Placeholder Image

字幕表 動画を再生する

審査済み この字幕は審査済みです
  • This video was made possible by CuriosityStream.


  • When you sign up for an annual subscription, you'll also get access to Nebula.


  • Now streaming HAI's first ever 40-minute special, which premiered yesterday.


  • It's about bricks.


  • Happy now?


  • Alright so, here's the deal: there's this group of nerds called ICANNthe Internet Corporation for Assigned Names and Numbers.

    さて、ここで取引です:ICANN(Internet Corporation for Assigned Names and Numbers)と呼ばれるこのオタクのグループがあります。

  • And they have handed out seven keys to seven individuals spread out across the world, and with those keys, you can shut down, and reboot the Internet.


  • Now normally, this is where I would make a bunch of bad jokes, and call them stuff like the Fellowship of the Keys, or the Key-I Joes, or You, Key, and Dupree.

    さて、通常このような時に、私はたくさんのひどいジョークを作ります。Fellowship of the Keys、Key-I Joes、またはYou、Key、Dupreeなどと呼んでね。

  • But we don't have time for that, because to understand these keys, you need to understand a bunch of complicated internet stuff that was very confusing for me to figure out, starting with DNS.


  • In case you don't know what DNS is, because I don't know, you had friends in college, I'll explain.


  • All the computers that make up the internet are identified via long numbers called IP addresses.


  • But when I want to go to, for example, Twitter, because I want to scroll through an endless mix of hot takes, anger, harassment, product placement.


  • And videos of Kanye West saying problematic things but then it turns out that he's actually a cake.


  • I don't want to have to type in which is the IP address of one of the servers that hosts Twitter.


  • I just want to type, and then be taken there so I can get to my seeing-photos-of-people-partying-during-Covid induced panic attack.


  • So my computer has to translate into the right IP address, and it does that first by asking a whole long line of things.


  • First, of course, it asks Clippy, but Clippy doesn't know.


  • So instead, it asks your Operating System, which maybe knows, but if it doesn't it asks something called a recursive name server, which also maybe knows.


  • But if it doesn't, it asks the world's 13 root servers, which send you to the appropriate top-level domain server.


  • In this case, the one that runs all the dotcoms who sends you to the right authoritative name server, which eventually is likeoh yeah, twitter is”


  • But you need someone to administer this whole system.


  • To make sure, first of all, that IP addresses aren't handed out willy nilly, and more importantly, to keep everything secure.


  • So people can't come in and mess with it, and sayhey check it out, this IP address for is actually this IP address, which goes to a site called

    ですから、人々はそれを利用していたずらすることができません。「ちょっと見てください。irs.govであるこのIPアドレスは、実際にはこっちIPアドレスで、 free-money-just-give-me-your-bank-info-first.totally-legit.netにつながるよ」なんてできないんです。

  • So the DNS is authenticated through a system called DNSSEC.


  • And I promise we're going to get to their mystical internet keys soon, but first, you need to understand how DNSSEC works.


  • The first important idea is asymmetrical encryption, which involves a private key and a public key, which are long numbers that are linked mathematically.


  • The public key is a number everybody can know, but the private key is very secret, and only held by one entity.


  • And this is what's important: with the private key, you can make something called a digital signature over a document, that someone can, by looking at the corresponding public key go,


  • Oh man, based on what this public key says, I know that that signature was definitely made by the person with the corresponding private key.”


  • And that's how DNS is authenticated.


  • The information is” is signed by Twitter using their private key, and then my computer uses Twitter's public key.

    「 is」という情報は、Twitterの秘密キーを使用して署名され、私のコンピューターはTwitterの公開キーを使用しています。

  • Looks at the signature, and says, “yep, this signature was definitely made using Twitter's private key, so the information must be legitimate.”


  • The problem is, we have to be sure that Twitter's public key, off of which I'm basing this analysis, is legit too.


  • So Twitter's public key is signed by a higher authority, the top-level domain server who runs all dotcoms, using their private key.


  • And then I use their public key to be like, “yup, this signature was made by the dotcom people.”


  • But to know that public key is legit, it's signed by an even higher authority, up and up and up, until it's signed off on by ICANN, that nonprofit I mentioned earlier, using a single private key.


  • Every single website's IP address in DNS is ultimately secured by ICANN's single public and private key, which is called the trust anchor.


  • In fact, I can even show you ICANN's public key, It's this.


  • And I shouldn't say this, but, their private key, the super top-top-top-secret number that secures the whole internet, is sevenfourtwo.


  • Okay look, I don't know their private key, I just wanted you to think I'm cool.


  • Now, the numbers that make up the private key that secures the whole DNS are stored on hard drives inside physical boxes.


  • Called Hardware Security Modules, or HSMs for short, or H's for shorter, orhuh's” for shortest.


  • And there are four of them, kept in pairs in ICANN stations 2,500 miles apart: one in Culpepper, Virginia and one in El Segundo, California.


  • Once you get past the armed guards and pin pads, and card scanners, and biometric security stops, and sword-fighting bears.


  • To get into those physical HSM boxes that hold that secret number, you need several smart cards.


  • And those smart cards are kept inside other boxes, which can only be opened with physical keys, which are finally, held by seven people across the world.


  • Oh, I was kidding about the sword-fighting bears, by the way. ICANN actually uses nunchuck wielding fish.


  • The key-holders aren't world leaders or anything, but just security experts designated by ICANN.


  • In fact, I can show you who they are: it's these people.


  • I know, not that exciting.


  • Should DNS ever be compromised, five of the seven key-holders would have to go to an ICANN facility, use their keys, in what's called a “key ceremonyto get to the smart-cards.


  • Then use those smart-cards to physically open the box with ICANN's private key in it, and use that to shut DNS, and with it much of the functionality of the internet, down, and reset it.


  • Some people say the keyholders are the most powerful people in the world.


  • But whoever said that is an idiot, because clearly the most powerful people in the world are the Half As Interesting commenters who spent literal years demanding that we make a video about bricks.

    しかし、それを言ったのが誰だとしても、その人はバカです。なぜなら、世界で最も力を持った人は、レンガに関するビデオを作るのに文字通り何年も費やした、Half As Interestingのコメンターだからです。

  • Because guess what, we finally did it.


  • And it's way more than just another HAI video.


  • It's a 40-minute long special called The Brick Façade: A True Crime Drama and it's got action and drama and suspense and cameos and, more than anything, it's got bricks.

    これは、「The BrickFaçade:A True Crime Drama」という40分間のスペシャル動画で、アクション、ドラマ、サスペンス、カメオがあり、何よりもレンガがあります。

  • And it's available right now on Nebula.


  • The best way to get Nebula is through the CuriosityStream bundle.


  • For just $15 a year, for a limited time, you'll get an annual subscription to CuriosityStream, where you can watch all sorts of great full-length documentaries, and Nebula.


  • Just go toにアクセスしてください。

This video was made possible by CuriosityStream.


審査済み この字幕は審査済みです

動画の操作 ここで「動画」の調整と「字幕」の表示を設定することができます

B1 中級 日本語 キー 秘密 twitter 公開 アドレス サーバー

インターネットをオフにできる7つの人 (The Seven People Who Can Turn Off the Internet)

  • 8222 337
    Minjane に公開 2021 年 01 月 14 日