China's "Great Cannon"
Interesting research: “An Analysis of China’s ‘Great Cannon.’”
Abstract: On March 16th, 2015, the Chinese censorship apparatus employed a new tool, the “Great Cannon”, to engineer a denial-of-service attack on GreatFire.org, an organization dedicated to resisting China’s censorship. We present a technical analysis of the attack and what it reveals about the Great Cannon’s working, underscoring that in essence it constitutes a selective nation-state Man-in-the-Middle attack tool. Although sharing some code similarities and network locations with the Great Firewall, the Great Cannon is a distinct tool, designed to compromise foreign visitors to Chinese sites. We identify the Great Cannon’s operational behavior, localize it in the network topology, verify its distinctive side-channel, and attribute the system as likely operated by the Chinese government. We also discuss the substantial policy implications raised by its use, including the potential imposition on any user whose browser might visit (even inadvertently) a Chinese web site.
Subscribe to comments on this entry
Daniel • September 4, 2015 9:20 AM
As background, how is one supposed to know if one is visiting a Chinese website other than if it has the country’s TLD? I am admitting my ignorance here but to me Chinese and Japanese characters all look the same. So if I were to inadvertently click on a link and find myself on a Chinese site, how would I know?