卡内基梅隆大学称没有资助FBI进行黑客攻击 [英国媒体]

University says FBI payment reports 'inaccurate'

卡内基梅隆大学表示关于他们有偿帮助FBI进行黑客攻击的报道是“不准确的”



Carnegie Mellon

卡内基梅隆大学

Carnegie Mellon University (CMU) says reports it was paid by the FBI to attack software sometimes used for criminal activity are "inaccurate".

卡内基梅隆大学（CMU）表示，关于对自己有偿帮助FBI对一些有时会被犯罪分子利用的软件进行黑客攻击的报道是“不准确的”。

The Tor web browser is designed to let people anonymously explore websites, including those hidden on the dark web which do not show up in search engines.

洋葱路由器(TOR)是一款设计用来让人们匿名上网的软件，利用它甚至可以找到一些不会在搜索引擎上显示的暗网网站。

Last week the Tor project claimed that the FBI had paid CMU to find vulnerabilities in its software.

上周，洋葱路由项目组声称FBI付钱给CMU去寻找软件的漏洞。

On Wednesday, the university said that was "inaccurate".

本周三，CMU表示这是“不准确的”。

Why was the university accused?

为什么CMU会受到这个指控？



Drug-selling websites hide on the dark web

毒品交易网站隐藏在暗网上

In 2014, the Tor network detected a concerted effort to work out the identity of people using the platform.

2014年的时候，洋葱路由网络查明一伙黑客在试图查出该平台上的匿名用户的身份。

That attack was linked to CMU after two of its researchers said they would give a talk at the Black Hat cybersecurity conference on a method they found to "de-anonymise hundreds of thousands Tor clients and thousands of hidden services".

这次黑客攻击事件指向了CMU。因为CMU的两名学者表示他们将在黑帽子电子信息安全会议上发表一次演讲，内容是他们发现一种方法可以“查出成千上万洋葱路由匿名用户的真实身份以及几千个隐藏的网站”。

The talk was cancelled, but later the same year a big FBI operation took down dozens of Tor sites, including Silk Road 2 which was a notorious marketplace selling drugs.

该演讲虽然已经取消，但是同年FBI的一次大行动就查处了数十个洋葱路由网站，其中包括Silk Road 2这一声名狼藉的毒品在线交易市场。

The Tor project has since suggested that the FBI paid the university $1m (￡660,000) to carry out the research.

洋葱路由项目组由此暗示该校接受了FBI100万美元（66万英镑）来进行搜查。

'Inaccurate reports'

“不准确的报道”

Last week the university was non-committal on the accusations and told the BBC: "You can read what you want into it."

上周该校对这个指控含糊其辞，并且对BBC说：“所见即所想。”

On Wednesday it issued a statement and said there had been a number of "inaccurate media reports" on its work in cybersecurity.

本周三，该校又站出来说对于其在电子信息安全方面的工作，有一堆“不准确的媒体报道”。

CMU said it did have a federally funded research centre which investigated software security, but that it did not receive funding in exchange for information.

CMU表示FBI的确资助了该校一个调查软件安全性的研究中心，但是并没有接受钱财来交换信息。

"The university from time to time is served with subpoenas requesting information about research it has performed," said the statement. "The university abides by the rule of law, complies with lawfully issued subpoenas and receives no funding for its compliance."

“我校一直以来提供传票要求查询的信息，”CMU发表声明说，“我校依法服从有法律效力的传票，并且不为这种服从接受任何金钱。”
However it has still not denied it was paid by the FBI to conduct research into Tor.

但是，CMU仍然没有否认他们接受了FBI给的钱来对洋葱路由器进行搜查。

Experiments

不应该的行为



In 2014, the FBI closed a number of websites on the dark web

2014年时，FBI关闭了暗网上的多个网站

Even if the FBI had not paid the university to carry out specific research, the Tor project has raised questions about the ethics of CMU's investigation.

即使FBI没付钱给CMU来进行特定的搜查，洋葱路由项目组仍然质疑了CMU科研项目的道德问题。

It has been suggested that the FBI could have ordered CMU to hand over its methods, or the identities of Tor users it had uncovered as a result of its research.

因为这意味着CMU的研究会导致FBI可以要求移交这个黑客手段，或者移交用这个黑客手段所查明的洋葱路由用户身份。

"Whatever academic security research should be in the 21st century, it certainly does not include "experiments" for pay that indiscriminately endanger strangers without their knowledge or consent," the Tor project wrote in its blog.

“不管学术界的信息安全研究是什么，都应该符合21世纪的道德规范，绝不应该出现任何为了金钱，在陌生人不知情或未授权的情况下，对他们进行肆意伤害的行为。”