谷歌在中国教育网遭国家级“中间人攻击”

文/
Anonymous (未验证)


文/Percy Alpha(Greatfire.org)

从2014年8月28日起,有网友在微博和Google+上报告说,当部分大陆网友试图在中国教育网(CERNET)内连接google.com和google.com.hk等网页时,均收到SSL证书错误的提示(SSL证书是用于加密HTTP数据传输的证明)。这意味着谷歌在教育网上受到中间人攻击(MITM attack)。


从今年6月4日开始,谷歌的绝大多数服务在中国遭封锁,但在中国教育科研网内并未受到干扰。在新学期开学之际,谷歌在教育网上遭到中间人攻击。中国网络审查监测组织Greatfire相信,攻击是由中国政府发起的。

在维基百科上,将“中间人攻击”的定义为一种积极的监听:

中间人攻击是指,攻击者与通讯的两端分别建立独立的联系,并交换其所收到的数据,使通讯的两端认为他们正在通过一个私密的连接与对方直接对话,但事实上整个会话都被攻击者完全控制。在中间人攻击中,攻击者可以拦截通讯双方的通话并插入新的内容。

动机

Greatfire相信,当局有足够的动机,对谷歌发动中间人攻击。谷歌于2014年3月12日开始开始对中国以及全球各地的默认搜索启用https加密搜索。换句话说,用户与谷歌之间的信息传输都默认加密。只有终端用户和谷歌服务器知道所搜索并被返回的内容。中国的防火墙只能看到用户连接上了谷歌的服务器,并不知道传输的数据内容。这也意味着,当局无法对谷歌进行逐条封锁,因此只能将谷歌全盘封锁。到目前为止,这种封锁发生在中国的公共互联网上,但还未发生在教育网中。

中国政府深知,如果中国要在科研领域取得进展和创新,中国的科研人员必须能够通过谷歌来连接到大量的信息。也正因为这个原因,中国教育网长期都少受到网络审查的干扰。在教育网内,中国用户深知能使用早已在中国被封锁的视频网站Youtube和社交媒体Google+。与此形成强烈对比的是,在中国的公共网络上,谷歌学术搜索被封,该网站的中文版将用户导流到香港版的站点上,但香港版的谷歌学术搜索也在大陆被封。

在上个月之前,在教育网上连接谷歌几乎并未遭到干扰。但本届政府已展示出其在各个战线上控制互联网与信息的决心。当局并没有在教育网上直接封锁谷歌,因为这很可能招致全国学生、教师以及科研人员的反感。当局选择在教育网内对谷歌发动中间人攻击,这样一来,学生和科研人员能继续使用谷歌,而当局又可以监听并有选择地拦截搜索请求以及结果。

这并非中国当局首次发动中间人攻击。在2013年1月,中国政府曾发动了针对Github的中间人攻击,波及全国。

攻击会再次发生吗?

Greatfire表示,由于加密的网络服务增加,当局很可能会更多地使用中间人攻击。

攻击细节

已有多名用户报告,在教育网内连接谷歌均收到伪造地SSL证书。软件安全公司Netresec曾做过有关GItHub在中国遭中间人攻击地全面分析。Netresec分析了Greatfire发送的以下截图后表示,所有证据表明,中国教育网与谷歌之间地信息交通正在受到中间人攻击。发动中间人攻击地机器很可能在教育网与其他网络地对等连接处发送数据帧。Netresec将在近期内发布全面分析报告。


Greatfire采用网民的以下报告来进行分析。Solidot的这篇报道也引用了同样的报告。


这个截图显示,当用户使用Chrome浏览器连接谷歌时,收到了SSL证书错误的提示。由于谷歌启用了强制安全传输(HSTS),Chrome和Firefox浏览器禁止用户避开这个提示。


该用户还比较了他在正常连接情况下收到的证书(左)和在遭中间人攻击情况下连接时收到的证书(右)。

 


Google+上的相关报道

https://plus.google.com/u/0/115822850906053020654/posts/EGW4NEd7z3N

https://plus.google.com/+duffJiang/posts/Dk5LrD7CiWM  

用户该怎么做

当你看到证书错误提示时,千万不要将其点开。用户应该使用Firefox或Chrome浏览器,这两个浏览器禁止用户点开启用了强制安全传输的网站(如谷歌和Github)。如果你点开了警告,你的谷歌账户凭据信息可能被盗窃,这意味这你的Gmail邮件可以被攻击者一览无遗。


用户可以通过谷歌的镜像网站来连接谷歌。谷歌在6月份被中国封锁后,Greatfire设立了一个谷歌镜像网站。到目前为止,已有超过100万中国用户使用了我们的“自由谷歌”网站和其他无法在中国被封锁的镜像


本文英文版原发表于GreatFire上,中文版由泡泡网编译首发

 

评论

<a href="https://cheapcarinsurancequotes.us.org/">cheap car insurance companies</a> <a href="https://carinsurancequotesonline.us.org/">car insurance quotes online</a> <a href="https://comparecarinsurancerates.us.com/">lowest auto insurance rates</a> <a href="http://automobileinsurance.us.org/">auto insurance online</a>

Sexy photo galleries, daily updated pics
http://porn.comics.hotblognetwork.com/?juliette

free streaming porn naughty allie ebony girlfriend porn black natural porn retro porn lingerie pic the young porn

<a href="http://cheapcarinsurancequotes.us.org/">car insurance quotes online</a>

XYZ|國中基測|基測|基測歷屆試題|命題光碟|基測中心|基測試題滿1000送200

http://xyz.net.tw/

Pretty nice post. I just stumbled upon your blog and wished to say that I've really enjoyed
browsing your blog posts. In any case I'll be subscribing to your
rss feed and I hope you write again soon!

my webpage: <a href="http://charliegyoe58258.pages10.com/Best-restaurants-London-examining-ju... healthy food</a>

<a href="http://ventolinhf.com/">buy ventolin</a> <a href="http://amoxicillin250.com/">amoxicillin 250mg</a> <a href="http://dapoxetineusa.com/">where can i buy dapoxetine</a> <a href="http://albuteroli.com/">albuterol price</a> <a href="http://propecia5mg.com/">propecia no prescription</a> <a href="http://acyclovirc.com/">acyclovir</a> <a href="http://tetracyclinerx.com/">tetracycline without prescriptions</a> <a href="http://cialis50.com/">cialis cost comparison</a> <a href="http://prednisone40.com/">prednisone</a> <a href="http://cialis60.com/">generic for cialis</a>

<a href="https://paydayloansnocreditcheck.us.com/">payday loans no credit check same day</a> <a href="https://cashadvanceonline.us.org/">express cash advance</a> <a href="https://paydayadvance.us.com/">payday advance</a> <a href="https://personalloan.us.org/">best debt relief companies</a> <a href="https://loanonline.us.org/">lender for bad credit</a>

<a href="https://cheapcarinsurancequotes.us.org/">cheap car insurance quotes</a> <a href="https://cheapcarinsurancequotes.us.org/">cheap car insurance quotes</a>

<a href="https://allopurinol300.com/">allopurinol buy no prescription</a> <a href="https://dapoxetineusa.com/">dapoxetine 60 mg</a> <a href="https://tadalafilus.com/">buy tadalafil online</a>

<a href="https://samedayloan.us.org/">unsecured payday loans</a> <a href="https://onlinepaydayloans.us.org/">payday loans for bad credit</a> <a href="https://loancash.us.org/">advance cash</a> <a href="https://loansnocreditcheck.us.com/">money loans no credit check</a> <a href="https://onlineloan.us.org/">consolidation loans bad credit</a> <a href="https://onlinepaydayloan.us.org/">online payday loan</a> <a href="https://cashloans.us.com/">cash loans no credit check</a> <a href="https://paydayadvance.us.com/">payday advance</a> <a href="https://paydayloansnocreditcheck.us.com/">easy loans no credit check</a> <a href="https://loansonline.us.com/">utah payday loans</a>

XYZ|國中基測|基測|基測歷屆試題|命題光碟|基測中心|基測試題滿1000送200

http://xyz.net.tw/

i need a loan but have bad credit rating need loan now <a href=http://ineedloan.me/#ineed-loan>need loan now</a> i need a loan my credit is bad, best cash advance loans yahoo answers, cash advance online <a href=http://cashadvancess.com/#4500>cash advance</a> cash advance loans direct lenders only.
fast need a loan fast with bad credit than need a loan right now.

<a href="https://onlineloan.us.org/">online payday loans no credit check</a> <a href="https://paydayadvance.us.com/">fast cash advance</a> <a href="https://moneyloan.us.org/">money loan</a> <a href="https://paydayloanonline.us.org/">instant payday loan</a> <a href="https://personalloan.us.org/">unsecured personal loans</a> <a href="https://cashadvanceonline.us.org/">cash advance payday loan</a> <a href="https://loancash.us.org/">loan cash</a> <a href="https://onlinepaydayloan.us.org/">online payday loan</a> <a href="https://personalloansforbadcredit.us.com/">bad credit personal loans</a> <a href="https://loansonline.us.com/">loans online</a>

【後宮情色網】提供最新無碼有碼A片,其中包含各類無碼有碼DVD http://www.av-50.com/

Metformin just isn't a miracle treatment (unfortunately there are not any miracle drugs). If you happen to have been advised to make use of albuterol as needed to deal with your signs and you discover that you want to make use of the medication more typically than ordinary, call your physician. Needing multiple cycle is frequent. And the following thought that doubtless involves thoughts is: Are the drug makers in cahoots with one another in determining these prices? Sildenafil 100mg is the first drug meant to deal with erectile dysfunction among men. That is your first yeast infection. Bronchodilators will not be anti inflammatory medicines, and due to this fact are useless for pneumonia. If the airways are not bronchospastic, Albuterol or Xopenex might offer nothing. If you are a man experiencing balding problems, Finasteride could also be the suitable drug for you. Patients taking metformin, notably women may expertise common malaise, fatigue, and occasional achiness. They are available on prescription and over the counter.|Medical Economics Co. Drug topic redbook. Physicians have identified concerning the useful impact of espresso for treating asthma since at the least 1859 (Edinburgh Medical Journal). Because of this, decaf espresso is not going to work. Please do not submit any kind of HTML markup or scripting because it will not be accepted, nor will comments that exceed 2,500 characters. If it is advisable to have any kind of surgery, tell the surgeon forward of time that you are taking Doxycycline. Above, it is best to be capable to type in your question and the FAQ(s) that the majority closely relate ought to seem. Begin taking Metformin already figuring out your exit plan from this therapy. A combination of glyburide and metformin is on the market as Glucovance. Sitagliptin could be mixed with metformin and, relying on the therapeutic indication, with additional medicine, significantly insulin and sulfonylureas. Some individuals might have already repeated situations and going to the doctor turns into an costly selection that's the reason a few of them would resort to online drug stores the place they can buy propecia generic and not using a prescription.

AГ±os toma el instituciones de ser obligada. MГЎs grupo nos vivimos precioso, nos venden. Dentro de Г©stas, las В«en abonar como audiencia ГЎs y muertes largo,&nbsp;... <a href=https://afarmaciagranados.com/index.php?xwo=netten-yz-ifadeleri-sinif-t>... Granados

Many people would agree that cases are in all probability the most significant iPod accessories on the market in the present day. Fortunately they're utilized since giveaways on gatherings, as an illustration displays in addition to complement begins. A staff normally has more than two jerseys; other than the standard house and away jerseys, there are additionally particular jerseys worn only to special video games. There are an unlimited number of beachwear corporations that give you choices in bathing fits. Ship certainly oneself are wanting at all information of choosing a doggy in opposition to an ethical breeder. So what all of us are waiting for. Many occasions with a little bit searching, you can save as a lot as 25 p.c. A affected person with enlarged prostate has to undergo so much pain and the problem is unbearable. It is essential to verify whether or not the VIN (automobile identification quantity)variety of the automobile matches with the number in the documents. Yourself can comprise any place versus 2 in the direction of 4 blades that can variety inside assortment in opposition to classic blades in the direction of get rid of simple fact blades. You may insure just about anything lately.|It can be linked to your system via a single USB 2.Zero cable that comes along with it. Publisher: Sagbee C The brown paper bags normally have single layers in the way in which they are manufactured. The reason for it is because the outdated has to be cleared from the shelves to pave method for the brand new. There is multiple motive to keep away from the chain jewelry shops. There are various more features that you will get by making a purchase order online such as reductions, particular presents and promotions. You'll be able to scope out costs product opinions and in addition buyer impressions about the sites which can enormously enable you for making a decision. Through the use of the phrase cheap not that means its fake product. This product has a gentle medium complexion and this simply is not sensible. Since they're so mild they don't shield the sound being given out so well. I incorporate a monitor background of at present being prepared in course of decide favourable associations with customers and serving to them purchase what they require.

INDICATIONS. Lamisil is used for treating fungal infections of the fingernails and toenails. Lamisil is an antifungal agent. It works by killing sensitive fungi. https://rxireland.com/catalog/Anti_Fungal/Interbi.htm Over

Ingesting sweet alcoholic drinks only increases these ranges, which is contrary to the meant advantages of this prescription remedy. We don't supply any treatment and not using a prescription. The signs have been average-to-extreme in sixty four percent of the previous Propecia users and in none of the controls, Irwig reported on-line in the Journal of Clinical Psychiatry. It is estimated that only 10 % of the 26 million Americans residing with disease are conscious they have it. A new examine within the journal Atherosclerosis1 reveals that statin use is related to a fifty two percent increased prevalence and extent of calcified coronary plaque compared to non-users. By the end of the research, both teams had significant reductions within the fatty plaque lining their arteries, with few serious negative effects. Common unintended effects of Flagyl are lack of appetite, complications, and nausea. Side Effects Of Metformin can supply lactic acidosis. These side effects could also be extreme sufficient to trigger therapy to be discontinued in one out of every 20 patients.

http://fishingplanet.pl/de/kalendarium/action~oneday/time_limit~15588216...

fktrpr94f
With variety of knowledgeable companies currently being productive in simply this line of office it could be uncomplicated within the path of consider that producing could be a breeze as nicely. Traction being made upon the higher fragment, it was discovered unimaginable to carry it to inside an inch and a half of the lower fragment. Publisher: Elliot Taylor The roots of the guitar fx pedals will be found in a musical history that at all times sought to push the boundaries of contemporary sound. Publisher: eightminute Laser printers are much more dependable than inkjet printers when it comes to output top quality and printing speed. When you perform a radical search on the internet you'll be able to be certain to find what you're on the lookout for. Publisher: kyu Relating to the Countrywide Soccer League (NFL), you will discover no losers since each single group that makes by that little league has already been a champ! You can find somebody selling one thing that may praise your site. Whom will you truly select to spend?

XYZ|國中基測|基測|基測歷屆試題|命題光碟|基測中心|基測試題滿1000送200

http://xyz.net.tw/

<a href="http://allopurinol300.com/">allopurinol tabs</a> <a href="http://phenergandm.com/">phenergan tablets</a> <a href="http://tetracyclinerx.com/">buy tetracycline online without prescription</a> <a href="http://20tadalafil.com/">buy tadalafil</a> <a href="http://cafergotbuy.com/">generic cafergot</a>

Добрый день товарищи!
Есть такой интересный сайт для заказа бурения скважин на воду.Основной деятельностью нашей компании является обеспечение клиента качественной питьевой водой в достаточном количестве. <a href=https://voda-da.by/>скважина на воду</a>,<a href=https://voda-da.by/>бурение скважин на воду</a>, <a href=https://voda-da.by/>скважина минск</a>,<a href=https://voda-da.by/>скважина на воду цена</a>,<a href=https://voda-da.by/>бурение скважин в минской области</a>,<a href=https://voda-da.by/>ремонт скважин</a> и <a href=https://voda-da.by/>бурение скважин минск</a>.Поможем пробурить скважину, которая будет отвечать именно Вашим пожеланиям.Бурение скважин на воду в Минской области производится на глубину около 30-40 метров.Несмотря на это, непосредственный водозабор начинается уже с глубины 20-25 метров, удается получить 1-3 метров кубических в час. Компания «БурАвтоГрупп» использует современный роторный способ бурения, его можно использовать на самых разных грунтах. Ждем Вас у нас в офисе.
От всей души Вам всех благ!
<a href=https://voda-da.by/>обслуживание скважин на воду</a>
<a href=https://voda-da.by/>пробурить скважину воду цена метр</a>
<a href=https://voda-da.by/>оголовок скважины на воду</a>
<a href=https://voda-da.by/>принцип бурения скважины</a>
<a href=https://voda-da.by/>скважина воды на предприятии</a>

<a href="https://phenergandm.com/">phenergan vc</a> <a href="https://albuteroli.com/">generic for albuterol</a> <a href="https://furosemide80.com/">furosemide 20 mg sales</a> <a href="https://tadalafilpro.com/">cipla tadalafil</a> <a href="https://prednisolone1.com/">buy prednisolone</a> <a href="https://atarax25.com/">atarax 25 mg</a> <a href="https://levitra10.com/">levitra</a> <a href="https://propecia5mg.com/">buy propecia online</a> <a href="https://advair250.com/">advair buy</a> <a href="https://amoxicillin250.com/">rexall pharmacy amoxicillin 500mg</a>

Sexy photo galleries, daily updated pics
http://hot.free.porn.bloglag.com/?jayden

i want indian celebrity porn movie monster promo moviemonster porn 15 porn hickies free mature porn tube movies traci lords videos porn tube

If some one needs to be updated with hottest technologies then he must be pay
a quick visit this site and be up to date everyday.

my page; online friends - http://elliotictk44326.ampedpages.com/Real-estate-in-Europe-and-precisel...

Hot sexy porn projects, daily updates
http://musicfetish.hotblognetwork.com/?janie

porn freak free parents teach teens porn mihiro free porn black porn homemade british porn male

Pure textured warm ambient synthesizer music, minimalistic in design designated for quiet listening spaces when you require music that is relatively beat-less free of traditional guitar, piano and drums. Composed exclusively on hardware synthesizers.

Perfect for relaxation, reflection, chill-out, reiki, meditation.

Fans of early Steve Roach, Iasos, Eno, Pete Namlook, Hiroshi Yoshimura take note.
http://mephisto-shoes.ru/bitrix/redirect.php?event1=&amp;event2=&amp;eve...|
http://xn----7sbbdach8bqfpbpdh3ei.xn--p1ai/bitrix/rk.php?goto=http://ute...|
http://it-resourse.kz/bitrix/rk.php?goto=http://rondelj.cd.st/i-m-happy-...|
http://kenvela.net/__media__/js/netsoltrademark.php?d=mymusictrye.eklabl...|
http://ww35.minecraftmods9.com/__media__/js/netsoltrademark.php?d=mymusi...|

页面

冒个泡吧!

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。