谷歌在中国教育网遭国家级“中间人攻击”

文/
Anonymous (未验证)


文/Percy Alpha(Greatfire.org)

从2014年8月28日起,有网友在微博和Google+上报告说,当部分大陆网友试图在中国教育网(CERNET)内连接google.com和google.com.hk等网页时,均收到SSL证书错误的提示(SSL证书是用于加密HTTP数据传输的证明)。这意味着谷歌在教育网上受到中间人攻击(MITM attack)。


从今年6月4日开始,谷歌的绝大多数服务在中国遭封锁,但在中国教育科研网内并未受到干扰。在新学期开学之际,谷歌在教育网上遭到中间人攻击。中国网络审查监测组织Greatfire相信,攻击是由中国政府发起的。

在维基百科上,将“中间人攻击”的定义为一种积极的监听:

中间人攻击是指,攻击者与通讯的两端分别建立独立的联系,并交换其所收到的数据,使通讯的两端认为他们正在通过一个私密的连接与对方直接对话,但事实上整个会话都被攻击者完全控制。在中间人攻击中,攻击者可以拦截通讯双方的通话并插入新的内容。

动机

Greatfire相信,当局有足够的动机,对谷歌发动中间人攻击。谷歌于2014年3月12日开始开始对中国以及全球各地的默认搜索启用https加密搜索。换句话说,用户与谷歌之间的信息传输都默认加密。只有终端用户和谷歌服务器知道所搜索并被返回的内容。中国的防火墙只能看到用户连接上了谷歌的服务器,并不知道传输的数据内容。这也意味着,当局无法对谷歌进行逐条封锁,因此只能将谷歌全盘封锁。到目前为止,这种封锁发生在中国的公共互联网上,但还未发生在教育网中。

中国政府深知,如果中国要在科研领域取得进展和创新,中国的科研人员必须能够通过谷歌来连接到大量的信息。也正因为这个原因,中国教育网长期都少受到网络审查的干扰。在教育网内,中国用户深知能使用早已在中国被封锁的视频网站Youtube和社交媒体Google+。与此形成强烈对比的是,在中国的公共网络上,谷歌学术搜索被封,该网站的中文版将用户导流到香港版的站点上,但香港版的谷歌学术搜索也在大陆被封。

在上个月之前,在教育网上连接谷歌几乎并未遭到干扰。但本届政府已展示出其在各个战线上控制互联网与信息的决心。当局并没有在教育网上直接封锁谷歌,因为这很可能招致全国学生、教师以及科研人员的反感。当局选择在教育网内对谷歌发动中间人攻击,这样一来,学生和科研人员能继续使用谷歌,而当局又可以监听并有选择地拦截搜索请求以及结果。

这并非中国当局首次发动中间人攻击。在2013年1月,中国政府曾发动了针对Github的中间人攻击,波及全国。

攻击会再次发生吗?

Greatfire表示,由于加密的网络服务增加,当局很可能会更多地使用中间人攻击。

攻击细节

已有多名用户报告,在教育网内连接谷歌均收到伪造地SSL证书。软件安全公司Netresec曾做过有关GItHub在中国遭中间人攻击地全面分析。Netresec分析了Greatfire发送的以下截图后表示,所有证据表明,中国教育网与谷歌之间地信息交通正在受到中间人攻击。发动中间人攻击地机器很可能在教育网与其他网络地对等连接处发送数据帧。Netresec将在近期内发布全面分析报告。


Greatfire采用网民的以下报告来进行分析。Solidot的这篇报道也引用了同样的报告。


这个截图显示,当用户使用Chrome浏览器连接谷歌时,收到了SSL证书错误的提示。由于谷歌启用了强制安全传输(HSTS),Chrome和Firefox浏览器禁止用户避开这个提示。


该用户还比较了他在正常连接情况下收到的证书(左)和在遭中间人攻击情况下连接时收到的证书(右)。

 


Google+上的相关报道

https://plus.google.com/u/0/115822850906053020654/posts/EGW4NEd7z3N

https://plus.google.com/+duffJiang/posts/Dk5LrD7CiWM  

用户该怎么做

当你看到证书错误提示时,千万不要将其点开。用户应该使用Firefox或Chrome浏览器,这两个浏览器禁止用户点开启用了强制安全传输的网站(如谷歌和Github)。如果你点开了警告,你的谷歌账户凭据信息可能被盗窃,这意味这你的Gmail邮件可以被攻击者一览无遗。


用户可以通过谷歌的镜像网站来连接谷歌。谷歌在6月份被中国封锁后,Greatfire设立了一个谷歌镜像网站。到目前为止,已有超过100万中国用户使用了我们的“自由谷歌”网站和其他无法在中国被封锁的镜像


本文英文版原发表于GreatFire上,中文版由泡泡网编译首发

 

评论

<a href="https://zoloft75.com/">buy sertraline online</a>

Free Porn Galleries - Hot Sex Pictures
http://lesbianmakeout.allproblog.com/?jolie

free lesbian scissor porn bob porn free ebony pics porn machine creative porn tube old female porn

Young Heaven - Naked Teens & Young Porn Pictures
http://bbwlesbianclips.lesbiangroup.instakink.com/?alize

imternet porn bbw teen porn clips bunny post porn doggystile porn porn clips young brother and sister

<a href="https://kkmeds.com/">colchicine</a> <a href="https://in4livestream.de/">propranolol online</a> <a href="https://cardiffbluesgloucester.de/">drug synthroid</a> <a href="https://emailnurturing.com/">abilify</a> <a href="https://fallout76market.com/">prednisolone</a> <a href="https://sfeoh.com/">tetracycline orders without a prescription</a> <a href="https://computerscrews.us/">toradol pill</a> <a href="https://bmwanted.nl/">cheap kamagra</a> <a href="https://alzheimershield.org/">prednisolone</a> <a href="https://buyingyourfirsthomestepbystep.ca/">proscar hair loss</a> <a href="https://howmuchcool.com/">vasotec for dogs</a> <a href="https://craftncode.io/">buy motilium</a> <a href="https://buyleadfunnels.com/">buy vardenafil canada</a> <a href="https://dereknovy.com/">toradol back pain</a> <a href="https://africacanmaking.org/">celexa</a> <a href="https://journalofrenalandhepaticdisorders.net/">cheap cafergot</a> <a href="https://a2-vs-wpx-comparison.today/">buy sertraline online</a> <a href="https://cleanupmydata.com/">hydrochlorothiazide</a> <a href="https://digitalappliancerepair.com/">buy elimite</a> <a href="https://agrogrua.com/">prednisone</a> <a href="https://biotrading.ro/">dapoxetine usa</a> <a href="https://bubbyblue.com.au/">by prozac</a> <a href="https://anti-agingcreations.com/">buspirone price</a> <a href="https://micdenaust.com.au/">kamagra pills</a> <a href="https://besmartkids.org/">propranolol</a> <a href="https://developingelectronics.com/">amoxil pill</a> <a href="https://fas7nyshokran.com/">zyloprim allopurinol</a> <a href="https://h3global.org/">plavix</a> <a href="https://britenetmedia.com/">generic arimidex</a> <a href="https://acvastore.org/">vpxl</a>

<a href="https://videochatroom.fun/">video sex chat</a> <a href="https://interactiveporn.gq/">interactive porn</a> <a href="https://livecamgirls.fun/">free sex chat</a> <a href="https://maturewebcam.fun/">adult webcam</a> <a href="https://adultwebcamchat.stream/">adult webcam chat</a> <a href="https://interactiveporn.ml/">free adult webcam chat</a> <a href="https://milfcams.fun/">mature cams</a> <a href="https://pornlive.icu/">live porn</a> <a href="https://webcamteens.fun/">webcam teens</a> <a href="https://freelivesexchat.site/">free live sex cams</a>

<a href="https://freelivesexchat.stream/">free live sex chat</a> <a href="https://freelivesexchat.live/">free live sex chat</a> <a href="https://adultchatroom.ga/">adult chat room</a> <a href="https://girlcam.icu/">free webcam chat</a> <a href="https://onlinegirls.top/">cam girls</a>

<a href="https://freeadultchat.site/">dirty chat</a> <a href="https://adultchatrooms.ml/">chaterbate sex cam</a> <a href="https://slutcams.icu/">naked cams</a> <a href="https://livenaked.top/">free sex chatting</a> <a href="https://freeadultcam.fun/">free adult webcam</a> <a href="https://webcamamateur.site/">amateur cams</a> <a href="https://freewebcamchat.site/">free webcam chat</a> <a href="https://pornlive.icu/">live porn</a> <a href="https://interactiveporn.ga/">webcam porn</a> <a href="https://freeadultchat.tk/">free adult sex chat</a>

<a href="https://callmeforhelp.com/">motilium</a> <a href="https://comtesse-wellness.com/">atenolol no prescription</a> <a href="https://dceaglecam.net/">prozac no prescription</a> <a href="https://custombusinessautomations.com/">baclofen</a> <a href="https://disorderfriends.net/">biaxin</a> <a href="https://ashaforeducation.net/">lipitor 20mg</a> <a href="https://dotdyna.com/">by prozac</a> <a href="https://besafestaysafe.nl/">500mg erythromycin</a> <a href="https://face2facepromotionacademy.com/">neurontin</a> <a href="https://balloonridesinhoustontx.com/">atenolol medication</a> <a href="https://cablisys.net/">where can i buy elimite</a> <a href="https://detoxifii.com/">indocin</a> <a href="https://hairvincent.com/">lasix</a> <a href="https://raffle-my-car.co.uk/">drug synthroid</a> <a href="https://fsohosting.com/">zanaflex for anxiety</a> <a href="https://bookrecycling.org/">buy lexapro cheap</a> <a href="https://iloung.com/">deltasone online</a> <a href="https://biomedicalengineeringcompany.com/">abilify drug</a> <a href="https://ccpalmsprings.info/">citalopram for depression</a> <a href="https://autonomoshop.cl/">generic celexa</a> <a href="https://ipoca.cloud/">buy viagra soft</a> <a href="https://kathylongpianostudio.com/">ampicillin sulbactam</a> <a href="https://case-land.ca/">antibiotics zithromax</a> <a href="https://omegastudiostest.com/">kamagra</a> <a href="https://christianpacheco.com/">seroquel</a> <a href="https://fingersprint.net/">female viagra</a> <a href="https://artstask.com/">how much does ivermectin cost</a> <a href="https://afnane.com/">biaxin 500 mg</a> <a href="https://golovkinvsmartirosyan.de/">bupropion no prescription</a>

<a href="https://demmyblaze.store/">prozac buy online</a> <a href="https://biomedhealthproducts.com/">flagyl</a> <a href="https://casada.us/">erythromycin</a> <a href="https://247permits.com/">generic for strattera</a> <a href="https://algeriana.net/">xenical</a> <a href="https://anthonycolombo.com/">zyban price</a> <a href="https://columbuscouplescounseling.com/">toradol for back pain</a> <a href="https://judionlinecasino.net/">albendazole canada</a> <a href="https://ekahiaoao.net/">doxycycline generic</a> <a href="https://diabete-shop.com/">zyban online</a> <a href="https://gainsboroughreadymix.co.uk/">furosemide tablets</a> <a href="https://doctorhenry.com.au/">cipla tadalafil</a> <a href="https://hairtospare.com.au/">generic for estrace cream</a> <a href="https://collegeofhomebusiness.com/">biaxin uti</a> <a href="https://benfletcher.ca/">baclofen</a> <a href="https://dronesoulet.store/">wellbutrin pills</a> <a href="https://experienceporto.com/">baclofen 10 mg tablets</a> <a href="https://allcornersstcatharines.ca/">prednisolone sod</a> <a href="https://computersforhope.com/">cleocin for acne</a> <a href="https://junkcar.cc/">suhagra online</a> <a href="https://coinloud.io/">nolvadex 10mg</a> <a href="https://ayearwithmypen.com/">proscar buy</a> <a href="https://auctiontacticsrevealed.com/">buy benicar</a> <a href="https://euroasiastartupawards.com/">tretinoin topical</a> <a href="https://amadaco2laserparts.com/">acyclovir</a> <a href="https://getcustomerstoday.co.uk/">atarax</a>

<a href="http://propecia8.com/">finasteride 1 mg</a> <a href="http://amoxicillin5.com/">order amoxicillin online</a> <a href="http://synthroid75.com/">buy synthroid online</a> <a href="http://tadalafil365.com/">tadalafil without prescription</a> <a href="http://lasix911.com/">lasix</a>

<a href="https://born2events.org/">tetracycline</a> <a href="https://jailijakosamja.rs/">arimidex pills</a> <a href="https://beastfightwear.com/">cheap lasix</a> <a href="https://asphalt9.xyz/">wellbutrin price</a> <a href="https://dereknovy.com/">toradol</a> <a href="https://brandschool.io/">finasteride without prescription</a> <a href="https://denniskoop.com/">levitra</a> <a href="https://freyasfury.eu/">cost of allopurinol</a> <a href="https://hoctiengnhatjlpt.com/">toradol online</a> <a href="https://afterglowlounge.net/">aldactone 25</a> <a href="https://finding-truth.info/">prednisone buy online</a> <a href="https://2point0webstudio.com/">tetracycline doxycycline</a> <a href="https://aktivitates.lv/">biaxin</a> <a href="https://latcoin.lv/">vermox 100mg</a> <a href="https://burgess-art-photos.org/">pink viagra for women</a> <a href="https://futureskillspod.com/">no prescription cialis</a> <a href="https://e-comseospecialists.com/">cialis</a> <a href="https://gettingstartedwithecommerce.com/">clonidine for hot flashes</a> <a href="https://doctorhenry.com.au/">best price generic tadalafil</a> <a href="https://agentfindercomo.com/">arimidex for men</a> <a href="https://davidallison.me/">alli pills</a> <a href="https://90daycontentcure.com/">dapoxetine 60mg</a> <a href="https://autoshost.com/">generic elimite</a> <a href="https://beczone.com/">lexapro</a> <a href="https://ayearwithmypen.com/">proscar 5mg</a> <a href="https://1stbravocompany.com/">levitra canadian pharmacy</a> <a href="https://dietitiantravels.com/">zithromax online</a> <a href="https://ayyappansoft.com/">buy ampicillin</a> <a href="https://chipolteclassactionlawsuit.com/">furosemide</a> <a href="https://acceptb.cash/">ventolin albuterol</a>

<a href="https://dateapper.com/">solu medrol</a> <a href="https://beastfightwear.com/">no prescription lasix</a> <a href="https://cardio.services/">purchase female viagra</a> <a href="https://detailedphoto.com/">finasteride propecia</a> <a href="https://demikaiser.org/">estrace applicator</a> <a href="https://al-qmhe.com/">discount prednisolone</a> <a href="https://bluebutterflyproject.org/">advair online pharmacy</a> <a href="https://999listings.realty/">levitra sales</a> <a href="https://gallopintomoda.com/">acyclovir cheap</a> <a href="https://aricrypta.fi/">online cipro</a> <a href="https://contentstrategyframework.com/">amoxicillin</a> <a href="https://ebooknation.net/">generic moduretic</a> <a href="https://communicationstakato.com/">erythromycin</a> <a href="https://fignet.nl/">zyban</a> <a href="https://aluminummagnets.com/">antabuse pills</a> <a href="https://actforamericarva.org/">baclofen</a> <a href="https://apno.me/">cheap nolvadex</a> <a href="https://1magictens.com/">propecia order</a> <a href="https://chronicmasturbators.org/">buy benicar</a> <a href="https://estevienclinic.org/">proscar</a> <a href="https://arizonaairbnbmanagement.com/">kamagra 50mg</a> <a href="https://pastorsamgoodman.com/">nolvadex-d</a> <a href="https://dejourmusic.com/">ventolin drug</a> <a href="https://haltseguranca.com.br/">medrol</a> <a href="https://epastreams.com/">generic for phenergan</a> <a href="https://collegeofhomebusiness.com/">biaxin xl 500</a> <a href="https://fuckyoufriday.org/">buy dapoxetine</a>

<a href="https://friarinvesting.com/">buy zithromax online</a> <a href="https://alexsharapov.com/">wellbutrin no precription</a> <a href="https://arrangement.international/">buy albendazole</a> <a href="https://carpetcleaningpros.com.au/">aldactone 25</a> <a href="https://demmyblaze.store/">prozac with no prescription</a> <a href="https://azconexbox.com/">dapoxetine priligy</a> <a href="https://aplus-it-solutions.com/">clomid men</a> <a href="https://futureofmusic.com.au/">generic propecia no prescription</a> <a href="https://blueskyestateservice.com/">prozac</a> <a href="https://economicsexperiments.com/">toradol</a> <a href="https://binaryoptiontradingsystem.net/">atomoxetine strattera</a> <a href="https://idahopemf.com/">zyban price</a> <a href="https://anonymous.cat/">robaxin</a> <a href="https://bodyweightburn.tv/">allopurinol on line</a> <a href="https://cyphercode.org/">online synthroid</a> <a href="https://ayearwithmypen.com/">proscar drug</a> <a href="https://aprendizajevirtualsesc.com/">tetracycline</a> <a href="https://bradleyparts.com/">tretinoin</a> <a href="https://1stclassrides.com/">lisinopril</a> <a href="https://bizlions.mobi/">cheap sildenafil</a> <a href="https://bestpropertymanagercomo.com/">prozac price</a> <a href="https://artmotorsport.eu/">price of amoxicillin</a> <a href="https://darkart.io/">seroquel xl</a> <a href="https://crequierenhuevos.com/">generic for indocin</a> <a href="https://burjtechnology.co.uk/">valtrex order online</a> <a href="https://fortronsource.eu/">cheap deltasone</a> <a href="https://cryptoayr.com/">albenza generic</a>

<a href="https://webcamteen.fun/">webcam teen</a> <a href="https://slutcams.fun/">best webcams</a> <a href="https://webcamamateur.stream/">amateur webcam sex</a> <a href="https://adultchatrooms.gq/">adult chat rooms</a> <a href="https://adultchatrooms.tk/">free adult chat rooms</a> <a href="https://nudelive.fun/">free adult webcam chat rooms</a> <a href="https://hotwebcam.stream/">camscom</a> <a href="https://webcamamateur.icu/">online adult chat</a> <a href="https://pornlive.icu/">porn live</a> <a href="https://adultcams.site/">virtual sex porn</a>

<a href="https://myrfashion.net/">albuterol</a> <a href="https://fearlessgirlsglobal.org/">colchicine</a> <a href="https://pensionerbondinterest.co.uk/">valtrex</a> <a href="https://daytimeemmyawards.de/">trazodone 50mg</a> <a href="https://lovegoodtoys.co.uk/">zanaflex price</a> <a href="https://drillmec.co/">atarax otc</a> <a href="https://atheist-bookstore.com/">levitra</a> <a href="https://redatomleads.com/">amitriptyline buy</a> <a href="https://andriithemaster.com/">cheap lipitor online</a> <a href="https://colornutri.com/">baclofen prescription</a> <a href="https://bepreparedinstitute.net/">retin</a> <a href="https://0phoenix.com/">levitra pills</a> <a href="https://computerpuncher.com/">estrace 1mg</a> <a href="https://iliazag.com/">order bupropion er 150 mg tablets</a> <a href="https://blueque.link/">is there a generic for estrace cream</a> <a href="https://multilangkids.org/">vibramycin 100mg</a> <a href="https://bhavinagaja.com/">cost of trazodone</a> <a href="https://138gambling.com/">acyclovir 400mg tablets</a> <a href="https://agilealliance.ir/">cheap alli pills</a> <a href="https://rethinkopioids.org/">anti buse pills</a> <a href="https://shippist.us/">neurontin pfizer</a> <a href="https://arstitches.boutique/">motilium</a> <a href="https://arizonathriftstop.com/">trazodone 50mg</a> <a href="https://bloatedwombat.com/">clonidine</a> <a href="https://mycoastalrower.com/">motilium domperidone</a> <a href="https://givegetter.net/">prednisolone drug</a> <a href="https://beachlifeentrepreneurs.com/">celebrex</a> <a href="https://casacompanies.org/">stromectol buy</a> <a href="https://getinstagram.com/">diflucan price</a>

Клининг, что это такое, химия для клининга, ПАВы и их назначение. <a href=http://clining.matrixboard.ru>clining.matrixboard.ru</a>

Что такое детергенты, химия для мойки и уборки. Применение детергентов. <a href=http://detergent.matrixboard.ru>detergent.matrixboard.ru</a>

<a href="https://biesa.org/">acyclovir</a> <a href="https://evlux.us/">estrace pill</a> <a href="https://egomaniacalprig.org/">metformin</a> <a href="https://cashnavi.cc/">aldactone 25</a> <a href="https://computercomponentsonline.co.uk/">fluoxetine</a> <a href="https://martynrealestate.com/">buy clomid</a> <a href="https://artenivo.eu/">retin-a micro</a> <a href="https://brokenfish.co.uk/">colchicine cost</a> <a href="https://gosales.info/">flagyl 250mg</a> <a href="https://barbatadevarat.online/">metformin</a> <a href="https://ravintoaine.fi/">clonidine for autism</a> <a href="https://beprepared.institute/">zanaflex migraine</a> <a href="https://cottagesittersask.ca/">atarax</a> <a href="https://bc-1000.cl/">estrace pills for ivf</a> <a href="https://acsus.it/">buy roaccutane</a> <a href="https://changeyourstory.info/">order antabuse no prescription</a> <a href="https://booktalent.net/">baclofen lioresal</a> <a href="https://edesixtest.com/">estrace pills</a> <a href="https://cs4ar.org/">atenolol online</a> <a href="https://cpec.ca/">ampicillin price</a> <a href="https://bookashowact.com/">viagra soft online</a> <a href="https://appsrev.info/">cheap prevacid online</a> <a href="https://angelasbookbag.com/">flagyl online</a> <a href="https://drewsdrumtracks.net/">generic sildalis</a> <a href="https://chiropractie-voorschoten.com/">hydrochlorothiazide cost</a> <a href="https://lopezcafe.com/">generic avana</a> <a href="https://americancouncilofvedicastrology.net/">order deltasone</a>

>喜多福食品,乾拌麵,拌麵,乾麵,呷什麵,關廟麵,手工麵,手作麵 https://www.sidofu.net/

後宮情色線上影音網 - 中文有碼 中文無碼 番號搜索

http://50-video.com/

XYZ|國中基測|基測|基測歷屆試題|命題光碟|基測中心|基測試題滿1000送200

http://xyz.net.tw/

<a href="http://freelivesex.gq/">free live cam</a> <a href="http://sexcams.stream/">hot cams</a> <a href="http://milfcams.fun/">adult cams</a> <a href="http://freewebcams.ga/">free webcams</a> <a href="http://slutcams.icu/">slut cams</a>

页面

冒个泡吧!

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。