苹果对App Store启用https. 中国威胁审查App

最新,根据纽约时报的报道,中国可能将要求所有的app需要备案才能上线。这时间太巧了,因为Apple也最近在iTunes启用了https,用户在iTunes的搜索和下载都被加密。

在启用https之前,搜索特定关键字比如"vpn"会导致iTunes连接被重置,访问特定App的介绍页面也会导致连接被重置。这意味中国用户没有办法搜索和下载某些app,即使它们在中国的App Store是上线的。

但因为现在Apple对几乎所有到iTunes的服务器的流量启用了https,GFW没有办法选择性封锁特定的内容。对上述相同链接的测试,只把协议改为https,表明其没有受到GFW封锁。这个变化提供了一个中国的商业平台(中国App Store采用人民币付款),并且此平台不受政府任意的审查。比如opendoor,一个专业的翻墙软件在中国App Store 上架,并且用户愿意支付来去除应用内广告。其他的任何中国商业平台,比如淘宝都积极的进行审查,在那些平台光明正大的出售翻墙软件是不可能的。

因此,政府也注意到了这个审查漏洞,从而想推出新政策封堵这个漏洞的可能性非常大。

 

评论

更多博客文章

订阅 email
显示 博客 | Google+ | Twitter | 全部 的消息. 使用 RSS 订阅我们的博客。

星期四, 2月 18, 2016

From the desk of Lu Wei: Apple, encryption and China

Lu Wei, Director of the Cyberspace Administration of China, offers some friendly help to FBI Director James Comey.

星期四, 9月 24, 2015

Apple blocked CNNIC CA months after MITM attacks

In March of this year, Google found unauthorized digital certificates for several Google domains. The root certificate authority for these domains was the China Internet Network Information Center (CNNIC). CNNIC was controlled by the Chinese government through the Ministry of Industry and Information Technology and is now under the management of the Cyberspace Administration of China (CAC). CNNIC was recognized by all major browsers as a trusted Certificate Authority. If CNNIC signs a fake certificate used in a man-in-the-middle attack, no browser will warn of any unusual activity unless the certificate is pinned.

星期三, 9月 23, 2015

Malicious Xcode could spread via download manager Xunlei

What’s at stake?

We reported last week that popular Chinese iOS apps were compromised in an unprecedented malware attack. We discovered that the source of the infection was compromised copies of Xcode hosted on Baidu Pan. Apple has published an article urging developers to download Xcode directly from the Mac App Store, or from the Apple Developer website and validate signatures. We’ve now discovered that even if a developer uses a download link seemingly from Apple, he might still be possible to obtain a compromised copy of Xcode.

Please note that we do not have evidence that such attacks has happened. But it is an easy attack that anyone can implement.

How does it work?

This compromise happened because of Xunlei. Xunlei is the most popular download manager in China. Much of its popularity is due to the fact they can accelerate download speeds by pulling resources from other Xunlei users as well as cached copies on the Xunlei server. All of this, however, is invisible to users. Users can simply enter a regular http download address into Xunlei  download manager and the download will start. Chinese developers were using direct download addresses such as http://adcdownload.apple.com/Developer_Tools/Xcode_7/Xcode_7.dmg to download Xcode.

星期一, 9月 21, 2015

中美互联网论坛回信

你们的公司有责任尊重人权,防止您的业务被侵犯。我们知道,中国是你们公司的一个重要市场,但恳请您在美国促进和保护人权的同时,也同样在中国致力于此。习主席的访问和美中互联网产业论坛是一个理想的机会,明确表示你的公司将会捍卫隐私权,反对成为监控同谋,将它们的强大在中国和美国一视同仁。

星期六, 9月 19, 2015

中国流行的iOS应用遭到前所未有的恶意软件感染

发生了什么?

 

据最近的报道,中国开发者使用的某些版本的Xcode被感染,在开发者不知情的情况iOS应用中就被注入了用于跟踪的代码。(1、2)。被注入后,开发者们将他们被感染的iOS应用程序的上架了App Store并得到苹果批准。截止完稿前,这些被感染的应用在App store仍可访问(外部链接)。任何安装并启动了这些被感染应用的用户都将是追踪代码的受害者。

 

这是苹果应用商店一次重大的感染事件。苹果以人工审查所有的被提交应用而著名,相对Android商店的恶意软件会更多。这是苹果应用商店历史上最广泛和重大的一次恶意软件事件传播事件。

 

这些被感染Xcode被托管在百度云上。百度本身似乎并没有意识到这些Xcode是被感染的。在这次事件逐渐浮出水时该公司于昨日删除了这些被感染的文件。由于在中国下载外国网站的文件时速度非常慢,许多中国人希望能够从国内网站来下载。很多人也会使用下载软件,如迅雷,而不是直接从官方的Mac App Store中下载。

 

据用户的报告,许多中国著名的应用受到影响。我们在下面的列表中链接了测些受感染的应用,但请不要下载他们,我们只是链接他们,目的是使用户能够知道具体是哪些应用程序。这些受影响的应用程序包括:

 

微信(link is external) 中国最流行的聊天应用

网易云音乐(link is external) (NetEase Cloud Music) - 网易的免费音乐应用

网易公开课(link is external) (NetEase) - 被许多学生所使用的公开教育应用

中信银行动卡空间(link is external) (China CITIC Bank Card Space)

中国联通手机营业厅(link is external) (China Unicom Shop)

使用 RSS 订阅我们的博客。

评论

While applying for such a loan, you also have to assess your own personal financial predicament not fake if you are
taking out considered one of these plans, the apr will be above in
case you had obtained an everyday unsecured loan due
for the increased risk your lender has taken on by lending to you.

Bring out blue and gray eyes with copper, yellow, or apricot eyeshadows. Look for eyeliners and mascaras that are very dark brown that have hints of dark violet, maroon or brick. These will accentuate the blue in your eyes.

yeah really good info from this site .. Loved a lot thank you
happy rose day sms
happy Chocolate day sms
Happy Valentines Day status
happy kiss day sms

this post is awesome, great msg for us, plz update ur blog for daily basis, i am regular visitor of this site, so keep posting for us,

click the below links to create backlink
best free backlink website
click here for msg movie

Tomorrow is another day and you need to always book the option to reach the sincere and also in some cases agonizing final thought.... Binary Reserve

So china may have something!

ipro academy

It's a very interesting news.
walood.com

添加新评论

Filtered HTML

  • 自动将网址与电子邮件地址转变为链接。
  • 允许的HTML标签:<a> <em> <strong> <cite> <blockquote> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • 自动断行和分段。

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。
By submitting this form, you accept the Mollom privacy policy.