全浸阅读=Total Immerse Dynamic eReading=TIDE

---

The Broadbandits

The new age of cyber-attacks could have huge economic costs

►Broadbandit=broadband+brandit=broadband robber

导读：

本文是关于网络犯罪文章, 属于负面/灾难事件类型文章，

建议关注正负面之间方向性行为，以及相互间的博弈：

-反方如何破坏现有规则, 如何利用既有漏洞, 如何攻击侵犯；

-正方因何遭受损伤损失, 如何防御抵抗, 效果如何, 用何种手段防范；

-最后在结构上体制上如何反制等;

阅读思考重点应该放在正反方如何相互制衡, 建立阅读信息接收和理解的架构。

在开始阅读之前先说两点：

1）阅读笔记

很多同学喜欢在文章中做各种各样的标记，把生词，知识点，重点都标注出来，觉得方便记忆；不是很建议这种方法，比如下面这份笔记：

笔记上五颜六色，琳琅满目，好像把所有不懂的，需要学习和记忆的，知识点和重点都标注出来了，画完之后觉得阅读过程非常充实，别人看起来也似乎特别专业。

而事实上呢？笔记记下的东西其实并不等同于大脑记下的东西；笔记是用来辅助的，而许多同学反而把笔记当成了主菜，阅读的时候忙着动手记笔记却忘记了动脑；阅读效率与效果需要的是专注力和提前量，要非常集中注意力思考，不应分散精力做笔记；

其二，满是笔记的文章并不适宜进行阅读训练，因为阅读的dynamic flow被笔记影响了，所谓围棋要活需要气，英语阅读也需要气，一鼓作气的气，流通流动的"气"; 阅读时眼球在各部分内容间会交错来回运动，建立关连联系(linkage)， 这个眼球运动需要“气”，在文字之间（between words）之间以及行间（between lines）之间流动，如果到处挤满了笔记，眼球运动会被阻碍，注意力会分散，速度和集中度也会受影响。（可喜现在很多软件做完笔记是可以隐藏还原成清洁版的）

其三，这个笔记影响更多的是心理；很多人完成笔记后，会有一种成就感，好像记完笔记就已经收获满满，非常充实，阅读这件事就完成了，把笔记当成了一个项目结束的验收点，然后归档，下次再翻出来不知何月何日。

只是个人看法仅供参考; 学习方法最重要是找到适合自己的。

还有一个是关于知识点。很多同学每次阅读文章好像都提到要什么知识点满满，要学到什么高频高能单词等这一类话题；虽然并无对错，但如果每次都出于要收获知识点和学习词汇去阅读，好像有点太累太苦太沉闷，用这样的心理去阅读恐怕是很难长期坚持下去的。

阅读是一个多元化的对话。比如去美术馆看画展，每个人对美术理解程度深浅不一，并不影响他与这幅画的交流过程中得到快乐与启发，程度深的多一点，程度浅的少点；阅读也一样，没必要每次阅读都要求自己掌握什么知识点，学会什么新词汇表达，就按自己的程度去和作者交流，享受其中的过程；知识点和词汇是阅读的自然结果不是目的；找到乐趣更重要。

授人以鱼不如授人以渔，而授人以渔不如让人自high，学习愉快！

---

P1

TWENTY YEARS ago, it might have been the plot of a trashy airport thriller. These days, it is routine. On May 7th cyber-criminals shut down the pipeline supplying almost half the oil to America’s east coast for five days. To get it flowing again, they demanded a $4.3m ransom from Colonial Pipeline Company, the owner. Days later, a similar “ransomware” assault crippled most hospitals in Ireland.

▷Colonial Pipeline Company

5月7日，美国大型成品油管道系统运营商科洛尼尔管道运输公司因黑客通过非法软件控制其电脑系统或数据，不得不临时关闭设备。对输油管道实施袭击的是名为“黑暗面”（Dark Side）的网络犯罪团伙，他们对目标系统植入恶意软件，以索要赎金，劫持了科洛尼尔管道运输公司将近100GB的数据。“黑暗面”要求科洛尼尔公司交出赎金，否则相关数据将在网络上公布。

2021年5月8日，美国燃油管道公司 Colonial Pipeline 官网进行通告，声称于7日得知被黑客攻击，同时联系第三方网络安全专家、执法部门和其他联邦机构启动应急响应，确定涉及勒索事件。启动应急响应后停止所有管道运行，并且关闭某些系统以便避免继续遭受攻击。

▷Ireland Hospital

5 月 14 日凌晨，爱尔兰的公共服务医疗保健系统Health Service Executive（HSE）遭 Conti 勒索软件攻击，全国医疗保健系统受到广泛破坏，多家医院电子系统和存储信息无法进入。

♖助读笔记

首段用一个easy的metaphor开头，引出TS: Cybercriminal is routine now. 然后给出例证；the plot of a trashy air thrller 这个类比很幽默，让人轻松愉快，同时也是一个对比，烘托出后面这个routine很迫切impending很serious; 以前好像很遥远发生在飞机上阅读的惊悚小说的事情(比如Agathe的And Then There Were None《无人生还》)，现在已经成为了日常。

从过去(20yrs ago)到现在(these days), 从一个书上的plot到日常生活的routine，从好像无关的消磨时间的小说，到发生在新闻上的真实事件；从宏观影响整个人类发展的能源供给(oil supply)到微观影响个人医疗健康的hospitals；从美国到爱尔兰，事情并不仅仅局限于某个地区，而是global的。

作者在第一段引发读者关注这件事情上，从来都不遗余力；看似波澜不惊的选词选句选例，暗流汹涌。

♖词汇参考

▷the plot of a trashy airport thriller

airport novel-Airport novel(s) represent a literary genre that is defined not so much by its plot or cast of stock characters, as by the social function it serves. An airport novel is typically a fairly long but fast-paced boilerplate genre-fiction novel commonly offered by airport newsstands, "read for pace and plot, not elegance of phrasing". 也就是指在机场报刊亭卖的小说，通常阅读节奏比较快、情节比较紧张刺激,适合在飞机上kill time

▷routine：regular becoming habit

▷ransom-ransomware

ransom，money paid to redeem people illegally captured

ransomware=ransom+software

▷cripple: ruin and damage, to serious degree, like can not walking

注意，这篇文章会高频出现危害，破坏等负面表达，注意观察联结

第一段出现的negative 表达就有：

trashy-like trash[rubbish]

cyber-criminal

demand a ransom

ransomware

assault

cripple

---

P2

Such attacks are evidence of an epoch of intensifying cyber-insecurity that will impinge on everyone, from tech firms to schools and armies. One threat is catastrophe: think of an air-traffic-control system or a nuclear-power plant failing. But another is harder to spot, as cybercrime impedes the digitisation of many industries, hampering a revolution that promises to raise living standards around the world.

♖助读笔记

➤这一段出现的cyber-insecurity 和上一段的cyber attack，cyber-crime，都是在cyber上的compound，后面还有。

上一段讲到了迫切性，这一段就要讲严重性了。an epoch of intensifying cyber-insevurity，这个intensifying是一个动态的进行中，还在不断强化；impinge on everyone， 覆盖范围也在不断扩大，from tech firms to schools and armies, 涉猎各行各业。

这个严重性除了覆盖范围coverage，还有一个scale，就是catastrophe量级的，big disaster级别的，被给出了两个关键occasion，an air-traffic-control system, a nuclear-power plant failing, 都是姓名攸关的；如果是说一段的hospital是私人性命攸关，那么这里的两个例子就是大规模杀伤了。

这还不是影响最坏的，有一个更深远的伤害是影响到underlying structure的，impede the digitisation of many industries, hampering a revolution, 会阻碍革命进程，妨碍人类 raise living standards around the world. 这个严重性说到这里就很振聋发聩了。

P2 TS：an epoch of intensifying cyber-insecurity that will impinge on everyone, one threat is... but other is ....

▷epoch=era/period

▷来看这一段的负面词：

failing

catastrope[disaster]

impede[interfere/slow the process of]

hamper[restric/limit]

上一段的

cripple[ruin/damage]

---

P3

The first attempt at ransomware was made in 1989, with a virus spread via floppy disks. Cybercrime is getting worse as more devices are connected to networks and as geopolitics becomes less stable. The West is at odds with Russia and C and several autocracies give sanctuary to cyber-bandits.

♖助读笔记

这一段历史回溯，

from 1989 floppy disk to-more devices- to -more networks

▷at odds with-disagree with

▷autocracy-government in which one person possesses unlimited power

▷sanctuary-safe place to hide from danger

P3 TS: Cybercrime is getting worse as....

---

P4

Trillions of dollars are at stake. Most people have a vague sense of narrowly avoided fiascos: from the Sony Pictures attack that roiled Hollywood in 2014, to Equifax in 2017, when the details of 147m people were stolen. The big hacks are a familiar but confusing blur: remember SoBig, or SolarWinds, or WannaCry?

♖助读笔记

▷the Sony Pictures attack: 索尼影业遭黑客攻击事件。2014年11月，黑客组织“和平卫士”（Guardians of Peace）公布索尼影业员工电邮，涉及公司高管薪酬和索尼非发行电影拷贝等内容。

▷Equifax: 2017 年 9 月，美国征信巨头艾贵发公司承认 1.45 亿美国居民个人隐私信息泄露，这是该国历史上最严重的数据安全事件，以美国人口 3.2 亿计算，受影响的超过 40%。

SoBig: 大无极病毒，主要危害是乱发邮件，邮件内容的一部分来自被感染机器中的资料，因此有可能泄漏用户的机密文件，特别是对利用局域网办公的企事业单位，所以这个病毒极有可能大面积传播。

SolarWinds: 是一款体系结构的分布式网络性能监控系统，它拥有超过300,000个客户，包括：超过425家美国《财富》500强、美国全部十大电信公司、美国军方的所有五个部门、美国前五名会计师事务所、以及美国五角大楼、国务院、国家安全局、司法部、白宫。SolarWinds的系统被攻击之后，导致全球许多组织的网络遭到破坏，涉及的供应链范围极为广泛，被称为2020年美国最大网络安全事件。

WannaCry: 2017年，勒索病毒”WannaCry”感染事件爆发，全球范围近百个国家遭到大规模网络攻击，攻击者利用MS17-010漏洞，向用户机器的445端口发送精心设计的网络数据包，实现远程代码执行。被攻击者电脑中大量文件被加密，被要求支付比特币以解密文件。

所谓无知者无畏，不知道背后故事的人是不知道其中的惊心动魄的。narrowly avoided fiascos 竭尽所能才勉强避免的大失败，由于最终是避免了的，所以most people have a vague sense; SoBig, Solarwinds, Wannacry都是病毒和恶意软件名。

▷roil: makes sthdisturbed and confused

▷at stake:at issue : in jeopardy

▷fiasco: sth that does not succeed, often in a way that makes people feel embarrassed

P4 TS: Trillions of dollars are at stake.

---

P5

A forthcoming study from London Business School (LBS) captures the trends by examining comments made to investors by 12,000 listed firms in 85 countries over two decades. Cyber-risk has more than quadrupled since 2002 and tripled since 2013. The pattern of activity has become more global and has affected a broader range of industries. Workers logging in from home during the pandemic have almost certainly added to the risks. The number of affected firms is at a record high.

♖助读笔记

这一段使用study和数据来支持

▷listed firms: 上市公司

▷quadruple: (使)成四倍

▷triple: (使)成三倍

P5 TS: a study by LBS catures....

---

P6

Faced with this picture, it is natural to worry most about spectacular crises caused by cyber-attacks. All countries have vulnerable physical nodes such as oil pipelines, power plants and ports whose failure could bring much economic activity to a standstill. The financial industry is a growing focus of cybercrime: these days bank robbers prefer laptops to balaclavas. Regulators have begun to worry about the possibility of an attack causing a bank to collapse.

♖助读笔记

这一段聚焦到了financial industry

spectacular crises=前面说过的catastrophe

standstill停滞不前了，回想前面段的impede，hamper

▷picture: the general situation in a place, organization etc

▷spectacular: very sudden, unexpected, or extreme

▷node: a piece of equipment such as a computer, that is attached to a network

▷balaclava: 巴拉克拉瓦盔式帽/羊毛头罩（裹住头、颈和脸的大部分），指抢劫银行者的装扮

P6：The finnancial industry is a growing focus...

---

P7

But just as costly is the threat to new tech as confidence in it ebbs. Computers are being built into cars, houses and factories, creating an industrial “internet of things” (IOT). Insights gleaned from oceans of data promise to revolutionise health care. In theory, all that will boost productivity and save lives for years to come. But the more the digital world is plagued by insecurity, the more people will shy away from it and the more potential gains will be lost. Imagine hearing about ransomware in someone’s connected car: “pay us $5,000, or the doors stay locked.”

♖助读笔记

▷“internet of things” (IOT): 物联网。指通过各种信息传感器、射频识别技术、全球定位系统、红外感应器、激光扫描器等各种装置与技术，实时采集任何需要监控、 连接、互动的物体或过程，采集其声、光、热、电、力学、化 学、生物、位置等各种需要的信息，通过各类可能的网络接入，实现物与物、物与人的泛在连接，实现对物品和过程的智能化感知、识别和管理。

这一段出现新的负面词

plague/ebb/shy away from

第一句就是TS，倒装需要理一下顺序：But just as costly is the threat to new tech as confidence in it ebbs.

The threat to new tech is just as costly as confidence in it(new tech) ebbs. 所谓哀莫大于心死，信心消亡的同时，恐惧当然更加有效，造成威胁更大，成本更高昂。后面的the more the digital world is plague... the more people will shy away... and the more gains will be lost..其实是这句话的复述。

▷ebb (away): to gradually decrease

▷glean sth from sb/sth: to find out information slowly and with difficulty

▷plague: to cause pain, suffering, or trouble to sb, especially for a long period of time

▷shy away from: avoid doing sth, often because you are afraid or not confident enough

---

P8

Dealing with cyber-insecurity is hard because it blurs the boundaries between state and private actors and between geopolitics and crime. The victims of cyber-attacks include firms and public bodies. The perpetrators include states conducting espionage and testing their ability to inflict damage in war, but also criminal gangs in Russia, Iran and X whose presence is tolerated because they are an irritant to the West.

♖助读笔记

Why is hard?

blurs the boundaries, 前面有类似的vague sense

make it unclear and confusnig

▷perpetrator: sb who does something morally wrong or illegal

▷espionage: spy activities

▷inflict: to make sb/sth suffer sth unpleasant

▷irritant: sth that keeps annoying you over a period of time

---

P9

A cloud of secrecy and shame surrounding cyber-attacks amplifies the difficulties. Firms cover them up. The normal incentives for them and their counterparties to mitigate risks do not work well. Many firms neglect the basics, such as two-step authentication. Colonial had not taken even simple precautions. The cyber-security industry has plenty of sharks who bamboozle clients. Much of what is sold is little better than “medieval magic amulets”, in the words of one cyber-official.

♖助读笔记

▷two-step authentication:（电脑的）两步/双重验证。和短信验证码一样道理，两步验证也是相当于给帐号多加一把“锁”，在输入正确的账号密码之后，用户同样还需要额外输入一个每 30 秒自动变化一次的 6 位数字验证码才能完成登录。

这一段继续hard，and difficulties amplify. why? 继续负面词积累

-A cloud of secrecy and shame 阴诡密布

-do not work well

-neglect the basics

-not take even simple precautions

-sharks-bamboozle

-medieval magic amulets 中世纪智商税？

▷a cloud of: under the shadow of

▷amplify: to increase the effects or strength of sth

▷cover sth up: to prevent people from discovering mistakes or unpleasant facts

▷mitigate: to make a situation or the effects of sth less unpleasant, harmful, or serious

▷shark: a person who is dishonest in business, especially sb who gives bad advice and gets people to pay too much for sth

▷bamboozle: to deceive, trick, or confuse sb

▷amulet: lucky charm护身符；驱邪物

---

P10

All this means that financial markets struggle to price cyber-risk and the penalty paid by badly protected firms is too small. The LBS study, for example, concludes that cyber-risk is contagious and is starting to be factored into share prices. But the data are so opaque that the effect is unlikely to reflect the real risk.

♖助读笔记

P10继续找漏洞

-struggle to price 难以定价

-pennalty paid is too small惩罚太轻

be factored into 被计入定价因素

-data so opaque that ... unlikely to reflect the real risk

▷contagious: infectious

opaque: difficult to understand

---

P11

Fixing the private sector’s incentives is the first step. Officials in America, Britain and France want to ban insurance coverage of ransom payments, on the ground that it encourages further attacks. Better to require companies to publicly disclose attacks and their potential cost. In America, for example, the requirements are vague and involve large time lags.

♖助读笔记

P11开始给解决方法和建议了。

Fixing incentives is the first step. 先从动机下手；

Better to require disclosure. 再解决"阴云密布"的问题。

▷insurance coverage: 保险范围

▷on the ground(s) that: based on

▷time lag: the period of time between two connected events

---

P12

With sharper and more uniform disclosure, investors, insurers and suppliers could better identify firms that are underinvesting in security. Faced with higher insurance premiums, a flagging stock price and the risk of litigation, managers might raise their game. Manufacturers would have more reason to set and abide by product standards for connected gizmos that help stem the tide of insecure IoT devices.

♖助读笔记

P12继续来找茬：

-underinvesting in security

-too low a performance-raise the game

-product standards

stem the tide 有点大禹治水的意思，导流疏导

▷uniform: things that are uniform are all the same size, shape etc

▷disclosure: a secret that sb tells people, or the act of telling this secret

▷insurance premiums: 保险费

▷flagging: becoming tired or losing strength

▷litigation: the process of taking claims to a court of law

▷raise one's game:enhance the level, raise the bar

▷gizmo: a general word for a small piece of equipment, often one that does sth in a new and clever way 小玩意儿；小装置

---

P13

Governments should police the boundary between the orthodox financial system and the shadowy world of digital finance. Ransoms are often paid in cryptocurrencies. It must be made harder to recycle money from these into ordinary bank accounts without proof that the money has a legitimate source. Likewise with cryptocurrency exchanges, which should face the same obligations as established financial institutions.

♖助读笔记

P13 政府介入

▷police: to control a particular activity or industry by making sure that people follow the correct rules for what they do

▷orthodox: generally accepted or approved of; following generally accepted beliefs

▷shadowy: mysterious and difficult to know anything about

▷cryptocurrency: 加密电子货币

---

P14

Cyber-insecurity is a matter of geopolitics, too. In conventional warfare and cross-border crime, norms of behaviour exist that help contain risks. In the cyber-domain novelty and confusion reign. Does a cyber-attack from criminals tolerated by a foreign adversary warrant retaliation? When does a virtual intrusion require a real-world response?

♖助读笔记

P14 地缘政治影响, 有一些争议和边界领域是无法提明确建议的，作者只能把问题踢出来。

外国对手所容忍的犯罪分子发动的网络攻击是否值得报复?什么时候虚拟入侵需要真实世界的响应?

在不能确定解决办法的时候，能够提出问题也是很重要的。比如考试写作文，比如开会，比如被挑战，比如被公开质问，有时候一个好的问题比一个不确定的答案要有效。

▷reign: manage,control, steer

▷adversary: counterpart, enemy

▷warrant: to need or deserve

▷retaliation: action against sb who has done sth bad to you

▷intrusion: an occasion when sb goes into a place or situation where they are not wanted or expected to be

---

P15

A starting-point is for liberal societies to work together to contain attacks. At the recent summits of the G7 and NATO, Western countries promised to do so. But confronting states such as X and Russia is crucial, too. Obviously, they will not stop spying on the Western countries that do their own snooping. But a third summit, between Presidents Joe Biden and Vladimir Putin, began a difficult dialogue on cybercrime. Ideally the world would work on an accord that makes it harder for the broadbandits to threaten the health of an increasingly digital global economy. ■

♖助读笔记

P15 结尾段 号召，calling for work together.

呼应前面的各种危害和影响，消除了当然就是欣欣向荣了

▷spy on: 参考前面的espionage

▷snoop: to try to find out about sb's activities by secretly looking at their things， eardropping

▷work on an accord: a formal agreement between countries or groups

---

♔Take away Today

▷本文的负面词值得好好总结

cripple-hamper-threaten-impede-impinge on-assault-instrusion

catastrope-plague-fiesco-failure-specular crisis

▷文章虽然长，但并不晦涩；从引出问题·到呈现问题的广度深度和严重性，到发现问题的成因，从外部到内部，从动机到结构，再到最后的给出建议，就像剥洋葱一样，不紧不慢，循序渐进；而自始至终都贯彻的正反的对峙都兼顾到，没有偏废。

推荐阅读

十英寸是多少厘米(十八英寸是多少厘米)

笔记本怎么格式化恢复出厂设置(插上u盘显示格式化怎么办)

云梦记为什么没写完(云梦记小说免费阅读全文)

笔记本合盖不休眠(笔记本合盖不休眠怎么设置)

电脑自动安装软件(如何禁止笔记本电脑自动安装软件)

荣耀与华为哪个质量好(荣耀与华为哪个质量好知乎)

刷新键是哪个(笔记本电脑刷新键是哪个)

荣耀笔记本home键在哪(荣耀笔记本按键介绍)

七爷凭本事拐的小祖宗全文免费阅读(小祖宗腰软心野,薄爷沦陷了)

联想z580(联想z580笔记本参数)