谷歌在中国教育网遭国家级“中间人攻击”

文/
Anonymous (未验证)


文/Percy Alpha(Greatfire.org)

从2014年8月28日起,有网友在微博和Google+上报告说,当部分大陆网友试图在中国教育网(CERNET)内连接google.com和google.com.hk等网页时,均收到SSL证书错误的提示(SSL证书是用于加密HTTP数据传输的证明)。这意味着谷歌在教育网上受到中间人攻击(MITM attack)。


从今年6月4日开始,谷歌的绝大多数服务在中国遭封锁,但在中国教育科研网内并未受到干扰。在新学期开学之际,谷歌在教育网上遭到中间人攻击。中国网络审查监测组织Greatfire相信,攻击是由中国政府发起的。

在维基百科上,将“中间人攻击”的定义为一种积极的监听:

中间人攻击是指,攻击者与通讯的两端分别建立独立的联系,并交换其所收到的数据,使通讯的两端认为他们正在通过一个私密的连接与对方直接对话,但事实上整个会话都被攻击者完全控制。在中间人攻击中,攻击者可以拦截通讯双方的通话并插入新的内容。

动机

Greatfire相信,当局有足够的动机,对谷歌发动中间人攻击。谷歌于2014年3月12日开始开始对中国以及全球各地的默认搜索启用https加密搜索。换句话说,用户与谷歌之间的信息传输都默认加密。只有终端用户和谷歌服务器知道所搜索并被返回的内容。中国的防火墙只能看到用户连接上了谷歌的服务器,并不知道传输的数据内容。这也意味着,当局无法对谷歌进行逐条封锁,因此只能将谷歌全盘封锁。到目前为止,这种封锁发生在中国的公共互联网上,但还未发生在教育网中。

中国政府深知,如果中国要在科研领域取得进展和创新,中国的科研人员必须能够通过谷歌来连接到大量的信息。也正因为这个原因,中国教育网长期都少受到网络审查的干扰。在教育网内,中国用户深知能使用早已在中国被封锁的视频网站Youtube和社交媒体Google+。与此形成强烈对比的是,在中国的公共网络上,谷歌学术搜索被封,该网站的中文版将用户导流到香港版的站点上,但香港版的谷歌学术搜索也在大陆被封。

在上个月之前,在教育网上连接谷歌几乎并未遭到干扰。但本届政府已展示出其在各个战线上控制互联网与信息的决心。当局并没有在教育网上直接封锁谷歌,因为这很可能招致全国学生、教师以及科研人员的反感。当局选择在教育网内对谷歌发动中间人攻击,这样一来,学生和科研人员能继续使用谷歌,而当局又可以监听并有选择地拦截搜索请求以及结果。

这并非中国当局首次发动中间人攻击。在2013年1月,中国政府曾发动了针对Github的中间人攻击,波及全国。

攻击会再次发生吗?

Greatfire表示,由于加密的网络服务增加,当局很可能会更多地使用中间人攻击。

攻击细节

已有多名用户报告,在教育网内连接谷歌均收到伪造地SSL证书。软件安全公司Netresec曾做过有关GItHub在中国遭中间人攻击地全面分析。Netresec分析了Greatfire发送的以下截图后表示,所有证据表明,中国教育网与谷歌之间地信息交通正在受到中间人攻击。发动中间人攻击地机器很可能在教育网与其他网络地对等连接处发送数据帧。Netresec将在近期内发布全面分析报告。


Greatfire采用网民的以下报告来进行分析。Solidot的这篇报道也引用了同样的报告。


这个截图显示,当用户使用Chrome浏览器连接谷歌时,收到了SSL证书错误的提示。由于谷歌启用了强制安全传输(HSTS),Chrome和Firefox浏览器禁止用户避开这个提示。


该用户还比较了他在正常连接情况下收到的证书(左)和在遭中间人攻击情况下连接时收到的证书(右)。

 


Google+上的相关报道

https://plus.google.com/u/0/115822850906053020654/posts/EGW4NEd7z3N

https://plus.google.com/+duffJiang/posts/Dk5LrD7CiWM  

用户该怎么做

当你看到证书错误提示时,千万不要将其点开。用户应该使用Firefox或Chrome浏览器,这两个浏览器禁止用户点开启用了强制安全传输的网站(如谷歌和Github)。如果你点开了警告,你的谷歌账户凭据信息可能被盗窃,这意味这你的Gmail邮件可以被攻击者一览无遗。


用户可以通过谷歌的镜像网站来连接谷歌。谷歌在6月份被中国封锁后,Greatfire设立了一个谷歌镜像网站。到目前为止,已有超过100万中国用户使用了我们的“自由谷歌”网站和其他无法在中国被封锁的镜像


本文英文版原发表于GreatFire上,中文版由泡泡网编译首发

 

评论

Useful tips. Appreciate it!
http://canadianonlinepharmaciesntv.com
prescription drugs prices
<a href="http://canadianonlinepharmaciesntv.com/">canada drugs</a>
highest rated canadian pharmacies
<a href=http://canadianonlinepharmaciesntv.com/>canada drugs</a>

Hardcore Galleries with hot Hardcore photos
http://blackebonysex.xblognetwork.com/?jacey

dowload free porn torrents cynthera squirt porn drawn tougher porn free porn on anal sex perfect blonde porn

<a href="https://innobus.pe/">price of plavix</a> <a href="https://ebeninsurance.com/">prednisolone 40mg</a> <a href="https://ditaliagiro.de/">cafergot generic</a> <a href="https://cindylusestatesales.net/">price of celexa</a> <a href="https://atsymboldesigns.com/">generic cipro</a> <a href="https://lopezcafe.com/">generic avana</a> <a href="https://dotdyna.com/">purchase prozac online</a> <a href="https://beyondclassicrock.com/">by prozac</a> <a href="https://feministforeignpolicy.org/">baclofen pills</a> <a href="https://physiotherapyandshiatsu.co.uk/">10mg paxil</a> <a href="https://blossombench.com/">moduretic without prescription</a> <a href="https://buyingyourfirsthomestepbystep.ca/">proscar cost</a> <a href="https://lboursier-formation.info/">tetracycline</a> <a href="https://conquer9.org/">zanaflex 2mg</a> <a href="https://croyancelondon.co.uk/">generic avana</a> <a href="https://craftcbd.org/">avana</a> <a href="https://historyebooks.net/">aldactone for facial hair</a> <a href="https://devbootcamps.com/">prescription for valtrex</a> <a href="https://fourseasonspainting.ca/">toprol xl 50 mg</a> <a href="https://jailijakosamja.rs/">cost of arimidex</a> <a href="https://daizydelicious.com/">price of benicar</a> <a href="https://bible-fellowship.info/">xenical price</a> <a href="https://albuquerque360.net/">tetracycline for acne</a> <a href="https://guerracultural.net/">cheap cafergot</a> <a href="https://cyclesoflife.bike/">soft viagra</a> <a href="https://dalidavinci.net/">vpxl</a>

<a href="https://freesexchatrooms.stream/">chat rooms free</a> <a href="https://freeliveporn.icu/">free live porn</a> <a href="https://nudelive.fun/">nude live</a> <a href="https://adultcams.icu/">adult cams</a> <a href="https://webcamamateur.fun/">webcam amateur</a> <a href="https://videochatroom.live/">video chat room</a> <a href="https://adultchatrooms.cf/">chat rooms free</a> <a href="https://slutcams.fun/">slut cams</a> <a href="https://webcamteens.icu/">amateur webcam</a> <a href="https://adultchatroom.icu/">sexy chat girls live</a>

Hot photo galleries blogs and pictures
http://redheadirish.instakink.com/?montana

nasty kinky fetist porn free porn videos of unshaved women necro porn bloody blazck hardcore porn videos clips free gay man porn viedos

<a href="https://sextalk.site/">webcam sex</a> <a href="https://freeadultchat.site/">cam to cam</a> <a href="https://camtocam.site/">free girls chatroom</a> <a href="https://freewebcamchat.site/">free adult webcam chat</a> <a href="https://adultsexchat.icu/">adult sex chat</a> <a href="https://freeliveporn.fun/">web cam porno</a> <a href="https://freelivesex.gq/">free live cam</a> <a href="https://amateurwebcam.live/">teen masturbation cam</a> <a href="https://freeadultchat.cf/">free adult chat rooms</a> <a href="https://webcamamateur.icu/">webcam models</a>

EARN BITCOINS FOR FEE! CLOUD MINING!!
<a href="https://bitplaza.biz/">bitplaza.biz</a>
EARN BITCOINS FOR FEE! CLOUD MINING!!
https://bitplaza.biz/

<a href="https://buyleadfunnels.com/">vardenafil online</a> <a href="https://campo21.net/">celexa</a> <a href="https://cherimoyarecords.com/">price of benicar</a> <a href="https://catsfood.ir/">cleocin antibiotics</a> <a href="https://auctiontacticsrevealed.com/">benicar generic available</a> <a href="https://friendlyway.org/">celebrex without prescription</a> <a href="https://depaolis.biz/">cafergot</a> <a href="https://case-land.ca/">zithromax pills</a> <a href="https://conspiracycavern.net/">generic toprol</a> <a href="https://dceaglecam.net/">prozac pills</a> <a href="https://hometowndistributor.com/">synthroid generic</a> <a href="https://codereligion.io/">zoloft ocd</a> <a href="https://lawntechalliance.com/">alli 120</a> <a href="https://deeprootsjuice.com/">order doxycycline</a> <a href="https://allinthistogether.love/">alli pill</a> <a href="https://edsucation.net/">biaxin</a> <a href="https://accademiasvizzerapnl.ch/">lipitor 80</a> <a href="https://2armenia.ru/">valtrex order</a> <a href="https://dronesoulet.store/">wellbutrin xl</a> <a href="https://clearchoicehemp.com/">neurontin</a> <a href="https://boredemployee.com/">erythromycin to buy</a> <a href="https://bet368.biz/">amoxil amoxicillin</a> <a href="https://egomaniacalprig.org/">metformin 500mg er</a> <a href="https://clipanduz.com/">indocin</a> <a href="https://canliiddaabahis.net/">lisinopril 2.5 mg</a> <a href="https://gandgcosmetics.com/">cost of avodart</a> <a href="https://eco-friendly.clothing/">zoloft medicine</a> <a href="https://cookiematter.com/">furosemide buy</a>

<a href="https://doxycycline1.com/">doxycycline 50mg</a> <a href="https://valtrex1.com/">prescription for valtrex</a> <a href="https://synthroid75.com/">online synthroid</a> <a href="https://motilium5.com/">buy motilium</a> <a href="https://amoxicillin5.com/">amoxicillin 500 mg without prescription</a>

Que Fue Propecia Cheapest Place To Buy Herpes Rx <a href=http://cheapciali.com>canadian pharmacy cialis</a> Find cheapeast isotretinoin amex overseas

<a href="http://freeonlinesex.icu/">free sex cam</a> <a href="http://pornwebcam.site/">porn webcam</a> <a href="http://adultchatrooms.ml/">free adult chat</a> <a href="http://freeliveporn.icu/">free interactive porn</a> <a href="http://videochatroom.live/">cam to cam masturbation</a>

New hot project galleries, daily updates
http://lesbian.video.bloglag.com/?aubrie

leah lyons porn download bel ami gay porn megaupload sexy student and teacher porn why do i get porn emails porn triathletes

<a href="http://lasix911.com/">cheap lasix</a> <a href="http://amoxicillin5.com/">where can i buy amoxicillin</a> <a href="http://motilium5.com/">motilium</a> <a href="http://sildenafil75.com/">buy sildenafil online</a> <a href="http://propecia8.com/">propecia hair</a>

<a href="https://albuterol24.com/">buy albuterol online without prescription</a> <a href="https://buylasixfurosemide.com/">furosemide 20 mg</a> <a href="https://prednisone911.com/">buy prednisone online cheap</a> <a href="https://synthroid1.com/">cheap synthroid online</a> <a href="https://stromectolonline.com/">ivermectin for sale</a> <a href="https://buydoxycyclinewithoutprescription.com/">buy doxycycline without prescription</a> <a href="https://prednisonegeneric.com/">prednisone</a> <a href="https://metformin1000.com/">metformin 500mg tablets</a> <a href="https://lasix0.com/">lasix</a> <a href="https://ventolinhfainhalers.com/">ventolin</a>

<a href="https://cornellcompanies.net/">generic cialis prices</a> <a href="https://aerotec-carbon.eu/">amitriptyline</a> <a href="https://cannvenience.ca/">no prescription prenisone</a> <a href="https://pensionergrowthbonds.co.uk/">diclofenac drug</a> <a href="https://fixyaar.org/">prozac</a> <a href="https://benfletcher.ca/">baclofen</a> <a href="https://fromeetsbeau.com/">biaxin for pneumonia</a> <a href="https://blazestrikes.com/">ordering cafegot</a> <a href="https://emmanuelworship.church/">lipitor</a> <a href="https://cafearoos.ir/">buy moduretic</a> <a href="https://jenniferforsenate.com/">buy tadacip online</a> <a href="https://incomehighway21.com/">female pink viagra</a> <a href="https://expertica.org/">zithromax</a> <a href="https://antoinedecastellane.net/">female viagra cream</a> <a href="https://carry.blue/">valtre</a> <a href="https://autistofuturism.net/">hydrochlorothiazide</a> <a href="https://conquer9.org/">zanaflex</a> <a href="https://searcheaglerockrealestate.com/">buy amitriptyline</a> <a href="https://pruefungsangst-hilfe.de/">cephalexin drug</a> <a href="https://seancerevealed.com/">strattera</a> <a href="https://searchhighlandparkrealestate.com/">cipralex medication</a> <a href="https://bigideastartup.net/">buy online doxycycline</a> <a href="https://sellwithswann.com/">viagra</a> <a href="https://envyhome.co.uk/">aldactone for acne</a> <a href="https://flexendoscopes.com/">advair diskus 500</a> <a href="https://bookrecycling.org/">lexapro wellbutrin</a> <a href="https://chichachicken.com/">generic antabuse</a> <a href="https://dkrpharma.net/">lipitor</a>

Sexy pictures each day
http://thai.porn.fetlifeblog.com/?nora

exotic jewell porn greek mature porn porn pen insertions got sex porn stars at work cheerleader porn tube

<a href="https://campo21.net/">order celexa online</a> <a href="https://howtomakefriends.tk/">tadalafil without prescription</a> <a href="https://dallasmentors.com/">neurontin 800mg</a> <a href="https://ascensionpixel.com/">cipro 500mg</a> <a href="https://lovegoodtoys.co.uk/">zanaflex price</a> <a href="https://egati.com/">generic paxil</a> <a href="https://lecturego.com/">erythromycin prices</a> <a href="https://ewdpl.org/">cialis purchase</a> <a href="https://bizlions.mobi/">sildenafil 100mg</a> <a href="https://ctasydney.com/">cleocin for uti</a> <a href="https://benhenson.com/">hydrochlorothiazide for sale</a> <a href="https://indexlondon.com/">albendazole buy</a> <a href="https://florist-armenia.shop/">phenergan dm</a> <a href="https://ad-offers.net/">aldactone</a> <a href="https://101cleaningtips.com/">order zoloft online no prescription</a> <a href="https://camicostumes.com/">amoxicillin</a> <a href="https://butcherbros.ca/">purchase prozac</a> <a href="https://casacompanies.org/">stromectol</a> <a href="https://alexanderduval.com/">medrol buy</a> <a href="https://cybrmlk.ca/">150 mg wellbutrin</a> <a href="https://iloung.com/">generic deltasone</a> <a href="https://51nht.top/">buy suhagra</a> <a href="https://fressnapf.ir/">no prescription ventolin inhaler</a> <a href="https://analcoholicwriter.com/">purchase antabuse online</a> <a href="https://kleenshot.com/">online plavix</a> <a href="https://4builder.uk/">dapoxetine 60 mg</a> <a href="https://andrewjwilliams.net/">where to buy sildenafil</a> <a href="https://healthyfitesshabits.com/">fluoxetine online</a> <a href="https://eddiesspaghetti.kitchen/">robaxin</a>

<a href="https://lasix911.com/">buy cheap lasix</a> <a href="https://synthroid75.com/">synthroid buy</a> <a href="https://valtrex1.com/">valtrex buy</a> <a href="https://propecia8.com/">buy generic propecia</a> <a href="https://motilium5.com/">motilium domperidone 10mg</a>

<a href="https://camtocam.icu/">cam to cam</a> <a href="https://camsites.icu/">free chat rooms without registration</a> <a href="https://interactiveporn.tk/">porn cams</a> <a href="https://freewebcamgirls.top/">hot webcam girls</a> <a href="https://videochatroom.live/">video chat room</a> <a href="https://webcamamateur.site/">webcam amateur</a> <a href="https://adultchatroom.gq/">adult chat room</a> <a href="https://adultsexchat.icu/">hot webcam girls</a> <a href="https://freelivesexchat.fun/">free adult sex chat</a> <a href="https://freelivesex.gq/">free live sex chat</a>

Sexy photo galleries, daily updated collections
http://toonporn.fetlifeblog.com/?tiara

sexy blonde lesbian porn movies porn of the ring lesnian lactating sluts porn stories interracial milf anal gangbang porn free porn sent to email

<a href="https://adultchatrooms.ga/">webcam chat rooms</a> <a href="https://hotwebcamgirls.stream/">free adult webcam</a> <a href="https://freelivesex.gq/">bbwcams</a> <a href="https://webcamamateur.fun/">web cam chat</a> <a href="https://adultcams.site/">free adult cams</a> <a href="https://interactiveporn.tk/">free interactive porn</a> <a href="https://freewebcamchat.fun/">free webcam sex</a> <a href="https://girlchat.site/">free porn chat</a> <a href="https://webcamteens.fun/">webcam porn</a> <a href="https://webcamteens.stream/">webcam teens</a>

EARN BITCOINS FOR FEE! CLOUD MINING!!
<a href="https://bitplaza.biz/">bitplaza.biz</a>
EARN BITCOINS FOR FEE! CLOUD MINING!!
https://bitplaza.biz/

<a href="https://ayearwithmysoul.com/">clonidine drug</a> <a href="https://portfoliomedic.co.uk/">amoxicillin clavulanate</a> <a href="https://gandgcosmetics.com/">avodart generic</a> <a href="https://appsrev.info/">cheap prevacid</a> <a href="https://aws-assen.nl/">buy motilium</a> <a href="https://global-oakland.org/">priligy dapoxetine</a> <a href="https://conspiracycavern.net/">toprol xl</a> <a href="https://discoverzion.life/">neurontin gabapentin</a> <a href="https://cityjitsu.org.uk/">diflucan candida</a> <a href="https://8080job.net/">toradol for fever</a> <a href="https://amerikali.org/">atarax generic</a> <a href="https://keppeland.com/">advair for asthma</a> <a href="https://bukan.tm/">estrace estrogen cream</a> <a href="https://hoola.us/">amitriptyline elavil</a> <a href="https://allcornersstcatharines.ca/">purchase prednisolone</a> <a href="https://gaymezaddy.com/">stromectol</a> <a href="https://besmartkids.org/">buying propranolol online</a> <a href="https://codebluetelecom.com/">flagyl</a> <a href="https://amadaco2laserparts.com/">acyclovir no prescription</a> <a href="https://douglasjstevens.net/">colchicine for sale</a> <a href="https://fomos.de/">hydrochlorothiazide</a> <a href="https://choicesmartsforresults.com/">sildenafil citrate 100mg tab</a> <a href="https://daonlinespot.com/">indocin 50 mg tablets</a> <a href="https://inticorner.com/">robaxin</a> <a href="https://cabinetoutfitters.us/">female viagra</a> <a href="https://biesa.org/">acyclovir</a> <a href="https://balloonridesinhoustontx.com/">atenolol</a> <a href="https://cleaningservicesmalta.com/">baclofen</a>

Секс-шоп в Иркутске «Ledesire.shop» предлагает секс игрушки - конфидициально!
Об этом никто не узнает:)

«Ledesire.shop» позволяет подобрать нужные секс игрушки в Иркутске, получить детальную информацию и сделать заказ, при соблюдении условий полной анонимности.

<a href=http://www.ledesire.vip/lp/>Секс шоп онлайн</a>

页面

冒个泡吧!

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。