谷歌在中国教育网遭国家级“中间人攻击”

文/
Anonymous (未验证)


文/Percy Alpha(Greatfire.org)

从2014年8月28日起,有网友在微博和Google+上报告说,当部分大陆网友试图在中国教育网(CERNET)内连接google.com和google.com.hk等网页时,均收到SSL证书错误的提示(SSL证书是用于加密HTTP数据传输的证明)。这意味着谷歌在教育网上受到中间人攻击(MITM attack)。


从今年6月4日开始,谷歌的绝大多数服务在中国遭封锁,但在中国教育科研网内并未受到干扰。在新学期开学之际,谷歌在教育网上遭到中间人攻击。中国网络审查监测组织Greatfire相信,攻击是由中国政府发起的。

在维基百科上,将“中间人攻击”的定义为一种积极的监听:

中间人攻击是指,攻击者与通讯的两端分别建立独立的联系,并交换其所收到的数据,使通讯的两端认为他们正在通过一个私密的连接与对方直接对话,但事实上整个会话都被攻击者完全控制。在中间人攻击中,攻击者可以拦截通讯双方的通话并插入新的内容。

动机

Greatfire相信,当局有足够的动机,对谷歌发动中间人攻击。谷歌于2014年3月12日开始开始对中国以及全球各地的默认搜索启用https加密搜索。换句话说,用户与谷歌之间的信息传输都默认加密。只有终端用户和谷歌服务器知道所搜索并被返回的内容。中国的防火墙只能看到用户连接上了谷歌的服务器,并不知道传输的数据内容。这也意味着,当局无法对谷歌进行逐条封锁,因此只能将谷歌全盘封锁。到目前为止,这种封锁发生在中国的公共互联网上,但还未发生在教育网中。

中国政府深知,如果中国要在科研领域取得进展和创新,中国的科研人员必须能够通过谷歌来连接到大量的信息。也正因为这个原因,中国教育网长期都少受到网络审查的干扰。在教育网内,中国用户深知能使用早已在中国被封锁的视频网站Youtube和社交媒体Google+。与此形成强烈对比的是,在中国的公共网络上,谷歌学术搜索被封,该网站的中文版将用户导流到香港版的站点上,但香港版的谷歌学术搜索也在大陆被封。

在上个月之前,在教育网上连接谷歌几乎并未遭到干扰。但本届政府已展示出其在各个战线上控制互联网与信息的决心。当局并没有在教育网上直接封锁谷歌,因为这很可能招致全国学生、教师以及科研人员的反感。当局选择在教育网内对谷歌发动中间人攻击,这样一来,学生和科研人员能继续使用谷歌,而当局又可以监听并有选择地拦截搜索请求以及结果。

这并非中国当局首次发动中间人攻击。在2013年1月,中国政府曾发动了针对Github的中间人攻击,波及全国。

攻击会再次发生吗?

Greatfire表示,由于加密的网络服务增加,当局很可能会更多地使用中间人攻击。

攻击细节

已有多名用户报告,在教育网内连接谷歌均收到伪造地SSL证书。软件安全公司Netresec曾做过有关GItHub在中国遭中间人攻击地全面分析。Netresec分析了Greatfire发送的以下截图后表示,所有证据表明,中国教育网与谷歌之间地信息交通正在受到中间人攻击。发动中间人攻击地机器很可能在教育网与其他网络地对等连接处发送数据帧。Netresec将在近期内发布全面分析报告。


Greatfire采用网民的以下报告来进行分析。Solidot的这篇报道也引用了同样的报告。


这个截图显示,当用户使用Chrome浏览器连接谷歌时,收到了SSL证书错误的提示。由于谷歌启用了强制安全传输(HSTS),Chrome和Firefox浏览器禁止用户避开这个提示。


该用户还比较了他在正常连接情况下收到的证书(左)和在遭中间人攻击情况下连接时收到的证书(右)。

 


Google+上的相关报道

https://plus.google.com/u/0/115822850906053020654/posts/EGW4NEd7z3N

https://plus.google.com/+duffJiang/posts/Dk5LrD7CiWM  

用户该怎么做

当你看到证书错误提示时,千万不要将其点开。用户应该使用Firefox或Chrome浏览器,这两个浏览器禁止用户点开启用了强制安全传输的网站(如谷歌和Github)。如果你点开了警告,你的谷歌账户凭据信息可能被盗窃,这意味这你的Gmail邮件可以被攻击者一览无遗。


用户可以通过谷歌的镜像网站来连接谷歌。谷歌在6月份被中国封锁后,Greatfire设立了一个谷歌镜像网站。到目前为止,已有超过100万中国用户使用了我们的“自由谷歌”网站和其他无法在中国被封锁的镜像


本文英文版原发表于GreatFire上,中文版由泡泡网编译首发

 

评论

<a href="http://adultchatroom.icu/">free adult chat room</a> <a href="http://interactivesex.ga/">interactive porn</a> <a href="http://camsites.icu/">cam sites</a> <a href="http://freeadultcam.icu/">free adult cam</a> <a href="http://freeadultwebcamchatrooms.site/">webcam with girls</a> <a href="http://freewebcams.ml/">free webcams</a> <a href="http://adultchatroom.site/">adult chat room</a> <a href="http://camsites.site/">cam sites</a> <a href="http://chatporn.site/">adult chat</a> <a href="http://freechatrooms.fun/">webcam chat rooms</a>

<a href="https://femaleviagra5.com/">female pink viagra</a> <a href="https://buyrobaxinonline.com/">buy robaxin online</a> <a href="https://cialis3.com/">buy cialis from canada</a> <a href="https://prednisolone911.com/">prednisolone</a> <a href="https://tadalafilgeneric20.com/">buy tadalafil 20mg</a>

<a href="https://amoxicillin5.com/">amoxicillin over the counter</a> <a href="https://sildenafil75.com/">sildenafil tablets</a> <a href="https://doxycycline1.com/">doxycycline 100mg tablets no prescription</a> <a href="https://propecia8.com/">finasteride hair</a> <a href="https://motilium5.com/">motilium domperidone 10mg</a>

<a href="https://armedliving.com/">vpxl online</a> <a href="https://247permits.com/">cost of strattera</a> <a href="https://chronicwellness.com.au/">cealis</a> <a href="https://badads.fr/">arimidex</a> <a href="https://3levelup.com/">atarax</a> <a href="https://frenchcottagesgold.com/">antabuse</a> <a href="https://bedspacechairsofas.com/">biaxin xl</a> <a href="https://edesixtest.com/">estrace pills</a> <a href="https://davidrdickinson.com/">vermox online</a> <a href="https://ahomeucanbuy.com/">antabuse to buy</a> <a href="https://dogfishpetphotography.ca/">furosemide pills</a> <a href="https://aprilnites.co.uk/">avana</a> <a href="https://booktalent.net/">baclofen</a> <a href="https://automagically.club/">buy levitra 20mg</a> <a href="https://kushnationmagazine.com/">fluoxetine price</a> <a href="https://calimedcannabis.com/">doxycycline</a> <a href="https://azconexbox.com/">dapoxetine for sale</a> <a href="https://bizhomebiz.com/">clomid</a> <a href="https://conspiracycavern.net/">toprol xl</a> <a href="https://bandofdudes.com/">celexa</a> <a href="https://searchhighlandparkrealestate.com/">lexapro wellbutrin</a> <a href="https://cautionwater.co.uk/">suhagra without prescription</a> <a href="https://letsbogo.com/">generic cialis</a> <a href="https://cjwdevelopment.com/">celexa</a> <a href="https://grafikslab.com/">buy cafergot</a> <a href="https://wordaegis.com/">plavix generic available</a> <a href="https://greegaengineering.com/">generic zyban</a> <a href="https://callmeforhelp.com/">motilium</a>

<a href="https://webcamteens.stream/">webcam masturbation</a> <a href="https://freeonlinesex.fun/">free online sex</a> <a href="https://adultchatrooms.gq/">random cam chat</a> <a href="https://adultchatrooms.tk/">free online porn cams</a> <a href="https://freesexwebcam.fun/">chatzy sex</a>

<a href="https://valtrex1.com/">buy valtrex online without a prescription</a> <a href="https://synthroid75.com/">synthroid</a> <a href="https://amoxicillin5.com/">amoxicillin 500</a> <a href="https://sildenafil75.com/">sildenafil for women</a> <a href="https://propecia8.com/">buy propecia tablets</a>

Сказки и были про инжектор, промывки инжектора. <a href=http://ingector.matrixboard.ru>ingector.matrixboard.ru</a>

Appreciating the commitment you put into your site and detailed information you provide.
It's good to come across a blog every once in a while that isn't the same old rehashed
material. Wonderful read! I've bookmarked your site and I'm including your RSS feeds to my Google
account.

Also visit my website :: <a href="http://riovista.tk/dat-xa-duoc-mua-len-gia.t10145.html">dat nen phu my ba ria</a>

<a href="https://cropsensoradt.website/">where can i get viagra</a> <a href="https://estamossinsistema.org/">generic robaxin</a> <a href="https://cryptodirtreport.com/">paxil</a> <a href="https://expertsportspickstoday.com/">lasix</a> <a href="https://planetstormgame.com/">diflucan tablets</a> <a href="https://mapome.net/">prednisolone</a> <a href="https://alexandrumischie.info/">finesterude no prescription</a> <a href="https://burningscience.org/">buy sildalis</a> <a href="https://dlc1-whm.us/">cheap antabuse</a> <a href="https://alumaxpanel.ca/">kamagra oral jelly cvs</a> <a href="https://bola99.biz/">aldactone cost</a> <a href="https://kupalehawaii-foodsovereignty.org/">lisinopril tablets</a> <a href="https://kidscastles.com.au/">abilify.com</a> <a href="https://harshduty.com/">proscar</a> <a href="https://capitalsvspenguins.de/">buy clomiphene citrate online uk</a> <a href="https://ddfnetwork.tv/">tadacip online</a> <a href="https://feministforeignpolicy.info/">zithromax for sale</a> <a href="https://51nht.top/">suhagra online</a> <a href="https://amangandhifilmproductions.com/">zyban 150 mg</a> <a href="https://getshoe.top/">vibramycin 100mg</a> <a href="https://bamdokebi.com/">valtrex on line</a> <a href="https://cellular-deals.com/">nolvadex</a> <a href="https://cannvenience.ca/">prednisolone prednisone</a> <a href="https://in4livestream.de/">drug propranolol</a> <a href="https://egomaniacalprig.org/">metformin</a> <a href="https://buyingtexashouses.com/">stromectol</a> <a href="https://bc-1000.cl/">estrace generic</a> <a href="https://datcalokumu.com/">medrol</a> <a href="https://scottcuellar.com/">vpxl online</a>

<a href="https://celebrex100.com/">where to buy celebrex cheap</a> <a href="https://buypropeciafinasteride.com/">buy propecia</a> <a href="https://stromectolonline.com/">stromectol 3mg</a> <a href="https://zithromax500.com/">buy zithromax 500mg</a> <a href="https://tadalafilgeneric20.com/">buy tadalafil 20mg</a>

<a href="https://hotelsalecenter.org/">generic albuterol</a> <a href="https://africacanning.com/">atenolol</a> <a href="https://akarsolutions.com/">motilium</a> <a href="https://futureskillspod.com/">cialis 10mg</a> <a href="https://daizydelicious.com/">benicar</a> <a href="https://hwy22storage.com/">zithromax</a> <a href="https://alt2media.eu/">drug propranolol</a> <a href="https://lboursier-formation.info/">tetracycline</a> <a href="https://atlasmarket.co.uk/">nolvadex</a> <a href="https://beastfightwear.com/">lasix</a> <a href="https://financialmarketsandinformationtechnology.eu/">cialis online paypal</a> <a href="https://meyuang.com/">tadacip</a> <a href="https://locationrace.com/">fluoxetine price</a> <a href="https://gamezaddy.com/">hydrochlorothiazide</a> <a href="https://dianaperrybooks.com/">motilium suspension</a> <a href="https://healthcxo.co.za/">zithromax 250 mg</a> <a href="https://buypensionerbonds.co.uk/">acyclovir</a> <a href="https://iloung.com/">generic deltasone</a> <a href="https://acudew.org/">seroquel for anxiety</a> <a href="https://eurocosmetics.ir/">flagyl without prescription</a> <a href="https://brichetedinpaie.ro/">cephalexin</a> <a href="https://edlergarn.com/">dapoxetine</a> <a href="https://codetweak.com/">tadacip 20 mg</a> <a href="https://haigui123.net/">cipro 500mg</a> <a href="https://aflative.ir/">albenza cvs</a> <a href="https://cursive.nz/">zyban</a> <a href="https://elusiveprime.org/">zoloft</a> <a href="https://dianswara.fm/">price of benicar</a>

<a href="https://feelekituwe.website/">levitra</a> <a href="https://plutobitcoin.com/">purchase zithromax z-pak</a> <a href="https://cryptodirtreport.com/">paxil depression</a> <a href="https://architectsinverness.com/">furosemide</a> <a href="https://conifertgerapeuticandsportsmassage.com/">avana</a> <a href="https://fixmyryde.com/">celexa prices</a> <a href="https://davidallison.me/">buy alli cheap</a> <a href="https://levana.com.au/">diclofenac drug</a> <a href="https://com-l.ws/">tadalafil drug</a> <a href="https://chronicwellness.com.au/">cialis coupon</a> <a href="https://lawntechalliance.com/">alli</a> <a href="https://born2events.org/">tetracycline</a> <a href="https://gdprwalkthrough.eu/">doxycycline hyclate</a> <a href="https://belezanapontadosdedos.com.br/">buy online clomid</a> <a href="https://cambridgerestorationexperts.com/">cost of acyclovir</a> <a href="https://executivelimousinecolumbus.com/">lisinopril tablets</a> <a href="https://agir-pour-l-enseignement.org/">avodart generic equivalent</a> <a href="https://directbeers.eu/">buy nolvadex tamoxifen</a> <a href="https://dianaperrybooks.com/">motilium usa</a> <a href="https://alwayscash.net/">metformin</a> <a href="https://adambaig.com/">order neurontin</a> <a href="https://edinic.net/">price of strattera</a> <a href="https://catchwindcharities.org/">zyban</a> <a href="https://albayraqdar.group/">paxil for children</a> <a href="https://pensionerbondinterest.co.uk/">valtrex no perscrition</a> <a href="https://azkarot.co/">drug lipitor</a> <a href="https://lcmpodcasts.com/">toradol pills</a>

<a href="https://firsthome.finance/">finasteride propecia</a> <a href="https://arteclassic.nl/">tadalafil for sale</a> <a href="https://roboeconomic.us/">generic tadacip</a> <a href="https://businessmediastore.co.uk/">vpxl</a> <a href="https://directnailsupply.net/">generic for avodart medication</a> <a href="https://educacristiana.org/">trazodone drug</a> <a href="https://blowertec.com/">synthroid brand</a> <a href="https://searcheaglerockrealestate.com/">buy amitriptyline</a> <a href="https://clubdiscostick.net/">citalopram pill</a> <a href="https://altgov2.com/">clonidine .2mg</a> <a href="https://desafiodelelly.com.br/">acyclovir</a> <a href="https://roboeconomicus.com/">lisinopril drug</a> <a href="https://agensbobet.org/">lexapro price</a> <a href="https://accademiasvizzerapnl.ch/">lipitor 80</a> <a href="https://cukijyrewp.website/">lisinopril tabs</a> <a href="https://awthentica.com/">buspar</a> <a href="https://pensionergrowthbonds.co.uk/">diclofenac drug</a> <a href="https://euroasiastartupawards.com/">tretinoin buy</a> <a href="https://6fm.co.uk/">biaxin bronchitis</a> <a href="https://edsucation.net/">biaxin</a> <a href="https://diabete-shop.com/">zyban</a> <a href="https://fetdb.com/">seroquel for sleeping</a> <a href="https://demsfornjld25.net/">zanaflex capsules</a> <a href="https://giayattom.net/">atarax anxiety</a> <a href="https://innobus.pe/">plavix</a> <a href="https://agilealliance.ir/">is alli for sale</a> <a href="https://getshoe.top/">how to buy doxycycline online</a> <a href="https://freedomunleashedministries.org/">medrol cost</a>

<a href="http://genericcialis20mg.com/">20 mg cialis</a> <a href="http://buyrobaxinonline.com/">robaxin 750</a> <a href="http://buydoxycyclinewithoutprescription.com/">buy doxycycline no prescription</a> <a href="http://synthroid1.com/">synthroid with no prescription</a> <a href="http://ventolinhfainhalers.com/">ventolin hfa</a>

<a href="https://furniturehongkong.com/">buy trazodone</a> <a href="https://capitalsvspenguins.de/">cheap clomid online</a> <a href="https://biotrading.ro/">dapoxetine</a> <a href="https://51nht.top/">suhagra</a> <a href="https://gameslivefootball.de/">colchicine online</a> <a href="https://cleaningservicesmalta.com/">baclofen</a> <a href="https://email-support-usa.online/">trazodone</a> <a href="https://futureskillspod.com/">cialis</a> <a href="https://ketokartel.com/">lipitor pfizer</a> <a href="https://davidle.me/">price of wellbutrin</a> <a href="https://bbqrubstore.com/">clonidine</a> <a href="https://bandofdudes.com/">celexa</a> <a href="https://bookrecycling.org/">lexapro wellbutrin</a> <a href="https://greegaengineering.com/">zyban</a> <a href="https://developingelectronics.com/">order amoxil</a> <a href="https://billboard-musicawards.de/">sildenafil women</a> <a href="https://justiceforjohn.ca/">lady viagra</a> <a href="https://audiototext.net/">retin a canada</a> <a href="https://empire909.net/">tetracycline</a> <a href="https://asimplestar.com/">ordering cafegot</a> <a href="https://ckltech.net/">fluoxetine</a> <a href="https://cakeshop.biz/">moduretic online</a> <a href="https://globalmigrants.org/">acyclovir</a> <a href="https://feedafmailydonateacar.com/">soft viagra</a> <a href="https://clickndream.eu/">purchase amoxil</a> <a href="https://coinmarketking.io/">toprol xl</a> <a href="https://myenergyquotes.co.uk/">purchase celebrex</a> <a href="https://ccomms.com/">buy atarax online</a> <a href="https://africacanning.org/">arimidex</a> <a href="https://coachingestrategico.cl/">plavix generic drug</a>

<a href="https://synthroid1.com/">where to buy synthroid online</a> <a href="https://prednisone911.com/">20mg prednisone</a> <a href="https://zoloft75.com/">cheap zoloft</a> <a href="https://cheapprednisolone.com/">prednisolone</a> <a href="https://ventolinhfainhalers.com/">buy ventolin inhaler without prescription</a> <a href="https://valtrex500mg.com/">buy valtrex online cheap</a> <a href="https://tadalafil24.com/">tadalafil</a> <a href="https://tadalafil20tab.com/">tadalafil</a> <a href="https://zithromax500.com/">zithromax 100 mg</a> <a href="https://viagrasoftonline.com/">buy viagra soft</a>

таблетки от потенции

<a href=https://viagra-minsk.com>купить дапоксетин</a>

New sexy website is available on the web
http://buymensoutfits.relayblog.com/?teresa

dancin porn videos porn star felicia lesbian black porn in atlanta porn lesbian seduction last porn

Sexy photo galleries, daily updated collections
http://sexy.lesbians.bloglag.com/?kelsie

hardcore barely legal porn britteny spears porn image index porn ipod touch porn full free jewel denyle porn videos

<a href="https://valtrex1.com/">valtrex online prescription</a>

<a href="https://milfcams.fun/">chat with hot girls</a> <a href="https://freelivesexchat.fun/">free live sex chat</a> <a href="https://freeonlinesex.fun/">sex chat free</a> <a href="https://hotwebcamgirls.fun/">girls webcam</a> <a href="https://maturewebcam.icu/">mature webcam</a>

<a href="http://christmasconnection.us/">purchase albendazole</a> <a href="http://alegart.cz/">clonidine</a> <a href="http://comicbookinvestment.com/">medrol</a> <a href="http://howmuchcool.com/">vasotec for dogs</a> <a href="http://365gamereview.net/">wellbutrin 200 mg</a> <a href="http://acts29.co.uk/">toradol for headache</a> <a href="http://douglasjstevens.net/">colchicine</a> <a href="http://ajaxsystems.fr/">cipro</a> <a href="http://everydayresume.com/">amoxicillin trihydrate</a> <a href="http://eco-friendly.clothing/">sertraline zoloft</a> <a href="http://bamdokebi.com/">valtrex medication</a> <a href="http://americancouncilofvedicastrology.com/">vardenafil order</a> <a href="http://kleenshot.com/">plavix</a> <a href="http://bethehundredthmonkey.com/">baclofen cost</a> <a href="http://adambaig.com/">neurontin price</a> <a href="http://dailynews365.press/">hydrochlorothiazide</a> <a href="http://dejourmusic.com/">ventolin without a prescription</a> <a href="http://brickbook.org/">where can i where to buy cafergot for migraines</a> <a href="http://deltawing.org/">xenical 120</a> <a href="http://eatcolourful.com.au/">suhagra online</a> <a href="http://fast5ive.com/">cost of buspar</a> <a href="http://dariolandazuri.com/">bupropion</a> <a href="http://cabinetoutfitters.us/">female viagra cream</a> <a href="http://chrona.net/">indocin</a> <a href="http://alonasphaltcompany.com/">generic toradol</a> <a href="http://999fabrics.co.uk/">tadacip cipla</a> <a href="http://apno.me/">buy cheap nolvadex</a> <a href="http://despairnetwork.com/">toradol headache</a> <a href="http://glennforhillsboro.com/">order ventolin</a> <a href="http://ctasydney.com/">cleocin for uti</a>

<a href="https://propecia8.com/">finasteride tablets</a> <a href="https://valtrex1.com/">cheapest on line valtrex without a prescription</a> <a href="https://motilium5.com/">motilium domperidone 10mg</a> <a href="https://tadalafil365.com/">tadalafil 20 mg</a> <a href="https://doxycycline1.com/">doxycycline 200 mg</a>

<a href="https://freelivesexchat.site/">sex chatrooms</a> <a href="https://adultchat.fun/">adult webcam chat</a> <a href="https://webcamteens.icu/">free live sex</a> <a href="https://freeonlinesex.site/">free online sex</a> <a href="https://videochatroom.fun/">video chat room</a> <a href="https://freeliveporn.site/">free porn cams</a> <a href="https://slutcams.site/">slut cams</a> <a href="https://hotwebcamgirls.stream/">webcam girls</a> <a href="https://maturewebcam.fun/">mature webcam</a> <a href="https://adultchatrooms.ml/">theonlymisshugeboobs adult webcam</a>

页面

冒个泡吧!

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。