李： 先讲技术上，伊朗当局若有这行动，并非全国与互联网断绝连系，因为伊朗仍需要在电子邮件等方面与海外的网络连接，但可以肯定，伊朗人无论翻墙等方面难度会 大增，因为很可能个别网民与海外的数据交换，无论交换类型以至方式都会很有限。而不排除有关技术，中国的主要网络硬件供应商，都有份提供。
李： 如果你家中还有电话线和调变解调器，或你的手机仍然支援旧式，并非GPRS的上网，可以拨号到海外仍然支援拨号上网的服务，这种方式当然速度奇慢，只能传 送文字以及体积不大的信件，但不失为一种解决方法。当然中国当局在国际电话交换闸口，阻止你打这类电话时，那就爱莫能助。而这类旧硬件，亦比较难找到。
李： 这技术是加拿大滑铁卢大学的教授，研究中国新封网手段而提出的技术，因为现时中国当局，已经可以利用自动技术，辨认出Tor的信息包，并加以拦截以及阻止 通讯。因此加拿大滑铁卢大学的团队，就开发出Skypemorph软件，利用Skype的视频通话技术先连接网桥，再将整个Tor通讯过程伪装成 Skype通讯，藉此回避封锁。
现时已经有相关软件，但由于仍在初步阶段，主要供参与开发的有心人使用和研究，所以暂时不介绍使用方法。 但可以肯定的是，在Skypemorph的启发下，将翻墙的信息包伪装成另一种通讯协议的信息包，然后翻墙将是新的技术方向。只有要中国网络防火长城，就 会有人想出新的点子去翻墙。特别连网络界相当有名匿名黑客集团，都参与攻击中国的网站时，应会有越来越多海外的高手，参与开发翻墙技术的工作。
李：有只叫DNS Jumper的免费软件，可以帮助大家很容易就设定好DNS的设定。DNS Jumper这只小软件，不用安装，下载后可以立即执行，你可以选择为Windows内所有网络连接卡做一致的DNS设定，或者按个别情况，在不同网络介 面作出设定。在软件内，你可以输入你想用的DNS地址，或者储存一些常用的DNS主机地址，例如想翻墙时就转用谷歌的DNS主机，而在不翻墙就用中国电讯 公司提供的DNS，用起来相当简便。
Copyright © 1998-2011 Radio Free Asia. All rights reserved.
修改hosts:还在一步一步的寻找Google代理IP?Twitter IP?FaceBook IP? 不用了，亲。。一个hosts文件全部搞定：https://code.google.com/p/smarthosts/
比较高深一点就是FQ, ssh, VPN,ipv6 等等。。或者参考这里http://code.google.com/p/goagent/
本人一直在用Switchy + myentunnel + Google浏览器，一直很稳定。
By Hana Stewart-Smith | April 13, 2012, 6:30am PDT
Summary: Chinese authorities continue their crackdown of online ‘rumors’. Is now the right time to launch an attack on the Great Firewall?
Anonymous has announced its intentions to take down the Great Firewall of China, but while the relationship between Chinese authorities and net users is extremely shaky, is it the right time to declare war?
There is an interesting dialogue emerging in much of China’s state-run media this week about the difference between ‘free speech’ and ‘harmful rumours’.
People’s Daily has recently released an article entitled “Freedom of Speech does not protect rumors.” Unsurprisingly, for a news source often considered to be a government mouthpiece, they are attempting to reinforce the need for China’s latest crack downs.
The article says, “how could freedom of speech be defended, if we turn our back on slander? Can we tolerate fake [or] inferior products with the aim of promoting the free market?”
This is the prevailing attitude that is being displayed towards allegedly damaging ‘rumours’, and these news sites are being used to justify the significant actions being taken by Chinese authorities at the moment.
Liu Zhengrong, a senior official in the State Internet Information Office, told China Daily that the Internet cannot police itself. He said that Web users weren’t necessarily able to distinguish truth from fiction, “requiring government departments and website companies to take measures.”
At first there were rumours being spread about a potential coup in Beijing, and as a direct result 42 Web sites were shut down, and an additional 210,000 messages have been deleted since mid-March. Beijing police have also arrested 1065 suspects.
Commenting functions on Sina and Tencent Weibo were also shut down for 4 days, a stark warning that authorities can intervene whenever they want.
So why has China suddenly become such a hostile environment for web users? Well, to start with, authorities are currently managing the scandal surrounding ousted communist party politician Bo Xilai.
Xilai, the former Chongqing party chief, was officially stripped of his party positions on Tuesday. He and his wife, Gu Kailai, are being investigated over the murder of British businessman Neil Heywood. This is serious news in China, and they are struggling to contain the sudden overload of online commentary.
Ministry of Tofu provided the following analogy to describe the magnitude of this scandal. “It would be like a California governor, a presidential candidate, gets sacked after his police chief, who helped him fight a glorious war on organized crimes in the state, divulged to Chinese diplomats his dirty laundry and a murder masterminded by his wife in exchange for protection.”
Chinese netizens jumped on the news, a confirmation of rumours that had been stirring for months, and were quickly stymied.
When the news item broke on Tuesday evening, it received over 50,000 reposts within the first 15 minutes. The story didn’t reach CCTV’s evening news, but it thrived online. Searches for both Bo Xilai and his wife’s name were quickly blocked on Sina Weibo, and mass censorship of comments began.
“Tonight, Sina’s little secretaries are probably so busy they’re spitting blood,” one Weibo user commented, “who allowed rabble like us to possess nuclear-level weapons like a mouse and keyboard?”
Controlling a scandal in a social network society
Unfortunately, that seems to be exactly what Chinese authorities are afraid of. This is the first major scandal to rock China’s leadership since social media became prevalent, and suddenly there is a new audience seeking the truth.
At this point, the crack down over online rumours is a vague and uncertain fight. The lines between free-speech and rumours are extremely unclear, but what does the Chinese government expect when so called ‘rumours’ turn out to be true?
The scandal around Bo Xilai has not only raised questions about corruption within the government, but on the growing need for transparency.
Attacking the Great Firewall
In many ways, it seems like now is the perfect time for a group like Anonymous to take on China’s Great Firewall, when so many in China would rally to their side.
However, as much as few would disagree that the battle against censorship is inherently correct, would a calculated strike on the Great Firewall at this point be the right move?
A blackout of large portions of the Internet yesterday morning in China have many speculating about the potential for a ‘kill switch’, to limit any outside access. At this point the actual cause of the blackout, which rendered many Chinese and foreign websites inaccessible for a few hours, is unknown.
Telecom companies have denied issues with their network, or damage from the significant Earthquake in Indonesia.
Although there is absolutely no concrete evidence that the blackout was the result of any sort of ‘kill switch’ test, it does raise the possibility that such a thing exists.
Authorities in China are trying to reign in their control over the online community at the moment, that much is apparent, and high profile groups like Anonymous getting involved might have them on alert.
Anonymous already succeeded in hacking hundreds of Chinese government, business and other general websites so far, so their presence must be registering in China. As ZDNet’s Emil Protalinski commented, “if they manage to pull off the feat for even a few minutes, it will be an accomplishment of epic proportions.”
This is true. It could also be long enough to cause a serious backlash from authorities, at a time when they fear nothing more than the online community undermining them with ‘harmful rumours’.
[Updated: April 15th @ 6:50 am, This post has been altered for clarification regarding Anonymous hacks of Chinese websites.]
Image source: Francisco Diez/Flickr.com,
By Emil Protalinski | April 11, 2012, 11:00pm PDT
Summary: The countless attacks on Chinese websites were apparently just a warm up. Anonymous wants to take down the Internet censorship system known as the Great Firewall of China.
Last week, I wrote about how the hacktivist group Anonymous has a new Chinese branch, Anonymous China, which has been very active since it launched its Twitter account on March 30, 2012. The group has hacked and defaced hundreds of Chinese government, company, and other general websites to the point where China even acknowledged the attacks. The hacking has continued against various websites, but even more importantly, the group has declared a new target: the so-called Great Firewall of China.
Since my last two reports, Anonymous China has hacked shangzhi.gov.cn, publicly posting eight user names and passwords on Pastebay. This was soon followed by the hacking of szzfcg.gov.cn, which resulted in the site’s full database being leaked and posted to Wikisend. The document was hard to parse, but I could easily see that it included thousands of e-mail addresses, logins, and passwords.
Here are the corresponding tweets:
Our new IRC channel: http://cbe005.chat.mibbit.com/?server=irc.voxanon.net&channel=%23AnonymousChina channel: #AnonymousChina
In a few minutes another hack😉
http://www.shangzhi.gov.cn/ hacked by Anonymous China. Leak: http://www.pastebay.net/380748 @YourAnonNews
@YourAnonNews we already told the Chinese people to protest and do occupy. Now we have to wait
http://www.shangzhi.gov.cn/ hacked by Anonymous China. Leak: http://www.pastebay.net/380748 its cold there😛
http://www.szzfcg.gov.cn/ hacked by Anonymous China. All database! Leak: http://www.pastebay.net/395451
As I’ve already written before, the Anonymous China group has confirmed they are not Chinese and are not based in China. If they’re going to succeed in their new mission, however, they’re going to need help on the inside. It’s thus not too surprising to see these two tweets:
Chinese hackers🙂 very well brothers … we have expected you
@YourAnonNews our brothers arrived🙂
Below is a message from the one of the members, posted on Pastebay. The poor English makes me think that one of the Chinese hackers wrote this, as opposed to someone from the Anonymous China group, which has instead been writing terrible Chinese (they said they’re working on it). Then again, it really can be anyone from Anonymous whose first language isn’t English.
we won’t speak in name of @AnonymousChina, this time, we are going to speak in name of every single Anonymous person.
Anonymous is an idea and we aren’t here for tell you that over and over again.
In this moment, that you are reading this, we are going to tell you why “the haters” should like Anonymous.
Of course, that would be more exciting and more inspiring if this message was a video in YouTube, with someone talking and pictures and a song that touch in your heart.
So before we start, try to make yourself inspiring, play your song and let’s start.
Like we said, we are not going to talk about what is Anonymous, probably you already heard many times, and still, you think bad about us.
First, about Anonymous hackers.
We deface and leak government websites, we DoX politics, we try to share this particullary words:”Something is wrong in our world”.
So for that, i don’t know why people still support their government, even knowing the truth, well deep inside.
For those who hate that Anonymous go to protests, made a Free Hug day.
What is your problem? Do you like that banks and the government still your money?
Do you like to have no human rights? Do you like to be with no job?
I think the answer is no!
So if you read this and still think the same, read again and with a song more touching.
If now you are part of an idea, welcome my friend, we were expecting you.
We will always love everyone in the 99% if you are part of the 1%, because you are rich and don’t care about people… We all hope you chnage your mind and help us.
There’s the usual signature, with a little bit extra thrown in:
We are Anonymous.
We are Legion.
We do not forgive.
We do not forget.
And we will always being expecting you!
Last but certainly not least, here are the tweets regarding the Great Firewall of China mission:
To all people, reply this tweet saying all chinese websites you know that are blocked.
Chinese government sweet dreams ;] Great Firewall – Power: 100% … 90% .. 50% … 20% … Power off. #GFW will be dead soon. #Anonymous
Chinese people, world people, … reporters too, #GFW we all want it dead, wont be easy… Don’t expect in next week, or whatever lol
One day we are few, in the other we are some, the next day we are many… a few days after, we are China and all world against this system!
In the previous Anonymous China attacks, some targets have had their administrator accounts, phone numbers, and e-mail addresses posted publicly. On many of the hacked sites, the group even posted tips for how to circumvent the Great Firewall of China. Actually trying to take down the Great Firewall of China is a whole other ballgame.
The Great Firewall of China is a massive and complicated system that blocks all types of content that the Chinese government deems improper. It features firewalls and proxy servers at the Internet gateways, engages in selective DNS poisoning when particular sites are requested, and leverages various other methods to censor the Internet, including Connection resets, DNS filtering and redirection, IP blocking, Packet filtering, and URL filtering.
Frankly, I will be very surprised if Anonymous China succeeds. Then again, if they manage to pull off the feat for even a few minutes, it will be an accomplishment of epic proportions.
By Emil Protalinski | April 6, 2012, 9:30am PDT
Summary: After Anonymous hacked hundreds of Chinese government, company, and other general websites, China has acknowledged the attacks. Meanwhile, Anonymous China has not stopped its onslaught.(Check out
@AnonymousChina Twitter account.)
Earlier this week I wrote about how the hacktivist group Anonymous has a new Chinese branch, Anonymous China, which has been very active since it launched its Twitter account on March 30, 2012. The group has hacked and defaced hundreds of Chinese government, company, and other general websites over the last week. A few targets have had their administrator accounts, phone numbers, and e-mail addresses posted publicly. Last but not least, on many of the hacked sites, the group even posted tips for how to circumvent the Great Firewall of China. Surprisingly, the Chinese government has acknowledged the attacks.
While Anonymous was not specifically mentioned, it’s obvious what China’s Ministry of Foreign Affairs was referring to during a briefing on Thursday, given the events during the last week.
“First of all, China’s Internet is open to all, users enjoy total freedom online. China has gained 500 million netizens and 300 million bloggers in a very short period of time, which shows the attraction and openness of China’s Internet,” spokesman Hong Lei said in a statement, according to CNN. “Secondly, the Chinese government manages the Internet according to law and regulations. Thirdly, certain reports prove again that China is a victim of internet hacker attacks.”
Anonymous China has not relented. Since my last article, here’s what the group has been up to.
First off, the group confirmed what many have thought for a while: they are not Chinese and they are not based in China. At least, most of them are not. This is why the text in Chinese is usually poorly translated (probably using Google Translate or Bing Translator). Anonymous China is working on fixing that. Here are the tweets that followed my last article:
Who want to translate what we do for Chinese, contact: email@example.com And for safety, anyone will know that were you to translate.
For who doesn’t understand the part “anyone will know”, it’s ‘anyone will never’🙂
Our new email is firstname.lastname@example.org
All the people that couldn’t send the mails, try again for the new email. All that could, don’t send.
ReTweet! #GlobalREvolution coming! Fight for your rights!
Then it was back to business as usual. The Chinese government website tygtzy.gov.cn was hacked and defaced, though it appears to be back and operational at the time of writing. Then the group teamed up with some other hackers and targeted two Ugandan websites: unbs.go.ug and jlos.go.ug. The first one had one username and password posted on PasteBay while the second had two usernames and passwords posted, also on PasteBay.
Here are the tweets about the most recent attacks:
So Chinese Gov hacked again😀 let’s see what we have today😉
http://tygtzy.gov.cn/ hacked differently😀 message in chinese \\\ lulz
http://tygtzy.gov.cn/index_en.htm and here you have the hacked english version hahah
http://jlos.go.ug/ hacked by @_f0ws3r , Anonymous China and @MalSec Leak:
@YourAnonNews in the deface http://tygtzy.gov.cn/ this time with other song😀
Chinese people, protest, stand up, wake up!
On a related note, I found it interesting that the group has started using pastebay.net instead of pastebin.com (see also: Pastebin to hunt for hacker pastes, Anonymous cries censorship). This may be a coincidence, but we’ll see soon enough if other Anonymous factions abandon Pastebin as well.
这两天为了让手头的山寨Android tablet Ten3翻墙，折腾了半天。虽然最后还是没能成功，但对伟大的GFW和如何翻墙，有了更多的认识。
翻墙之前的首先要了解GFW是如何干扰网络连接的，具体可见 GFW封锁网络的几种常用方法。 干扰大体可以分为DNS干扰，IP封锁，TCP连接干扰，SSL干扰。翻墙的方法虽然千差万别，但基本思路都是一样：建立本地和国外服务器的加密通道，将 本地的DNS查询连接，HTTP/HTTPS中转至国外服务器。对于DNS服务，除了加密中转通道，还需要设置正确的DNS服务器(like Google or opendns)来解决DNS劫持问题。
从上面可以看到，利用国外服务器建立加密中转通道是翻墙的关键。TCP/IP连接是分层架构，因此较高层上的加密中转只能适应部分程序。 openvpn/l2tp/pptp都是较低层面的加密连接，可以让所有的本地连接加密中转。SSH的socket proxy可以加密中转http/https的接连。需要注意的是http proxy并不能处理ftp和https的中转。https的中转需要socket proxy来处理。
除了国外服务器，加密中转的另外一个问题就是如何将本地连接转发至加密通道上。openvpn/l2tp/pptp在内核空间增加了一个 network adapter，所以只需要通过路由表就可以进行转发。对于http/socket proxy通道，如果application支持proxy，则可以自动转发；反之则需要利用iptables将http/https连接通过 transparent SOCKS proxy转成socket proxy。
当加密中转连接到到服务器端时，还需要在服务器端做一些设置以便进行中转。openvpn/l2tp/pptp是通过iptables在内 核实现转发。ssh即可以利用-D选择转发socket，或者利用端口映射将socket转发至socket proxy或者http proxy。
l2tp和pptp是大多数android设备都默认支持的VPN。但很多router或者firewall不支持pptp，常常会遇见一些莫名其 妙的问题。openvpn需要android内核支持tun.ko模块。同时android还需要有binary openvpn application。整个安装过程较为复杂。
sshtunnel/gaeproxy是socket/http level的加密中转，因此需要利用到android中的iptable及相应的kernel module。
Ten3由于没有iptable相应模块。所以无法使用ssh。 pptp和/l2tp的binary application貌似有问题，无法连接pptpd服务端。但万幸的是tun.ko模块原生自带，只要在市场下载openvpn installer和openvpn setting就可以使用了。为避免dns污染，还需要装一个改变dns的软件。