谷歌在中国教育网遭国家级“中间人攻击”

文/
Anonymous (未验证)


文/Percy Alpha(Greatfire.org)

从2014年8月28日起,有网友在微博和Google+上报告说,当部分大陆网友试图在中国教育网(CERNET)内连接google.com和google.com.hk等网页时,均收到SSL证书错误的提示(SSL证书是用于加密HTTP数据传输的证明)。这意味着谷歌在教育网上受到中间人攻击(MITM attack)。


从今年6月4日开始,谷歌的绝大多数服务在中国遭封锁,但在中国教育科研网内并未受到干扰。在新学期开学之际,谷歌在教育网上遭到中间人攻击。中国网络审查监测组织Greatfire相信,攻击是由中国政府发起的。

在维基百科上,将“中间人攻击”的定义为一种积极的监听:

中间人攻击是指,攻击者与通讯的两端分别建立独立的联系,并交换其所收到的数据,使通讯的两端认为他们正在通过一个私密的连接与对方直接对话,但事实上整个会话都被攻击者完全控制。在中间人攻击中,攻击者可以拦截通讯双方的通话并插入新的内容。

动机

Greatfire相信,当局有足够的动机,对谷歌发动中间人攻击。谷歌于2014年3月12日开始开始对中国以及全球各地的默认搜索启用https加密搜索。换句话说,用户与谷歌之间的信息传输都默认加密。只有终端用户和谷歌服务器知道所搜索并被返回的内容。中国的防火墙只能看到用户连接上了谷歌的服务器,并不知道传输的数据内容。这也意味着,当局无法对谷歌进行逐条封锁,因此只能将谷歌全盘封锁。到目前为止,这种封锁发生在中国的公共互联网上,但还未发生在教育网中。

中国政府深知,如果中国要在科研领域取得进展和创新,中国的科研人员必须能够通过谷歌来连接到大量的信息。也正因为这个原因,中国教育网长期都少受到网络审查的干扰。在教育网内,中国用户深知能使用早已在中国被封锁的视频网站Youtube和社交媒体Google+。与此形成强烈对比的是,在中国的公共网络上,谷歌学术搜索被封,该网站的中文版将用户导流到香港版的站点上,但香港版的谷歌学术搜索也在大陆被封。

在上个月之前,在教育网上连接谷歌几乎并未遭到干扰。但本届政府已展示出其在各个战线上控制互联网与信息的决心。当局并没有在教育网上直接封锁谷歌,因为这很可能招致全国学生、教师以及科研人员的反感。当局选择在教育网内对谷歌发动中间人攻击,这样一来,学生和科研人员能继续使用谷歌,而当局又可以监听并有选择地拦截搜索请求以及结果。

这并非中国当局首次发动中间人攻击。在2013年1月,中国政府曾发动了针对Github的中间人攻击,波及全国。

攻击会再次发生吗?

Greatfire表示,由于加密的网络服务增加,当局很可能会更多地使用中间人攻击。

攻击细节

已有多名用户报告,在教育网内连接谷歌均收到伪造地SSL证书。软件安全公司Netresec曾做过有关GItHub在中国遭中间人攻击地全面分析。Netresec分析了Greatfire发送的以下截图后表示,所有证据表明,中国教育网与谷歌之间地信息交通正在受到中间人攻击。发动中间人攻击地机器很可能在教育网与其他网络地对等连接处发送数据帧。Netresec将在近期内发布全面分析报告。


Greatfire采用网民的以下报告来进行分析。Solidot的这篇报道也引用了同样的报告。


这个截图显示,当用户使用Chrome浏览器连接谷歌时,收到了SSL证书错误的提示。由于谷歌启用了强制安全传输(HSTS),Chrome和Firefox浏览器禁止用户避开这个提示。


该用户还比较了他在正常连接情况下收到的证书(左)和在遭中间人攻击情况下连接时收到的证书(右)。

 


Google+上的相关报道

https://plus.google.com/u/0/115822850906053020654/posts/EGW4NEd7z3N

https://plus.google.com/+duffJiang/posts/Dk5LrD7CiWM  

用户该怎么做

当你看到证书错误提示时,千万不要将其点开。用户应该使用Firefox或Chrome浏览器,这两个浏览器禁止用户点开启用了强制安全传输的网站(如谷歌和Github)。如果你点开了警告,你的谷歌账户凭据信息可能被盗窃,这意味这你的Gmail邮件可以被攻击者一览无遗。


用户可以通过谷歌的镜像网站来连接谷歌。谷歌在6月份被中国封锁后,Greatfire设立了一个谷歌镜像网站。到目前为止,已有超过100万中国用户使用了我们的“自由谷歌”网站和其他无法在中国被封锁的镜像


本文英文版原发表于GreatFire上,中文版由泡泡网编译首发

 

评论

<a href="https://ventolinhfainhalers.com/">ventolin without prescription</a>

[url=https://feministforeignpolicy.org/]baclofen 10mg tablets[/url] [url=https://buysellrentranchi.com/]metformin[/url] [url=https://colornutri.com/]baclofen 10 mgs no prescription[/url] [url=https://egomaniacalprig.org/]metformin 500 mg without prescription[/url] [url=https://flixtoday.xyz/]ipratropium albuterol[/url] [url=https://andrewjwilliams.net/]sildenafil canada[/url] [url=https://gcgrp.us/]vpxl online[/url] [url=https://arok.cards/]order amitriptyline[/url] [url=https://kushnationmagazine.com/]fluoxetine[/url] [url=https://7-by-7.net/]erythromycin stearate[/url] [url=https://90daycontentcure.com/]dapoxetine usa[/url] [url=https://aprilnitesparties.co.uk/]avodart[/url] [url=https://justinlouie.co/]cephalexin drug[/url] [url=https://lathombees.co.uk/]clonidine[/url] [url=https://cookiematter.com/]furosemide buy[/url] [url=https://compra.bz/]ivermectin for sale[/url] [url=https://mycoastalrower.com/]buy motilium[/url] [url=https://centralvapeuk.co.uk/]lisinopril[/url] [url=https://frogtowntacos.com/]vpxl[/url] [url=https://austinone.org/]ventolin[/url] [url=https://dkeducationdepartment.com/]lexapro[/url] [url=https://blueglassworks.co.uk/]dapoxetine usa[/url] [url=https://chiropractievoorschoten.nl/]lexapro[/url] [url=https://blazestrikes.com/]cafergot[/url] [url=https://sfeoh.com/]tetracycline antibiotic[/url] [url=https://1-inch-punch.com/]vpxl[/url] [url=https://exercisedeepheat.co.uk/]proscar for bph[/url] [url=https://extrafastmovers.com.au/]cheap vermox[/url] [url=https://gametrailer.site/]motilium usa[/url]

Young Heaven - Naked Teens & Young Porn Pictures
http://free.anal.porn.relayblog.com/?tamara

nao oikawa porn teen porn movies and pics black 80 s porn grannie porn pics porn keezmovies

[url=https://valtrex500mg.com/]buy generic valtrex online[/url] [url=https://genericcialis20mg.com/]20mg cialis[/url] [url=https://femaleviagra5.com/]buy female viagra online[/url] [url=https://tadalafil24.com/]tadalafil[/url] [url=https://buyacyclovirnoprescription.com/]buy acyclovir without prescription[/url]

купить от импотенции

<a href=https://mentabs.biz/>купить от импотенции</a>

<a href="https://celebrex100.com/">buy celebrex</a> <a href="https://buypropeciafinasteride.com/">finasteride buy</a> <a href="https://buyamoxicillinwithoutprescription.com/">buy amoxicillin without prescription</a> <a href="https://zithromax500.com/">zithromax buy</a> <a href="https://lasix0.com/">lasix no prescription</a> <a href="https://tadalafil24.com/">cheapest tadalafil</a> <a href="https://lisinopril0.com/">lisinopril 20 mg tablets</a> <a href="https://buysildenafil50.com/">buy sildenafil citrate online</a> <a href="https://amoxicillin911.com/">amoxicillin tablets for sale</a> <a href="https://femaleviagra5.com/">female viagra</a>

EARN BITCOINS FOR FEE! CLOUD MINING!!
<a href="https://bitplaza.biz/">bitplaza.biz</a>
EARN BITCOINS FOR FEE! CLOUD MINING!!
https://bitplaza.biz/

<a href="http://adultchatroom.gq/">adult chat room</a> <a href="http://amateurwebcam.live/">amateur webcam</a> <a href="http://teencam.ga/">camchat rooms</a> <a href="http://girlchat.site/">milf webcam</a> <a href="http://slutcams.fun/">slut cams</a> <a href="http://nudewebcams.icu/">free live sex shows</a> <a href="http://freeadultchat.tk/">free adult chat</a> <a href="http://interactivesex.ml/">interactive sex</a> <a href="http://adultcams.ga/">adult chat rooms</a> <a href="http://maturewebcam.icu/">vr chat porn</a>

photoshop 2019 activator

<a href=https://our-software.net/Bandicam>bandicam keygen</a>

<a href="https://gainsboroughreadymix.co.uk/">furosemide</a> <a href="https://barnettclutches.eu/">vardenafil online</a> <a href="https://americanpulseprocessing.net/">generic for advair diskus</a> <a href="https://futureskillspod.com/">buy cialis generic</a> <a href="https://154locucionytextos.com/">vasotec for dogs</a> <a href="https://arizonathriftstop.com/">trazodone drug</a> <a href="https://codesolutions.ie/">kamagra soft</a> <a href="https://brandidentity.pro/">generic azithromycin</a> <a href="https://idahopemf.com/">zyban</a> <a href="https://forestcity.us/">antibiotic azithromycin</a> <a href="https://albertasteaks.ca/">proair albuterol sulfate where to buy</a> <a href="https://bayernmunichvsrealmadridi.de/">nolvadex</a> <a href="https://booktalent.net/">baclofen</a> <a href="https://keppeland.com/">order advair diskus</a> <a href="https://apps4sea.com/">elimite cream</a> <a href="https://gwrethrth.website/">vardenafil drug</a> <a href="https://devbootcamps.com/">valtrex medication</a> <a href="https://earthygoodies.store/">amoxicillin 500 mg online</a> <a href="https://dscrmtest.com/">order doxycycline</a> <a href="https://gtsa.ca/">coreg carvedilol</a> <a href="https://ditaliagiro.de/">cafergot medication</a> <a href="https://alumaxpanel.ca/">kamagra</a> <a href="https://fvasolution.com/">cost of medrol</a> <a href="https://advertisingyourservices.com/">kamagra soft</a> <a href="https://azconexbox.com/">dapoxetine</a> <a href="https://fastcopy.us/">xenical buy online</a> <a href="https://douglasjstevens.net/">colchicine probenecid</a> <a href="https://legendkingdom.com/">dapoxetine hcl</a>

<a href="https://crescentcortland.com/">ventolin order</a> <a href="https://belezanapontadosdedos.com.br/">clomid</a> <a href="https://allures.co/">doxycycline generic</a> <a href="https://beneficentia.org/">propranolol cost</a> <a href="https://bloombeauty.store/">atarax hydroxyzine</a> <a href="https://medplanadvisers.net/">generic toprol xl</a> <a href="https://azkarot.co/">drug lipitor</a> <a href="https://directnailsupply.net/">avodart</a> <a href="https://corporateimage.agency/">ampicillin</a> <a href="https://flawlessfinishdetailing.com/">bupropion 100mg</a> <a href="https://daonlinespot.com/">indocin online</a> <a href="https://judidaduonline.biz/">abilify</a> <a href="https://albuquerque360.net/">tetracycline 500mg capsules</a> <a href="https://industry-veterans.net/">buy zoloft</a> <a href="https://edsucation.net/">biaxin cost</a> <a href="https://displacement.info/">antabuse to buy</a> <a href="https://gadgetgirls.ca/">zithromax</a> <a href="https://5gmobile.marketing/">albuterol aerosol</a> <a href="https://journalofrenalandhepaticdisorders.net/">cafergot medication</a> <a href="https://ebonie.me/">where to buy azithromycin</a> <a href="https://carttags.com/">toradol</a> <a href="https://9money.online/">generic avodart</a> <a href="https://cornellcompanies.net/">cialis soft</a> <a href="https://cucipena.org/">tretinoin 0.1 cream</a> <a href="https://academy-jeuneespoir.org/">buy ampicillin</a> <a href="https://andytron.net/">proair albuterol sulfate online</a> <a href="https://exotechcorp.com/">purchase lasix</a> <a href="https://cyberplant.ru/">tadacip 20</a> <a href="https://fetdb.com/">cost of seroquel</a> <a href="https://exituselitereviews.com/">elimite cream</a>

Dirty Porn Photos, daily updated galleries
http://porngalz.instakink.com/?amy

free porn wifes interacial pictures italian porn picture archive gay tweeks orgies porn surfer girls porn black booty porn thumbs

<a href="https://agensbobet.org/">price of lexapro</a> <a href="https://tahoehospital.org/">dapoxetine over the counter</a> <a href="https://educator-savjetovanje.hr/">no petscriptions zoloft</a> <a href="https://brightonbrandy.co.uk/">azithromycin</a> <a href="https://eventosipirangacm.com.br/">fluoxetine hydrochloride</a> <a href="https://hempoilfactory.net/">medication actos</a> <a href="https://ccomms.com/">atarax 50 mg</a> <a href="https://connectivityinstitute.net/">vardenafil</a> <a href="https://casada.us/">erythromycin ethylsuccinate</a> <a href="https://cityparse.com/">thyroid synthroid</a> <a href="https://beerthdays.com/">zithromax tablets</a> <a href="https://carry.blue/">valtrex</a> <a href="https://comethrutoronto.com/">10 mg fluoxetine</a> <a href="https://agentsbobet88.net/">motilium</a> <a href="https://4builder.co.uk/">nolvadex</a> <a href="https://amer-acad-english.com/">generic buspar</a> <a href="https://superka.sg/">buy prozac</a> <a href="https://byandreaguerra.com/">albendazole</a> <a href="https://acvaonline.net/">proscar for hair loss</a> <a href="https://detailedphoto.com/">propecia pharmacy</a> <a href="https://getcustomerstoday.co.uk/">atarax</a> <a href="https://ellegant.com/">kamagra 100 chewable tablets</a> <a href="https://drketo.co/">cleocin hcl 300 mg</a> <a href="https://choicesmartsforresults.com/">sildenafil</a> <a href="https://gallantmedia.org/">atarax</a> <a href="https://peabrainstudios.com/">no prescription cialis</a> <a href="https://shopkenya1.com/">generic for zithromax</a>

College Girls Porn Pics
http://porn.picture.fetlifeblog.com/?adrianna

svannah porn star free cartoon super hero porn young teen porn homemade webcam free videos kinky mideval porn the jetsons porn comic

<a href="https://freeonlinesex.icu/">granny live cam</a> <a href="https://interactiveporn.gq/">fetish cams</a> <a href="https://freeadultcam.top/">free sexy webcams</a> <a href="https://eroticchat.top/">erotic chat</a> <a href="https://adultchatroom.ga/">free adult chat room</a> <a href="https://livenaked.top/">live naked</a> <a href="https://freeadultvideochat.icu/">free adult video chat</a> <a href="https://videochatroom.stream/">sex video chat</a> <a href="https://adultcam.ga/">sexchatsexchat</a> <a href="https://videochatroom.icu/">adult video chat</a>

<a href="http://freeadultchat.cf/">free adult chat</a> <a href="http://girlcam.stream/">cam girl</a> <a href="http://teencam.ga/">teen cam chat</a> <a href="http://freelivesexchat.fun/">free sex chat</a> <a href="http://nudelive.icu/">live nude chat</a> <a href="http://interactiveporn.tk/">webcam sites</a> <a href="http://webcamamateur.icu/">webcam teen</a> <a href="http://freeadultvideochat.site/">free adult video chat</a> <a href="http://chatporn.site/">chat porn</a> <a href="http://chatwithgirls.top/">live girls</a>

Scandal porn galleries, daily updated lists
http://cut.young.porn.bloglag.com/?toni

wizad oz porn anime porn gamas porn fiedility jews in porn whale trail porn

<a href="http://sexchatfree.stream/">webcam sex videos</a> <a href="http://maturewebcam.fun/">mature webcam</a> <a href="http://webcamteen.fun/">adult webcam</a> <a href="http://videochatroom.stream/">video sex chat</a> <a href="http://hotwebcamgirls.fun/">chatib no registration</a> <a href="http://freeliveporn.site/">incest chat rooms</a> <a href="http://freeonlinesex.fun/">online sex chat</a> <a href="http://livenaked.top/">webcam room</a> <a href="http://freewebcamgirls.top/">free webcam girls</a> <a href="http://webcamteens.stream/">webcam masturbation</a>

<a href="https://freewebcams.ga/">free webcams</a> <a href="https://camsites.stream/">cam sites</a> <a href="https://freesexcams.ga/">free live sex cams</a> <a href="https://adultchat.fun/">chaturbate female cams</a> <a href="https://pornwebcam.site/">bbw webcam</a>

<a href="https://adultcam.ga/">free sex chat room</a> <a href="https://webcamamateur.site/">webcam amateur</a> <a href="https://maturewebcam.site/">bbw webcam</a> <a href="https://adultchatrooms.icu/">mom virtual sex</a> <a href="https://freewebcamgirls.top/">free webcam girls</a>

Hot galleries, thousands new daily.
http://fetish.porn.instasexyblog.com/?kaitlin

boy love porn seventies jennifer anniston porn video adult spring break porn strange porn tubes porn saskia

<a href="http://prednisolone911.com/">buy prednisolone 5mg without prescription uk</a>

<a href="https://gamewolves.com/">buy propranolol</a> <a href="https://davidlouch.co.uk/">generic moduretic</a> <a href="https://disorderfriends.net/">biaxin</a> <a href="https://chicagoworldcon7.org/">generic cleocin</a> <a href="https://cs4ar.org/">atenolol</a> <a href="https://ditaliagiro.de/">cafergot generic</a> <a href="https://barcavsreal.de/">robaxin price</a> <a href="https://hijamah.info/">hydrochlorothiazide</a> <a href="https://expertsportspickstoday.com/">lasix</a> <a href="https://fignet.nl/">zyban</a> <a href="https://hwy22storage.com/">purchase zithromax</a> <a href="https://cmasoftware.com/">baclofen medicine</a> <a href="https://meyuang.com/">buy tadacip</a> <a href="https://recits-libres.com/">cipro ciprofloxacin</a> <a href="https://almaceneselrey.org/">cost of strattera</a> <a href="https://galloro.eu/">levitra 20mg</a> <a href="https://creatability.site/">amoxicillin tablets for sale</a> <a href="https://appzenbody.us/">atarax for children</a> <a href="https://centralvapeuk.co.uk/">generic drug for lisinopril</a> <a href="https://ckltech.net/">10 mg fluoxetine</a> <a href="https://blowertec.com/">levothyroxine ordering online</a> <a href="https://eaglesvsgiants.de/">atarax</a> <a href="https://bhumiorganics.org/">zoloft medication</a> <a href="https://dairyfreelife.co.uk/">clonidine for children</a> <a href="https://euroasiastartupawards.com/">tretinoin</a> <a href="https://a3multiperform.site/">cialis</a> <a href="https://lboursier-formation.info/">where can i buy tetracycline</a>

<a href="http://slutcams.icu/">girl cams</a> <a href="http://interactivesex.ml/">free girls chat</a> <a href="http://sexcams.icu/">sex cams</a> <a href="http://freeonlinesex.stream/">free live sex</a> <a href="http://webcamteens.site/">porn webcam</a> <a href="http://pornlive.icu/">porn live</a> <a href="http://milfcams.fun/">milf cams</a> <a href="http://adultsexchat.icu/">adult sex chat</a> <a href="http://maturewebcam.icu/">adult webcam</a> <a href="http://adultchatroom.ga/">adult chat rooms</a>

EARN BITCOINS FOR FEE! CLOUD MINING!!
<a href="https://bitplaza.biz/">bitplaza.biz</a>
EARN BITCOINS FOR FEE! CLOUD MINING!!
https://bitplaza.biz/

页面

冒个泡吧!

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。