谷歌在中国教育网遭国家级“中间人攻击”

文/
Anonymous (未验证)


文/Percy Alpha(Greatfire.org)

从2014年8月28日起,有网友在微博和Google+上报告说,当部分大陆网友试图在中国教育网(CERNET)内连接google.com和google.com.hk等网页时,均收到SSL证书错误的提示(SSL证书是用于加密HTTP数据传输的证明)。这意味着谷歌在教育网上受到中间人攻击(MITM attack)。


从今年6月4日开始,谷歌的绝大多数服务在中国遭封锁,但在中国教育科研网内并未受到干扰。在新学期开学之际,谷歌在教育网上遭到中间人攻击。中国网络审查监测组织Greatfire相信,攻击是由中国政府发起的。

在维基百科上,将“中间人攻击”的定义为一种积极的监听:

中间人攻击是指,攻击者与通讯的两端分别建立独立的联系,并交换其所收到的数据,使通讯的两端认为他们正在通过一个私密的连接与对方直接对话,但事实上整个会话都被攻击者完全控制。在中间人攻击中,攻击者可以拦截通讯双方的通话并插入新的内容。

动机

Greatfire相信,当局有足够的动机,对谷歌发动中间人攻击。谷歌于2014年3月12日开始开始对中国以及全球各地的默认搜索启用https加密搜索。换句话说,用户与谷歌之间的信息传输都默认加密。只有终端用户和谷歌服务器知道所搜索并被返回的内容。中国的防火墙只能看到用户连接上了谷歌的服务器,并不知道传输的数据内容。这也意味着,当局无法对谷歌进行逐条封锁,因此只能将谷歌全盘封锁。到目前为止,这种封锁发生在中国的公共互联网上,但还未发生在教育网中。

中国政府深知,如果中国要在科研领域取得进展和创新,中国的科研人员必须能够通过谷歌来连接到大量的信息。也正因为这个原因,中国教育网长期都少受到网络审查的干扰。在教育网内,中国用户深知能使用早已在中国被封锁的视频网站Youtube和社交媒体Google+。与此形成强烈对比的是,在中国的公共网络上,谷歌学术搜索被封,该网站的中文版将用户导流到香港版的站点上,但香港版的谷歌学术搜索也在大陆被封。

在上个月之前,在教育网上连接谷歌几乎并未遭到干扰。但本届政府已展示出其在各个战线上控制互联网与信息的决心。当局并没有在教育网上直接封锁谷歌,因为这很可能招致全国学生、教师以及科研人员的反感。当局选择在教育网内对谷歌发动中间人攻击,这样一来,学生和科研人员能继续使用谷歌,而当局又可以监听并有选择地拦截搜索请求以及结果。

这并非中国当局首次发动中间人攻击。在2013年1月,中国政府曾发动了针对Github的中间人攻击,波及全国。

攻击会再次发生吗?

Greatfire表示,由于加密的网络服务增加,当局很可能会更多地使用中间人攻击。

攻击细节

已有多名用户报告,在教育网内连接谷歌均收到伪造地SSL证书。软件安全公司Netresec曾做过有关GItHub在中国遭中间人攻击地全面分析。Netresec分析了Greatfire发送的以下截图后表示,所有证据表明,中国教育网与谷歌之间地信息交通正在受到中间人攻击。发动中间人攻击地机器很可能在教育网与其他网络地对等连接处发送数据帧。Netresec将在近期内发布全面分析报告。


Greatfire采用网民的以下报告来进行分析。Solidot的这篇报道也引用了同样的报告。


这个截图显示,当用户使用Chrome浏览器连接谷歌时,收到了SSL证书错误的提示。由于谷歌启用了强制安全传输(HSTS),Chrome和Firefox浏览器禁止用户避开这个提示。


该用户还比较了他在正常连接情况下收到的证书(左)和在遭中间人攻击情况下连接时收到的证书(右)。

 


Google+上的相关报道

https://plus.google.com/u/0/115822850906053020654/posts/EGW4NEd7z3N

https://plus.google.com/+duffJiang/posts/Dk5LrD7CiWM  

用户该怎么做

当你看到证书错误提示时,千万不要将其点开。用户应该使用Firefox或Chrome浏览器,这两个浏览器禁止用户点开启用了强制安全传输的网站(如谷歌和Github)。如果你点开了警告,你的谷歌账户凭据信息可能被盗窃,这意味这你的Gmail邮件可以被攻击者一览无遗。


用户可以通过谷歌的镜像网站来连接谷歌。谷歌在6月份被中国封锁后,Greatfire设立了一个谷歌镜像网站。到目前为止,已有超过100万中国用户使用了我们的“自由谷歌”网站和其他无法在中国被封锁的镜像


本文英文版原发表于GreatFire上,中文版由泡泡网编译首发

 

评论

<a href="https://myfreewebcam.fun/">my free web cam</a> <a href="https://girlswebcam.site/">webcam girl</a> <a href="https://adultchatroom.site/">adult chat room</a> <a href="https://webcamteens.site/">webcam girls</a> <a href="https://freelivesexchat.site/">free sex chat cams</a> <a href="https://hotwebcamgirls.site/">hot webcam girls</a> <a href="https://hotwebcamgirls.fun/">girls webcam</a> <a href="https://camtocam.site/">free web cam porn</a> <a href="https://chatwithgirls.fun/">web cam sluts</a> <a href="https://webcammasturbation.top/">webcam masturbation</a>

<a href="http://champagnebaubles.com/">generic toprol xl</a> <a href="http://cashjet.co/">generic for buspar</a> <a href="http://ajaxsystems.shop/">advair 500 diskus</a> <a href="http://acsus.it/">where to buy accutane</a> <a href="http://magnifymedia.org/">amitriptyline</a> <a href="http://computerpuncher.com/">estrace</a> <a href="http://barbatideal.online/">retin a microgel</a> <a href="http://inddemolition.net/">trazodone price</a> <a href="http://mobilepdxmusic.com/">female viagra 100mg</a> <a href="http://fishinghook.org/">benicar hct</a> <a href="http://craniumcoffee.org/">advair 250</a> <a href="http://alzheimershield.org/">prednisolone cost</a> <a href="http://everydayresume.com/">amoxicillin online</a> <a href="http://getshoe.top/">doxycycline</a> <a href="http://allcornersstcatharines.ca/">prednisolone sod</a> <a href="http://kirstyandoliver.co.uk/">online prescription free zoloft</a> <a href="http://funtimezfactory.co.uk/">actos</a> <a href="http://howtomakefriends.tk/">tadalafil</a> <a href="http://byandreaguerra.com/">albendazole</a> <a href="http://dailykingcake.com/">purchase furosemide 20 mg</a> <a href="http://ashaforeducation.net/">lipitor</a> <a href="http://relativetales.org/">where buy indocin indomethacin</a> <a href="http://ccpoker.org/">lipitor</a> <a href="http://j2-play.info/">propranolol tablets</a> <a href="http://dewision.org/">buy suhagra</a> <a href="http://chicagospremieracousticmichaeljacksoncoverduo.com/">toradol for kidney stones</a> <a href="http://freedomunleashedministries.org/">neo medrol</a> <a href="http://getpaidforplastic.co.uk/">robaxin</a> <a href="http://energyauthority.net/">albenza</a>

<a href="https://coinmarketking.io/">toprol xl</a> <a href="https://arizonaairbnbmanagement.com/">kamagra pill</a> <a href="https://cruisingyo.com/">kamagra for sale</a> <a href="https://blueglassworks.co.uk/">dapoxetine priligy</a> <a href="https://2ndapi.com/">phenergan</a> <a href="https://fortronsource.eu/">deltasone</a> <a href="https://car-repair.shop/">vermox</a> <a href="https://kaylutas.com/">abilify drug</a> <a href="https://anaiahdurand.com/">hydrochlorothiazide for sale</a> <a href="https://oxycedet.pt/">clomid pill</a> <a href="https://bizlions.mobi/">sildenafil price</a> <a href="https://fromcats.com/">clomid</a> <a href="https://canisteradhesives.co.uk/">hydrochlorothiazide triamterene</a> <a href="https://autistofuturism.net/">hydrochlorothiazide 12.5 mg capsules</a> <a href="https://hhflourish.org/">generic propecia for cheap without precscription</a> <a href="https://exigico.com/">allopurinol zyloprim</a> <a href="https://feministforeignpolicy.info/">generic for zithromax</a> <a href="https://exercisedeepheat.co.uk/">proscar online</a> <a href="https://goldenknightsvssharks.de/">buy tadalafil cialis</a> <a href="https://fishinghook.org/">generic for benicar</a> <a href="https://buildertext.net/">buy elimite</a> <a href="https://exotechcorp.com/">online lasix</a> <a href="https://anycoder.pro/">ventolin</a> <a href="https://electronics-liquidator.com/">synthroid 100 mcg</a> <a href="https://clipanduz.com/">indocin</a> <a href="https://camaleontinani.it/">celexa</a> <a href="https://rationalralph.com/">herpes acyclovir</a> <a href="https://cyclesoflife.bike/">viagra soft tabs</a> <a href="https://networkofnetworks.info/">metformin</a> <a href="https://gandgcosmetics.com/">cheap avodart</a>

<a href="https://bohopixel.com/">generic for vasotec</a> <a href="https://boosterlab.nl/">150 mg bupropion</a> <a href="https://imrdp.com/">amoxil pill</a> <a href="https://dotdyna.com/">prozac forsale</a> <a href="https://aardappelzakken.nl/">celexa drug</a> <a href="https://blackbelthelp.org/">flagyl</a> <a href="https://daonlinespot.com/">indocin online</a> <a href="https://co2ceo.org/">cheap viagra soft</a> <a href="https://ceoprepacademy.net/">azithromycin penicillin</a> <a href="https://dlsecompliance.com/">clomid pills for sale</a> <a href="https://delphincomputersupply.com/">vardenafil 40mg</a> <a href="https://kyroweb.com.au/">buy phenergan</a> <a href="https://cjwdevelopment.com/">online celexa</a> <a href="https://ayearwithmybusiness.com/">moduretic without prescription</a> <a href="https://ebooknation.net/">moduretic without prescription</a> <a href="https://meyuang.com/">tadacip</a> <a href="https://born2events.org/">tetracycline</a> <a href="https://cypresscomputer.net/">prices levitra</a> <a href="https://cottagesittersask.ca/">atarax antihistamine</a> <a href="https://alexotica.co/">synthroid brand</a> <a href="https://americaneddm.com/">generic toprol</a> <a href="https://imachine.productions/">buy lexapro cheap no prescription</a> <a href="https://anchorsols.com/">zanaflex sleep</a> <a href="https://fairlyfashion.com/">zanaflex pill</a> <a href="https://advertea.co.uk/">wellbutrin 300mg</a> <a href="https://rationalralph.com/">acyclovir order online</a> <a href="https://1889.co.za/">amoxil</a> <a href="https://foodcomic.com/">super avana</a> <a href="https://fivesprime.com/">robaxin price</a> <a href="https://lulyabraira.com/">dapoxetine</a>

casino machine games download <a href=http://wowcasinoonline.ooo/>casino video slots</a> <a href="http://trueonlinecasinos.ooo/">online casinos live dealers</a> online casino make money

<a href="https://freelivesexchat.icu/">free sex chat rooms</a> <a href="https://camsites.fun/">cam sites</a> <a href="https://chatwithgirls.fun/">chat with girls</a> <a href="https://freesexchat.cf/">sex chat free</a> <a href="https://nudelive.fun/">live nude</a>

<a href="http://buysildenafil50.com/">buy sildenafil online</a>

<a href="https://genericcialis20mg.com/">generic cialis tadalafil 20mg</a>

<a href="https://capstonecomputerservices.com/">kamagra online</a> <a href="https://midwestfalltechnologyconference.org/">medrol</a> <a href="https://gethealthywithkeri.com/">azithromycin drug</a> <a href="https://gym-progress.de/">furosemide iv</a> <a href="https://jd-cooper-logistics.co.uk/">generic tetracycline</a> <a href="https://calimedcannabis.com/">doxycycline</a> <a href="https://ebeninsurance.co.uk/">wellbutrin</a> <a href="https://bellavelella.com/">abilify for sale</a> <a href="https://aepph.ca/">cafergot</a> <a href="https://8080job.net/">generic toradol</a> <a href="https://makani.sa/">diclofenac</a> <a href="https://bedspacechairsofas.com/">biaxin</a> <a href="https://estamossinsistema.org/">robaxin 500</a> <a href="https://giayattom.net/">atarax</a> <a href="https://cottagesittersask.ca/">atarax pills</a> <a href="https://comicbookinvestment.com/">generic medrol</a> <a href="https://detoxifii.com/">indocin</a> <a href="https://choicesmarts.us/">prednisone without a prescription</a> <a href="https://fearofaroundball.com/">proscar</a> <a href="https://armedcitizensafecitizen.us/">generic robaxin</a> <a href="https://ravintoaine.fi/">clonidine 0.1mg for sleep</a> <a href="https://edesixtest.com/">cost of estrace cream</a> <a href="https://jjmelbourne.com.au/">arimidex sale</a> <a href="https://atheist-bookstore.com/">levitra</a> <a href="https://dutchessherb.net/">metformin 500mg tablets</a> <a href="https://frenchcottagesgold.com/">where to buy antabuse</a> <a href="https://123wow.pl/">kamagra effervescent</a> <a href="https://ayyappansoft.com/">ampicillin iv</a>

New sexy website is available on the web
http://free.milf.porn.relayblog.com/?ansley

cinderella porn comics porn babysiters girl porn mag porn halloween costumes fat wenmen porn video

<a href="https://eventosipirangacm.com.br/">medication fluoxetine</a> <a href="https://artofshifting.com/">nolvadex</a> <a href="https://ascensionpixel.com/">cipro ciprofloxacin</a> <a href="https://designsensorium.net/">cipro iv</a> <a href="https://depaolis.biz/">cafergot</a> <a href="https://56s.company/">motilium 10mg</a> <a href="https://biobella.me/">no prescription flagyl</a> <a href="https://coastalrowingcenter.com/">acyclovir buy</a> <a href="https://capstonecomputerservices.com/">kamagra 100mg oral jelly</a> <a href="https://bee-cash.com/">trazodone</a> <a href="https://iloveconferences.tech/">allopurinol</a> <a href="https://anonsedge.net/">levitra</a> <a href="https://fortronsource.eu/">deltasone 5 mg</a> <a href="https://digitalreadouts.ca/">no prescription canada propranolol</a> <a href="https://frenchcottagesgold.com/">antabuse medication</a> <a href="https://coulsdoncollegeevents.co.uk/">robaxin</a> <a href="https://getcustomerstoday.co.uk/">atarax cream</a> <a href="https://101cleaningtips.com/">generic for zoloft</a> <a href="https://iscenttrading.com/">tretinoin price</a> <a href="https://electronicfreedomfoundation.org/">ventolin spray</a> <a href="https://daizydelicious.com/">benicar online</a> <a href="https://acrobio888.com/">cost of ampicillin</a> <a href="https://arizonathriftstop.com/">cheap trazodone</a> <a href="https://beneficentia.org/">no prescription canada propranolol</a> <a href="https://budbay.org/">clomid</a> <a href="https://champagnebauble.com/">atarax</a> <a href="https://gamebetter.net/">cephalexin medication</a> <a href="https://chrysalistransformations.net/">biaxin 500</a> <a href="https://kkmeds.com/">colchicine generic</a>

<a href="http://tadalafil365.com/">buy tadalafil</a> <a href="http://motilium5.com/">motilium domperidone 10mg</a> <a href="http://propecia8.com/">propecia order</a> <a href="http://valtrex1.com/">valtrex generic cost</a> <a href="http://synthroid75.com/">synthroid 112 mcg</a>

<a href="https://footballivevs.de/">alli slimming pills</a> <a href="https://campo21.net/">celexa</a> <a href="https://carterridge.net/">fluoxetine</a> <a href="https://daytimeemmyawards.de/">trazodone</a> <a href="https://ajkdev.com/">tetracycline</a> <a href="https://999fabrics.co.uk/">buy tadacip online</a> <a href="https://buyingtexashouses.com/">stromectol buy</a> <a href="https://ayearwithmysoul.com/">clonidine medicine</a> <a href="https://galloro.eu/">canadian levitra</a> <a href="https://historyebooks.net/">aldactone acne</a> <a href="https://admiraltrade.com/">albenza generic</a> <a href="https://agirpourlenseignementasbl.org/">deltasone</a> <a href="https://agilealliance.ir/">alli</a> <a href="https://gradeselector.com/">order arimidex</a> <a href="https://freyasfury.eu/">allopurinol 300mg</a> <a href="https://discoverzion.life/">cheap neurontin</a> <a href="https://flowerstehran.com/">synthroid mcg</a> <a href="https://eliminateinjuries.com/">propranolol 40</a> <a href="https://fas7nyshokran.com/">order allopurinol online</a> <a href="https://clitsnakedswim.net/">diclofenac pills</a> <a href="https://aeroponicstv.com/">hydroquinone tretinoin</a> <a href="https://educacristiana.org/">trazodone</a> <a href="https://funnanacare.us/">tretinoin</a> <a href="https://minimalistmeal.com/">amitriptyline medicine</a> <a href="https://acandevelopment.co.uk/">albenza online</a> <a href="https://educationconsultinggroup.net/">diflucan</a> <a href="https://empirewebdevelopment.org/">zithromax generic</a> <a href="https://enumaelis.org/">indocin</a> <a href="https://directree.ca/">lexapro</a> <a href="https://heavybassradio.org/">bupropion</a>

<a href="https://genericcialis20mg.com/">generic cialis tadalafil 20mg</a>

<a href="https://locationrace.com/">cheap fluoxetine</a> <a href="https://ayearwithmygrief.com/">toradol</a> <a href="https://autoscout.ir/">lisinopril</a> <a href="https://firsthome.finance/">finasteride propecia</a> <a href="https://doyouhaveanxiety.com/">lexapro onlin3</a> <a href="https://clearchoicehemp.com/">neurontin for sale</a> <a href="https://guerracultural.net/">cheap cafergot</a> <a href="https://jailijakosamja.rs/">cost of arimidex</a> <a href="https://andweb.ie/">order neurontin</a> <a href="https://citytowing.co/">stromectol buy</a> <a href="https://dogfishpetphotography.ca/">furosemide</a> <a href="https://chipolteclassactionlawsuit.com/">generic furosemide</a> <a href="https://comatec.sa/">fluoxetine</a> <a href="https://cbuscahombreconhuevos.com/">buy acyclovir</a> <a href="https://colegioavemaria.org/">cost of buspar</a> <a href="https://raylangenbach.com/">tetracycline</a> <a href="https://corporateimage.agency/">ampicillin</a> <a href="https://gaygeekgear.com/">celebrex medication</a> <a href="https://experienceporto.com/">baclofen</a> <a href="https://lawntechalliance.com/">alli</a> <a href="https://deeprootsjuice.com/">doxycycline hyclate 100 mg capsules</a> <a href="https://careerandpersonality.net/">furosemide</a> <a href="https://flowingdrains.com/">buying phenergan online</a> <a href="https://creditcardprocessing.club/">drug flagyl</a> <a href="https://arrangement.international/">albendazole tablets</a> <a href="https://bestdoctorsunitedstates.com/">generic cephalexin</a> <a href="https://cbd-butler.com/">how to buy doxycycline online</a> <a href="https://apacheproject.info/">atarax for anxiety</a>

<b>Tour in Verona 2019 </b>
https://www.segwayverona.com/

<u>Experience historic Verona from a unique perspective on a 2-hour Segway tour. Glide through the historic center with a tour leader and informative audio guide. See monuments such as the Verona Arena, Castelvecchio, Verona Cathedral and Casa di Giulietta.</u>

About this activity
Duration 2 hours
Printed or mobile voucher accepted

Instant confirmation

Live guide
English, Italian, Russian
Audio guide/headphones
English, German, Italian, Russian
Booklets
Spanish, English, French, German, Italian, Japanese, Russian

Easy cancellation
Cancel up to 24 hours in advance for a full refund

<a href="https://lasix911.com/">laxis pills</a> <a href="https://valtrex1.com/">buy valtrex online</a> <a href="https://synthroid75.com/">buy synthroid without a prescription</a> <a href="https://amoxicillin5.com/">amoxicillin 500 mg purchase without prescription</a> <a href="https://propecia8.com/">propecia</a>

<a href="https://femaleviagra5.com/">female viagra</a> <a href="https://metformin1000.com/">metformin</a> <a href="https://zoloft75.com/">order zoloft online no prescription</a> <a href="https://lasix0.com/">lasix order</a> <a href="https://prednisone911.com/">prednisone 10 mg tablets</a>

页面

冒个泡吧!

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。