谷歌在中国教育网遭国家级“中间人攻击”

文/
Anonymous (未验证)


文/Percy Alpha(Greatfire.org)

从2014年8月28日起,有网友在微博和Google+上报告说,当部分大陆网友试图在中国教育网(CERNET)内连接google.com和google.com.hk等网页时,均收到SSL证书错误的提示(SSL证书是用于加密HTTP数据传输的证明)。这意味着谷歌在教育网上受到中间人攻击(MITM attack)。


从今年6月4日开始,谷歌的绝大多数服务在中国遭封锁,但在中国教育科研网内并未受到干扰。在新学期开学之际,谷歌在教育网上遭到中间人攻击。中国网络审查监测组织Greatfire相信,攻击是由中国政府发起的。

在维基百科上,将“中间人攻击”的定义为一种积极的监听:

中间人攻击是指,攻击者与通讯的两端分别建立独立的联系,并交换其所收到的数据,使通讯的两端认为他们正在通过一个私密的连接与对方直接对话,但事实上整个会话都被攻击者完全控制。在中间人攻击中,攻击者可以拦截通讯双方的通话并插入新的内容。

动机

Greatfire相信,当局有足够的动机,对谷歌发动中间人攻击。谷歌于2014年3月12日开始开始对中国以及全球各地的默认搜索启用https加密搜索。换句话说,用户与谷歌之间的信息传输都默认加密。只有终端用户和谷歌服务器知道所搜索并被返回的内容。中国的防火墙只能看到用户连接上了谷歌的服务器,并不知道传输的数据内容。这也意味着,当局无法对谷歌进行逐条封锁,因此只能将谷歌全盘封锁。到目前为止,这种封锁发生在中国的公共互联网上,但还未发生在教育网中。

中国政府深知,如果中国要在科研领域取得进展和创新,中国的科研人员必须能够通过谷歌来连接到大量的信息。也正因为这个原因,中国教育网长期都少受到网络审查的干扰。在教育网内,中国用户深知能使用早已在中国被封锁的视频网站Youtube和社交媒体Google+。与此形成强烈对比的是,在中国的公共网络上,谷歌学术搜索被封,该网站的中文版将用户导流到香港版的站点上,但香港版的谷歌学术搜索也在大陆被封。

在上个月之前,在教育网上连接谷歌几乎并未遭到干扰。但本届政府已展示出其在各个战线上控制互联网与信息的决心。当局并没有在教育网上直接封锁谷歌,因为这很可能招致全国学生、教师以及科研人员的反感。当局选择在教育网内对谷歌发动中间人攻击,这样一来,学生和科研人员能继续使用谷歌,而当局又可以监听并有选择地拦截搜索请求以及结果。

这并非中国当局首次发动中间人攻击。在2013年1月,中国政府曾发动了针对Github的中间人攻击,波及全国。

攻击会再次发生吗?

Greatfire表示,由于加密的网络服务增加,当局很可能会更多地使用中间人攻击。

攻击细节

已有多名用户报告,在教育网内连接谷歌均收到伪造地SSL证书。软件安全公司Netresec曾做过有关GItHub在中国遭中间人攻击地全面分析。Netresec分析了Greatfire发送的以下截图后表示,所有证据表明,中国教育网与谷歌之间地信息交通正在受到中间人攻击。发动中间人攻击地机器很可能在教育网与其他网络地对等连接处发送数据帧。Netresec将在近期内发布全面分析报告。


Greatfire采用网民的以下报告来进行分析。Solidot的这篇报道也引用了同样的报告。


这个截图显示,当用户使用Chrome浏览器连接谷歌时,收到了SSL证书错误的提示。由于谷歌启用了强制安全传输(HSTS),Chrome和Firefox浏览器禁止用户避开这个提示。


该用户还比较了他在正常连接情况下收到的证书(左)和在遭中间人攻击情况下连接时收到的证书(右)。

 


Google+上的相关报道

https://plus.google.com/u/0/115822850906053020654/posts/EGW4NEd7z3N

https://plus.google.com/+duffJiang/posts/Dk5LrD7CiWM  

用户该怎么做

当你看到证书错误提示时,千万不要将其点开。用户应该使用Firefox或Chrome浏览器,这两个浏览器禁止用户点开启用了强制安全传输的网站(如谷歌和Github)。如果你点开了警告,你的谷歌账户凭据信息可能被盗窃,这意味这你的Gmail邮件可以被攻击者一览无遗。


用户可以通过谷歌的镜像网站来连接谷歌。谷歌在6月份被中国封锁后,Greatfire设立了一个谷歌镜像网站。到目前为止,已有超过100万中国用户使用了我们的“自由谷歌”网站和其他无法在中国被封锁的镜像


本文英文版原发表于GreatFire上,中文版由泡泡网编译首发

 

评论

<a href="https://pornwebcam.site/">porn webcam</a> <a href="https://girlcams.stream/">live adult cam</a> <a href="https://adultchatrooms.ml/">sex chat rooms</a> <a href="https://freesexwebcam.icu/">free sex webcam</a> <a href="https://videochatroom.icu/">adult video chat</a> <a href="https://hotwebcam.stream/">hot webcam girls</a> <a href="https://teencam.ga/">teen webcam</a> <a href="https://nakedcam.fun/">naked cam</a> <a href="https://freewebcams.ga/">nude webcams</a> <a href="https://camsites.fun/">cam sites</a>

<a href="https://vans4ubolton.co.uk/">synthroid cost</a> <a href="https://redatomleads.com/">25 mg amitriptyline</a> <a href="https://dronejedi.net/">clomid drug</a> <a href="https://agentfindersouthperth.com/">where can i where to buy cafergot for migraines</a> <a href="https://alexanderduval.com/">medrol 4 mg</a> <a href="https://desafiodelelly.com.br/">acyclovir cream over the counter</a> <a href="https://americantruthbomb.com/">atenolol no prescription</a> <a href="https://feelekituwe.website/">levitra</a> <a href="https://bellavelella.com/">abilify cost</a> <a href="https://gadgetgirls.ca/">zithromax 250mg</a> <a href="https://5starcareer.co.uk/">albendazole cost</a> <a href="https://10roofing.com/">amitriptyline 10mg</a> <a href="https://chantael-pure-beauty.online/">diflucan order</a> <a href="https://belfryteahousetheater.com/">doxycycline buy</a> <a href="https://goldenknightsvssharks.de/">tadalafil</a> <a href="https://dronesoulet.store/">wellbutrin xr</a> <a href="https://fallout76marketplace.com/">dapoxetine approval</a> <a href="https://deporcelana.net/">estrace cream</a> <a href="https://guidingspirits.net/">buy zithromax</a> <a href="https://applewell.xyz/">fluoxetine</a> <a href="https://hwy22storage.com/">zithromax</a> <a href="https://depaolis.biz/">cafergot</a> <a href="https://email-support-usa.online/">trazodone</a> <a href="https://iloung.com/">deltasone online</a> <a href="https://cs4ar.org/">atenolol metoprolol</a> <a href="https://copytalkie.com/">diflucan 150 mg</a> <a href="https://filosofing.com/">cipralex from india</a> <a href="https://daytimeemmyawards.de/">buy trazodone online</a> <a href="https://diabete-shop.com/">zyban price</a> <a href="https://consumerasylum.org/">viagra soft buy</a>

<a href="https://amateurwebcam.live/">amateur webcam</a> <a href="https://slutcams.fun/">slut cams</a> <a href="https://freeadultchat.cf/">adult chat</a> <a href="https://webcamamateur.fun/">webcam amateur</a> <a href="https://interactiveporn.ml/">interactive porn</a> <a href="https://nudelive.fun/">gay web cam chat</a> <a href="https://adultchatrooms.ml/">porn live cams</a> <a href="https://livecamgirls.fun/">free adult chatrooms</a> <a href="https://onlinegirls.top/">online girls</a> <a href="https://freeadultsexchat.fun/">free adult chat</a>

<a href="https://buildworthpropertymanagement.com/">valtrex</a> <a href="https://atiku.site/">paxil bipolar</a> <a href="https://computerpuncher.com/">estrace pills</a> <a href="https://drbyrne.co.uk/">benicar generic</a> <a href="https://excitingdrone.com/">lisinopril</a> <a href="https://governmentcontracting101podcast.com/">metformin generic</a> <a href="https://geographyofjoy.com/">plavix generic</a> <a href="https://fuerteventuraphoto.com/">propecia</a> <a href="https://dailytickers.life/">priligy dapoxetine</a> <a href="https://benfletcher.ca/">baclofen drug</a> <a href="https://alphabioticsboston.net/">generic for zithromax</a> <a href="https://cakeshop.biz/">moduretic</a> <a href="https://file-ssn.com/">amoxicillin 500 mg capsules</a> <a href="https://scottcuellar.com/">vpxl</a> <a href="https://escuelasa-z.com/">celexa com</a> <a href="https://becometrustedexpert.com/">valtrex prescription</a> <a href="https://bookrecycling.org/">lexapro wellbutrin</a> <a href="https://expeditedbookkeeping.com/">moduretic without prescription</a> <a href="https://chocolatepatty.com/">generic cafergot</a> <a href="https://devbootcamps.com/">valtrex cream</a> <a href="https://makani.sa/">drug diclofenac</a> <a href="https://blowertec.com/">synthroid prices</a> <a href="https://edienu-piegade.lv/">amoxil</a> <a href="https://agir-pour-l-enseignement.org/">avodard</a> <a href="https://barbaraelliottcarpenter.com/">neurontin</a> <a href="https://icehockeyworld.de/">biaxin</a> <a href="https://blockshock.net/">purchase ampicillin</a> <a href="https://lathombees.co.uk/">clonidine er</a> <a href="https://gamebetter.net/">cephalexin 250mg</a> <a href="https://bestshoesforplantarfasciitis.net/">buy medrol</a>

<a href="https://cottagesittersask.ca/">atarax for anxiety</a> <a href="https://giayattom.net/">atarax eq</a> <a href="https://levana.com.au/">diclofenac 75mg dr tab</a> <a href="https://ravintoaine.fi/">clonidine for autism</a> <a href="https://asherdiamant.space/">phenergan</a> <a href="https://afterglowlounge.net/">aldactone diuretic</a> <a href="https://aricrypta.fi/">cipro 500 mg</a> <a href="https://90daycontentcure.com/">dapoxetine 60mg</a> <a href="https://consumerhelpgroup.co.uk/">baclofen pill</a> <a href="https://eurostyle.ir/">ordering diflucan without a prescription</a> <a href="https://90daybrandcure.com/">drug propranolol</a> <a href="https://aurorachasernorth.com/">bupropion xl</a> <a href="https://fuziofit.com/">order synthroid</a> <a href="https://anxietysociety.org.uk/">generic phenergan</a> <a href="https://mediamarketing.ie/">amoxil 500</a> <a href="https://chrona.net/">indocin</a> <a href="https://comosuabeleza.com.br/">seroquel</a> <a href="https://americancouncilvedicastrology.org/">valtrex medicine</a> <a href="https://detoxifii.com/">indocin</a> <a href="https://agapepartners.net/">proscar bph</a> <a href="https://alexandrumischie.info/">how much is propecia</a> <a href="https://carpetcleaningpros.com.au/">aldactone</a> <a href="https://beastperformance.co.uk/">cost of advair</a> <a href="https://lamesadelaabuela.com/">flagyl</a> <a href="https://comatec.sa/">fluoxetine</a> <a href="https://bravegirlsnet.info/">albenza pinworms</a> <a href="https://aws-assen.nl/">buy motilium</a> <a href="https://alberta-davidson.com/">candida diflucan</a>

<a href="https://bhumiorganics.org/">zoloft cost</a> <a href="https://lawntechalliance.com/">alli online</a> <a href="https://lovegoodtoys.co.uk/">zanaflex for headaches</a> <a href="https://amovu.com/">abilify medicine</a> <a href="https://biggins.pro/">online tetracycline</a> <a href="https://gazetabesimi.site/">dapoxetine</a> <a href="https://gazeta-lajme.info/">vpxl</a> <a href="https://bcpwd.com/">propranolol over the counter</a> <a href="https://crescentcortland.com/">buy ventolin inhaler without prescription</a> <a href="https://realmrpg.com/">prednisone corticosteroids</a> <a href="https://giayattom.net/">atarax for sleep</a> <a href="https://commonbrands.com/">order deltasone</a> <a href="https://daonlinespot.com/">indocin sr 75 mg</a> <a href="https://becometrustedexpert.com/">valtrex</a> <a href="https://basementwaterproofingexperts.net/">benicar online</a> <a href="https://ally-marketing.net/">where to buy erythromycin</a> <a href="https://babyalarm.dk/">ventolin inhalers</a> <a href="https://agentfindercomo.com/">arimidex for men</a> <a href="https://acvastore.org/">vpxl</a> <a href="https://experienceporto.com/">baclofen</a> <a href="https://autoscout.ir/">lisinopril</a> <a href="https://genderagency.org/">by prozac</a> <a href="https://applerepairman.com/">clomid</a> <a href="https://hhflourish.org/">propecia no prescription bonus 98212</a> <a href="https://catumh.site/">zyban advantage pack</a> <a href="https://crxsunny.net/">tadacip cipla</a> <a href="https://demsfornjld25.net/">zanaflex 4mg</a> <a href="https://menimal.design/">benicar</a> <a href="https://armedliving.com/">buy vpxl</a> <a href="https://creditcardprocessing.club/">drug flagyl</a>

Sexy pictures each day
http://patchjumper.buywhiteshirts.allproblog.com/?alma

states 21 to watch porn retired porn queens gay porn dvd order online black gay porn freee dadys girl free porn clips

<a href="https://adultchatrooms.tk/">free adult chat rooms</a> <a href="https://camdolls.top/">teen cam</a> <a href="https://camsites.fun/">bbw cam</a> <a href="https://hotwebcamgirls.icu/">chaturbate female cams</a> <a href="https://eroticchat.top/">chat porn</a>

<a href="https://maturewebcam.icu/">teen cams</a> <a href="https://freelivesex.site/">free live cam</a> <a href="https://freewebcamchat.fun/">free webcam chat</a> <a href="https://freeadultcam.fun/">free adult chat</a> <a href="https://girlcams.stream/">girl cams</a> <a href="https://chatporn.site/">adult chat</a> <a href="https://freesexcams.ga/">free sex cams</a> <a href="https://freewebcam.gq/">free web cam</a> <a href="https://hotwebcamgirls.icu/">cams com</a> <a href="https://freelivesexchat.stream/">free live sex chat</a>

<a href="http://chatporn.site/">chat video</a> <a href="http://webcamteens.stream/">webcam teens</a> <a href="http://camdolls.top/">cam dolls</a> <a href="http://freeliveporn.fun/">free live porn</a> <a href="http://adultwebcams.icu/">amateur girls masturbating</a>

<a href="http://acyclovir1.com/">acyclovir</a> <a href="http://synthroid1.com/">buy synthroid online</a> <a href="http://stromectolonline.com/">ivermectin for sale</a> <a href="http://prednisone911.com/">prednisone 10 mg tablets</a> <a href="http://prednisolone911.com/">buying prednisolone online</a>

Teen Girls Pussy Pics. Hot galleries
http://porn.put.allproblog.com/?taniya

tiney girl porn pics flash porn games under development one guy two girls porn real tentacle porn free 3gp porn

<a href="https://maturecams.icu/">teen cams</a> <a href="https://freechatrooms.site/">free chat rooms</a> <a href="https://camsites.icu/">free sex chats</a> <a href="https://freewebcamchat.fun/">free sex videos for adults</a> <a href="https://interactiveporn.gq/">cam porn</a> <a href="https://videochatroom.live/">video chat room</a> <a href="https://webcamteen.fun/">teen webcam</a> <a href="https://camsex.cf/">web cam sex</a> <a href="https://freeliveporn.icu/">free live porn</a> <a href="https://freeadultsexchat.fun/">free adult sex chat</a>

<a href="https://allthingstcg.com/">albenza</a> <a href="https://hhardy.net/">dapoxetine 60mg</a> <a href="https://greatestroyalrumble.de/">baclofen</a> <a href="https://acts29.co.uk/">toradol for headache</a> <a href="https://flowers-armenia.shop/">clomid</a> <a href="https://fabianmediamarketing.com/">female viagra</a> <a href="https://educator-savjetovanje.hr/">zoloft</a> <a href="https://chewyhueydoodah.life/">pink viagra for women</a> <a href="https://cottagesittersask.ca/">atarax cream</a> <a href="https://frenchcottagesgold.com/">antabuse pill</a> <a href="https://financialmarketsandinformationtechnology.eu/">cealis from canada</a> <a href="https://dscrmtest.com/">doxycycline</a> <a href="https://imrdp.com/">cost of amoxil</a> <a href="https://aervault.com/">viagra soft</a> <a href="https://ctpacademy.net/">strattera</a> <a href="https://displacement.info/">anti buse pills</a> <a href="https://cindylusestatesales.net/">celexa generic</a> <a href="https://amerpp.info/">buy deltasone</a> <a href="https://dastina.com.br/">where can i buy nolvadex</a> <a href="https://dreams2launch.com/">benicar online</a> <a href="https://brigada925.org/">tadacip</a> <a href="https://chipolteclassactionlawsuit.com/">furosemide 40</a> <a href="https://digitatsu.com/">colchicine tablets</a> <a href="https://barciadental.com/">levitra</a> <a href="https://pdxmobilemusic.com/">price of benicar</a> <a href="https://aodconsultores.com/">deltasone 10 mg</a> <a href="https://highlifemagazine.co/">citalopram escitalopram</a> <a href="https://a2-vs-wpx-comparison.today/">zoloft</a> <a href="https://anchorsols.com/">buy zanaflex</a>

купить оригинальные товары

<a href=http://vygodnoipolezno.ru/shhetochka_dlja_chistki_lica_Pobling>оригинал корейская щеточка Pobling</a>

<a href="https://carttags.com/">toradol</a> <a href="https://ctpacademy.net/">cost of strattera</a> <a href="https://hosts4.cloud/">cheap xenical uk</a> <a href="https://enterplus.org/">amitriptyline 10mg</a> <a href="https://casinochaching.com/">indocin generic</a> <a href="https://cornellcompanies.net/">cialis soft</a> <a href="https://convergence.tv/">cleocin hcl 300 mg</a> <a href="https://01diamonds.com/">retin a</a> <a href="https://90daybrandcure.com/">propranolol</a> <a href="https://airreceipt.co.uk/">prednisolone 40mg</a> <a href="https://almustaphagirlscouts.org/">lexapro price</a> <a href="https://actiondominica.com/">order azithromycin</a> <a href="https://armanestan.info/">cipro</a> <a href="https://alze.us/">cleocin</a> <a href="https://jjmelbourne.com.au/">arimidex</a> <a href="https://girlsqatar.com/">antabuse</a> <a href="https://pensionerbondinterest.co.uk/">valtrex no perscrition</a> <a href="https://latcoin.lv/">vermox</a> <a href="https://eliminateinjuries.com/">propranolol 40</a> <a href="https://bcpwd.com/">inderal propranolol</a> <a href="https://haveacookie.org/">valtrex</a> <a href="https://applerepairman.com/">clomiphene clomid</a> <a href="https://auctionunited.co.za/">lexapro price</a> <a href="https://iloveoldphotos.com/">abilify generic</a> <a href="https://kirstyandoliver.co.uk/">zoloft</a> <a href="https://artstask.com/">stromectol</a> <a href="https://ariel.pet/">amitriptyline</a> <a href="https://cityjitsu.org.uk/">diflucan</a> <a href="https://biosdynamic.com/">erythromycin</a>

<a href="http://adultcams.ga/">adult cams</a> <a href="http://videochatroom.site/">older woman sex</a> <a href="http://camsites.stream/">cam sites</a> <a href="http://girlcam.icu/">girl cam</a> <a href="http://adultcams.site/">free video chat face to face</a> <a href="http://liveporncams.live/">live porn cams</a> <a href="http://interactiveporn.tk/">free interactive porn</a> <a href="http://adultwebcamchat.top/">free adult webcam chat</a> <a href="http://sextalk.site/">webcam sex</a> <a href="http://adultsexchat.fun/">one on one chat rooms</a>

页面

冒个泡吧!

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。