苹果对App Store启用https. 中国威胁审查App

最新,根据纽约时报的报道,中国可能将要求所有的app需要备案才能上线。这时间太巧了,因为Apple也最近在iTunes启用了https,用户在iTunes的搜索和下载都被加密。

在启用https之前,搜索特定关键字比如"vpn"会导致iTunes连接被重置,访问特定App的介绍页面也会导致连接被重置。这意味中国用户没有办法搜索和下载某些app,即使它们在中国的App Store是上线的。

但因为现在Apple对几乎所有到iTunes的服务器的流量启用了https,GFW没有办法选择性封锁特定的内容。对上述相同链接的测试,只把协议改为https,表明其没有受到GFW封锁。这个变化提供了一个中国的商业平台(中国App Store采用人民币付款),并且此平台不受政府任意的审查。比如opendoor,一个专业的翻墙软件在中国App Store 上架,并且用户愿意支付来去除应用内广告。其他的任何中国商业平台,比如淘宝都积极的进行审查,在那些平台光明正大的出售翻墙软件是不可能的。

因此,政府也注意到了这个审查漏洞,从而想推出新政策封堵这个漏洞的可能性非常大。

 

评论

更多博客文章

订阅 email
显示 博客 | Google+ | Twitter | 全部 的消息. 使用 RSS 订阅我们的博客。

星期二, 3月 31, 2015

Chinese authorities compromise millions in cyberattacks

The Great Firewall has switched from being a passive, inbound filter to being an active and aggressive outbound one. This is a frightening development and the implications of this action extend beyond control of information on the internet. In one quick movement, the authorities have shifted from enforcing strict censorship in China to enforcing Chinese censorship on internet users worldwide.

星期五, 3月 27, 2015

CNNIC censored Google and Mozilla’s posts about CNNIC CA

This week, Google found unauthorized digital certificates for several Google domains, the root CA of which is CNNIC. Google and Mozilla both publicly disclosed this security incident and published blog posts(Google, Mozilla). However, Chinese translations of Google’s and Mozilla's blog posts were censored on the Chinese Internet.

  • William Long is a prominent Chinese blogger on IT and tech. He translated Google’s security post without adding any personal opinions. The Chinese blogpost ranked #1 when searching CNNIC MITM in Chinese on Google and Baidu. He tweeted that he received a phone call from propaganda department demanding the post to be removed immediately. The post http://www.williamlong.info/archives/4183.html was deleted. Google cache is still available.

星期三, 3月 25, 2015

Evidence shows CNNIC and CAC behind MITM attacks

Since 2013, we have repeatedly called on major software vendors to revoke CNNIC-issued certificates. Most notably, we raised this issue when we reported on the Cyberspace Administration of China’s (CAC) man-in-the-middle (MITM) attacks on Google, Microsoft’s Outlook, Apple, Yahoo and Github. Mainstream media have reported about these security vulnerabilities before and on March 24, Ars Technica reported on Google’s announcement that they have definitive evidence that CNNIC (China Internet Network Information Center) was behind a new MITM attack on Google.

From our October, 2014 blog post:

星期四, 3月 19, 2015

We are under attack

We are under attack and we need help.

Likely in response to a recent story in the Wall Street Journal (WSJ), we’ve experienced our first ever distributed denial of service (DDoS) attack. This tactic is used to bring down web pages by flooding them with lots of requests - at the time of writing they number 2.6 billion requests per hour. Websites are not equipped to handle that kind of volume so they usually “break” and go offline.

This kind of attack is aggressive and is an exhibition of censorship by brute force. Attackers resort to tactics like this when they are left with no other options.

We are not equipped to handle a DDoS attack of this magnitude and we need help. Some background:

  • The attack started on March 17 and we are receiving up to 2.6 billion requests per hour which is about 2500 times more than normal levels.

星期四, 3月 12, 2015

Collateral Freedom and the not-so-Great Firewall

Recognizing that the authorities have been hesitant to crackdown on our method of circumvention, we have accelerated our expansion of the development of collateral freedom, in three key areas.
使用 RSS 订阅我们的博客。

评论

While applying for such a loan, you also have to assess your own personal financial predicament not fake if you are
taking out considered one of these plans, the apr will be above in
case you had obtained an everyday unsecured loan due
for the increased risk your lender has taken on by lending to you.

Bring out blue and gray eyes with copper, yellow, or apricot eyeshadows. Look for eyeliners and mascaras that are very dark brown that have hints of dark violet, maroon or brick. These will accentuate the blue in your eyes.

yeah really good info from this site .. Loved a lot thank you
happy rose day sms
happy Chocolate day sms
Happy Valentines Day status
happy kiss day sms

this post is awesome, great msg for us, plz update ur blog for daily basis, i am regular visitor of this site, so keep posting for us,

click the below links to create backlink
best free backlink website
click here for msg movie

添加新评论

Filtered HTML

  • 自动将网址与电子邮件地址转变为链接。
  • 允许的HTML标签:<a> <em> <strong> <cite> <blockquote> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • 自动断行和分段。

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。
By submitting this form, you accept the Mollom privacy policy.