谷歌在中国教育网遭国家级“中间人攻击”

文/
Anonymous (未验证)


文/Percy Alpha(Greatfire.org)

从2014年8月28日起,有网友在微博和Google+上报告说,当部分大陆网友试图在中国教育网(CERNET)内连接google.com和google.com.hk等网页时,均收到SSL证书错误的提示(SSL证书是用于加密HTTP数据传输的证明)。这意味着谷歌在教育网上受到中间人攻击(MITM attack)。


从今年6月4日开始,谷歌的绝大多数服务在中国遭封锁,但在中国教育科研网内并未受到干扰。在新学期开学之际,谷歌在教育网上遭到中间人攻击。中国网络审查监测组织Greatfire相信,攻击是由中国政府发起的。

在维基百科上,将“中间人攻击”的定义为一种积极的监听:

中间人攻击是指,攻击者与通讯的两端分别建立独立的联系,并交换其所收到的数据,使通讯的两端认为他们正在通过一个私密的连接与对方直接对话,但事实上整个会话都被攻击者完全控制。在中间人攻击中,攻击者可以拦截通讯双方的通话并插入新的内容。

动机

Greatfire相信,当局有足够的动机,对谷歌发动中间人攻击。谷歌于2014年3月12日开始开始对中国以及全球各地的默认搜索启用https加密搜索。换句话说,用户与谷歌之间的信息传输都默认加密。只有终端用户和谷歌服务器知道所搜索并被返回的内容。中国的防火墙只能看到用户连接上了谷歌的服务器,并不知道传输的数据内容。这也意味着,当局无法对谷歌进行逐条封锁,因此只能将谷歌全盘封锁。到目前为止,这种封锁发生在中国的公共互联网上,但还未发生在教育网中。

中国政府深知,如果中国要在科研领域取得进展和创新,中国的科研人员必须能够通过谷歌来连接到大量的信息。也正因为这个原因,中国教育网长期都少受到网络审查的干扰。在教育网内,中国用户深知能使用早已在中国被封锁的视频网站Youtube和社交媒体Google+。与此形成强烈对比的是,在中国的公共网络上,谷歌学术搜索被封,该网站的中文版将用户导流到香港版的站点上,但香港版的谷歌学术搜索也在大陆被封。

在上个月之前,在教育网上连接谷歌几乎并未遭到干扰。但本届政府已展示出其在各个战线上控制互联网与信息的决心。当局并没有在教育网上直接封锁谷歌,因为这很可能招致全国学生、教师以及科研人员的反感。当局选择在教育网内对谷歌发动中间人攻击,这样一来,学生和科研人员能继续使用谷歌,而当局又可以监听并有选择地拦截搜索请求以及结果。

这并非中国当局首次发动中间人攻击。在2013年1月,中国政府曾发动了针对Github的中间人攻击,波及全国。

攻击会再次发生吗?

Greatfire表示,由于加密的网络服务增加,当局很可能会更多地使用中间人攻击。

攻击细节

已有多名用户报告,在教育网内连接谷歌均收到伪造地SSL证书。软件安全公司Netresec曾做过有关GItHub在中国遭中间人攻击地全面分析。Netresec分析了Greatfire发送的以下截图后表示,所有证据表明,中国教育网与谷歌之间地信息交通正在受到中间人攻击。发动中间人攻击地机器很可能在教育网与其他网络地对等连接处发送数据帧。Netresec将在近期内发布全面分析报告。


Greatfire采用网民的以下报告来进行分析。Solidot的这篇报道也引用了同样的报告。


这个截图显示,当用户使用Chrome浏览器连接谷歌时,收到了SSL证书错误的提示。由于谷歌启用了强制安全传输(HSTS),Chrome和Firefox浏览器禁止用户避开这个提示。


该用户还比较了他在正常连接情况下收到的证书(左)和在遭中间人攻击情况下连接时收到的证书(右)。

 


Google+上的相关报道

https://plus.google.com/u/0/115822850906053020654/posts/EGW4NEd7z3N

https://plus.google.com/+duffJiang/posts/Dk5LrD7CiWM  

用户该怎么做

当你看到证书错误提示时,千万不要将其点开。用户应该使用Firefox或Chrome浏览器,这两个浏览器禁止用户点开启用了强制安全传输的网站(如谷歌和Github)。如果你点开了警告,你的谷歌账户凭据信息可能被盗窃,这意味这你的Gmail邮件可以被攻击者一览无遗。


用户可以通过谷歌的镜像网站来连接谷歌。谷歌在6月份被中国封锁后,Greatfire设立了一个谷歌镜像网站。到目前为止,已有超过100万中国用户使用了我们的“自由谷歌”网站和其他无法在中国被封锁的镜像


本文英文版原发表于GreatFire上,中文版由泡泡网编译首发

 

评论

<a href="http://freewebcamchat.stream/">free adult webcam chat</a> <a href="http://freeadultchat.site/">free adult webcam chat</a> <a href="http://freeadultvideochat.site/">free adult video chat</a> <a href="http://onlinegirls.top/">free online sex</a> <a href="http://videochatroom.stream/">streamates web cam</a> <a href="http://girlchat.site/">girl chat</a> <a href="http://bbwcams.site/">teen cams</a> <a href="http://adultchatroom.gq/">adult chat room</a> <a href="http://nakedcam.fun/">live naked</a> <a href="http://freelivesexchat.fun/">free live sex cams</a>

<a href="https://videochatroom.icu/">video chat room</a> <a href="https://camgirls.ga/">cam mature</a> <a href="https://teencam.ga/">incest chat rooms</a> <a href="https://freeadultchat.tk/">free adult chat</a> <a href="https://myfreewebcam.fun/">my free web cam</a> <a href="https://camsites.fun/">virtualsex</a> <a href="https://freewebcam.gq/">free online porn chat</a> <a href="https://adultsexchat.fun/">adult sex chat</a> <a href="https://amateurwebcam.live/">naughty chat</a> <a href="https://girlcams.site/">adult chat rooms.com</a>

<a href="https://zoloft75.com/">cheap zoloft online</a>

Big Ass Photos - Free Huge Butt Porn, Big Booty Pics
http://lesbiangame.hotblognetwork.com/?kayla

big cock and balls porn downlod porn average penis size in porn mature women sex porn free top 10 best female porn stars

<a href="https://fuerteventuraphoto.com/">propecia</a> <a href="https://facebookaccountverification.co.uk/">lasix water pill</a> <a href="https://blockshock.net/">ampicillin</a> <a href="https://cpec.ca/">ampicillin</a> <a href="https://durapolymer.com/">zithromax online</a> <a href="https://datevietnameses.com/">amitriptyline</a> <a href="https://appfaktory.io/">zanaflex pill</a> <a href="https://fas7nyshokran.com/">allopurinol 300 mg tablets</a> <a href="https://global-oakland.org/">dapoxetine</a> <a href="https://ewjutyloki.website/">cheap fluoxetine</a> <a href="https://hopeintoaction.com/">buy furosemide</a> <a href="https://centralvapeuk.co.uk/">lisinopril no prescription</a> <a href="https://customerservicesupport.co/">buy zyban</a> <a href="https://coachfactoryoutlethandbags.com/">actos</a> <a href="https://bestdoctorsunitedstates.com/">cephalexin</a> <a href="https://armstrongpartners.org/">amoxicillin</a> <a href="https://futureskillspod.com/">cialis 10mg</a> <a href="https://atheist-bookstore.com/">drug levitra</a> <a href="https://active-mind.eu/">generic for celebrex</a> <a href="https://gibsonmartinconsulting.com/">generic indocin</a> <a href="https://lowerbackpain.services/">metformin</a> <a href="https://fletcherfoundation.co.uk/">retin a</a> <a href="https://fsohosting.com/">zanaflex for anxiety</a> <a href="https://frhscollections.com/">tadacip</a> <a href="https://buycruiseinsurance.com/">toprol xl 25mg</a> <a href="https://centroecuestreelasturcon.org/">zithromax</a> <a href="https://seasmokemarine.com/">generic for buspar</a> <a href="https://chrona.net/">indocin</a> <a href="https://com-c.ws/">antibiotics zithromax</a>

<a href="https://freeadultwebcam.fun/">free adult webcam</a> <a href="https://videochatroom.live/">cam girl</a> <a href="https://freewebcamchat.stream/">free adult webcam chat</a> <a href="https://adultchatrooms.tk/">chat rooms without registration</a> <a href="https://girlcams.site/">chat free</a> <a href="https://nakedcam.fun/">naked cams</a> <a href="https://webcamteens.site/">webcam teens</a> <a href="https://hotwebcam.stream/">hot webcam girls</a> <a href="https://slutcams.fun/">hot cams</a> <a href="https://freewebcamgirls.top/">hot webcam girls</a>

<a href="https://prednisolone911.com/">prednisolone</a> <a href="https://tadalafilgeneric20.com/">tadalafil without prescription</a> <a href="https://lisinoprilzestril.com/">buy lisinopril online</a> <a href="https://doxycycline2.com/">doxycycline hydrochloride 100mg</a> <a href="https://buyamoxicillinwithoutprescription.com/">buy amoxicillin no prescription</a> <a href="https://buyrobaxinonline.com/">robaxin 750</a> <a href="https://genericcialis20mg.com/">generic cialis 20mg</a> <a href="https://prednisonegeneric.com/">5mg prednisone</a> <a href="https://amoxicillin911.com/">cost of amoxicillin</a> <a href="https://ventolinhfainhalers.com/">ventolin inhaler</a>

<a href="http://amoxicillin5.com/">amoxicillin 500mg capsules</a> <a href="http://tadalafil365.com/">tadalafil</a> <a href="http://sildenafil75.com/">sildenafil citrate 100mg</a> <a href="http://valtrex1.com/">buy generic valtrex without prescription</a> <a href="http://propecia8.com/">propecia</a>

<a href="https://tadalafil365.com/">tadalafil</a> <a href="https://sildenafil75.com/">female viagra sildenafil</a> <a href="https://lasix911.com/">buy lasix 40 mg</a> <a href="https://motilium5.com/">motilium tablets</a> <a href="https://synthroid75.com/">buy generic synthroid</a>

<a href="https://anewgreenlife.com/">prednisone cost</a> <a href="https://clipkhabar.ir/">cost of tadalafil</a> <a href="https://adespensa.biz/">albuterol</a> <a href="https://cprboise.com/">suhagra</a> <a href="https://bikerbeauty.biz/">toradol</a> <a href="https://funtimezfactory.co.uk/">actos</a> <a href="https://angelasbookbag.com/">flagyl pills</a> <a href="https://co2ceo.org/">viagra soft</a> <a href="https://acvaonline.net/">proscar</a> <a href="https://digitalvessels.com/">dapoxetine buy</a> <a href="https://adly.bz/">lisinopril no prescription</a> <a href="https://furniturehongkong.com/">buy trazodone not generic without a prescription</a> <a href="https://customforever.co.uk/">prednisone</a> <a href="https://executivelimousinecolumbus.com/">lisinopril diuretic</a> <a href="https://dronejedi.net/">clomid</a> <a href="https://relativetales.org/">indocin generic</a> <a href="https://roboeconomic.us/">tadacip online</a> <a href="https://allcornersstcatharines.ca/">buying prednisoline tablets</a> <a href="https://anti-agingcreations.com/">buspirone pill</a> <a href="https://4u2bd.com/">valsartan hydrochlorothiazide</a> <a href="https://freeonboard.net/">synthroid</a> <a href="https://ashantibiz.com/">cost of benicar</a> <a href="https://artesania.shop/">clomid</a> <a href="https://algeriana.net/">xenical</a> <a href="https://allthingstcg.com/">albenza</a> <a href="https://cjwdevelopment.com/">generic celexa</a> <a href="https://metalauthority.org/">nolvadex d</a> <a href="https://asimplestar.com/">cafergot</a> <a href="https://jonnare.com/">cheap levitra 20mg</a> <a href="https://digital50.me/">buspirone 10 mg</a>

<a href="https://sildenafil75.com/">buy sildenafil online</a>

<a href="https://cyphercode.org/">synthroid</a> <a href="https://ctasydney.com/">cleocin</a> <a href="https://al-qmhe.com/">cheap prednisolone</a> <a href="https://audiototext.net/">retin a</a> <a href="https://conquer9.org/">zanaflex 4mg</a> <a href="https://hawaii-rising.org/">sildenafil citrate vs viagra</a> <a href="https://anchorsols.com/">zanaflex generic</a> <a href="https://freeonboard.net/">synthroid pill</a> <a href="https://ja-ili-ja-ko-sam-ja.rs/">dapoxetine</a> <a href="https://furniturehongkong.com/">trazodone buy</a> <a href="https://forthefansbythefans.org/">vermox 100mg</a> <a href="https://clipkhabar.ir/">cost of tadalafil</a> <a href="https://cbdisolate.exchange/">toprol xl</a> <a href="https://greathousematesonly.net/">zoloft</a> <a href="https://kimpos.com/">toprol xl</a> <a href="https://durapolymer.com/">zithromax</a> <a href="https://dodgersvsbrewers.de/">generic for avodart 0.5 mg</a> <a href="https://howtomakefriends.tk/">tadalafil</a> <a href="https://hyipservices.co/">benicar hctz</a> <a href="https://epdtest.net/">5 mg paxil</a> <a href="https://gpsbaoviet.com/">wellbutrin 75mg</a> <a href="https://angelsinactionusa.net/">sildalis online</a> <a href="https://ahomeyoucanbuy.com/">hydrochlorothiazide</a> <a href="https://debt-collectionagency.com/">lisinopril medication</a> <a href="https://colornutri.com/">baclofen</a> <a href="https://future-vets.com/">cafergot tablets</a> <a href="https://cartedevisitevirtuelle.fr/">deltasone 5 mg</a> <a href="https://jadroo.org/">buy azithromycin</a>

I love your blog.. very nice colors & theme. Did you design this website yourself or did you hire someone to do it for you?
Plz reply as I'm looking to design my own blog and would like to know where u got this from.
cheers

Here is my website - bat dong san - https://hadangpr.tk/9790-vi-sao-nen-chon-can-ho-co-tam-view-noi-khu

<a href="https://maturewebcam.fun/">webcam teens</a> <a href="https://adultchatrooms.gq/">adult chat rooms</a> <a href="https://interactivesex.ml/">sex chats</a> <a href="https://adultcams.fun/">adult webcams</a> <a href="https://freesexwebcam.site/">free sex webcam</a> <a href="https://maturecams.icu/">mature webcam</a> <a href="https://freeadultvideochat.site/">free adult video chat</a> <a href="https://freesexwebcam.fun/">free sex webcam</a> <a href="https://freesexcams.ga/">amateur web cam</a> <a href="https://freeadultvideochat.fun/">adult chat rooms.com</a>

<a href="https://motilium5.com/">buy motilium</a> <a href="https://doxycycline1.com/">buy doxycycline 100mg</a> <a href="https://synthroid75.com/">synthroid with no prescription</a> <a href="https://tadalafil365.com/">generic tadalafil 20mg</a> <a href="https://lasix911.com/">where to buy lasix</a>

<a href="http://nakedcam.fun/">webcam girl</a> <a href="http://chatporn.site/">adult chat</a> <a href="http://freelivesexchat.live/">free live sex chat</a> <a href="http://slutcams.icu/">webcam room</a> <a href="http://freesexwebcam.site/">free sex webcam</a>

<a href="https://motilium5.com/">motilium online</a> <a href="https://doxycycline1.com/">doxycycline 100mg online</a> <a href="https://amoxicillin5.com/">amoxicillin prescription</a> <a href="https://tadalafil365.com/">generic cialis tadalafil</a> <a href="https://lasix911.com/">buy lasix online no prescription</a>

<a href="http://videochatroom.stream/">video chat room</a> <a href="http://liveporncams.fun/">live sex cams</a> <a href="http://freesexchatrooms.stream/">free webcam sluts</a> <a href="http://slutcams.stream/">online sex video chat</a> <a href="http://videochatroom.fun/">adult chat room</a> <a href="http://freechatrooms.fun/">free sex chat rooms</a> <a href="http://eroticchat.top/">porn chat</a> <a href="http://freelivesex.gq/">free chat rooms without registration</a> <a href="http://sexchatfree.stream/">free live sex chat</a> <a href="http://camsites.icu/">cam girls</a>

Hot galleries, daily updated collections
http://dirtyplace.instasexyblog.com/?aliyah

pulsating pussy porn red porn web site mature mom granny porn canada porn dvds youngest porn amateur

<a href="https://freesexwebcam.stream/">free sex webcam</a> <a href="https://pornwebcam.site/">adult chat ave</a> <a href="https://hotwebcamgirls.site/">hot webcam</a> <a href="https://webcamamateur.stream/">amateur webcam</a> <a href="https://camtocam.icu/">karen dreams webcam</a>

<a href="https://tadalafil20tab.com/">buy tadalafil 20mg</a> <a href="https://buyrobaxinonline.com/">robaxin</a> <a href="https://lisinoprilzestril.com/">buy lisinopril online</a> <a href="https://zoloft75.com/">zoloft prescription</a> <a href="https://stromectolonline.com/">where to buy stromectol</a> <a href="https://cheapprednisolone.com/">prednisolone</a> <a href="https://celebrex100.com/">celebrex</a> <a href="https://viagrasoftonline.com/">buy viagra soft</a> <a href="https://metformin1000.com/">metformin 1000mg</a> <a href="https://albuterol24.com/">buy albuterol online without prescription</a>

<a href="https://brickbook.org/">cafergot generic</a> <a href="https://azconexbox.com/">dapoxetine</a> <a href="https://bullishoncolombia.online/">lisinopril</a> <a href="https://jd-cooper-logistics.co.uk/">tetracycline 250 mg</a> <a href="https://councilofvedicastrology.net/">baclofen</a> <a href="https://gosales.info/">no prescription flagyl</a> <a href="https://4plumbing.org.uk/">kamagra 100mg</a> <a href="https://artofmeditation.club/">cost of advair</a> <a href="https://eaglesvsgiants.de/">atarax pills</a> <a href="https://aipoweredblockchain.co.uk/">celexa citalopram</a> <a href="https://educator-savjetovanje.hr/">zoloft</a> <a href="https://aimandara.com/">generic for zoloft</a> <a href="https://gameslivefootball.de/">probenecid colchicine combination</a> <a href="https://deporcelana.net/">estrace</a> <a href="https://cukijyrewp.website/">lisinopril hct</a> <a href="https://conifertgerapeuticandsportsmassage.com/">avana</a> <a href="https://counselingsupervisors.com/">robaxin pills</a> <a href="https://creditcardprocessing.online/">elavil 25 mg</a> <a href="https://365flix.net/">cheap lipitor</a> <a href="https://desafiodelelly.com.br/">acyclovir pills</a> <a href="https://digitatsu.com/">colchicine iv</a> <a href="https://diabete-shop.com/">zyban price</a> <a href="https://fnery.org/">albuterol</a> <a href="https://civicrecycling.ca/">generic celebrex</a> <a href="https://sweetvanillakitchen.com/">generic moduretic</a> <a href="https://buyrigrap.com/">vardenafil 20mg tablets</a> <a href="https://cvmantle.com/">hydrochlorothiazide</a> <a href="https://arteclassic.nl/">tadalafil</a>

Big Ass Photos - Free Huge Butt Porn, Big Booty Pics
http://daliy.porn.relayblog.com/?erika

thai porn passes internal affairs porn video husband watches porn 100 freen teen porn free watch you jerk porn

Best Nude Playmates & Centerfolds, Beautiful galleries daily updates
http://musictshirt.bloglag.com/?aubrie

gay son porn younger porn video french knickers porn vids youngest porn model butch dyke porn tube

页面

冒个泡吧!

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。