谷歌在中国教育网遭国家级“中间人攻击”

文/
Anonymous (未验证)


文/Percy Alpha(Greatfire.org)

从2014年8月28日起,有网友在微博和Google+上报告说,当部分大陆网友试图在中国教育网(CERNET)内连接google.com和google.com.hk等网页时,均收到SSL证书错误的提示(SSL证书是用于加密HTTP数据传输的证明)。这意味着谷歌在教育网上受到中间人攻击(MITM attack)。


从今年6月4日开始,谷歌的绝大多数服务在中国遭封锁,但在中国教育科研网内并未受到干扰。在新学期开学之际,谷歌在教育网上遭到中间人攻击。中国网络审查监测组织Greatfire相信,攻击是由中国政府发起的。

在维基百科上,将“中间人攻击”的定义为一种积极的监听:

中间人攻击是指,攻击者与通讯的两端分别建立独立的联系,并交换其所收到的数据,使通讯的两端认为他们正在通过一个私密的连接与对方直接对话,但事实上整个会话都被攻击者完全控制。在中间人攻击中,攻击者可以拦截通讯双方的通话并插入新的内容。

动机

Greatfire相信,当局有足够的动机,对谷歌发动中间人攻击。谷歌于2014年3月12日开始开始对中国以及全球各地的默认搜索启用https加密搜索。换句话说,用户与谷歌之间的信息传输都默认加密。只有终端用户和谷歌服务器知道所搜索并被返回的内容。中国的防火墙只能看到用户连接上了谷歌的服务器,并不知道传输的数据内容。这也意味着,当局无法对谷歌进行逐条封锁,因此只能将谷歌全盘封锁。到目前为止,这种封锁发生在中国的公共互联网上,但还未发生在教育网中。

中国政府深知,如果中国要在科研领域取得进展和创新,中国的科研人员必须能够通过谷歌来连接到大量的信息。也正因为这个原因,中国教育网长期都少受到网络审查的干扰。在教育网内,中国用户深知能使用早已在中国被封锁的视频网站Youtube和社交媒体Google+。与此形成强烈对比的是,在中国的公共网络上,谷歌学术搜索被封,该网站的中文版将用户导流到香港版的站点上,但香港版的谷歌学术搜索也在大陆被封。

在上个月之前,在教育网上连接谷歌几乎并未遭到干扰。但本届政府已展示出其在各个战线上控制互联网与信息的决心。当局并没有在教育网上直接封锁谷歌,因为这很可能招致全国学生、教师以及科研人员的反感。当局选择在教育网内对谷歌发动中间人攻击,这样一来,学生和科研人员能继续使用谷歌,而当局又可以监听并有选择地拦截搜索请求以及结果。

这并非中国当局首次发动中间人攻击。在2013年1月,中国政府曾发动了针对Github的中间人攻击,波及全国。

攻击会再次发生吗?

Greatfire表示,由于加密的网络服务增加,当局很可能会更多地使用中间人攻击。

攻击细节

已有多名用户报告,在教育网内连接谷歌均收到伪造地SSL证书。软件安全公司Netresec曾做过有关GItHub在中国遭中间人攻击地全面分析。Netresec分析了Greatfire发送的以下截图后表示,所有证据表明,中国教育网与谷歌之间地信息交通正在受到中间人攻击。发动中间人攻击地机器很可能在教育网与其他网络地对等连接处发送数据帧。Netresec将在近期内发布全面分析报告。


Greatfire采用网民的以下报告来进行分析。Solidot的这篇报道也引用了同样的报告。


这个截图显示,当用户使用Chrome浏览器连接谷歌时,收到了SSL证书错误的提示。由于谷歌启用了强制安全传输(HSTS),Chrome和Firefox浏览器禁止用户避开这个提示。


该用户还比较了他在正常连接情况下收到的证书(左)和在遭中间人攻击情况下连接时收到的证书(右)。

 


Google+上的相关报道

https://plus.google.com/u/0/115822850906053020654/posts/EGW4NEd7z3N

https://plus.google.com/+duffJiang/posts/Dk5LrD7CiWM  

用户该怎么做

当你看到证书错误提示时,千万不要将其点开。用户应该使用Firefox或Chrome浏览器,这两个浏览器禁止用户点开启用了强制安全传输的网站(如谷歌和Github)。如果你点开了警告,你的谷歌账户凭据信息可能被盗窃,这意味这你的Gmail邮件可以被攻击者一览无遗。


用户可以通过谷歌的镜像网站来连接谷歌。谷歌在6月份被中国封锁后,Greatfire设立了一个谷歌镜像网站。到目前为止,已有超过100万中国用户使用了我们的“自由谷歌”网站和其他无法在中国被封锁的镜像


本文英文版原发表于GreatFire上,中文版由泡泡网编译首发

 

评论

You're so cool! I do not believe I've read through anything like this before.
So wonderful to discover another person with original thoughts on this subject.

Really.. thanks for starting this up. This web site is one thing that is required on the web, someone with a little originality!

my blog post Carlton - http://donovanspja09876.blogzag.com/11843584/all-you-should-be-aware-of-...

<a href="https://slutcams.icu/">amateur webcam</a> <a href="https://freeonlinesex.site/">online sex chat</a> <a href="https://adultchatroom.site/">live sex web sites</a> <a href="https://sexcams.icu/">sex cams</a> <a href="https://camgirls.ga/">live cam girls</a> <a href="https://freechatrooms.site/">chat rooms free</a> <a href="https://adultcams.fun/">online video chat online</a> <a href="https://freelivesexchat.live/">free web cam porn</a> <a href="https://camtocam.site/">cam to cam</a> <a href="https://interactiveporn.ml/">my free porn cam</a>

<a href="https://airreceipt.co.uk/">prednisolone</a> <a href="https://blossombench.com/">buy moduretic</a> <a href="https://almacenelrey.org/">diflucan 150</a> <a href="https://communicationstakato.com/">erythromycin</a> <a href="https://computerscrews.us/">toradol drug</a> <a href="https://lbr.hr/">albuterol ventolin</a> <a href="https://allinthistogether.love/">alli pill</a> <a href="https://4plumbing.org.uk/">kamagra usa</a> <a href="https://avengersinfinitywarfullmovie.de/">online viagra soft</a> <a href="https://iubireadevarata.info/">price of amoxil</a> <a href="https://boisedisastercleanup.com/">zanaflex 6 mg</a> <a href="https://globalmigrants.org/">buy acyclovir cheap</a> <a href="https://ascensionadvisory.com/">metformin</a> <a href="https://altgov2.com/">clonidine sleep</a> <a href="https://vans4ubolton.co.uk/">synthroid 100</a> <a href="https://educationconsultinggroup.net/">diflucan</a> <a href="https://cropsensoradt.website/">order generic viagra online</a> <a href="https://clarinhasaudavel.pt/">advair inhaler</a> <a href="https://bikinifishing.com.au/">plavix</a> <a href="https://aristionfx.academy/">azithromycin pack</a> <a href="https://alissafrench.com/">strattera online</a> <a href="https://americangoatfederation.com/">clonidine</a> <a href="https://diabete-shop.com/">zyban for smoking</a> <a href="https://armadillobulldog.org/">baclofen pills</a> <a href="https://designbyqu.net/">zanaflex</a> <a href="https://climatedisplacement.net/">atenolol</a> <a href="https://lowerbackpain.services/">metformin 500</a> <a href="https://desivibepodcast.com/">cost of lexapro</a>

日本片商合法授權 極道光碟屋 台中AV女優光碟店 日本片商合法授權 – AV女優光碟.名器專賣(未滿18歲禁止)

http://avgood-store.com/

<a href="https://tadalafil365.com/">tadalafil price</a> <a href="https://amoxicillin5.com/">amoxicillin drug</a> <a href="https://synthroid75.com/">synthroid 137mg without prescription</a> <a href="https://lasix911.com/">buy lasix online</a> <a href="https://valtrex1.com/">valtrex rx</a>

<a href="https://chewyhueydoodah.life/">female pink viagra</a> <a href="https://historyebooks.net/">aldactone for acne</a> <a href="https://bhavinagaja.com/">trazodone</a> <a href="https://brandseo.ir/">buy zithromax azithromycin</a> <a href="https://ditaliagiro.de/">cafergot pills</a> <a href="https://consciouspicks.com/">motilium otc</a> <a href="https://cimbclassic.de/">trazodone</a> <a href="https://kimpos.com/">toprol xl 50mg</a> <a href="https://car2rent.ir/">motilium otc</a> <a href="https://icog.org.uk/">vermox mebendazole</a> <a href="https://bethehundredthmonkey.com/">baclofen</a> <a href="https://chicagoindianentrepreneurs.com/">azithromycin</a> <a href="https://al-qmhe.com/">prednisolone 5mg</a> <a href="https://chicagospremieracousticmichaeljacksoncoverduo.com/">toradol price</a> <a href="https://davidle.me/">wellbutrin price</a> <a href="https://auctiontacticsrevealed.com/">benicar</a> <a href="https://drketo.co/">cleocin topical</a> <a href="https://bestshoesforplantarfasciitis.net/">medrol</a> <a href="https://hineline.us/">buy lipitor</a> <a href="https://getdiscount.eu/">nolvadex-d</a> <a href="https://hakopians.nl/">motilium for sale</a> <a href="https://ksupu.ru/">viagra soft</a> <a href="https://computergeak.com/">no prescription cialis</a> <a href="https://sweetvanillakitchen.com/">moduretic online</a> <a href="https://dodgersvsbrewers.de/">online avodart without prescription</a> <a href="https://cetinaltayshow.com/">tadalafil</a> <a href="https://cbuscahombreconhuevos.com/">acyclovir buy</a> <a href="https://bikeaccessorieszone.com/">phenergan price</a> <a href="https://ajaxsystems.fr/">cipro antibiotic where to buy</a> <a href="https://hairtospare.com.au/">estrace 0.01</a>

<a href="http://interactivesex.ga/">interactive sex</a> <a href="http://freeadultchat.cf/">webcams porn</a> <a href="http://slutcams.stream/">slut cams</a> <a href="http://freeadultwebcamchatrooms.site/">free adult webcam chat rooms</a> <a href="http://freesexcams.ga/">free live sex cams</a> <a href="http://freeliveporn.icu/">free live porn</a> <a href="http://adultsexchat.icu/">adult sex chat</a> <a href="http://freecamgirls.site/">free cam girls</a> <a href="http://freeadultwebcam.fun/">free adult webcam</a> <a href="http://pornwebcam.site/">mature webcam tubes</a>

EARN BITCOINS FOR FEE! CLOUD MINING!!
<a href="https://bitplaza.biz/">bitplaza.biz</a>
EARN BITCOINS FOR FEE! CLOUD MINING!!
https://bitplaza.biz/

<a href="https://ayearwithmystory.com/">probenecid colchicine</a> <a href="https://biggins.pro/">tetracycline cost</a> <a href="https://154locucionytextos.com/">vasotec 2.5 mg</a> <a href="https://kupalehawaii-foodsovereignty.org/">lisinopril 20mg</a> <a href="https://bayernmunichvsrealmadridi.de/">tamoxifen citrate nolvadex for sale</a> <a href="https://intimateimages.net/">robaxin 500mg</a> <a href="https://acrobio888.com/">ampicillin</a> <a href="https://fleur2u.net/">lisinopril without an rx</a> <a href="https://judidaduonline.biz/">drug abilify</a> <a href="https://flyingbats.co.uk/">abilify price</a> <a href="https://experienciauthentic.com/">cheap azithromycin</a> <a href="https://gdprwalkthrough.eu/">doxycycline hyclate</a> <a href="https://raffle-my-car.co.uk/">synthroid with no prescription</a> <a href="https://fivelittlemonkeys.org/">albenza generic</a> <a href="https://getpaidforplastic.co.uk/">robaxin</a> <a href="https://gainsboroughreadymix.co.uk/">furosemide on line</a> <a href="https://aimandara.com/">buy sertraline online</a> <a href="https://badads.fr/">arimidex</a> <a href="https://ajaxsystems.fr/">cipro</a> <a href="https://bibleseek.info/">moduretic without prescription</a> <a href="https://recits-libres.com/">cipro ciprofloxacin</a> <a href="https://fusionlets.co.uk/">inhaler albuterol</a> <a href="https://consumerhelpgroup.co.uk/">baclofen</a> <a href="https://kleenshot.com/">plavix</a> <a href="https://myenergyquotes.co.uk/">cost of celebrex</a> <a href="https://open-good.org/">elavil drug</a> <a href="https://global-industry-veterans-elite.net/">buy cheap ampicillin</a> <a href="https://acebathroomsfresno.com/">zoloft 100mg</a> <a href="https://dejourmusic.com/">ventolin</a> <a href="https://adespensa.biz/">albuterol online</a>

<a href="https://clearchoicehemp.com/">neurontin 100mg</a> <a href="https://leafscent.com/">abilify generic</a> <a href="https://gameforvets.org/">plavix</a> <a href="https://americancouncilvedicastrology.org/">valtrex</a> <a href="https://gametrailer.site/">motilium suspension</a> <a href="https://avaanistone.ca/">benicar generic</a> <a href="https://fixmyryde.com/">celexa</a> <a href="https://keppeland.com/">generic advair</a> <a href="https://detoatepentrutoti.info/">bupropion</a> <a href="https://acsus.it/">acutane</a> <a href="https://blocnets.biz/">elimite</a> <a href="https://centria.biz/">cheap viagra soft</a> <a href="https://chronicwellness.com.au/">cialis cost</a> <a href="https://ayoncorporation.com/">order avodart</a> <a href="https://cluesoflife.com/">acyclovir cream</a> <a href="https://clipanduz.com/">indocin online</a> <a href="https://directree.ca/">order lexapro</a> <a href="https://academy-jeuneespoir.org/">buy ampicillin</a> <a href="https://computerpuncher.com/">estrace applicator</a> <a href="https://hempoilfactory.net/">generic actos</a> <a href="https://gallantmedia.org/">atarax for hives</a> <a href="https://artofshifting.com/">pct nolvadex</a> <a href="https://computercomponentsonline.co.uk/">fluoxetine hcl 20 mg</a> <a href="https://com-select.com/">z pack azithromycin</a> <a href="https://everydayresume.com/">penicillin amoxicillin</a> <a href="https://abood.org/">antibiotic zithromax</a> <a href="https://fairlyfashion.com/">zanaflex tablets</a> <a href="https://estevien.clinic/">stromectol buy</a> <a href="https://auctiontacticsrevealed.com/">generic for benicar</a> <a href="https://e-cashcoin.io/">female viagra cheap</a>

<a href="https://adultchatrooms.ml/">chat rooms free</a> <a href="https://freeadultwebcam.fun/">free adult webcam</a> <a href="https://freeadultchat.site/">free adult chat</a> <a href="https://freecamgirls.site/">free cam girls</a> <a href="https://adultchat.fun/">adult video chat</a>

<a href="http://freeadultvideochat.icu/">free interactive porn</a> <a href="http://videochatroom.fun/">hotcam</a> <a href="http://slutcams.fun/">video chat rooms</a> <a href="http://onlinegirls.top/">live girls</a> <a href="http://adultchatroom.icu/">adult chat room</a> <a href="http://freeadultchat.site/">free adult chat</a> <a href="http://adultchatrooms.ml/">chat rooms free</a> <a href="http://freecamgirls.site/">live cam girls</a> <a href="http://bbwcams.site/">bbw cams</a> <a href="http://freesexchatrooms.stream/">free adult chat rooms</a>

<a href="http://prednisonegeneric.com/">buy prednisone without a prescription</a>

<a href="https://cumslabim.online/">zyban for smoking</a> <a href="https://daytimeemmyawards.de/">buy cheap trazodone</a> <a href="https://brokenfish.co.uk/">buy colchicine</a> <a href="https://computercomponentsonline.co.uk/">fluoxetine</a> <a href="https://bullishoncolombia.online/">lisinopril</a> <a href="https://8080job.net/">toradol for migraine</a> <a href="https://lusciousmojo.net/">stromectol</a> <a href="https://doctorhenry.com.au/">cheapest tadalafil</a> <a href="https://ipoeu.cloud/">propranolol</a> <a href="https://craftcbd.org/">generic avana</a> <a href="https://fignet.nl/">buy zyban</a> <a href="https://basementwaterproofingexpertsmi.net/">buy prozac online</a> <a href="https://bigideastartup.net/">oral doxycycline</a> <a href="https://lulyabraira.com/">dapoxetine</a> <a href="https://ajaxsystems.shop/">advair</a> <a href="https://apnizameen.net/">antibiotic amoxicillin</a> <a href="https://cleaningservicesmalta.com/">order baclofen online</a> <a href="https://casinochaching.com/">indocin</a> <a href="https://audiototext.net/">retin a</a> <a href="https://247permits.com/">strattera online</a> <a href="https://calimedcannabis.com/">vibramycin</a> <a href="https://creativefancies.net/">wellbutrin xl 150 mg</a> <a href="https://hineline.us/">lipitor</a> <a href="https://elcunranderodelamor.com/">zyban bupropion</a> <a href="https://funlang.net/">generic flagyl</a> <a href="https://agirpourlenseignement.org/">lisinopril online</a> <a href="https://barbatideal.online/">retin a</a>

[url=https://freelivesex.gq/]free live sex cams[/url]

<a href="https://bundlesofjoi.net/">aldactone</a> <a href="https://howmuchcool.com/">vasotec 2.5 mg</a> <a href="https://benfletcher.ca/">baclofen prescription</a> <a href="https://dlc1-whm.us/">buy antebuse online 250 mg uk</a> <a href="https://marine-inspect.org/">proscar buy</a> <a href="https://brigada925.org/">tadacip 20</a> <a href="https://ebeninsurance.com/">prednisolone</a> <a href="https://gptracing.nl/">colchicine gout</a> <a href="https://dianaperrybooks.com/">motilium</a> <a href="https://empire909.net/">tetracycline for acne</a> <a href="https://cynthiachong.co/">buying clomid</a> <a href="https://benefitsforheroes.org/">tadacip</a> <a href="https://solarnomad.com/">cipro xl</a> <a href="https://alonasphaltcompany.com/">toradol</a> <a href="https://digitalappliancerepair.com/">elimite price</a> <a href="https://lathombees.co.uk/">clonidine er</a> <a href="https://2ndapi.com/">phenergan online</a> <a href="https://homelifecrazy.com/">vardenafil online</a> <a href="https://digitalmathlibrary.net/">amitriptyline buy</a> <a href="https://aflative.ir/">albenza pinworms</a> <a href="https://britenetmedia.com/">generic arimidex</a> <a href="https://accounting4smallbusiness.ca/">toprol xl 200mg</a> <a href="https://consumerhelpgroup.co.uk/">baclofen 10 mg no prescription</a> <a href="https://eatingthegator.com/">amitriptyline 25 mg</a> <a href="https://alexsharapov.com/">wellbutrin</a> <a href="https://cmasoftware.com/">baclofen drug</a> <a href="https://lawntechalliance.com/">alli</a>

EARN BITCOINS FOR FEE! CLOUD MINING!!
<a href="https://bitplaza.biz/">bitplaza.biz</a>
EARN BITCOINS FOR FEE! CLOUD MINING!!
https://bitplaza.biz/

<a href="https://synthroid1.com/">where to buy synthroid online</a>

<a href="https://propecia8.com/">buy generic propecia</a> <a href="https://motilium5.com/">motilium for sale</a> <a href="https://lasix911.com/">buy lasix without prescription</a> <a href="https://synthroid75.com/">synthroid</a> <a href="https://tadalafil365.com/">best price generic tadalafil</a>

Hot galleries, daily updated collections
http://twilightredhead.spanishredhead.xblognetwork.com/?arely

free iphone star wars porn videos barbie cumins in lesbian porn free 18 teen porn v ideo free porn movie webcam free mature italian porn videos

<a href="https://tadalafil365.com/">cialis generic tadalafil</a> <a href="https://valtrex1.com/">online valtrex</a> <a href="https://amoxicillin5.com/">antibiotic amoxicillin</a> <a href="https://lasix911.com/">lasix</a> <a href="https://synthroid75.com/">order synthroid without prescription</a>

<a href="https://zithromax500.com/">cheap zithromax online</a>

<a href="https://lasix911.com/">where to buy lasix</a>

页面

冒个泡吧!

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。