Subtitles section Play video
I think most people would be surprised
我想大多數人都會感到驚訝
at how much information they unknowingly give away online
他們在不知不覺中洩露了多少資訊在網上
and how that can leave them vulnerable when people like me
以及當像我這樣的人,如何能讓他們脆弱的
come along and collect all of that information.
來收集所有這些資訊。
It's incredibly easy to track anyone with any modern technology now.
現在用任何現代技術追蹤任何人都非常容易。
It's incredibly difficult for anyone to try and avoid detection.
任何人想要避免被發現,都是非常困難的。
When I went on the run back in the 1990s
九十年代我出走的時候。
there was still, just about, a chance to do it
還有機會
because it was very resource intensive
因為它是非常耗費資源的
for either spies or corporations to track people who went on the run.
為間諜或公司追蹤逃亡的人。
I'm Scott Helme, I'm a cybersecurity researcher and an ethical hacker.
我是Scott Helme,我是一個網絡安全研究者,也是一個有道德的黑客。
I'm Annie Machon, I'm a former intelligence officer with MI5,
我是安妮・馬孔,我是前軍情五處的情報人員。
the UK domestic security service.
英國國內安全部門。
So I think many people would be very surprised
所以我想很多人都會很驚訝
about what we can find out about them online.
關於我們可以從網上了解到他們的情況。
I met someone recently where we demonstrated this
我最近遇到一個人,我們在那裡演示了這個
and with just their name and knowing the general area where they lived
只知道他們的名字,知道他們居住的大致區域。
we were able to narrow down their social media profile.
我們能夠縮小他們的社交媒體檔案。
We have things like the births, marriages and deaths register
我們有出生、結婚和死亡登記冊等東西。
in the UK where we can look up your marriage certificate
在英國,我們可以查到你的結婚證。
or your birth certificate.
或你的出生證明。
From there we can see, parents and spouses
從那裡我們可以看到,父母和配偶
and we can start to spread out this net of information
我們就可以開始傳播這個信息網了
that we can gather about you from very simple resources.
我們可以從非常簡單的資源中收集關於你的資訊。
Social media over the last decade has become the spies dream.
過去十年來,社交媒體已經成為間諜的夢想。
Back in the 1990s, my job as an intelligence officer
在90年代,我的工作是情報人員。
was to build up profiles and investigate targets
是建立檔案和調查目標
and that could take weeks; trying to get a shape of someone's life.
而這可能需要數週的時間;試圖瞭解一個人的生活形態。
Their contacts, where they worked, their relationships,
他們的聯繫人,他們在哪裡工作,他們的關係。
their views, their activities, their hobbies, everything.
他們的觀點,他們的活動,他們的愛好,一切。
Now of course with social media,
當然現在有了社交媒體。
we just offer it all up for free, voluntarily.
我們只是免費提供這一切,自願的。
I think privacy has changed so dramatically in the last 10 years
我認為隱私在過去10年裡發生了巨大的變化
if we go back 10 years it would have been very difficult
十年河東,十年河西
to gather information about someone, very analogue, very offline.
收集某人的資訊,很模擬,很線下。
We may have to collect pieces of paper or documents
我們可能需要收集紙片或文件。
and now in the digital world it's
而現在在數字世界裡,它是
a click of a finger and a search on the internet
彈指一揮間
and we can have a lot of information about someone.
而我們可以掌握一個人的很多資訊。
Social is really easy where you can pick up Twitter, send a tweet
社交真的很簡單,在這裡你可以拿起Twitter,發送一條微博。
that my internet has stopped working so I might tweet my internet company
我的網絡已經停止工作,所以我可能會推送我的網絡公司。
or more recently, my water supply stops working
或最近,我的水供應停止工作
and the water company will have status updates
和自來水公司會有最新的狀況
and people will comment on them and we now know that all of these people
人們會對他們進行評論,我們現在知道這些人都是
are users of this company's services
是該公司服務的用戶
so if I wanted to impersonate them I could call one of those individuals
所以,如果我想冒充他們,我可以打電話給這些人中的一個人
if I had their number and say, "Hey, Sarah, I'm from the water company.
如果我有他們的電話號碼,並說, "嘿,莎拉,我從水公司,
Just regarding your complaint, could we go through account security,
只是關於你的投訴,我們可以通過賬戶安全。
could you confirm your postcode for me please?"
你能幫我確認一下你的郵編嗎?"
And I'm then extracting more information
然後我提取更多的資訊
using the original tweet as the leverage to get you to trust me.
以原微博為籌碼,讓你信任我。
It's interesting to ask, "Who might be spying on us?"
有意思的是,"誰可能在監視我們?"
I mean, obviously for someone who worked in the intelligence agencies
我的意思是,很明顯對於一個在情報機構工作的人而言
I think of espionage and spying and surveillance in a particular way
我對間諜和監視有一種特殊的看法。
where you are given targets to investigate.
在那裡你被賦予目標調查。
First of all, yes it might be the law enforcement intelligence agencies,
首先,是的可能是執法情報機構。
depending on what you're getting up to.
取決於你在搞什麼。
It could be political activism, as simple as that.
可能是政治活動,就這麼簡單。
Two, it will definitely be the big social media corporations
二、一定會是社交媒體大公司的天下
because we are their product
因為我們是他們的產品
and the question is then to realistically say,
而問題則是要實事求是地說。
"OK, what might be the threat to me personally?
"好吧,可能對我個人有什麼威脅?
How can I best protect myself from those threats?"
我如何才能最好地保護自己免受這些威脅?"
You don't have to be on the run from the government or MI5.
你不必逃避政府或軍情五處的追捕。
You might just want a bit of privacy.
你可能只是想要一點隱私。
Smart phones are little spy phones in your pocket.
智能手機是你口袋裡的小間諜手機。
Turn off your smartphone; ideally leave it at home.
關閉你的智能手機;最好是把它留在家裡。
Another really good thing for people to look at is the privacy settings
另一個真正的好東西,大家可以看一下,就是隱私設置。
on applications on their smartphones.
在智能手機上的應用。
So maybe you don't want an application
所以,也許你不想要一個應用程序
to be able to look through your photographs.
能夠查看你的照片。
You can go into the settings on your phone and disable these things.
你可以進入手機的設置,禁用這些東西。
So go into your device's settings,
所以進入你設備的設置。
have a look through those and just think,
看看這些,想想看。
"You know, this app doesn't need my microphone.
"你知道,這個應用不需要我的麥克風。
So I'm just gonna turn that off, make sure it can't listen to me.
所以我就把它關掉,確保它聽不到我的聲音。
It doesn't need my location, I'm just gonna turn that off as well."
它不需要我的位置,我也要把它關掉。"
And just start to take a little bit more control
而只是開始採取多一點的控制權
over all of the information that you're sharing.
在你分享的所有資訊中。
One thing you can do of course is to invest in older technology.
當然,你可以做的一件事是投資老技術。
Get an old burner phone
拿個舊的燒機手機
that you might just use for phone calls and that's it.
你可能只是用來打電話,就是這樣。
Use an old laptop and then a whole suite of privacy software
用一臺舊的筆記本電腦,然後用一整套的隱私軟件。
on that laptop as well.
在那臺筆記本上也是如此。
Another really great way of protecting yourself
另一個非常好的保護自己的方法
if you're travelling a lot using public WIFI
如果您經常使用公共WIFI旅行的話
at an airport or a train station,
在機場或火車站;
they commonly ask for your first name and last name in order to log in
他們通常會詢問你的名字和姓氏,以便登錄。
what you can do is
你能做的是
give them a different first name and last name to log in
改名換姓登陸
and you'll still be able to use the WIFI network afterwards.
而且之後還可以使用WIFI網絡。
This may sound a little paranoid but when I was in Berlin a few years ago
這可能聽起來有點偏執,但幾年前我在柏林時
at the height of the Snowden disclosures
在斯諾登事件曝光的高峰期
if you went to parties you were expected to
如果你去參加聚會,你應該
put your mobile phones in a tin, a biscuit tin
把你的手機放在一個罐子裡,一個餅乾罐子裡
which then went into the fridge to stop signals going in and coming out
然後進入冰箱,以阻止信號進入和出來。
to stop the phone snooping on you.
以阻止手機對你的窺探。
I think it's really important that people make conscious decisions
我認為人們做出有意識的決定是非常重要的。
about the information that they share
關於他們分享的資訊
because often when we share this information
因為往往當我們分享這些資訊時
you can never guarantee to be able to take that back.
你永遠不能保證能夠收回。
If I send a tweet to a company
如果我給一家公司發一條微博
and I want to make a complaint about their service
我想對他們的服務進行投訴。
I may be able to delete that tweet later
我以後可能會把那條微博刪掉的
but everyone's already seen that and knows that I had that interaction
但大家都已經看到了,知道我有那個互動了。
so making this conscious decision before I take those actions
所以,在我採取這些行動之前,做出這個有意識的決定。
would help me prevent leaking that information later.
會幫助我防止以後洩露這些資訊。