If you find a new bug, there is a big debate about what you should do. Should you disclose it responsibly? Tell it to the whole world?
如果你發(fā)現(xiàn)一個新漏洞,大家都在爭論你應(yīng)該怎么做,你應(yīng)該負(fù)責(zé)地揭露?或是向全世界公開?
Responsible disclosure, full disclosure, partial disclosure?
是全部透露出去,還是部分透露出去?我會選擇有責(zé)任地透露
I believe in the responsible disclosure model, where you tell the party about the bug and give them time to fix it before you disclose it to the world.
將漏洞透露給相關(guān)方,讓他們有時間打補(bǔ)丁,然后再透露給公眾。
I select speakers that I think are ethical and create contests that are legal and hope people will follow the lead.
我會選擇我認(rèn)為有道德感的發(fā)言者,組織合法的競賽,我們希望其他人會學(xué)著來。
You have federal agents coming in to give their own talks.
還有聯(lián)邦特工出席并發(fā)表演說。
Since the very first Defcon. Well, we had a state prosecutor come in and talk.
從一開始就有司法部門的人參加
In the audience was someone who was being prosecuted by her. We've tried to have different viewpoints.
一位州檢察官出席會議并發(fā)表演說,而聽眾中有她要起訴的人。我們嘗試各種不同的觀點。
So it’s almost like a neutral ground?
那這幾乎是一個中立的場所?
That’s what I've created it to be. Originally, there was no Internet or Amazon.com.
這是我要把它創(chuàng)辦成的樣子。一開始還沒因特網(wǎng)或是亞馬遜網(wǎng)站。
If you wanted information, you had to get it from the horse’s mouth.
你要獲取信息就要來聽人講
It was about getting the experts in the room to dispel myths that came from word of mouth.
就要讓那些專家現(xiàn)場消除那些□耳相傳的誤解。
I knew federal agents would show up. I invited the FBI, Secret Service and others to come from the very beginning.
我知道聯(lián)邦特工會來,開始我就邀請了美國聯(lián)邦調(diào)查局(FBI)、情報局和其他機(jī)構(gòu)。
Everyone thought I was absolutely insane because nobody had done that. I called the Secret Service about it.
每個人都以為我肯定瘋了,因為沒有人那么做過。我給情報局打電話
They said, “We are aware of your activities.”
他們說,我們知道你們的行動。
They haven’t arrested anyone here?
他們沒在這里抓過人吧?
The FBI arrested one speaker, Dmitri Sklyarov, in his hotel room after Defcon in 2001.
2001年,美國聯(lián)邦調(diào)查局抓了一個發(fā)言者,是德米特里.斯克利亞羅夫, 他剛參加完黑客大會回到賓館就被抓走了
That was because the Russian company Dmitri worked for was in a dispute with Adobe.
那件事的起因是德米特里工作的俄羅斯公司和美國奧多比電腦軟件公司(Adobe) 有爭端
Dmitri was kind of a hostage because they couldn’t go after the company in Russia.
因為他們沒有辦法去俄羅斯公司處理,便抓了德米特里做“人質(zhì)”。
There are a lot of controversies every year.
每年都有很多爭端。
The Massachusetts Bay Transit Authority sued to stop three of your speakers from proceeding with a talk. How do you deal with that every year?
馬薩諸塞州海灣運輸管理局曾起訴要求禁止你們的三個與會者講話。你們每年都是怎么處理的?