给鲁炜和中国网信办的公开信

2015年1月26日

中国,北京。

鲁炜先生:

在2015年1月22日, 您领导的中国网信办对我们发表的Outlook在中国遭中间人攻击的文章进行了公开回应。 在中国网信办的公开回应中,您的同事姜军说我们的指责是“无端臆测,纯属境外反华势力的造谣和污蔑“。

我们GreatFire.org成员对中国网信办的评论非常愤怒,我们在本公开信中逐条驳斥。

我们没有轻易指责中国网信办。我们收集了大量数据来支持我们的结论。很多报告都支持了我们的分析,包括了截图许多中国网民的报告和其他技术人员的独立分析

我们之前报道过对iCloud,雅虎,微软和谷歌进行的中间人攻击,每个公司都确认了中间人攻击的真实性。我们还邀请了其他技术人员对攻击数据进行了独立分析。 你可以阅读对每次攻击的独立分析: OutlookiCloud谷歌雅虎Github 。 每个分析结论都类似:

Our conclusion is that this was a real attack on Microsoft's email service. Additionally, the attack is very similar to previous nationwide Chinese attacks on SSL encrypted traffic, such as the attack on Google a few months ago.   

我们认为对微软Email的中间人攻击是真实的。并且,此次攻击与此前中国对谷歌等公司的攻击类似。

Two independent security experts contacted by Reuters said Greatfire's report appeared credible.

"All the evidence I've seen would support that this is a real attack," said Mikko Hypponen, chief research officer at security software developer F-Secure.

路透社邀请了两位独立技术人员来检查GreatFire的报告,他们认为GreatFire报告是可信的。Mikko Hypponen-安全公司F-Secure的研究组长说:“所有我看到的证据都表明这个攻击是真实的“

To be more specific, it appears as if the MITM attacks are being performed on backbone networks belonging to China Telecom (CHINANET) as well as China Unicom.  

更具体的来说,中间人攻击是在中国电信和中国联通骨干网进行的。

All evidence indicates that a MITM attack is being conducted against traffic between China’s nationwide education and research network CERNET and www.google.com.

所有证据都表明中国教育网和www.google.com之间的通信被中间人攻击。

The fact that the MITM machine was six hops away from the user indicates that the MITM is taking place at some fairly central position in China's internet infrastructure, as opposed to being done locally at the ISP.

中间人攻击发生处和用户之间有6跳。这表明中间人攻击发生在中国互联网中心,而不是在本地网络运营商。

中国网信办虽然不承认对Outlook进行了中间人攻击,但却承认此次攻击是真正发生过的。如果您认为中国网信办是无辜的,那么您肯定认为其他人应该对此次攻击负责。

中国网信办没有对Outlook进行了中间人攻击,或者没有故意让其他人进行攻击,那请问您如何解释为何“敌对势力“能在过去两年中至少6次在中国骨干网进行全国范围内的攻击?

在2014年10月,中国网信办公开否认攻击iCloud。为什么在这之后,中国网信办没有对骨干网发生的攻击进行任何调查?毕竟您的同事姜军说过:

中国政府是网络安全的坚定维护者,坚决反对任何形式的网络攻击,并依法查处、严厉打击在中国境内,或利用中国网络设施发起网络攻击的行为。

鲁炜先生,请告诉我们中国网信办是如何严厉打击“利用中国网络设施发起网络攻击的行为“的?为什么您的部门把国家媒体人民网上的相关报道都删除了

姜军还对我们GreatFire.org进行了指责,我们在公开信中进行统一回复。

"姜军说,Greatfire.org是境外反华组织创办的反华网站(1),长期对中国政府进行无端攻击(2).此次炒作选在国家网信办宣布依法关闭一批违法违规网站、栏目和微信公众账号之时(3),蓄意引发不满情绪,污蔑指责中国网络空间治理制度(4)”.

(1)2011年,我们三个普通人在没有任何组织帮助的情况下在创建了GreatFire.org。我们对中国互联网审查制度不满,并决定对抗它。我们并不反华,但我们反对中国的互联网审查。

(2)我们从2011年起开始检测和报道中国互联网审查。GreatFire.org的主要功能是自动测试中国的互联网审查。我们所有的报道都有数据支持,数据来自自动测试,人为测试和用户反馈。前面我们已经提到,对此次中间人攻击的报道中,我们提供了未处理过的完整数据。我们提供这么多证据,完全说不上是“无端臆测“。

(3)除非你认为GreatFire.org对微软进行了攻击,我们如何能“选在国家网信办宣布依法关闭一批违法违规网站、栏目和微信公众账号之时“进行报道?微软已经确认了攻击的真实性-我们只是迅速报道而已。实际上,对Outlook的中间人攻击和国家网信办关闭一批网站、栏目和微信公众账号发生在一起更加表明中国网信办进行了中间人攻击。关闭微信账号和对Outlook进行攻击可能是同一个专项运动呢。

(4)我们在最后一点上意见还是统一的,我们确实想要“引发不满情绪,污蔑指责中国网络空间治理制度“。我们会一直观察你的所作所为,当你犯错误时进行批评,最终来结束中国互联网审查。我们希望网民和互联网公司会一起对抗GFW和中国互联网审查。我们已经呼吁微软,苹果和其他公司立即取消对CNNIC的证书信任。你发动的中间人攻击,以及对攻击的抵赖和你对我们的无理指责更加突出取消对CNNIC证书信任的重要性。

我们希望你为中国网信办的“造谣和污蔑“道歉。 毕竟,“无端猜测和指责无助于解决网络问题“.

GreatFire.org 团队

 

评论

更多博客文章

订阅 email
显示 博客 | Google+ | Twitter | 全部 的消息. 使用 RSS 订阅我们的博客。

星期四, 11月 30, 2017

关于在中国苹果商店被审查的那674个软件

苹果对中国区的审查行为敞开了大门 - 但这似乎只是冰山一角。

星期二, 5月 23, 2017

Is China establishing cyber sovereignty in the United States?

Last week Twitter came under attack from a DDoS attack orchestrated by the Chinese authorities. While such attacks are not uncommon for websites like Twitter, this one proved unusual. While the Chinese authorities use the Great Firewall to block harmful content from reaching its citizens, it now uses DDoS attacks to take down content that appears on websites beyond its borders. For the Chinese authorities, it is not simply good enough to “protect” the interests of Chinese citizens at home - in their view of cyber sovereignty, any content that might harm China’s interests must be removed, regardless of where the website is located.

And so last week the Chinese authorities determined that Twitter was the target. In particular, the authorities targeted the Twitter account for Guo Wengui (https://twitter.com/KwokMiles), the rebel billionaire who is slowly leaking information about corrupt Chinese government officials via his Twitter account and through his YouTube videos. Guo appeared to ramp up his whistle-blowing efforts last week and the Chinese authorities, in turn, ramped up theirs.

via https://twitter.com/KwokMiles/status/863689935798374401

星期一, 12月 12, 2016

China is the obstacle to Google’s plan to end internet censorship

It’s been three years since Eric Schmidt proclaimed that Google would chart a course to ending online censorship within ten years. Now is a great time to check on Google’s progress, reassess the landscape, benchmark Google’s efforts against others who share the same goal, postulate on the China strategy and offer suggestions on how they might effectively move forward.

flowers on google china plaque

Flowers left outside Google China’s headquarters after its announcement it might leave the country in 2010. Photo: Wikicommons.

What has Google accomplished since November 2013?

The first thing they have accomplished is an entire rebranding of both Google (now Alphabet) and Google Ideas (now Jigsaw). Throughout this blog post, reference is made to both new and old company names.

Google has started to develop two main tools which they believe can help in the fight against censorship. Jigsaw’s DDoS protection service, Project Shield, is effectively preventing censorship-inspired DDoS attacks and recently helped to repel an attack on Brian Krebs’ blog. The service is similar to other anti-DDoS services developed by internet freedom champions and for-profit services like Cloudflare.

星期四, 11月 24, 2016

Facebook: Please, not like this

Facebook is considering launching a censorship tool that would enable the world’s biggest social network to “enter” the China market. Sadly, nobody will be surprised by anything that Mark Zuckerberg decides to do in order to enter the China market. With such low expectations, Facebook is poised to usurp Apple as China’s favorite foreign intelligence gathering partner. If the company launches in China using this strategy they will also successfully erase any bargaining power that other media organizations may hold with the Chinese authorities.

星期二, 7月 05, 2016

GreatFire.org 现在开始测试VPN在中国的速度和稳定性

在中国有一个普遍观念,如果你有一个可以使用的VPN,那么你应该保持沉默。就信息自由而言,这种观念的问题在于获取知识竟成了一种秘密。今天,我们推出一个项目,希望能够摧毁这种模型。

我们最新的网站,翻墙中心,目的在于实时提供那些能够在中国使用的翻墙方案的信息和数据。在2011年以来我们就已经开始收集在中国被屏蔽的网站,现在我们也将增加那些可用的VPN和其他翻墙工具。

我们发布翻墙中心主要有四个目的。

我们的首要目标是助长使用翻墙工具的国人的数量。通过分享我们这些工具的信息和数据,我们希望对更广泛的受众展示那些工具时可以使用的。

我们的第二个目标是通过带来工具性能的透明化来提升中国用户的翻墙体验。我们将会测试工具的速度(流行网站的加载速度)和稳定性(流行网站加载成功的程度)。

我们开发速度测试的目的是要真实反映用户的体验。当用户在网站测速时,浏览器在后台会从10个世界上最流行的网站上下载一些资源文件。根据Alexa排名,这些网站分别是Google, Facebook, YouTube, Baidu, Amazon, Yahoo, Wikipedia, QQ, Twitter and Microsoft Live。速度的结果是简单的计算下载文件文件的大小和下载所需的时间。我们同样也会验证下载的文件是否完整。如果文件的内容是错误的或者在40秒内无法完成下载,我们会标记为失败。这个数据被我们用来生成另一个重要指标-稳定性。

其他的速度测试工具仅仅是通过发送数据到它们自己的服务器来测量上传和下载的速度。这种数据无法反应用户的体验,因为正常的浏览器通常会频繁的发送一系列的请求(而不是上传或下载一个大文件)到许多的服务器,而不止是一个。

我们的第二个指标 - 稳定性 - 是其他的服务通常不会测试的。一个健康的互联网连接应该达到100%的稳定性,除非有人在测试中把网线拔了。但是在中国使用翻墙工具却不是这样。任何时候连接都有可能变得不稳定或十分缓慢。根据请求的大小,最终的地点和代理的方式,一些请求有可能会失败。比较服务的稳定性要比比较速度更加重要。

你可以测试任意的翻墙工具,列表之外的也可以。中国的VPN用户也可以测试他们的工具,测试结果也会添加到数据库中。这些数据都将会对所有人开放。实时的在中国测试是非常重要的,因为VPN随时都可能被封锁或解封。我们欢迎任何的关于测试过程的反馈。有技术能力的用户也可以通过审查我们的javascript代码来获悉我们的测试是如何工作的。

我们郑重的邀请翻墙工具的开发者们向我们提供测试过程的反馈。我们的第三个目标是帮助这些开发人员改进他们的产品,让更多的选择适用于中国的顾客。此外,越多的工具可以工作,就意味着中国当局对翻墙的打击就会越难。

中国的用户都知道,在过去的18个月中当局加紧了对翻墙工具的攻击。而翻墙中心将会吹响反击的号角。反其道而行之,让这不再成为秘密。我们要鼓励人们分享翻墙工具可以工作的信息。

我们的第四个目标就是要为GreatFire.org创造收益。目前GreatFire仍然依靠世界各地的热心人士和组织的捐款。我们希望减少对这些机构的依赖,并探寻GreatFire.org自给自足的道路。用户只需到翻墙中心就能购买任意一款我们目前在测试的付费工具。GreatFire将作为这些工具在中国的经销商,因此VPN供应商会给予我们每个零售的一部分。用户也不必在中国购买这些翻墙服务。

使用 RSS 订阅我们的博客。

评论

恭喜greatfire.org获得国家级 “反华” 认证。 加油!

鄙视那些个发言人

Great letter. Look forward to hearing if there's a response, though I think we all know how likely that is.

加油

加油

visitor of this site, so keep posting for us,

click the below links to create backlink
best free backlink website then click.
msg movie

thank for sharing Ontips-in

thanks for this post, keep it up for updating us, i am waiting for ur new article.

thanks again
IPL8 live stream 2015

Its like you read my mind! You appear to know so much about this, like you wrote the bolok in it or something.
I think that you can do with some pics to drive the message home
a bit, but instead of that, this is excellent blog.
A great read. I will certainly be back.

Here is my webpage: perdre du poids rapidement (Quentin)

hello friends, here we are represent latest collection of palm sunday images thanks

Thanks for this post and i will be waiting for another

happy mothers day 2015
happy mothers day
mothers day 2015

这个网站并不那么反华,比无国界记者好多了。无国界纯粹是为了反对而反对。

Hi! This is kind of off topic but I need some advice from an established blog.
Is it tough to set up your own blog? I'm not very techincal but I can figure
things out pretty fast. I'm thinking about making my own but I'm not sure
where to begin. Do you have any ideas or suggestions?
With thanks

My site Backlinks

那么网信办回复了你们吗?

good Share what you're watching and just what feels you more interested https://mobdrodownloads.com Using below link you can download Mobdro 1.2.446 APK 2015.nice.

You can see more at Three people founded GreatFire.org in 2011 without any help from any external organizations. We were dissatisfied with Internet censorship in China and healthoffset.com decided to fight against it. We are not anti-China but we are anti-censorship in China. Please take the time to read more about the history of our organization

good to date functions such as songs streaming, showbox as well as set up the apk variation of Showbox application. best.

So if you want to view you fevorite TV shows like https://iterrariumtv.com which is readily available for Android as well as.

You can easily check modem settings with https://www.192-168-l-l.net/ and router setup also.

tubidy tunes most recent included mp3s by tubidy mp3 tracks. tubidy.mobi would certainly be much better referred as the heaven for

else method to install your TV gamer on IOS.However, You TV Player you TV player is out Google play store as well as you have.

Yep! Hope Mr Lu Wei see this letter! He should read it and understand how many difficulties he cause for the users around China. instagram online Thank you for writing the letter!

I am from bangladesh. want to communicate Mr.Lu wei.important.please help guys..my email k.iftakhar@yahoo.com thanks

添加新评论

Filtered HTML

  • 自动将网址与电子邮件地址转变为链接。
  • 允许的HTML标签:<a> <em> <strong> <cite> <blockquote> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • 自动断行和分段。

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。
By submitting this form, you accept the Mollom privacy policy.