| jarod's profile格物致知(Thinking&Walking)PhotosBlogLists | Help |
格物致知(Thinking&Walking)1/15/2010 其实很多人的国籍是Google,不是吗?A new approach to China
1/12/2010 03:00:00 PM
Like many other well-known organizations, we face cyber attacks of
varying degrees on a regular basis. In mid-December, we detected a
highly sophisticated and targeted attack on our corporate
infrastructure originating from China that resulted in the theft of
intellectual property from Google. However, it soon became clear that
what at first appeared to be solely a security incident--albeit a
significant one--was something quite different.First, this attack was not just on Google. As part of our investigation we have discovered that at least twenty other large companies from a wide range of businesses--including the Internet, finance, technology, media and chemical sectors--have been similarly targeted. We are currently in the process of notifying those companies, and we are also working with the relevant U.S. authorities. Second, we have evidence to suggest that a primary goal of the attackers was accessing the Gmail accounts of Chinese human rights activists. Based on our investigation to date we believe their attack did not achieve that objective. Only two Gmail accounts appear to have been accessed, and that activity was limited to account information (such as the date the account was created) and subject line, rather than the content of emails themselves. Third, as part of this investigation but independent of the attack on Google, we have discovered that the accounts of dozens of U.S.-, China- and Europe-based Gmail users who are advocates of human rights in China appear to have been routinely accessed by third parties. These accounts have not been accessed through any security breach at Google, but most likely via phishing scams or malware placed on the users' computers. We have already used information gained from this attack to make infrastructure and architectural improvements that enhance security for Google and for our users. In terms of individual users, we would advise people to deploy reputable anti-virus and anti-spyware programs on their computers, to install patches for their operating systems and to update their web browsers. Always be cautious when clicking on links appearing in instant messages and emails, or when asked to share personal information like passwords online. You can read more here about our cyber-security recommendations. People wanting to learn more about these kinds of attacks can read this Report to Congress (PDF) by the U.S.-China Economic and Security Review Commission (see p. 163-), as well as a related analysis (PDF) prepared for the Commission, Nart Villeneuve's blog and this presentation on the GhostNet spying incident. We have taken the unusual step of sharing information about these attacks with a broad audience not just because of the security and human rights implications of what we have unearthed, but also because this information goes to the heart of a much bigger global debate about freedom of speech. In the last two decades, China's economic reform programs and its citizens' entrepreneurial flair have lifted hundreds of millions of Chinese people out of poverty. Indeed, this great nation is at the heart of much economic progress and development in the world today. We launched Google.cn in January 2006 in the belief that the benefits of increased access to information for people in China and a more open Internet outweighed our discomfort in agreeing to censor some results. At the time we made clear that "we will carefully monitor conditions in China, including new laws and other restrictions on our services. If we determine that we are unable to achieve the objectives outlined we will not hesitate to reconsider our approach to China." These attacks and the surveillance they have uncovered--combined with the attempts over the past year to further limit free speech on the web--have led us to conclude that we should review the feasibility of our business operations in China. We have decided we are no longer willing to continue censoring our results on Google.cn, and so over the next few weeks we will be discussing with the Chinese government the basis on which we could operate an unfiltered search engine within the law, if at all. We recognize that this may well mean having to shut down Google.cn, and potentially our offices in China. The decision to review our business operations in China has been incredibly hard, and we know that it will have potentially far-reaching consequences. We want to make clear that this move was driven by our executives in the United States, without the knowledge or involvement of our employees in China who have worked incredibly hard to make Google.cn the success it is today. We are committed to working responsibly to resolve the very difficult issues raised. 谷歌中国称将停止内容审查 谷歌中国称将停止内容审查
英国《金融时报》记者联合报道 联合报道
2010-01-13 (www.ftchinese.com)
谷歌(Google)表示将冒着被赶出全球人口最多的互联网市场的危险,停止对其在华搜索服务颇具争议的审查活动。此前谷歌宣称受到来自中国的黑客攻击,攻击者试图进入谷歌及其它国际企业的网络系统。 谷歌还表示,已经发现证据证明有人企图侵入其Gmail邮件系统,但仅成功进入两个账户。此外,还发现其它众多试图诱骗世界各地“数十位”人权活动人士的行为,目的是获取他们的电子邮件信息。 这一惊人姿态标志着中国与世界其它地区不断恶化的网络关系陷入了新的低谷。此前曾经出现过大量源自中国的网络攻击行为和收紧互联网审查的举措。 美国情报官员认为,美国国防承包商曾遭遇的多起重大安全漏洞事件,其幕后主谋是由中国政府支持的中国黑客。在一些攻击中,黑客们利用了此前并不为人所知的软件漏洞,方式与发送给中国异见人士的诈骗性电子邮件类似。 谷歌表示,去年12月中旬,公司辨识出“来自中国”、针对其企业系统的“技术高度复杂、有目的性的攻击”。谷歌补充道,公司还发现证据表明,另有“至少”20家金融、媒体以及其它领域的公司也受到类似攻击。 一位与谷歌关系密切的人士表示,谷歌公司没有证据证明这些网络攻击得到了中国政府的批准。然而,另一位了解谷歌公司思维模式的人士称,如果不是相信这些攻击得到了官方的支持,谷歌是不会采取如此极端的举措的。 谷 歌公司在官方博客上发表的声明称:“这些攻击以及它们所暴露的监视行为——加上过去一年里试图进一步限制网络言论自由的行为——致使我们得出如下结论:我 们必须重新评估在中国商业运营的可行性。公司已决定,不愿继续审查中文网站Google.cn上的搜索结果,因此未来几周里,公司将就能否以及如何在法律 允许的范围之内运营一个内容不经过滤的搜索引擎与中国政府进行谈判。我们认识到,这很可能意味着公司将不得不关闭中文网站,甚至可能包括我们在中国的办事 处。” 终止对其中国搜索服务的自我审查意味着谷歌撤销了其最具争议的决定之一:2006年,为了换取在华运营中文服务的许可,谷歌同意屏蔽部分网站。 这 一决定激起了全球范围的批评,并导致谷歌内部产生分歧。以联合创始人谢尔盖•布林 (Sergey Brin)为首的一些高管对此举深感不满。据一位了解谷歌公司的人士称,在去年年中,谷歌就是否应该退出中国市场进行了更认真的考虑,但另一位人士表示, 那些网络攻击显然才是最新决定的导火索。 “我认为此举意义重大,凸显出了谷歌公司是如何看待网络言论自由及隐私权的,”人权观察 (Human Rights Watch)组织的商业与人权项目(Business and Human Rights programme)主管阿文德•加内桑(Arvind Ganesan)表示。“更重要的是,这凸显出为了关闭互联网,中国政府会尽多大的努力,无论是在审查网络内容方面,还是在试图获取用户信息方面。而这一 次,为了获取信息还进行了跨越国界的攻击。” 网络安全专家拉法尔•罗霍辛斯基(Rafal Rohozinski)表示,谷歌和中国政府即将进行的最后摊牌可能会从根本上改变互联网的发展。他认为,如果中国政府决定禁止谷歌在中国境内为网站制作 索引,可能会致使全球的互联网四分五裂。罗霍辛斯基曾经帮助发现了中国窃听Skype的行为。 美国众议院情报委员会(House Intelligence Committee)代表、帕洛阿尔托民主党议员安娜•G•埃舒(Anna G. Eshoo)表示:“我深深感到不安,担心另一波攻击即将从中国发起。这种攻击让人无法接受,而且会破坏全球经济的信心。我强烈要求拥有此类信息的其它公 司能够挺身而出。” 英国《金融时报》理查德•沃特斯(Richard Waters)、克里斯•纳托尔(Chris Nuttall)、约瑟夫•梅恩(Joseph Menn)旧金山报道。 译者/何黎 关于Google中国的离去 冬天来了,春天还会远吗? 1/13/2010 满城找ATM 大早去车站买月票,Zhoux成了Ryan和我债权人。晚上下班去城里找atm取钱,发现最近的atm无法取现,于是进行了一次满城寻找,最后在一条小街上看到3个并排的ATM,真是让人内牛满面啊。 1/6/2010 可能到来(或者已经到来的)寂静的冬天
冬天来了,春天还会远吗? 1/5/2010 华尔街日报报道的克鲁格曼两个感慨
12/31/2009 ZT,崇民随笔——汪洋、仇和,离我很远又很近
2010新年祝愿 还等个2年,看看有没有好转。至少还是可以看到像汪洋这样(目前还算)靠谱的官员。希望还在,耐心点。 |
|
||||
|
|