TED Fellows Retreat 2013
Christopher Soghoian: Government surveillance — this is just the beginning
克里斯多夫．索荷宜安: 政府監聽—故事才剛開始
Filmed:
Readability: 5.2
893,397 views
隱私權研究家克里斯多夫．索荷宜安發現，隨著科技發展，政府的監聽能力也有所變化。他表示，政府向私人企業購買入侵電腦的科技，不露聲色的竊取文件以及監控活動。克里斯多夫．索荷宜安對於這樣的發展表達了疑慮。
Christopher Soghoian - Privacy researcher and activist
Christopher Soghoian researches and exposes the high-tech surveillance tools that governments use to spy on their own citizens, and he is a champion of digital privacy rights. Full bio
Christopher Soghoian researches and exposes the high-tech surveillance tools that governments use to spy on their own citizens, and he is a champion of digital privacy rights. Full bio
Double-click the English transcript below to play the video.
00:12
The 2011 Arab Spring
0
811
1965
2011 年阿拉伯之春
00:14
captured the attention of the world.
1
2776
1803
引起世界各地的關注
00:16
It also captured the attention
2
4579
1649
也提高了
00:18
of authoritarian governments in other countries,
3
6228
2377
其他集權政體的警覺性
00:20
who were worried that revolution would spread.
4
8605
2963
他們擔心改革思潮擴大
00:23
To respond, they ramped up surveillance
5
11568
2077
因此，他們逐漸加強
00:25
of activists, journalists and dissidents
6
13645
3096
對社會運動人士、
記者及異議分子的監視
記者及異議分子的監視
00:28
who they feared would inspire revolution
7
16741
1954
他們害怕這群人在國內
00:30
in their own countries.
8
18695
1835
推動改革
00:32
One prominent Bahraini activist,
9
20530
2045
一個巴林的重要社運人士
00:34
who was arrested and tortured by his government,
10
22575
2110
被政府逮捕及虐待
00:36
has said that the interrogators showed him
11
24685
1725
他說，問話的人給他看
00:38
transcripts of his telephone calls
12
26410
1870
他的手機通聯記錄
00:40
and text messages.
13
28280
1808
和簡訊內容
00:42
Of course, it's no secret
14
30088
1656
當然，這也不是什麼新聞了
00:43
that governments are able to intercept
telephone calls and text messages.
telephone calls and text messages.
15
31744
3196
政府早就能夠監聽電話和簡訊
00:46
It's for that reason that many activists
16
34940
2372
因為如此，許多社運人士
00:49
specifically avoid using the telephone.
17
37312
1926
都會避免使用電話
00:51
Instead, they use tools like Skype,
18
39238
2348
他們使用 Skype
00:53
which they think are immune to interception.
19
41586
2520
以為這樣就不會被監聽
00:56
They're wrong.
20
44106
1772
但他們錯了
00:57
There have now been over the last few years
21
45878
2726
早在過去幾年
01:00
an industry of companies
22
48604
1646
已有企業
01:02
who provide surveillance technology to governments,
23
50250
3254
向政府提供監聽科技
01:05
specifically technology that
allows those governments
allows those governments
24
53504
2361
尤其是一種專門的科技
01:07
to hack into the computers
25
55865
1653
讓政府得以入侵監聽對象的電腦
01:09
of surveillance targets.
26
57518
1595
與其藉由線路監聽
01:11
Rather than intercepting the communications
as they go over the wire,
as they go over the wire,
27
59113
2840
01:13
instead they now hack into your computer,
28
61953
2267
他們現在直接入侵你的電腦
01:16
enable your webcam, enable your microphone,
29
64220
2002
啟動你的網路攝影機、麥克風
01:18
and steal documents from your computer.
30
66222
2457
並竊取你電腦裡的文件
01:20
When the government of Egypt fell in 2011,
31
68679
2833
當埃及政府在 2011 年垮台時
01:23
activists raided the office of the secret police,
32
71512
3401
社運人士搜查秘密警察的辦公室
01:26
and among the many documents they found
33
74913
1988
裡面有許多文件
01:28
was this document by the Gamma Corporation,
34
76901
2317
有一份文件來自伽瑪(Gamma)公司
01:31
by Gamma International.
35
79218
1801
母公司是伽瑪國際
01:33
Gamma is a German company
36
81019
1657
伽瑪是一家德國公司
01:34
that manufactures surveillance software
37
82676
1484
設計監聽軟體
01:36
and sells it only to governments.
38
84160
2157
然後只賣給政府
01:38
It's important to note that most governments
39
86317
2007
值得注意的是，大部分的政府
01:40
don't really have the in-house capabilities
40
88324
2066
並沒有能力
01:42
to develop this software.
41
90390
1465
自行研發這類軟體
01:43
Smaller ones don't have the resources
42
91855
1619
小國更沒有
01:45
or the expertise,
43
93474
1776
這樣的資源與專業
01:47
and so there's this market of Western companies
44
95250
3307
因此，西方的企業
01:50
who are happy to supply them with the tools
45
98557
1967
很樂意提供這些設備與技術
01:52
and techniques for a price.
46
100524
1718
以換取酬佣
01:54
Gamma is just one of these companies.
47
102242
2606
伽瑪只是其中一個例子
01:56
I should note also that Gamma never actually sold
48
104848
2908
我要聲明：伽瑪從未
01:59
their software to the Egyptian government.
49
107756
1897
賣軟體給埃及政府
02:01
They'd sent them an invoice for a sale,
50
109653
2597
他們有寄出報價的發票
02:04
but the Egyptians never bought it.
51
112250
1642
但是埃及並未購買
02:05
Instead, apparently, the Egyptian government
52
113892
1724
很明顯的，埃及政府使用的是
02:07
used a free demo version of Gamma's software.
53
115616
2633
伽瑪免付費的試用版
02:10
(Laughter)
54
118249
2775
（笑聲）
02:13
So this screenshot is from a sales video
55
121024
3498
這個抓圖是截取自
02:16
that Gamma produced.
56
124522
1565
伽瑪公司的行銷影片
02:18
Really, they're just emphasizing
57
126087
1983
在這個頗具說服力的簡報中
02:20
in a relatively slick presentation
58
128070
1651
他們強調
02:21
the fact that the police can sort of sit
59
129721
2193
警察只要輕鬆地坐在
02:23
in an air-conditioned office
60
131914
1450
辦公室裡吹冷氣
02:25
and remotely monitor someone
61
133364
1411
就能進行遠端監控
02:26
without them having any idea that it's going on.
62
134775
2175
而且被監聽的對象完全不知情
02:28
You know, your webcam light won't turn on.
63
136950
2035
網路攝影機的指示燈並不會亮
02:30
There's nothing to indicate that
the microphone is enabled.
the microphone is enabled.
64
138985
3354
也看不出來麥克風被開啟了
02:34
This is the managing director
of Gamma International.
of Gamma International.
65
142339
3335
這位是伽碼國際的執行董事
02:37
His name is Martin Muench.
66
145674
1861
馬汀穆奇 (Martin Muench)
02:39
There are many photos of Mr. Muench that exist.
67
147535
2931
有很多他的照片
02:42
This is perhaps my favorite.
68
150466
1852
這張是我的最愛
02:44
I'm just going to zoom in a little bit onto his webcam.
69
152318
2144
讓我們放大看他的網路攝影機
02:46
You can see there's a little sticker
70
154462
1668
你可以看到有一張小貼紙
02:48
that's placed over his camera.
71
156130
1893
貼在攝影機上
02:50
He knows what kind of surveillance is possible,
72
158023
2533
他知道監聽科技的能力
02:52
and so clearly he doesn't want it to be used
73
160556
1806
所以很明顯地，他不希望這樣的事
02:54
against him.
74
162362
1602
發生在他身上
02:55
Muench has said that he intends
75
163964
1924
穆奇表示
02:57
for his software to be used
76
165888
1664
他希望他的軟體
02:59
to capture terrorists and locate pedophiles.
77
167552
2983
用來對付恐怖分子或有戀童癖的人
03:02
Of course, he's also acknowledged that once
78
170535
1796
當然，他也承認
03:04
the software has been sold to governments,
79
172331
2155
一旦這個軟體賣給了政府
03:06
he has no way of knowing how it can be used.
80
174486
3825
用途就不得而知了
03:10
Gamma's software has been located on servers
81
178311
1850
許多伺服器都有裝載伽碼的軟體
03:12
in countries around the world,
82
180161
1656
在世界各國被使用
03:13
many with really atrocious track records
83
181817
2391
也的確有令人震驚的追蹤紀錄
03:16
and human rights violations.
84
184208
1561
以及違反人權的問題
03:17
They really are selling their
software around the world.
software around the world.
85
185769
3395
伽碼的軟體在全世界都買的到
03:21
Gamma is not the only company in the business.
86
189164
2301
伽碼並不是唯一這樣的企業
03:23
As I said, it's a $5 billion industry.
87
191465
2751
這個產業價值 50 億美元
03:26
One of the other big guys in the industry
88
194216
2839
另外一個主要企業是
03:29
is an Italian company called Hacking Team.
89
197055
2395
來自義大利的駭客團隊 (Hacking Team)
03:31
Now, Hacking Team has what is probably
90
199450
1725
這家公司現在擁有
03:33
the slickest presentation.
91
201175
1970
最具說服力的簡報技巧
03:35
The video they've produced is very sexy,
92
203145
3028
他們製作的行銷影片非常吸引力
03:38
and so I'm going to play you a clip
93
206173
1648
我會播出一段
03:39
just so you can get a feel
94
207821
1314
讓你們感受一下
03:41
both for the capabilities of the software
95
209135
1831
這個軟體的能力
03:42
but also how it's marketed
96
210966
1906
以及這家公司
03:44
to their government clients.
97
212872
1768
是如何向政府銷售這個產品
03:46
(Video) Narrator: You want to look
through your target's eyes.
through your target's eyes.
98
214640
3516
(影片) 旁白:你想要知道
你的監聽對象正在看什麼
你的監聽對象正在看什麼
03:50
(Music)
99
218179
1884
(音樂)
03:52
You have to hack your target.
100
220063
3002
你必須入侵他
03:55
["While your target is browsing the web, exchanging documents, receiving SMS, crossing the borders"]
101
223065
6316
[當你的監聽對象正在瀏覽網頁、
交換文件、接收簡訊、跨越國界]
交換文件、接收簡訊、跨越國界]
04:01
You have to hit many different platforms.
102
229381
2923
你必須進入許多不同的平台
04:04
["Windows, OS X, iOS, Android,
Blackberry, Symbian, Linux"]
Blackberry, Symbian, Linux"]
103
232304
3880
[Windows, OS X, iOS, Android,
Blackberry, Symbian, Linux]
Blackberry, Symbian, Linux]
04:08
You have to overcome encryption
104
236184
2468
你必須解開加密
04:10
and capture relevant data.
105
238652
2897
獲取有關的資料
04:13
[Skype & encrypted calls, target location,
messaging, relationships,
messaging, relationships,
106
241549
4559
[Skype 以及 加密通話
目標位置、簡訊、 關係、
目標位置、簡訊、 關係、
04:18
web browsing, audio & video"]
107
246108
3172
網路瀏覽、影片及錄音]
04:21
Being stealth and untraceable.
108
249280
4160
神不知鬼不覺地
04:25
["Immune to any protection system
Hidden collection infrastructure"]
Hidden collection infrastructure"]
109
253440
3274
[入侵任何保護系統]
04:28
Deployed all over your country.
110
256714
4105
監控國家的每一個角落
04:32
["Up to hundreds of thousands of targets
Managed from a single spot"]
Managed from a single spot"]
111
260819
4534
[在同一個地點，
就能監控數以千計個目標]
就能監控數以千計個目標]
04:37
Exactly what we do.
112
265353
3322
這正是我們拿手的
04:40
Christopher Soghoian: So, it
would be funny if it wasn't true,
would be funny if it wasn't true,
113
268675
2263
克里斯多夫．索荷宜恩：
若這是虛構的，那它很有意思
若這是虛構的，那它很有意思
04:42
but, in fact, Hacking Team's software
114
270938
1788
但事實上，駭客團隊的軟體
04:44
is being sold to governments around the world.
115
272726
2948
賣給了世界各國的政府
04:47
Last year we learned, for example,
116
275674
1752
舉個例子，去年我們得知
04:49
that it's been used to target Moroccan
journalists by the Moroccan government.
journalists by the Moroccan government.
117
277426
4048
摩洛哥政府
使用這個科技來監聽記者
使用這個科技來監聽記者
04:53
Many, many countries it's been found in.
118
281474
2544
許多國家都有類似的例子
04:56
So, Hacking Team has also been actively courting
119
284018
3124
因此，駭客團隊也面臨
04:59
the U.S. law enforcement market.
120
287142
2343
美國執法單位的關切
05:01
In the last year or so, the company
121
289485
2283
這家公司在去年左右
05:03
has opened a sales office in Maryland.
122
291768
4776
在馬里蘭州成立了銷售據點
05:08
The company has also hired a spokesperson.
123
296544
2114
也聘請了一名代言人
05:10
They've been attending
124
298658
1537
他們陸續參與
05:12
surveillance industry conferences
125
300195
1597
監控產業的研討會
05:13
where law enforcement officials show up.
126
301792
2015
執法官員也在現場
05:15
They've spoken at the conferences.
127
303807
1834
他們在研討會上發言
05:17
What I thought was most fascinating was
128
305641
1588
我覺得最有意思的是
05:19
they've actually paid for the coffee break
129
307229
2101
他們贊助會議休息時間的餐點
05:21
at one of the law enforcement conferences
130
309330
1940
那是一場法律研討會
05:23
earlier this year.
131
311270
1493
這是今年稍早的事情
05:24
I can't tell you for sure that Hacking Team
132
312763
2099
我無法確定駭客團隊
05:26
has sold their technology in the United States,
133
314862
2725
是否將他們的科技賣給了美國政府
05:29
but what I can tell you that if they haven't sold it,
134
317587
1971
但我可以確定的是，如果他們沒賣
05:31
it isn't because they haven't been trying hard.
135
319558
3175
這並不是因為他們沒有努力銷售
05:34
So as I said before,
136
322733
2042
如同我之前所說
05:36
governments that don't really have the resources
137
324775
1920
沒有能力自行設計的政府
05:38
to build their own tools will buy
138
326695
1596
將會去購買這些現成的監控軟體
05:40
off-the-shelf surveillance software,
139
328291
1410
05:41
and so for that reason,
140
329701
1388
正因如此
05:43
you see that the government of, say, Tunisia,
141
331089
2716
譬如，突尼西亞政府
05:45
might use the same software
as the government of Germany.
as the government of Germany.
142
333805
2188
以及德國政府，可能會使用相同軟體
05:47
They're all buying off-the-shelf stuff.
143
335993
2272
他們都購買現成的產品
05:50
The Federal Bureau of
Investigation in the United States
Investigation in the United States
144
338265
2199
美國的聯邦調查局 (FBI)
05:52
does have the budget to build
their own surveillance technology,
their own surveillance technology,
145
340464
2762
擁有預算來自行發展監控科技
05:55
and so for several years, I've been trying
146
343226
1781
因此這些年以來
我嘗試去了解
05:57
to figure out if and how the FBI
147
345007
2391
FBI 是否能夠以及
如何入侵監控對象的電腦
如何入侵監控對象的電腦
05:59
is hacking into the computers of surveillance targets.
148
347398
2898
06:02
My friends at an organization called
the Electronic Frontier Foundation --
the Electronic Frontier Foundation --
149
350296
3153
我有朋友在電子領域基金會
(Electronic Frontier Foundation)
(Electronic Frontier Foundation)
06:05
they're a civil society group —
150
353449
2312
這是一個公民社會組織
06:07
obtained hundreds of documents from the FBI
151
355761
2492
取得許多來自 FBI 的文件
06:10
detailing their next generation
of surveillance technologies.
of surveillance technologies.
152
358253
2848
內容描述他們下一代的監聽科技
06:13
Most of these documents were heavily redacted,
153
361101
2634
這些文件的內容大多被大量塗改
06:15
but what you can see from the slides,
154
363735
2816
但若我把它放大
06:18
if I zoom in, is this term:
155
366551
1962
你可以看到這個名詞：
06:20
Remote Operations Unit.
156
368513
1820
遠端營運單位
06:22
Now, when I first looked into this,
157
370333
2234
當我第一次看到這個
06:24
I'd never heard of this unit before.
158
372567
2070
我從未聽過這個單位
06:26
I've been studying surveillance
for more than six years.
for more than six years.
159
374637
2302
我已經研究監聽超過 6 年了
06:28
I'd never heard of it.
160
376939
1285
但我從未聽過這個單位
06:30
And so I went online and I did some research,
161
378224
1963
因此我上網搜尋
06:32
and ultimately I hit the mother lode
162
380187
2125
最後我找到了答案
06:34
when I went to LinkedIn,
163
382312
1634
當我進入Linkedin網站
06:35
the social networking site for job seekers.
164
383946
2569
這是求職者會使用的社群網站
06:38
There were lots of former
U.S. government contractors
U.S. government contractors
165
386515
2913
裡面有許多過去美國政府的外包商
06:41
who had at one point worked
166
389428
1387
這些人曾經
06:42
for the Remote Operating Unit,
167
390815
1309
任職於這個遠端營業單位
06:44
and were describing in surprising detail on their CVs
168
392124
3414
並且在他們的履歷上詳盡解釋
06:47
what they had done in their former job.
169
395538
2031
這份工作的內容
06:49
(Laughter)
170
397569
2222
(笑聲)
06:51
So I took this information
171
399791
1987
我把這些資料
06:53
and I gave it to a journalist that I know
and trust at the Wall Street Journal,
and trust at the Wall Street Journal,
172
401778
3744
交給了一名我信任的華爾街日報記者
06:57
and she was able to contact several other
173
405522
1801
她聯絡了一些
06:59
former law enforcement officials
174
407323
1754
過去的執法官員
07:01
who spoke on background and confirmed
175
409077
1806
這些人承認
07:02
that yes, in fact, the FBI has a dedicated team
176
410883
3359
FBI 的確有一個單位
07:06
that does nothing but hack into the computers
177
414242
2136
專門入侵監聽對象的電腦
07:08
of surveillance targets.
178
416378
1526
07:09
Like Gamma and Hacking Team,
179
417904
1888
如同伽碼以及駭客團隊這樣的企業
07:11
the FBI also has the capability
180
419792
2117
FBI 也有能力
07:13
to remotely activate webcams, microphones,
181
421909
3394
遠端啟動網路攝影機、麥克風、
07:17
steal documents, get web browsing information,
182
425303
2202
竊取文件、取得網路瀏覽資料等
07:19
the works.
183
427505
1684
這樣的行為
07:21
There's sort of a big problem
184
429189
1822
這是一個很大的問題
07:23
with governments going into hacking,
185
431011
1600
政府可以入侵電腦
07:24
and that's that terrorists, pedophiles,
186
432611
2519
恐怖分子、有戀童癖的人、
07:27
drug dealers, journalists and human rights activists
187
435130
2911
販毒者、記者以及人權運動人士
07:30
all use the same kinds of computers.
188
438041
2271
都使用相同種類的電腦
07:32
There's no drug dealer phone
189
440312
2047
沒有販毒專用的電話
07:34
and there's no journalist laptop.
190
442359
1966
沒有記者專用的筆電
07:36
We all use the same technology,
191
444325
2234
我們都使用相同的科技
07:38
and what that means then is that for governments
192
446559
1894
而這代表的是
政府有能力入侵電腦
07:40
to have the capability to hack into the computers
193
448453
2117
07:42
of the real bad guys,
194
450570
1699
那些真正是壞人的電腦
07:44
they also have to have the capability
195
452269
1976
政府也有能力
07:46
to hack into our devices too.
196
454245
2185
入侵我們的電腦
07:48
So governments around the world
197
456430
1752
因此全世界的政府
07:50
have been embracing this technology.
198
458182
1461
都在使用這項科技
07:51
They've been embracing hacking
199
459643
1605
他們都在使用監聽
07:53
as a law enforcement technique,
200
461248
1820
作為執法的工具
07:55
but without any real debate.
201
463068
1950
但並沒有人真正提出質疑
07:57
In the United States, where I live,
202
465018
1819
在美國，我的國家
07:58
there have been no congressional hearings.
203
466837
1825
並沒有國會聽證
08:00
There's no law that's been passed
204
468662
1961
並沒有通過任何法律
08:02
specifically authorizing this technique,
205
470623
2073
專門授權這項科技
08:04
and because of its power and potential for abuse,
206
472696
2669
鑒於它的能力以及被濫用的可能性
08:07
it's vital that we have an informed public debate.
207
475365
2947
進行一個公開的討論是非常重要的
08:10
Thank you very much.
208
478312
1946
非常謝謝
08:12
(Applause)
209
480258
1556
(掌聲)
ABOUT THE SPEAKER
Christopher Soghoian - Privacy researcher and activistChristopher Soghoian researches and exposes the high-tech surveillance tools that governments use to spy on their own citizens, and he is a champion of digital privacy rights.
Why you should listen
TED Fellow Christopher Soghoian is a champion of digital privacy rights, with a focus on the role that third-party service providers play in enabling governments to monitor citizens. As the principal technologist at the American Civil Liberties Union, he explores the intersection of federal surveillance and citizen's rights.
Before joining the ACLU, he was the first-ever technologist for the Federal Trade Commision's Division of Privacy and Identity Protection, where he worked on investigations of Facebook, Twitter, MySpace and Netflix. Soghoian is also the creator of Do Not Track, an anti-tracking device that all major web browsers now use, and his work has been cited in court.
Christopher Soghoian | Speaker | TED.com