Todd Humphreys: How to fool a GPS

Translator: Joseph Geni Reviewer: Morton Bast

譯者: Elmo Wu 審譯者: 盧 曉天

Something happened in the early morning hours

2000年5月2號的早晨

of May 2nd, 2000, that had a profound effect

發生了一件

on the way our society operates.

對我們社會有深遠影響的事件

Ironically, hardly anyone noticed at the time.

諷刺的是, 當時幾乎沒有人察覺

The change was silent, imperceptible,

變化發生得無聲無息, 難以察覺

unless you knew exactly what to look for.

除非你知道該從何找起

On that morning, U.S. President Bill Clinton

那天早上

ordered that a special switch be thrown

柯林頓總統下令

in the orbiting satellites of the Global Positioning System.

將一特殊開關裝進全球定位系統的衛星

Instantaneously, every civilian GPS receiver

轉眼間, 地球上所有的GPS導航器

around the globe went from errors the size of a football field

定位誤差值都從 一個足球場大小

to errors the size of a small room.

縮小為一間房間

It's hard to overstate the effect that this change

這種精準度

in accuracy has had on us.

對我們的影響不言自明

Before this switch was thrown, we didn't have

在這之前, 我們根本沒有

in-car navigation systems giving turn-by-turn

能夠準確告知我們 該在哪裡轉彎的行車導航系統

directions, because back then, GPS couldn't tell you

當時的GPS連我們在哪個街區

what block you were on, let alone what street.

都無法精準定位 更何況是在哪條街上

For geolocation, accuracy matters,

對於地理定位科技來說 精準度至關重要

and things have only improved over the last 10 years.

不過一直到近十年才有所進展

With more base stations, more ground stations,

隨著基地台、地面站

better receivers and better algorithms,

接收器及演算能力在質、量上的不斷突破

GPS can now not only tell you what street you are on,

GPS現在不但能告訴我們在哪條街上

but what part of the street.

甚至是街上的哪一段

This level of accuracy

這種程度的精準度

has unleashed a firestorm of innovation.

觸發了一連串改變及創新

In fact, many of you navigated here today

在座各位很多今天應該就是靠著

with the help of your TomTom or your smartphone.

TomTom衛星導航或是智慧型手機 來到這裡的

Paper maps are becoming obsolete.

紙本地圖逐漸遭到淘汰

But we now stand on the verge of another revolution

不過我們也同時面臨另一個

in geolocation accuracy.

地理定位科技精準度革新的轉捩點

What if I told you that the two-meter positioning

假如我說, 目前手機和TomTom衛星導航

that our current cell phones and our TomToms give us

提供的定位功能 就算可以把誤差減到兩公尺內

is pathetic compared to what we could be getting?

和未來定位科技一比卻不過雕蟲小技 你會怎麼說?

For some time now, it's been known that if you pay attention

這早已不是新聞

to the carrier phase of the GPS signal,

如果你仔細注意GPS的載波相位

and if you have an Internet connection,

而且剛好有網路時

then you can go from meter level to centimeter level,

精準度便可從以公尺為誤差單位

even millimeter-level positioning.

縮小至以公分, 甚至毫米為單位

So why don't we have this capability on our phones?

那我們的手機 為何還不具備這樣的功能呢?

Only, I believe, for a lack of imagination.

在我看來, 主要是缺乏想像力

Manufacturers haven't built this carrier phase technique

製造商尚未將載波相位的技術

into their cheap GPS chips

應用到那些便宜的GPS晶片上

because they're not sure what the general public would do

因為他們不確定

with geolocation so accurate that you could pinpoint

當人們面對精準到 足以標出手上皺紋的地理位置定位時

the wrinkles in the palm of your hand.

會作何反應

But you and I and other innovators,

不過, 你、我以及其他創新發明家

we can see the potential in this next leap in accuracy.

我們看得見 這種精準定位的潛力

Imagine, for example, an augmented reality app

想像有一個擴增實境的應用軟體

that overlays a virtual world to millimeter-level precision

能以毫米為誤差單位的準確度

on top of the physical world.

將一個虛擬世界 重疊到物質世界之上

I could build for you a structure up here in 3D,

我可以就在這裡建造一個

millimeter accurate, that only you could see,

誤差範圍在幾毫米之內的3D建築物

or my friends at home.

而且只有你或者是在我家的朋友看得見

So this level of positioning, this is what we're looking for,

這種程度的定位, 才是我們要的

and I believe that, within the next few years, I predict,

我預測在幾年之內

that this kind of hyper-precise, carrier phase-based positioning

這種極端精準, 以載波相位為基礎的定位模式

will become cheap and ubiquitous,

會變得相當便宜且隨處可見

and the consequences will be fantastic.

帶來的影響也會令人眼睛為之一亮

The Holy Grail, of course, is the GPS dot.

最終目標, 不用說 是GPS進化成圓點般的大小

Do you remember the movie "The Da Vinci Code?"

還記得電影「達文西密碼」嗎?

Here's Professor Langdon examining a GPS dot,

這是蘭登教授在檢查GPS「豆」

which his accomplice tells him is a tracking device

同伴告訴他, 這顆豆, 是個追蹤裝置

accurate within two feet anywhere on the globe,

誤差在兩呎內, 範圍涵蓋世界各個角落

but we know that in the world of nonfiction,

不過在現實世界

the GPS dot is impossible, right?

我們知道這並不可能, 對吧?

For one thing, GPS doesn't work indoors,

一方面, GPS在室內會失效

and for another, they don't make devices quite this small,

另一方面, 裝置還沒有做得那麼小

especially when those devices have to relay

尤其這項裝置還必須能夠

their measurements back over a network.

與網絡重複確認計算過程

Well, these objections were perfectly reasonable

嗯, 這些駁斥在前幾年非常合理

a few years ago, but things have changed.

不過情況已大不相同

There's been a strong trend toward miniaturization,

現在的發展趨勢已明顯轉向

better sensitivity, so much so that, a few years ago,

更迷你、更敏銳

a GPS tracking device looked like this clunky box

幾年前的GPS追蹤裝置

to the left of the keys.

就像這串鑰匙左邊沉重的黑盒子

Compare that with the device released just months ago

相較之下, 前幾年出版的

that's now packaged into something the size of a key fob,

只有鑰匙圈大小

and if you take a look at the state of the art

最先進的型式

for a complete GPS receiver, which is only a centimeter

更只有一公分

on a side and more sensitive than ever,

而且前所未有的敏銳

you realize that the GPS dot will soon move

慢慢地你會發現

from fiction to nonfiction.

GPS「豆」不再遙不可及

Imagine what we could do with a world full of GPS dots.

若大量普及使用GPS「豆」 世界會是什麼樣子?

It's not just that you'll never lose your wallet or your keys

你不只不會再弄丟皮夾或鑰匙

anymore, or your child when you're at Disneyland.

或是把小孩丟在迪士尼樂園

You'll buy GPS dots in bulk, and you'll stick them on

你可以只花幾十塊 就買到一大堆GPS「豆」

everything you own worth more than a few tens of dollars.

然後貼在所有東西上

I couldn't find my shoes one recent morning,

前幾天早上, 我找不到鞋子

and, as usual, had to ask my wife if she had seen them.

一如往常, 我還得問我老婆有沒有看到它們

But I shouldn't have to bother my wife with that kind of triviality.

但我實在不該 拿這種芝麻蒜皮的小事叨擾她

I should be able to ask my house where my shoes are.

我應該要問房子我的鞋子在哪

(Laughter)

(笑聲)

Those of you who have made the switch to Gmail,

那些轉而使用Gmail的人應該記得

remember how refreshing it was to go from

過去我們得整理電子郵件

organizing all of your email to simply searching it.

現在只需點選搜尋功能, 就能輕易找到 多麼令人耳目一新

The GPS dot will do the same for our possessions.

GPS「豆」對我們的物品 有異曲同工之妙的影響

Now, of course, there is a flip side to the GPS dot.

當然, GPS「豆」也有缺點

I was in my office some months back

幾個月前

and got a telephone call.

我在辦公室接到一通電話

The woman on the other end of the line, we'll call her Carol,

在電話上的是卡蘿

was panicked.

她很慌張

Apparently, an ex-boyfriend of Carol's from California

看起來, 卡蘿在加州的前男友

had found her in Texas and was following her around.

在德州找到了卡蘿, 並不斷尾隨她

So you might ask at this point why she's calling you.

現在, 你可能在想, 那她打給你幹嘛?

Well, so did I.

嗯, 我當下也在想這個問題

But it turned out there was a technical twist to Carol's case.

結果發現在卡蘿的事件中, GPS遭到不當利用

Every time her ex-boyfriend would show up,

每次當她前男友

at the most improbable times and the most improbable locations,

在最不該出現的時間出現在不該出現的地方時

he was carrying an open laptop,

他總是帶著筆記型電腦

and over time Carol realized that he had planted

一陣子後卡蘿意識到

a GPS tracking device on her car,

前男友在她車上植入了GPS追蹤裝置

so she was calling me for help to disable it.

於是她打電話請我幫她解除

"Well, you should go to a good mechanic

我說: 「嗯, 那你應該是去找個好技工

and have him look at your car," I said.

請他幫你看看吧!」

"I already have," she told me.

「我去找過了。」她答道

"He didn't see anything obvious,

「他沒發現什麼明顯異狀,

and he said he'd have to take the car apart piece by piece."

說要把車子拆開才知道。」

"Well then, you'd better go to the police," I said.

「那你最好去找警察。」我又建議道

"I already have," she replied.

「我去找過了。」她回答

"They're not sure this rises to the level of harassment,

「他們不敢肯定這構成了騷擾罪

and they're not set up technically to find the device."

他們也沒有偵測這種裝置的技術。」

"Okay, what about the FBI?"

「好吧, 那 FBI 呢?」

"I've talked to them too, and same story."

「我和他們談過了。一樣的答案。」

We then talked about her coming to my lab

我們最後決定請她來我的實驗室

and us performing a radio sweep of her car,

用無線電掃描她的車

but I wasn't even sure that would work,

不過我實在不確定這麼做有沒有用

given that some of these devices are configured

因為這些裝置可能被設置成

to only transmit when they're inside safe zones

進入安全區域或開始行駛後

or when the car is moving.

才開始傳送訊號

So, there we were.

這是活生生的例子

Carol isn't the first, and certainly won't be the last,

卡蘿不是第一個, 也不會是最後一個

to find herself in this kind of fearsome environment,

飽受GPS追蹤所造成的

worrisome situation caused by GPS tracking.

恐懼、擔憂折磨的人

In fact, as I looked into her case,

事實上, 當深入觀察這起事件後

I discovered to my surprise that it's not clearly illegal

我很驚訝地發現 在別人車上裝設追蹤裝置

for you or me to put a tracking device on someone else's car.

並未明顯踰越法律

The Supreme Court ruled last month that a policeman

上個月, 最高法院裁定

has to get a warrant if he wants to do prolonged tracking,

警方必須取得搜查令 使得執行長期追蹤

but the law isn't clear about civilians doing this to one another,

但法令並未明確規範 平民此種舉動的合法性

so it's not just Big Brother we have to worry about,

看來我們不只需要防範「老大哥」的監視

but Big Neighbor. (Laughter)

連鄰居也得留心防範（笑聲）

There is one alternative that Carol could have taken,

其實卡蘿還有另一種有效的解決方法

very effective. It's called the Wave Bubble.

叫做「波防護罩」

It's an open-source GPS jammer,

它是個公開源代碼的GPS干擾器

developed by Limor Fried,

發明者是一位

a graduate student at MIT, and Limor calls it

麻省理工學院畢業生: 勒茉•法莉德

"a tool for reclaiming our personal space."

她以「重拾私人空間的工具」來形容它

With a flip of the switch you create a bubble around you

只要打開開關, 就可以形成一道

within which GPS signals can't reside.

GPS訊號無法穿透的防護圈

They get drowned out by the bubble.

訊號被掩蓋, 消失得無影無蹤

And Limor designed this, in part, because, like Carol,

勒茉有此發明, 一部份也是因為

she felt threatened by GPS tracking.

跟卡蘿一樣, 她感受到GPS追蹤的威脅

Then she posted her design to the web,

接著, 她將此項發明發佈到網站上

and if you don't have time to build your own,

如果你沒時間自己做一個

you can buy one.

你可以花錢買一個

Chinese manufacturers now sell thousands

中國製造商現在在網路上

of nearly identical devices on the Internet.

販售上千個幾乎一模一樣的裝置

So you might be thinking, the Wave Bubble sounds great.

你現在可能在想, 「這個防護罩聽起來蠻棒的

I should have one. Might come in handy if somebody ever puts a tracking device on my car.

我應該去弄一個 要是有人對我車子動手腳, 就派得上用場。」

But you should be aware that its use is very much illegal

不過, 你必須知道

in the United States.

在美國使用它是非法的

And why is that?

為什麼?

Well, because it's not a bubble at all.

嗯, 因為它其實並不是一個圈圈

Its jamming signals don't stop at the edge

它的干擾訊號會不斷延伸

of your personal space or at the edge of your car.

超出你的個人空間或是汽車的範圍

They go on to jam innocent GPS receivers for miles around you. (Laughter)

干擾訊號會影響到你周遭數英里內 其他無辜的GPS用戶 (笑聲)

Now, if you're Carol or Limor,

如果現在你是卡蘿或勒茉

or someone who feels threatened by GPS tracking,

或是備受GPS追蹤威脅的人

it might not feel wrong to turn on a Wave Bubble,

啟動「波防護罩」感覺沒什麼不對

but in fact, the results can be disastrous.

但實際上則可能造成災難性的後果

Imagine, for example, you're the captain of a cruise ship

想像一下, 如果你是郵輪船長

trying to make your way through a thick fog

正試圖在濃霧中找尋正確方向

and some passenger in the back turns on a Wave Bubble.

結果船尾有位乘客啟動了「波防護罩」

All of a sudden your GPS readout goes blank,

儀錶板上的GPS裝置瞬間一片空白

and now it's just you and the fog

接著就只能靠你自己

and whatever you can pull off the radar system

還有雷達系統

if you remember how to work it.

如果你記得怎麼使用的話

They -- in fact, they don't update or upkeep lighthouses

現在他們不再升級或維修燈塔

anymore, and LORAN, the only backup to GPS,

唯一的備用品遠距離導航系統

was discontinued last year.

也在去年步入歷史

Our modern society has a special relationship with GPS.

現代的人類社會與GPS有特殊的連結

We're almost blindly reliant on it.

我們幾乎是盲目地依賴它

It's built deeply into our systems and infrastructure.

它已深深融入我們的系統及基礎建設

Some call it "the invisible utility."

有些人稱它為「隱形公物」

So, turning on a Wave Bubble might not just cause inconvenience.

因此, 啟動「波防護罩」造成的不只是不便

It might be deadly.

它可能相當致命

But as it turns out, for purposes of protecting your privacy

不過如果是為了保護個人隱私

at the expense of general GPS reliability,

而須犧牲大眾對GPS的依賴的話

there's something even more potent

還有另一項相當有效

and more subversive than a Wave Bubble,

效果大過「波防護罩」的東西

and that is a GPS spoofer.

「GPS混淆器」

The idea behind the GPS spoofer is simple.

這項點子的構想相當簡單

Instead of jamming the GPS signals, you fake them.

不同於干擾GPS 我們實際上製造一個假訊號

You imitate them, and if you do it right, the device

模仿GPS發出的訊號

you're attacking doesn't even know it's being spoofed.

如果操作正確的話 對方甚至不會知道被騙了

So let me show you how this works.

讓我示範一下

In any GPS receiver, there's a peak inside

每台GPS接收裝置裡都有一個波峰

that corresponds to the authentic signals.

與正確的訊號相對應

These three red dots represent the tracking points

這三個紅點是追蹤點

that try to keep themselves centered on that peak.

固定圍繞在波峰上

But if you send in a fake GPS signal,

但如果你發送一個假GPS訊號

another peak pops up, and if you can get these two peaks

就會出現另一個波峰

perfectly aligned, the tracking points can't tell the difference,

而如果你將兩個波峰完整重疊

and they get hijacked by the stronger counterfeit signal,

追蹤點便無從分辨兩者 轉而誤認訊號較強的假波峰為真

with the authentic peak getting forced off.

然後放棄追蹤真正的波峰

At this point, the game is over.

勝負揭曉

The fake signals now completely control this GPS receiver.

這個冒牌貨訊號完全 將GPS接收裝置玩弄於股掌間

So is this really possible?

所以, 這真的可行嗎?

Can someone really manipulate

真的有人能像那樣操控

the timing and positioning of a GPS receiver

GPS的時間和位置定位

just like that, with a spoofer?

單靠一台混淆GPS的裝置?

Well, the short answer is yes.

簡單來說, 沒錯

The key is that civil GPS signals

關鍵在於民用GPS訊號

are completely open.

是完全開放的

They have no encryption. They have no authentication.

沒有加密、不需認證

They're wide open, vulnerable to a kind of spoofing attack.

完全開放, 暴露於混淆攻擊的風險中

Even so, up until very recently,

即便如此, 在此之前

nobody worried about GPS spoofers.

沒有人對「GPS混淆器」有何顧慮

People figured that it would be too complex

人們普遍認為對駭客們來說

or too expensive for some hacker to build one.

製作一個混淆裝置過於複雜且所費不貲

But I, and a friend of mine from graduate school,

不過我和一個研究所的朋友

we didn't see it that way.

並不這麼想

We knew it wasn't going to be so hard,

我們知道這並不難

and we wanted to be the first to build one

我們想要當第一個製作出成品的人

so we could get out in front of the problem

以便面對、處理這個問題

and help protect against GPS spoofing.

也保護GPS免受混淆

I remember vividly the week it all came together.

我對那個禮拜的印象很深刻

We built it at my home, which means that

我們在我家開始著手製作

I got a little extra help from my three-year-old son Ramon.

我三歲的兒子瑞蒙也幫了點小忙

Here's Ramon — (Laughter) —

這是瑞蒙 (笑聲)

looking for a little attention from Dad that week.

那個禮拜很努力試圖想引起老爸的注意

At first, the spoofer was just a jumble of cables

一開始, 混淆器只是

and computers, though we eventually got it packaged

雜亂的電纜和電腦 不過我們最終把它濃縮在

into a small box.

一個小盒子裡

Now, the Dr. Frankenstein moment,

最可怕的時刻

when the spoofer finally came alive

是當混淆器終於開始運作

and I glimpsed its awful potential,

而在某個晚上

came late one night when I tested the spoofer

我用 iPhone 做了實驗後

against my iPhone.

發現它潛在的破壞力時

Let me show you some actual footage from that

讓我放一段在我第一次實驗中

very first experiment.

實際操作的影片

I had come to completely trust this little blue dot

我已經完全信賴這個小藍點

and its reassuring blue halo.

這個小藍點看起來相當可信

They seemed to speak to me.

它們好像在跟我說

They'd say, "Here you are. Here you are." (Laughter)

「你在這裡, 你在這裡。」 (笑聲)

And "you can trust us."

「你可以相信我們。」

So something felt very wrong about the world.

整個世界感覺出了差錯

It was a sense, almost, of betrayal,

感覺幾乎像是一種背叛

when this little blue dot started at my house,

當這個小藍點從我家

and went running off toward the north

開始一路往北方移動

leaving me behind. I wasn't moving.

把我留在後頭時, 我根本動也沒動

What I then saw in this little moving blue dot

在這個移動的小藍點身上

was the potential for chaos.

我看見了它造成破壞的潛力

I saw airplanes and ships veering off course, with the captain

我看見了飛機和船隻偏離航道

learning only too late that something was wrong.

而當機長和船長發現時已經為時已晚

I saw the GPS-derived timing

我看見了以GPS為基礎計時的

of the New York Stock Exchange

紐約股票交易

being manipulated by hackers.

慘遭駭客操弄

You can scarcely imagine the kind of havoc

若不了解

you could cause if you knew what you were doing

你拿著「GPS混淆器」在做什麼

with a GPS spoofer.

你幾乎無法想像它可能造成的災難

There is, though, one redeeming feature

不過「GPS混淆器」還是有

of the GPS spoofer.

值得讚許的地方

It's the ultimate weapon against an invasion of GPS dots.

它是GPS「豆」的剋星

Imagine, for example, you're being tracked.

想像如果你被跟蹤了

Well, you can play the tracker for a fool,

你可以完全擺跟蹤者一道

pretending to be at work when you're really on vacation.

讓他以為你在上班, 但實際上你在放假

Or, if you're Carol, you could lure your ex-boyfriend

或者如果你是卡蘿

into some empty parking lot

你就可以引誘前男友到一個

where the police are waiting for him.

警察埋伏好的空曠停車場

So I'm fascinated by this conflict, a looming conflict,

我深深地為這個衝突, 這個隱約的矛盾著迷

between privacy on the one hand

一方面是個人隱私

and the need for a clean radio spectrum on the other.

一方面是維持無線電頻道的暢通

We simply cannot tolerate GPS jammers and spoofers,

我們沒有辦法忍受擾亂和混淆GPS訊號的人

and yet, given the lack of effective legal means

但在沒有法律保障個人隱私

for protecting our privacy from the GPS dot,

不受GPS跟蹤的侵擾之下

can you really blame people for wanting to turn them on,

能怪那些為保護自己

for wanting to use them?

而使用那些科技的人嗎?

I hold out hope that we'll be able to reconcile

我希望我們能以

this conflict with some sort of,

某種尚未開發的科技

some yet uninvented technology.

來達成這項矛盾的平衡點

But meanwhile, grab some popcorn,

但同時, 準備好爆米花

because things are going to get interesting.

因為事情將越來越有趣

Within the next few years,

幾年之內

many of you will be the proud owner of a GPS dot.

你們之中很多人將成為GPS「豆」的使用者

Maybe you'll have a whole bag full of them.

甚至可能有一大包GPS「豆」

You'll never lose track of your things again.

你再也不會找不到東西

The GPS dot will fundamentally reorder your life.

它會完全顛覆你的生活

But will you be able to resist the temptation

不過你有辦法拒絕

to track your fellow man?

追蹤男友行跡的誘惑嗎?

Or will you be able to resist the temptation

你有辦法忍住

to turn on a GPS spoofer or a Wave Bubble

打開干擾器或混淆器

to protect your own privacy?

以保護隱私的衝動嗎

So, as usual, what we see just beyond the horizon

一如往常, 我們同時面對著

is full of promise and peril.

希望和危機

It'll be fascinating to see how this all turns out.

靜觀接下來的發展將會非常有趣

Thanks. (Applause)

謝謝 (掌聲)