我们正被攻击

我们受到了攻击,我们需要帮助。

像是回应最近华尔街日报(WSJ)的故事似的,我们经历了有史以来第一个分布式拒绝服务(DDoS)攻击。这种攻击是通过发动向洪水一般的大量垃圾请求来使网站崩溃 - 就在这篇文章在撰写的时候,每小时有大约26亿次请求。一般的网站根本不具备能力处理这么大的流量,所以在濒临崩溃后不得不被迫下线。

这种攻击是非常野蛮的,甚至可以说是暴力的。攻击者只有在一般的攻击方法都不奏效时才会采取这样极端的手段。

我们无法防御这种规模的DDoS攻击,所以我们不得不寻求帮助。

一些背景资料:

  • 攻击开始于3月17日,我们每小时都要收到高达26亿的请求,这是大约正常水平的2500倍以上。

  • 这种攻击影响了我们所有的镜像网站。虽然我们已经公开谈论过我们的使用“依附的自由”和手机APP来解放被中国当局封锁网站,华尔街日报的报道也明确这样的策略是如何奏效的,以及它如何成功地将未经审查的内容引入中国。我们已经解封了包括博讯,德国之声和谷歌等被中国封锁的网站。

  • 我们并不知道这次攻击的幕后黑手是谁。然而,攻击恰逢我们的组织在过去几个月中压力越来越大的时候。中国网信办(CAC)公开宣判我们是“由海外反华组织成立的反华网站”。我们也知道,CAC对我们的合作伙伴施压来使他们停止与我们合作。最近,我们还注意到,有人曾试图冒充我们来截取加密的电子邮件。

  • 上周,一个总部设在巴黎的无国界非政府组织的报道,用我们的“依附的自由”方法来疏通世界各地的九个网站,其中包括两个对中国比较重要的:明镜新闻和国际西藏邮报。

我们需要您在以下几个方面的帮助:

  • 巨大的请求数致使我们的带宽成本已经飙升至30000美元一天。我们正在使用亚马逊的云服务,我们仍不确定亚马逊会不会额外计算这笔费用。如果他们会,我们的服务将会显著的紧缩。

  • 我们需要像亚马逊这样的公司站在我们这一边,尤其是言论自由的一边。我们需要你告诉亚马逊,你认为言论自由是一个非常重要的问题,并且亚马逊作为全球互联网的领先推动者,在获取信息的上起到很重要作用。

我们已经升级到更快的服务器,并使用一些技术来管理负载,现在暂时好一些了,但我们担心这次攻击随时可能会更加激化。我们需要帮助来处理这些事情。如果你有这方面的人才,请联系查理·史密斯或通过Twitter联系我们。

评论

更多博客文章

订阅 email
显示 博客 | Google+ | Twitter | 全部 的消息. 使用 RSS 订阅我们的博客。

星期一, 12月 12, 2016

面对中国,Google 还打算终结网络审查吗?

三年前,施密特宣布谷歌将在十年内终结网络审查。当时我在卫报发表文章,批评谷歌的时程太长,并指出他们其实有可能在十天内达成目标。

星期四, 11月 24, 2016

Facebook: Please, not like this

Facebook is considering launching a censorship tool that would enable the world’s biggest social network to “enter” the China market. Sadly, nobody will be surprised by anything that Mark Zuckerberg decides to do in order to enter the China market. With such low expectations, Facebook is poised to usurp Apple as China’s favorite foreign intelligence gathering partner. If the company launches in China using this strategy they will also successfully erase any bargaining power that other media organizations may hold with the Chinese authorities.

星期二, 7月 05, 2016

GreatFire.org 现在开始测试VPN在中国的速度和稳定性

在中国有一个普遍观念,如果你有一个可以使用的VPN,那么你应该保持沉默。就信息自由而言,这种观念的问题在于获取知识竟成了一种秘密。今天,我们推出一个项目,希望能够摧毁这种模型。

我们最新的网站,翻墙中心,目的在于实时提供那些能够在中国使用的翻墙方案的信息和数据。在2011年以来我们就已经开始收集在中国被屏蔽的网站,现在我们也将增加那些可用的VPN和其他翻墙工具。

我们发布翻墙中心主要有四个目的。

我们的首要目标是助长使用翻墙工具的国人的数量。通过分享我们这些工具的信息和数据,我们希望对更广泛的受众展示那些工具时可以使用的。

我们的第二个目标是通过带来工具性能的透明化来提升中国用户的翻墙体验。我们将会测试工具的速度(流行网站的加载速度)和稳定性(流行网站加载成功的程度)。

我们开发速度测试的目的是要真实反映用户的体验。当用户在网站测速时,浏览器在后台会从10个世界上最流行的网站上下载一些资源文件。根据Alexa排名,这些网站分别是Google, Facebook, YouTube, Baidu, Amazon, Yahoo, Wikipedia, QQ, Twitter and Microsoft Live。速度的结果是简单的计算下载文件文件的大小和下载所需的时间。我们同样也会验证下载的文件是否完整。如果文件的内容是错误的或者在40秒内无法完成下载,我们会标记为失败。这个数据被我们用来生成另一个重要指标-稳定性。

其他的速度测试工具仅仅是通过发送数据到它们自己的服务器来测量上传和下载的速度。这种数据无法反应用户的体验,因为正常的浏览器通常会频繁的发送一系列的请求(而不是上传或下载一个大文件)到许多的服务器,而不止是一个。

我们的第二个指标 - 稳定性 - 是其他的服务通常不会测试的。一个健康的互联网连接应该达到100%的稳定性,除非有人在测试中把网线拔了。但是在中国使用翻墙工具却不是这样。任何时候连接都有可能变得不稳定或十分缓慢。根据请求的大小,最终的地点和代理的方式,一些请求有可能会失败。比较服务的稳定性要比比较速度更加重要。

你可以测试任意的翻墙工具,列表之外的也可以。中国的VPN用户也可以测试他们的工具,测试结果也会添加到数据库中。这些数据都将会对所有人开放。实时的在中国测试是非常重要的,因为VPN随时都可能被封锁或解封。我们欢迎任何的关于测试过程的反馈。有技术能力的用户也可以通过审查我们的javascript代码来获悉我们的测试是如何工作的。

我们郑重的邀请翻墙工具的开发者们向我们提供测试过程的反馈。我们的第三个目标是帮助这些开发人员改进他们的产品,让更多的选择适用于中国的顾客。此外,越多的工具可以工作,就意味着中国当局对翻墙的打击就会越难。

中国的用户都知道,在过去的18个月中当局加紧了对翻墙工具的攻击。而翻墙中心将会吹响反击的号角。反其道而行之,让这不再成为秘密。我们要鼓励人们分享翻墙工具可以工作的信息。

我们的第四个目标就是要为GreatFire.org创造收益。目前GreatFire仍然依靠世界各地的热心人士和组织的捐款。我们希望减少对这些机构的依赖,并探寻GreatFire.org自给自足的道路。用户只需到翻墙中心就能购买任意一款我们目前在测试的付费工具。GreatFire将作为这些工具在中国的经销商,因此VPN供应商会给予我们每个零售的一部分。用户也不必在中国购买这些翻墙服务。

星期六, 5月 07, 2016

The New York Times vs. The Chinese Authorities

Could the New York Times be setting the best path forward for news organizations in China?

星期四, 2月 18, 2016

From the desk of Lu Wei: Apple, encryption and China

Lu Wei, Director of the Cyberspace Administration of China, offers some friendly help to FBI Director James Comey.
使用 RSS 订阅我们的博客。

评论

You deserve that for been criminals to the free Internet.

Regarding the DDoS attack - please consider using Cloudflare as a caching layer for your website - they are good when it comes to defending against that sort of attack.

+1 you should sign up to Cloudflare. Let them soak up the attack so you only pay for legit requests.

If you use CloudFlare you'll have to release all your current AWS public IP's and get new ones. Also AWS does give you a layer of protection but it is manual and maybe hard to maintain if the DDoS is from zombies or botnet.

For instance, CloudFlare has a program specially for website that empower freedom speech and I think it won't cost you a penny.

Please sign up for CloudFlare. Even at $200/month you will get significant benefits and DDoS protection, they are REALLY good!

+1 for CloudFlare

这种ddos是对着url进行攻击吧。。amazon的url感觉都是随机生成的,写个api一小时生成一个新的url。。如果是自动抓取就像上次干掉全国dns那样把攻击引导百度cac。gov.cn之类的吧。。。(没用过amazons3不清楚能不能换url)

Sent you an email, let me know if you need help setting Cloudflare up. If nothing else it's a great place to start.

You should look at CloudFlare. They are quipped to handle this sort of thing and they are definitely less than $30k per day!!!

Cloudflare is 'throttled' in China as with all the other CDN's.
Any requests to a CDN based resource are effectively denied.
Think again.

Cloudflare IP addresses is completely blocked in China. Using CF is not a good choice at the moment.

Create an Avaaz campaign to help support your conversation with Amazon? Might be easier than Twitter for a lot of your readers.

Consider deploying on premises protection to defeat the attack at the very edge of your network. @Corero allows for good traffic to pass, while mitigating the DDoS attacks in real-time.

Time to start naming names.

The president of China is Xi Jinping and everyone should know his name. Nothing in China happens without his consent.

Xi Jinping, Xi Jinping, everytime you hear about censorship in China you should think of Xi Jinping. Everytime you write about censorship in China you should make sure and write his name, Xi Jinping.

Rant over, start naming names people.

Use Fail2ban. No cost, easy to load and protects against several forms of attacks. http://en.wikipedia.org/wiki/Fail2ban

You can get a similar effect to Cloudflare (unfortunately minus the benefit of their massive infrastructure to absorb traffic) if you install mod_evasive (Apache module) and tune your config a bit. See the DDOS section in the included link, specifically lowering your timeout and keep alive timeout. Also turn down MaxRequestWorkers if your server is spawning too many processes. With mod_evasive, specify the DOSSystemCommand to ban the address using your firewall, for example, with iptables something like:
iptables -A INPUT -s %s -j REJECT
mod_evasive will substitute the %s for the source IP.

Check out:
mod_evasive: https://www.linode.com/docs/websites/apache-tips-and-tricks/modevasive-o...

Apache config: https://httpd.apache.org/docs/trunk/misc/security_tips.html

consider moving your hosting to ovh or online since they do not limit you on traffic. and they are cheap. and they offer the best ddos protection there is!

You may consider explaining to amazon that you are under attack and want the traffic dropped upstream.
Amazon should be able to do better than letting the host application absorb the requests (If they can not, I am rather disapointed).

Kim John Coon's suggestion above to try and identify and filter the abusive traffic with iptables will help take the load off your server.

安装360的用户普遍感觉电脑变慢,天下有免费午餐吗,360有可能利用用户电脑进行云计算或者ddos攻击

I see that the effected services have been blocked to those outside mainland China. Good move to counter this attack, well done.

Time to start naming names.
The president of China is Xi Jinping and everyone should know his name. Nothing in China happens without his consent.

happy mothers day quotes
mothers day quotes

Just get a firewall. Cisco if it's that bad. Or just use a dedicated ESF server for you're public ip and you'll be protected and it's got a very fast learning curve. We've been fending of attacks every minute from around the world with ESF. You'd be surprised how good this FW is and you don't even need a license.

now we are under attack in AU

blocking, dns fudged to show fake errors, searchines and those widgest they have on so many other websies suddenle become full of outright malicious code .. and that gets worse and worse, even the operating systems (all of them) spit out fake error messages ... some stuff like that even in linux source code .. all operating syste, agffected and the symptoms are the same .. files mysteruiously get deleted (even text files and code), sites get blocked and things reguce to cionnect to local networks unless that is connected to to the outside .. everything suddenly wanting centralised "cloud" logins, and a lot of nasty code snuck into operating syustem updates .. seems like in the last month or so its suddenly malware everywhere on EVERY OS ..
and try searching for a clan install iso of anything and you are quickly under attack from just about everything out there ... ... seems like not just one corrupt corporation but a consortium of the most corrupt corporations on earth and ALL of it seems to be trying to bully people into handing over admin of their OWN pc to unknown third parties i"in the cloud"

THERE IS NO WAY IN HELL I AM GOING TO TRUST SUCH OBVIOUSLY CORRUPT COMPANIES AND NO WAY IN HELL I WOULD TRUST SOMEONE TRYING TO FORCE ME TO TRUST THEM..

"management" stops at the front router .. that the way it will STAY ..

do not EVER give in to those creeps - DO NOT BUY THEIR STUFF - make sure everyone knows

yes it IS getting into OS updates ..
in open source systems have a look! .. thetre are error messages designed to MISLEAD the users - obviously something malicious got in .. and where theres no siource code the effect is the same top - its in EVERYTHING that was updated over the last couple of months.

now the government here even officially passed a bill to fo censorship! .. and its happening all over the world .. same stuff about "metadata retention" .. and they talkk about usage data.. NO - its obiously a LOY more than that if they are putting code on every user pc, deleting their data witrhour warning, and even the error meressages lie and every attempt to get rid of it by trying to find a frees clean distro iso met with attack after attack .. javsript everwhere not just tracking bout way more malicious .. attacks from every direction .. never seen anything this bad... and anty info seems impossible to find ..
censorship everywhere

never would have thought it woyuld become like that over here.. but looks like the same talk from politicians, the same trolling and sloganising from corporations

probably not hard to giess what went on atr those secretive "trade talks"

this looks like planet scale totalitarism .. corruuption fgone mad ..

isd there anything left that is safe? .. how will anyone be abloe to da anyithing if you don;t know id that file will get deleted just after you save it!!!!

and its obviously for censorship , not "copyright" or any other broken nonsense .. whate else could it be if text files and code set it off even more than music or video and it doesn't seem to care whether you made it.

seems like its the worse malweare ever seen coming from every directopm at the same tind along with it a lot of suspicious trolling and "social engineering"

all I can find is the occasional leftover hint ... news items explaining anything rare (probably censored)

MAKE SURE THEY DON:T GET A SINGLE CENT.

it looks like a consortium f the most corrupt corporations on earth have been changing the law in every counltry precendent by precedent over the last decade and syicking their dirrty fingers into everything.. not it sems the have a leash on nearly every government and their security agencies .. the most corrupt corporations on earth - and those obvously stacked meetings of so called "standards bodies" in recent years .. yes they are even hijacking network protocols...

.. probably not hard now to guess what went on in those secretive talks .. with all that happening since then

no MANAGEMENT STOPS AT THE FRONT DOOR AND THERE IS NO WAY IN HELL I WILL LET THEM GO ANY FURTHER.

what sort of idiot would want to trust lowlife like that with anything?

by now they should know what I think if their "cloud" bullshit!

no .. no way
I would want let third party "management" run by people so corrupt near any box let alone break things, delete data and try to destry my life! .... I will fight in anyt way I can to keep those
creeps out.

it might help if there was a still a way to communicate with anyone without anything important or even slightly interesting disappearing .. but nonetheless they are not getting in my jouse .., I never wanted to be anyones enemy and won;t be selling out to their ways and hurtunbg anyone .. but I sure as hell won;t lert them control anything here!

so angry I can barely type...

don;'t want to even think about what other people might do .,.

no i despite how bad the furureits looking I just won;t put up with it ..
btrining that inot my house makes it *personal* and we must make sure EVERY company or person who helped them attack us NEVER EVER gets a cent out of ANYONE

yes - Im angry..

intersing though - if this were a file on my h
no i despite how bad the furureits looking I just won;t put up with it ..
btrining that inot my house makes it *personal* and we must make sure EVERY company or person who helped them attack us NEVER EVER gets a cent out of ANYONE

yes - I'm angry..

and don't wan't any "management" crap destroying my life .

and I never try to hurt anyone.. I'm actually still human, unlike those creeps

Keren bingitz sist, makasih sharingnya. Ini artikel yang saya cari
selama ini. Informasi seputar web hosting yang sangat bermanfaat.
Kalau boleh tulis juga bro tulisan menegani hosting murah dan olshop.
Ane mau ngerti banget soal itu.

Look at my blog post - hosting usa murah

Ulasan bermanfaat soal web hosting ini baru pertama kali saya baca.
Keren sekali dan penting. Setiap orang yang pakai ataupun sedang mencari service web hosting terbaik di Indonesia wajib baca artikel ini.
Mampir juga situs saya ya, banyak ulasan menarik yg bisa jadi berguna bagi para
pencari layanan web hosting murah.
Wass.

Ulasan bermanfaat tentang hosting ini sangat bermanfaat.
Bagus sekali dan bermanfaat. Tiap orang yang pakai maupun sedang cari jasa web hosting
terbaik di Indonesia wajib baca ulasan ini. Mampir juga website saya ya,
ada artikel menarik yang bisa jadi bermanfaat bagi para
pemakai jasa web hosting. Tq.

my website web hosting murah

Ulasan bermanfaat tentang web hosting murah ini keren banget.
Bagus banget dan penting diketahui. Setiap orang yang pakai maupun sedang mencari layanan web
hosting terbaik di Indonesia harus baca ulasan ini.
Kunjungi juga website saya ya, ada tulisan menarik yang
bisa jadi bermanfaat buat para pencari service hosting. Thanks.

Bagus bingitz bro, makasih ilmunya. Ini ulasan yang saya searching
sejak lama. Informasi soal hosting yang sangat berguna.
Sekedar usul buat juga sist review soal hosting murah dan olshop.
Ane mau tahu banget tentang itu.

it was nice to read to read d blog.. i wil also share it with my frnds, meanwhile go through my blog which is about printable calender, http://www.printablecalendardownload.net/ also another blog, go through this http://www.printablecalendardownload.net/
thank you

I know this website presents quality depending content and extra stuff, is
there any other web site which presents these kinds of things in quality?

Feel free to surf to my web site

Golden Globe Awards 2016 Live Stream || @ On January 10, 2016 set the date for the 73rd Annual Golden Globe Awards by The Hollywood Foreign Press.

Golden Globe Awards 2016 Live Stream
http://goldenglobeawards2016livestream.com/

Justin Bieber Tickets Tours & Concert Updates
http://justinbieberconcert.co/

Knock! Knock! Knock!!! Hello……!!!! We are back with a big bang award show which is Golden Globe Award 2016. Great show, some great people, beautiful and spectacularly talented actresses/actors and lots of fun, entertainment, and suspense’re to be revealed.

This award has been continuing since 1943. Group of writers gathered together to frame the Hollywood Foreign Press Association and made liberally distributed award named Golden globe Award where they play momentous role in film making. The first award was being honored on best achievement in 1943 filmmaking and was held in January 1944, at the 20th Century –Fox studios. Successively, every year ceremonies were held in different venues for decades.

thanks for this article....topic is good....
memberi solusi semua problem seks pasutri yang paling bagus.
solusi cepat dan tepat segala masalah seks anda.

Save them from the attack:

techiestate.com | techpepe.com/

good MSQRD for Laptop or computer, Mobile computer on Glass windows 7 Download from below. MSQRD Download Trade for exceptional trending fun photography and training video, MSQRD App Android nice.

good When we wish to promote photographs, audios, SHAREit for PC or you can finish the transferring.I myself used SHAREit app apk better.

good I have actually been utilizing Snacks Time app for iphone imobdro.com constantly invest their spare time with enjoyment. great.

页面

添加新评论

Filtered HTML

  • 自动将网址与电子邮件地址转变为链接。
  • 允许的HTML标签:<a> <em> <strong> <cite> <blockquote> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • 自动断行和分段。

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。
By submitting this form, you accept the Mollom privacy policy.