苹果对App Store启用https. 中国威胁审查App

最新,根据纽约时报的报道,中国可能将要求所有的app需要备案才能上线。这时间太巧了,因为Apple也最近在iTunes启用了https,用户在iTunes的搜索和下载都被加密。

在启用https之前,搜索特定关键字比如"vpn"会导致iTunes连接被重置,访问特定App的介绍页面也会导致连接被重置。这意味中国用户没有办法搜索和下载某些app,即使它们在中国的App Store是上线的。

但因为现在Apple对几乎所有到iTunes的服务器的流量启用了https,GFW没有办法选择性封锁特定的内容。对上述相同链接的测试,只把协议改为https,表明其没有受到GFW封锁。这个变化提供了一个中国的商业平台(中国App Store采用人民币付款),并且此平台不受政府任意的审查。比如opendoor,一个专业的翻墙软件在中国App Store 上架,并且用户愿意支付来去除应用内广告。其他的任何中国商业平台,比如淘宝都积极的进行审查,在那些平台光明正大的出售翻墙软件是不可能的。

因此,政府也注意到了这个审查漏洞,从而想推出新政策封堵这个漏洞的可能性非常大。

 

评论

更多博客文章

订阅 email
显示 博客 | Google+ | Twitter | 全部 的消息. 使用 RSS 订阅我们的博客。

星期六, 5月 07, 2016

The New York Times vs. The Chinese Authorities

Could the New York Times be setting the best path forward for news organizations in China?

星期四, 2月 18, 2016

From the desk of Lu Wei: Apple, encryption and China

Lu Wei, Director of the Cyberspace Administration of China, offers some friendly help to FBI Director James Comey.

星期四, 9月 24, 2015

Apple blocked CNNIC CA months after MITM attacks

In March of this year, Google found unauthorized digital certificates for several Google domains. The root certificate authority for these domains was the China Internet Network Information Center (CNNIC). CNNIC was controlled by the Chinese government through the Ministry of Industry and Information Technology and is now under the management of the Cyberspace Administration of China (CAC). CNNIC was recognized by all major browsers as a trusted Certificate Authority. If CNNIC signs a fake certificate used in a man-in-the-middle attack, no browser will warn of any unusual activity unless the certificate is pinned.

星期三, 9月 23, 2015

Malicious Xcode could spread via download manager Xunlei

What’s at stake?

We reported last week that popular Chinese iOS apps were compromised in an unprecedented malware attack. We discovered that the source of the infection was compromised copies of Xcode hosted on Baidu Pan. Apple has published an article urging developers to download Xcode directly from the Mac App Store, or from the Apple Developer website and validate signatures. We’ve now discovered that even if a developer uses a download link seemingly from Apple, he might still be possible to obtain a compromised copy of Xcode.

Please note that we do not have evidence that such attacks has happened. But it is an easy attack that anyone can implement.

How does it work?

This compromise happened because of Xunlei. Xunlei is the most popular download manager in China. Much of its popularity is due to the fact they can accelerate download speeds by pulling resources from other Xunlei users as well as cached copies on the Xunlei server. All of this, however, is invisible to users. Users can simply enter a regular http download address into Xunlei  download manager and the download will start. Chinese developers were using direct download addresses such as http://adcdownload.apple.com/Developer_Tools/Xcode_7/Xcode_7.dmg to download Xcode.

星期一, 9月 21, 2015

中美互联网论坛回信

你们的公司有责任尊重人权,防止您的业务被侵犯。我们知道,中国是你们公司的一个重要市场,但恳请您在美国促进和保护人权的同时,也同样在中国致力于此。习主席的访问和美中互联网产业论坛是一个理想的机会,明确表示你的公司将会捍卫隐私权,反对成为监控同谋,将它们的强大在中国和美国一视同仁。
使用 RSS 订阅我们的博客。

评论

While applying for such a loan, you also have to assess your own personal financial predicament not fake if you are
taking out considered one of these plans, the apr will be above in
case you had obtained an everyday unsecured loan due
for the increased risk your lender has taken on by lending to you.

Bring out blue and gray eyes with copper, yellow, or apricot eyeshadows. Look for eyeliners and mascaras that are very dark brown that have hints of dark violet, maroon or brick. These will accentuate the blue in your eyes.

yeah really good info from this site .. Loved a lot thank you
happy rose day sms
happy Chocolate day sms
Happy Valentines Day status
happy kiss day sms

this post is awesome, great msg for us, plz update ur blog for daily basis, i am regular visitor of this site, so keep posting for us,

click the below links to create backlink
best free backlink website
click here for msg movie

Tomorrow is another day and you need to always book the option to reach the sincere and also in some cases agonizing final thought.... Binary Reserve

So china may have something!

ipro academy

It's a very interesting news.
walood.com

添加新评论

Filtered HTML

  • 自动将网址与电子邮件地址转变为链接。
  • 允许的HTML标签:<a> <em> <strong> <cite> <blockquote> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • 自动断行和分段。

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。
By submitting this form, you accept the Mollom privacy policy.