅網絡攝錄機

You can see there's a little sticker

可以見到有一張細黐紙

黐咗喺攝錄機度

that's placed over his camera.

佢知道有咩監控係可能發生嘅

He knows what kind of surveillance is possible,

and so clearly he doesn't want it to be used

所以好明顯佢唔希望咁樣嘅嘢

against him.

發生喺佢自己身上

Muench has said that he intends

Martin 話

佢希望佢嘅軟件

for his software to be used

to capture terrorists and locate pedophiles.

可以用嚟捉恐怖分子

或者搵出戀童癖嘅藏身之處

Of course, he's also acknowledged that once

當然

佢都承認呢個軟件賣咗俾政府之後

the software has been sold to governments,

he has no way of knowing how it can be used.

佢哋點樣用就唔知啦

Gamma's software has been located on servers

全世界好多伺服器都裝咗 Gamma 個軟件

in countries around the world,

many with really atrocious track records

好多伺服器都有驚人嘅追蹤紀錄

and human rights violations.

同埋好多都違反人權

They really are selling their software around the world.

佢哋真係做到銷售全球化

Gamma 唔係唯一一個咁嘅公司

Gamma is not the only company in the business.

As I said, it's a $5 billion industry.

好似我話齋

呢個係一個價值五十億美元嘅行業

One of the other big guys in the industry

呢行嘅另一間大公司係

is an Italian company called Hacking Team.

義大利嘅 Hacking Team

今日嚟講

Now, Hacking Team has what is probably

呢家公司做嘅匯報可能係最簡潔流暢

the slickest presentation.

佢哋整嘅宣傳片非常有吸引力

The video they've produced is very sexy,

我一陣間會播出嚟

and so I'm going to play you a clip

just so you can get a feel

令你哋感受下呢間公司嘅軟件有幾勁

both for the capabilities of the software

but also how it's marketed

以及係佢哋係點樣向政府推銷呢件產品

to their government clients.

(Video) Narrator: You want to look through your target's eyes.

(影片嘅聲音)

錄音︰你想睇你監控對象睇梗啲乜

(Music)

(音樂)

你要攻擊你個對象

You have to hack your target.

[「當你監控對象喺度上網、 交換文件、收短訊、過境」]

["While your target is browsing the web, exchanging documents, receiving SMS, crossing the borders"]

You have to hit many different platforms.

你必須要攻入好多唔同嘅平台

["Windows, OS X, iOS, Android, Blackberry, Symbian, Linux"]

[「Windows, OS X, iOS, Android, Blackberry, Symbian, Linux」]

You have to overcome encryption

你必須要克服加密嘅問題以獲取相關資料

and capture relevant data.

[Skype & encrypted calls, target location, messaging, relationships,

[「Skype 以及已加密嘅通話 目標位置、短訊、 關係、

網頁瀏覽、錄音及影片」]

web browsing, audio & video"]

Being stealth and untraceable.

隱形而冇被偵測到

[「對任何保護系統都有抗禦能力」]

["Immune to any protection system Hidden collection infrastructure"]

[「隱藏嘅資料收集設施」]

Deployed all over your country.

遍佈全國

["Up to hundreds of thousands of targets Managed from a single spot"]

[「一個設施可以監控數以千計嘅目標」]

Exactly what we do.

正係我哋做嘅嘢

Christopher Soghoian: So, it would be funny if it wasn't true,

講者：如果頭先講嘅嘢係虛構

噉就幾搞笑啦

but, in fact, Hacking Team's software

但事實上

駭客團隊嘅軟件係賣俾全世界嘅政府

is being sold to governments around the world.

Last year we learned, for example,

舉個例

舊年我哋至知摩洛哥政府

that it's been used to target Moroccan journalists by the Moroccan government.

一直用呢個科技監控記者

好多國家都有類似嘅情況

Many, many countries it's been found in.

所以

So, Hacking Team has also been actively courting

駭客團隊都留意

美國司法管轄地方嘅市場

the U.S. law enforcement market.

In the last year or so, the company

舊年左右呢間公司

has opened a sales office in Maryland.

喺維珍妮亞州或者馬里蘭州

開設銷售辦公室

The company has also hired a spokesperson.

仲請咗一名發言人

They've been attending

佢哋有參與監控業界嘅研討會

surveillance industry conferences

where law enforcement officials show up.

執法官員都有出席

They've spoken at the conferences.

佢哋有喺研討會度發言

What I thought was most fascinating was

我覺得最得意嘅係

they've actually paid for the coffee break

佢哋今年初喺其中一個

at one of the law enforcement conferences

有關執法嘅會議裏面贊助咗休息時間

earlier this year.

I can't tell you for sure that Hacking Team

我唔可以好肯定咁話你知駭客團隊

has sold their technology in the United States,

有冇賣咗佢哋嘅科技俾美國政府

but what I can tell you that if they haven't sold it,

但我可以話俾你聽

如果佢哋冇賣到

it isn't because they haven't been trying hard.

唔係因為佢哋冇努力推銷

So as I said before,

正如我之前所講

governments that don't really have the resources

冇資源開發軟件嘅政府

to build their own tools will buy

會買呢啲上咗架嘅監控軟件

off-the-shelf surveillance software,

and so for that reason,

正因為咁

你會見到，譬如，突尼斯政府

you see that the government of, say, Tunisia,

might use the same software as the government of Germany.

可能會同德國政府一樣用同一款軟件

They're all buying off-the-shelf stuff.

佢哋都係買貨架上嘅軟件

The Federal Bureau of Investigation in the United States

美國聯邦調查局 FBI

does have the budget to build their own surveillance technology,

有筆預算去研發佢哋 自己一套嘅監控技術

and so for several years, I've been trying

於是呢幾年嚟

我嘗試搵出

to figure out if and how the FBI

FBI 有冇真係入侵

is hacking into the computers of surveillance targets.

同埋點樣入侵監控對象嘅電腦

My friends at an organization called the Electronic Frontier Foundation --

我有個朋友喺電子領域基金會度做

they're a civil society group —

呢個基金會一個民間組織

obtained hundreds of documents from the FBI

佢哋攞咗好多 FBI 嘅文件

detailing their next generation of surveillance technologies.

裏邊寫低 FBI 下一代嘅監聽科技會係點

呢啲文件大多數內容都俾人大執過

Most of these documents were heavily redacted,

but what you can see from the slides,

但若果我放大熒幕上面嘅嘢

if I zoom in, is this term:

你會見到呢行字：

Remote Operations Unit.

遠端營運單位

Now, when I first looked into this,

當我第一次見到呢樣嘢

I'd never heard of this unit before.

我從來未聽過呢個單位

I've been studying surveillance for more than six years.

我已經研究咗監控呢樣嘢超過六年啦

I'd never heard of it.

但我由未聽過呢個單位

And so I went online and I did some research,

於是我上網搵

最後我搵到答案

and ultimately I hit the mother lode

when I went to LinkedIn,

就係我上 Linkedin

the social networking site for job seekers.

一個求職者嘅社交網站嗰時

There were lots of former U.S. government contractors

嗰度有好多美國政府嘅前合約僱員

who had at one point worked

佢哋都曾經都喺 呢個遠端營運單位裏面做

for the Remote Operating Unit,

and were describing in surprising detail on their CVs

佢哋仲係履歷上面詳細描述

what they had done in their former job.

佢哋做呢份工嗰陣做過啲乜

(Laughter)

(笑聲)

So I took this information

我將呢啲資料

and I gave it to a journalist that I know and trust at the Wall Street Journal,

交俾一個我識得同信得過嘅 華爾街日報記者

and she was able to contact several other

佢聯絡咗一啲前執法人員

former law enforcement officials

佢哋喺背後承認同證實

who spoke on background and confirmed

that yes, in fact, the FBI has a dedicated team

FBI 的確有一個專責單位

that does nothing but hack into the computers

入侵監控對象嘅電腦

of surveillance targets.

Like Gamma and Hacking Team,

好似 Gamma 同駭客團隊噉

the FBI also has the capability

FBI 都有能力

to remotely activate webcams, microphones,

遙控啟動網絡攝錄機、麥克風

steal documents, get web browsing information,

去偷文件、攞上網紀錄、電腦檔案

the works.

There's sort of a big problem

政府入侵電腦係一個大問題

with governments going into hacking,

and that's that terrorists, pedophiles,

恐怖分子、戀童癖嘅人

毒販、記者同埋從事人權運動嘅人

drug dealers, journalists and human rights activists

all use the same kinds of computers.

全部都用同一款電腦

There's no drug dealer phone

嗰度冇專為毒販而設嘅電話

and there's no journalist laptop.

冇專為記者而設嘅手提電腦

We all use the same technology,

我哋都係梗用同一種科技

and what that means then is that for governments

咁代表咗

政府有能力入侵真正壞人嘅電腦

to have the capability to hack into the computers

of the real bad guys,

they also have to have the capability

同時政府都有能力入侵我哋嘅電腦

to hack into our devices too.

So governments around the world

所以全世界嘅政府都好鍾意用呢種技術

have been embracing this technology.

They've been embracing hacking

佢哋鍾意將監控當係一種執法工具

as a law enforcement technique,

但啲人從來冇辯論過呢樣嘢

but without any real debate.

In the United States, where I live,

喺美國，我生活嘅國家

there have been no congressional hearings.

國會從來冇聽證過

There's no law that's been passed

或者冇通過任何嘅法律

specifically authorizing this technique,

明確授權政府使用呢種技術

and because of its power and potential for abuse,

鑒於監控力量之大同埋有可能被濫用

it's vital that we have an informed public debate.

我哋必須要有一場公開辯論 等公眾知道呢回事

Thank you very much.

多謝晒

(掌聲)

(Applause)