熱點推薦：「一群巨嬰！」內地姑娘流利切換3種語言，正氣回懟香港示威者
你的智慧型手機上面有多少個app（應用程式）？你是否曾經閱讀過你所使用的應用程式的條款和條件？還是直接就選擇了已讀並同意？這些app可能正在以我們想像不到的方式來獲取我們的隱私和數據，挪威消費者委員會的Finn Myrstad和他的團隊對此進行了研究。
中英全文（來自TED官網）
Do you remember when you were a child, you probably had a favorite toy that was a constant companion, like Christopher Robin had Winnie the Pooh, and your imagination fueled endless adventures? What could be more innocent than that? Well, let me introduce you to my friend Cayla.
你還記得童年時期，你可能有一個鍾愛的玩具與你形影不離，就像克裡斯多夫·羅賓有小熊維尼一樣，以及你那充滿無盡冒險的想像力嗎？還有什麼比這個更天真的呢？讓我向你們介紹我的朋友凱拉。
Cayla was voted toy of the year in countries around the world. She connects to the internet and uses speech recognition technology to answer your child's questions, respond just like a friend. But the power doesn't lie with your child's imagination. It actually lies with the company harvesting masses of personal information while your family is innocently chatting away in the safety of their home, a dangerously false sense of security. This case sounded alarm bells for me, as it is my job to protect consumers' rights in my country. And with billions of devices such as cars, energy meters and even vacuum cleaners expected to come online by 2020, we thought this was a case worth investigating further. Because what was Cayla doing with all the interesting things she was learning? Did she have another friend she was loyal to and shared her information with? Yes, you guessed right. She did. In order to play with Cayla, you need to download an app to access all her features. Parents must consent to the terms being changed without notice. The recordings of the child, her friends and family, can be used for targeted advertising. And all this information can be shared with unnamed third parties.
凱拉是全球各個國家投票選出的年度玩具。她能與網際網路連接並使用語音識別技術來回答孩子們的問題，就像一個朋友一樣。但權力並不在你孩子的想像力中。它其實在於公司所收集的海量個人信息上，你的家人在安全的家中閒聊時，這其實是一種對於安全感的危險錯覺。這個案子給我敲響了警鐘，因為我的工作是保護我們國家消費者的權益。隨著到2020年，數十億諸如汽車，能源儀表，甚至吸塵器那樣的設備投入使用，我們認為這個案例值得深入調查。我們很好奇，凱拉用她所學到的所有有趣的東西，到底做了些什麼呢？她有沒有另一個忠實的朋友，分享她的信息？是的，你猜對了，她有的。要跟凱拉玩耍，你需要下載一個APP來獲取她所有的功能。家長必須同意更改條款而毋須另行通知。孩子們，她的好友和家人的錄音，可以被用於定向廣告。並且所有這些信息都可以與未具名的第三方分享。
Enough? Not quite. Anyone with a smartphone can connect to Cayla within a certain distance. When we confronted the company that made and programmed Cayla, they issued a series of statements that one had to be an IT expert in order to breach the security. Shall we fact-check that statement and live hack Cayla together? Here she is. Cayla is equipped with a Bluetooth device which can transmit up to 60 feet, a bit less if there's a wall between. That means I, or any stranger, can connect to the doll while being outside the room where Cayla and her friends are. And to illustrate this, I'm going to turn Cayla on now. Let's see, one, two, three. There. She's on. And I asked a colleague to stand outside with his smartphone, and he's connected, and to make this a bit creepier ...
就這些了？其實還不止。任何有智慧型手機的人在一定的距離內都可以連接到凱拉。當我們與製造和開發凱拉的公司對峙時，他們發表了一系列的聲明稱只有IT專家才能破壞其安全性。我們要不要一起核實一下這份聲明，直播一下如何「劫持」凱拉？這就是她。凱拉裝備有藍牙設備，傳輸距離可以達到60英尺，如果有牆阻擋就少點。這意味著，我或任何陌生人在凱拉和她朋友的家門口就能連接上她。為了演示這個過程，我現在把凱拉開機。讓我們看看，1，2，3好了，她開機了，我之前讓一位同事拿著他的智慧型手機站在門外，現在他連上了，為了加點恐怖的氣氛…
let's see what kids could hear Cayla say in the safety of their room.
讓我們看看孩子們會在他們安全的家中聽到凱拉說什麼。
Man: Hi. My name is Cayla. What is yours?
男：嗨，我叫凱拉，你的名字呢？
Finn Myrstad: Uh, Finn.
芬恩：芬恩。
Man: Is your mom close by?
男：你媽媽在旁邊嗎？
FM: Uh, no, she's in the store.
芬恩：不在，她在店裡。
Man: Ah. Do you want to come out and play with me?
男：啊，你想出來跟我一起玩耍嗎？
FM: That's a great idea.
芬恩：真是好主意呀。
Man: Ah, great.
男：好呀。
FM: I'm going to turn Cayla off now.
芬恩：我現在要關掉凱拉了。
We needed no password or to circumvent any other type of security to do this. We published a report in 20 countries around the world, exposing this significant security flaw and many other problematic issues. So what happened? Cayla was banned in Germany, taken off the shelves by Amazon and Wal-Mart, and she's now peacefully resting at the German Spy Museum in Berlin.
我們無須任何密碼或規避任何其他安全措施就可以做到。我們在全球20個國家發布了一份報告，曝光了這種明顯的安全漏洞和很多其他問題。後來怎麼樣了呢？凱拉在德國被禁止出售，被亞馬遜和沃爾瑪下架，現在她正平靜地呆在柏林的德國間諜博物館。
However, Cayla was also for sale in stores around the world for more than a year after we published our report. What we uncovered is that there are few rules to protect us and the ones we have are not being properly enforced. We need to get the security and privacy of these devices right before they enter the market, because what is the point of locking a house with a key if anyone can enter it through a connected device?
然而，在我們報告發布前，凱拉已經在全球各地的商店出售超過一年。我們所揭示的是，很少有規則能夠保護我們，並且有的規則往往也得不到很好的執行。在它們進入市場時，我們需要讓這些設備具備可靠的安全和隱私功能，因為如果任何人都可以通過一個聯網設備進來，用鑰匙鎖門的意義又何在？
You may well think, "This will not happen to me. I will just stay away from these flawed devices." But that won't keep you safe, because simply by connecting to the internet, you are put in an impossible take-it-or-leave-it position.
你可能會覺得，「這沒發生在我身上。我只需要遠離這些有缺陷的設備就好。」但這無法保證你的安全，因為只是通過連接上網際網路，你就不可避免地被置於要麼接受，要麼走人的境地。
Let me show you. Like most of you, I have dozens of apps on my phone, and used properly, they can make our lives easier, more convenient and maybe even healthier. But have we been lulled into a false sense of security? It starts simply by ticking a box. Yes, we say, I've read the terms. But have you really read the terms? Are you sure they didn't look too long and your phone was running out of battery, and the last time you tried they were impossible to understand, and you needed to use the service now? And now, the power imbalance is established, because we have agreed to our personal information being gathered and used on a scale we could never imagine.
給大家看看。像很多人一樣，我手機上有幾十個應用，使用得當，它們可以讓我們生活更輕鬆，更便捷，甚至可能更健康。但我們是否被一種虛假的安全感蒙蔽了呢？它開始於簡單勾選一個方框開始。是的，我們會說，我已經閱讀過這些條款。但你真的閱讀了這些條款嗎？你確定它們不是看起來太長，你的手機快沒電了，你最後一次嘗試時，它們非常晦澀難懂，而且你需要立刻使用這個服務？目前，權力的不平衡已經建立，因為我們同意讓對方收集我們的個人信息，並用於我們無法想像的規模層面。
This is why my colleagues and I decided to take a deeper look at this. We set out to read the terms of popular apps on an average phone. And to show the world how unrealistic it is to expect consumers to actually read the terms, we printed them, more than 900 pages, and sat down in our office and read them out loud ourselves, streaming the experiment live on our websites. As you can see, it took quite a long time. It took us 31 hours, 49 minutes and 11 seconds to read the terms on an average phone. That is longer than a movie marathon of the "Harry Potter" movies and the "Godfather" movies combined.
這就是我和同事們決定去深入研究這個問題的原因。我們開始閱讀一臺普通手機上熱門應用的條款。並且向世界展示，讓消費者去閱讀這些條款是多麼的不切實際，我們把這些條款列印出來，總長度超過了900頁紙，然後坐在辦公室裡大聲朗讀，並在我們的網站上直播這個實驗。很顯然，需要花很長的時間。我們花了31個小時，49分鐘11秒才閱讀完一臺普通手機上的條款。這比《哈利波特》和《教父》系列電影加起來還長。
And reading is one thing. Understanding is another story. That would have taken us much, much longer. And this is a real problem, because companies have argued for 20 to 30 years against regulating the internet better, because users have consented to the terms and conditions.
閱讀是一回事，理解則是另外一碼事。這會需要我們更多更多的時間。這是一個切實存在的問題，因為這些公司爭執了20-30年，反對更好地監管網際網路，因為用戶已經同意了這些條款和條件。
As we've shown with this experiment, achieving informed consent is close to impossible. Do you think it's fair to put the burden of responsibility on the consumer? I don't. I think we should demand less take-it-or-leave-it and more understandable terms before we agree to them.
正如我們在這個實驗中展示的，獲得知情同意幾乎是不可能的。你認為讓消費者承擔責任是公平的嗎？我不認同。我認為我們應該要求減少要麼接受要麼放棄，在我們同意前給出更多可理解的條款。
Thank you.
謝謝。
Now, I would like to tell you a story about love. Some of the world's most popular apps are dating apps, an industry now worth more than, or close to, three billion dollars a year. And of course, we're OK sharing our intimate details with our other half. But who else is snooping, saving and sharing our information while we are baring our souls? My team and I decided to investigate this. And in order to understand the issue from all angles and to truly do a thorough job, I realized I had to download one of the world's most popular dating apps myself.
現在我想講一個關於愛的故事。一些世界上最流行的應用是相親應用，這個行業現在價值超過或接近，一年30億美元。當然，我們可以與另一半分享我們的私密細節。但當我們在坦白靈魂時，還有誰在窺探，保存和分享我們的信息呢？我和團隊打算對此展開調查。為了從各個角度了解這個問題並認真做好工作，我意識到我得親自下載一款世界上最流行的相親軟體。
So I went home to my wife ...
所以我回家問我老婆…
who I had just married. "Is it OK if I establish a profile on a very popular dating app for purely scientific purposes?"
我們剛結婚不久。「純粹為了科學研究，我可以在一個非常流行的相親軟體上建立個人檔案嗎？」
This is what we found. Hidden behind the main menu was a preticked box that gave the dating company access to all my personal pictures on Facebook, in my case more than 2,000 of them, and some were quite personal. And to make matters worse, when we read the terms and conditions, we discovered the following, and I'm going to need to take out my reading glasses for this one. And I'm going to read it for you, because this is complicated. All right.
於是我們發現了這個。隱藏在主菜單後面的是一個預先標記好的格子，讓這個相親公司可以獲取我在Facebook上的所有個人照片，我個人有超過2千張照片，其中有些相當私密。並且更糟糕的是，當我閱讀條款時，我們發現了下面的內容，我需要掏出老花鏡才能看清。我打算給大家閱讀一下，因為太複雜了。好的。
"By posting content" -- and content refers to your pictures, chat and other interactions in the dating service -- "as a part of the service, you automatically grant to the company, its affiliates, licensees and successors an irrevocable" -- which means you can't change your mind -- "perpetual" -- which means forever -- "nonexclusive, transferrable, sublicensable, fully paid-up, worldwide right and license to use, copy, store, perform, display, reproduce, record, play, adapt, modify and distribute the content, prepare derivative works of the content, or incorporate the content into other works and grant and authorize sublicenses of the foregoing in any media now known or hereafter created."
「發布內容」——內容指你的照片，聊天記錄和其他在相親服務上的互動——「作為服務的一部分，你自動授予公司，及其關聯方，被許可方或繼任公司不可撤銷，」——意思是你不能改變主意——「永久的」——意思是永遠——「非排他、可轉讓、可附帶許可、完全付費、在全球範圍內的使用、複製、存儲、執行、顯示、複製、錄製、播放、改編、修改和分發內容以及內容的派生作品的權利和許可，或將內容合併到其他作品中，並在任何已知或以後創建的媒體中授予和授權上述轉授許可。」
That basically means that all your dating history and everything related to it can be used for any purpose for all time. Just imagine your children seeing your sassy dating photos in a birth control ad 20 years from now.
這基本上意味著你所有的相親歷史以及任何與之有關的一切東西可以一直被用於任何目的。想像一下，你的孩子在20年後的節育廣告中會看到你時髦的約會照。
But seriously, though --
但說真的——
what might these commercial practices mean to you? For example, financial loss: based on your web browsing history, algorithms might decide whether you will get a mortgage or not. Subconscious manipulation: companies can analyze your emotions based on your photos and chats, targeting you with ads when you are at your most vulnerable. Discrimination: a fitness app can sell your data to a health insurance company, preventing you from getting coverage in the future. All of this is happening in the world today.
這些商業慣例對你意味著什麼？比如，財務損失：基於你的網站瀏覽歷史，算法可能決定你能否該獲得貸款。潛意識操縱：公司可以通過你的照片和聊天分析你的情緒，在你最脆弱時投放針對你的定向廣告。歧視：健身應用可以把你的數據賣給健康保險公司，讓你將來獲得保險困難重重。所有這一切都發生在今天的世界中。
But of course, not all uses of data are malign. Some are just flawed or need more work, and some are truly great. And there is some good news as well. The dating companies changed their policies globally after we filed a legal complaint. But organizations such as mine that fight for consumers' rights can't be everywhere. Nor can consumers fix this on their own, because if we know that something innocent we said will come back to haunt us, we will stop speaking. If we know that we are being watched and monitored, we will change our behavior. And if we can't control who has our data and how it is being used, we have lost the control of our lives.
但當然，並非所有的數據使用都是有害的。有些只是缺陷，或者需要更多的工作，有些則真的很棒。這裡也有一些好消息。在我們提出訴訟後，這個交友公司改變了他們的全球政策。但像我們這樣為消費者權益鬥爭的組織不是到處都有。消費者也無法獨自修復這個問題，因為假如我們知道我們的一些無心之言會反過來困擾我們，我們就會停止發聲。如果我們知道自己正在被關注和監控，就會改變自身的行為。如果我們無法控制誰擁有我們的數據，以及數據如何被使用，我們就失去了對自己生活的控制。
The stories I have told you today are not random examples. They are everywhere, and they are a sign that things need to change. And how can we achieve that change? Well, companies need to realize that by prioritizing privacy and security, they can build trust and loyalty to their users. Governments must create a safer internet by ensuring enforcement and up-to-date rules. And us, the citizens? We can use our voice to remind the world that technology can only truly benefit society if it respects basic rights.
我今天告訴你們的故事並不是隨機的案例。它們無處不在，它們標誌著是時候該改變現狀了。我們如何才能實現這種改變？公司需要認識到應該以隱私和安全為先，在此基礎上培養用戶的信任和忠誠。政府必須通過監督執行和更新規則去構建一個更安全的網際網路。而我們這些公民呢？我們可以用自己的聲音去提醒世界，科技只有在尊重基本權利的基礎上，才能真正讓全社會受益。
Thank you so much.
謝謝大家。
往期回顧
因為太胖被霸凌，還是因為被霸凌所以變胖？
先運動還是先吃早飯？怎麼鍛鍊更燃脂
麥當勞CEO因辦公室戀情被解僱，網友：I'm lovin' it!
《老友記》瑞秋的演講致辭，溫暖有力量，讓人淚目！
素媛案兇手長相曝光、大連殺人男孩被收容3年…性侵，國之殤！
TED演講：別讓他人的負面評價定義你
TED演講：接受生活中的小意外
《少年的你》哪些戳心的臺詞感動到你了？（部分雙語）