Ethics, law and staying safe
Cyber security Lesson 16 2:13 English narration · English + 中文 subtitles burned in
Chapters
Transcript
You have spent fifteen lessons learning how attacks work, and that knowledge comes with a duty.
你花了 15 课去搞懂攻击是怎么发生的， 而这份知识是带着责任的。
A computing professional uses these skills to protect people, never to harm them.
一个计算机专业的人，用这些本事去"保护"人，绝不去伤害人。
You only test systems you have permission to test.
你只测试你有授权去测试的系统。
And acting unethically is not a small thing: it damages real people, and it ends careers.
而做出不道德的事并不是小事： 它伤害真实的人，也会毁掉一个人的职业生涯。
This is not an add-on to the subject; it is part of doing it properly.
这不是这门学科的附加项；这是把它做好的一部分。
Three kinds of law matter here, and the exam asks you to match an incident to one of them.
这里有三类法律要紧， 而考试会让你把一件事对上其中一条。
Computer-misuse law makes unauthorised access a crime — even just looking counts.
计算机滥用法把未经授权的访问定为犯罪—— 哪怕"只是看看"也算。
Data-protection law forces organisations to keep your personal data safe and to use it fairly.
数据保护法要求机构必须把你的个人数据保管好、公平地使用。
And copyright protects creative work: you may not copy software or media without permission.
而版权保护的是创作成果： 没有许可，你不能复制软件或媒体作品。
Which brings up the question you will actually face: may I reuse this?
这就引出你真正会碰到的那个问题：我能不能拿来用？
Software comes with a licence that says what you may do with it.
软件都带着一份许可证，说明你可以拿它做什么。
A proprietary licence restricts copying and sharing.
专有许可证限制复制和分发。
An open-source licence lets you use and modify the code, usually with conditions attached, so you still read it.
开源许可证允许你使用和修改代码， 通常还附带条件，所以你照样得读一遍。
Checking the licence before you reuse someone's code or images is both legal and ethical.
在拿别人的代码或图片之前先看清许可证， 这既合法，也合乎道德。
And here is the part you can use tonight.
而这一部分，你今天晚上就能用上。
Use a password manager, with a different password everywhere.
用一个密码管理器，每个地方都用不同的密码。
Turn on two-step verification wherever it is offered.
凡是提供两步验证的地方，都把它打开。
Keep your software updated — most successful attacks use holes that were already fixed.
让软件保持更新—— 大多数得手的攻击，用的都是早就修好了的漏洞。
Look for the padlock before you type a password.
在敲密码之前，先看那把小锁。
And think before you click, because you now know exactly what these attacks look like.
点之前先想一想， 因为你现在很清楚这些攻击长什么样。
Four things to close the course.
用四点给这门课收尾。
One: use what you know to protect people, never to harm.
第一：用你所知道的去保护人，绝不去伤害人。
Two: unauthorised access is a crime, even just looking.
第二：未经授权的访问就是犯罪，哪怕只是看看。
Three: check the licence before you reuse code or images.
第三：拿别人的代码或图片之前先看许可证。
Four: run your own checklist tonight — that is the real test.
第四：今晚把你自己的清单跑一遍——那才是真正的考试。
Well done, and finish the tasks below.
做得好，把下面的题做完吧。