China is deploying a tool that can be used to launch huge distributed denial-of-service (DDoS) attacks to enforce censorship. Researchers have dubbed it the Great Cannon.
The first time the tool was seen in action was during the massive DDoS attacks that hit software development platform GitHub last month. The attack sent large amounts of traffic to the site, targeting Chinese anti-censorship projects hosted there. It was the largest attack the site has endured in its history.
That attack was first thought to have been orchestrated using Chinas Great Firewall, a sophisticated ring of networking equipment and filtering software used by the government to exert strict control over Internet access in the country. The firewall is used to block sites like Facebook and Twitter as well as several media outlets.
However, while the Great Cannon infrastructure is co-located with the Great Firewall, it is a separate, offensive system, with different capabilities and design, said researchers at the University of California, Berkeley, and the University of Toronto on Friday.
The Great Cannon is not simply an extension of the Great Firewall, but rather a distinct tool that hijacks traffic to individual IP addresses, and can arbitrarily replace unencrypted content by sitting between the Web server and end usera method known as a man-in-the-middle attack. The system is used to manipulate the traffic of systems outside of China, silently programming browsers to create a massive DDoS attack, the researchers said.
The attack method deployed against Github injected malicious Javascript into browsers connecting to the Chinese search engine Baidu. When the Great Cannon sees a request for certain Javascript files on one of Baidus infrastructure servers that host commonly used analytics, social, or advertising scripts, it appears to take one of two actions. It either passes the request to Baidus servers, which has happened over 98 percent of the time, or it drops the request before it reaches Baidu and instead sends a malicious script back to the requesting user, which has happened about 1.75 percent of the time, the report said.
In the latter case, the requesting user would be an individual outside China browsing a website making use of a Baidu infrastructure server, such as sites with ads served by Baidus ad network. In the DDos attack against GitHub, the malicious script was used to enlist the requesting user as an unwitting participant, the report said.
These findings are in line with an analysis by the Electronic Frontier Foundation (EFF) that described the attack method used last week. According to the EFF, the attack was obviously orchestrated by people who had access to backbone routers in China and was only possible because the Baidu analytics script that is included on sites does not use encryption by default. A wider use of HTTPS could have prevented the attack, it found.
The Berkeley and Toronto researchers confirmed the suspicions about the origin of the attack, saying they believe there is compelling evidence that the Chinese government operates the cannon. They tested two international Internet links into China belonging to two different Chinese ISPs, and found that in both cases the Great Cannon was co-located with the Great Firewall. This strongly suggests a government actor, they said.
While DDoS attacks are quite crude, the Great Cannon can also be used in more sophisticated ways. A technically simple configuration change, switching the system to operating on traffic from a specific IP address rather than to a specific address, would allow Beijing to deliver malware to any computer outside of China that communicates with any Chinese server not employing cryptographic protections, they said.
The rest is here:
China's 'Great Cannon' DDoS tool enforces Internet censorship
- Russian Censorship: Tor, Anonymous VPNs Could Be Target Of Next Crackdown, MP Warns - February 12th, 2015 [February 12th, 2015]
- Russian Censorship: Tor, Anonymous VPNs Could Be Target Of Next Crackdown, Kremlin Warns - February 12th, 2015 [February 12th, 2015]
- Censorship is no way to hold a debate - February 12th, 2015 [February 12th, 2015]
- Irreverent: A Celebration of Censorship - February 12th, 2015 [February 12th, 2015]
- More online censorship coming to closed countries, says report - February 12th, 2015 [February 12th, 2015]
- New book retraces the idea of censorship - February 12th, 2015 [February 12th, 2015]
- Strike Against SOPA & PIPA - February 12th, 2015 [February 12th, 2015]
- Censorship - Wikipedia, the free encyclopedia - February 12th, 2015 [February 12th, 2015]
- Sonam Kapoor: I Don't Believe In Censorship! Supports AIB roast! - Video - February 12th, 2015 [February 12th, 2015]
- FINAL FANTASY XIV: Unnecessary Censorship #4 - Video - February 12th, 2015 [February 12th, 2015]
- China 'great firewall' expands to step up Internet censorship - Video - February 12th, 2015 [February 12th, 2015]
- DIRTY GUILD WARS 2: The Voice Cast - Unnecessary Censorship - Video - February 12th, 2015 [February 12th, 2015]
- Into the Fray Episode 47: NFL Censorship - Video - February 12th, 2015 [February 12th, 2015]
- Weekly Rewind "Feb 1st" Facebook Censorship? - Video - February 12th, 2015 [February 12th, 2015]
- Street Fighter 3 2nd Impact CENSORED - Akuma's Defeat Portrait's Blood - Video Game Censorship - Video - February 12th, 2015 [February 12th, 2015]
- Inside WM: Is Censorship Ever Okay? - Ep. 3 - Video - February 12th, 2015 [February 12th, 2015]
- China Targets Virtual Private Networks In Censorship Push - Video - February 12th, 2015 [February 12th, 2015]
- Tricks to Beat Internet Censorship (On Assignment) - Video - February 12th, 2015 [February 12th, 2015]
- Censorship and Anal Sex - Video Clip with Remi Newman - Video - February 12th, 2015 [February 12th, 2015]
- Censorship and Graphic Content Warnings - Video - February 12th, 2015 [February 12th, 2015]
- KIDS vs. FOOD - Unnecessary Censorship - Video - February 12th, 2015 [February 12th, 2015]
- Christian Censorship of Truthiracy - Video - February 12th, 2015 [February 12th, 2015]
- FaceBook Censorship Video Featuring The M48 War Hammer - Video - February 12th, 2015 [February 12th, 2015]
- Youtube Media Censorship - #NWO 134 - Video - February 12th, 2015 [February 12th, 2015]
- Listen To "Cyberspace Spirit," China's Anthem To Internet Censorship - February 12th, 2015 [February 12th, 2015]
- Facebook self-censorship: What happens to the posts you ... - February 12th, 2015 [February 12th, 2015]
- Unnecessary Censorship of a bunch of Cartoons! - Video - February 12th, 2015 [February 12th, 2015]
- DAT CENSORSHIP! - Let's Play Saints Row IV #3 (Playthrough) - Video - February 12th, 2015 [February 12th, 2015]
- The Rundown Live #414 Open Lines (Corruption,Waking Up,Censorship) - Video - February 12th, 2015 [February 12th, 2015]
- Facebook To Implement Chinese Style Internet Censorship - Video - February 12th, 2015 [February 12th, 2015]
- Paris Fashion Week Debuts Butt Plugs in Reaction to Censorship - Video - February 12th, 2015 [February 12th, 2015]
- Facebook Censorship: What They're Not Telling You - Video - February 12th, 2015 [February 12th, 2015]
- Best of Unnecessary Censorship Compilation by Jimmy Kimmel - Video - February 12th, 2015 [February 12th, 2015]
- Censorship: When Truth Becomes a Casualty - Video - February 12th, 2015 [February 12th, 2015]
- Ice Climber CENSORED - Yeti/Seal Enemy - Video Game Censorship - Video - February 12th, 2015 [February 12th, 2015]
- FaceBook Censorship Video Featuring The M48 Tomahawk - Video - February 12th, 2015 [February 12th, 2015]
- Censorship: The Story Telling Podcast #73 - Video - February 12th, 2015 [February 12th, 2015]
- Rape scene in Hotline Miami 2 and censorship - The Tara Show - Video - February 12th, 2015 [February 12th, 2015]
- FINAL FANTASY XIV: Unnecessary Censorship #3 - Video - February 12th, 2015 [February 12th, 2015]
- Destiny Unnecessary Censorship - Censored Cutscenes - Video - February 12th, 2015 [February 12th, 2015]
- What's Cool in China? Censorship, Teenage Couples, Gay Guys - Video - February 12th, 2015 [February 12th, 2015]
- YOUR Thumbs UP Vanish! + Google Censorship...a Way Around It - Video - February 12th, 2015 [February 12th, 2015]
- Zoom Censorship Examples 9-11 to Bosoms Version 2 - Video - February 12th, 2015 [February 12th, 2015]
- Let's Play The Forest | Part 2 | Censorship! - Video - February 12th, 2015 [February 12th, 2015]
- INTEL Museum censorship - Video - February 14th, 2015 [February 14th, 2015]
- Proxy Database - Access Restricted Information, Bypass Censorship! - Video - February 14th, 2015 [February 14th, 2015]
- Criminal Girls Invite Only CENSORED - Punish/Motivate Time/Spanking - Video Game Censorship - Video - February 14th, 2015 [February 14th, 2015]
- Let's Try: Stay Dead Evolution: Nazi Censorship - Video - February 14th, 2015 [February 14th, 2015]
- Loser Laowai on Censorship in China Part 1 - Video - February 14th, 2015 [February 14th, 2015]
- Censorship? - - Project Censored - February 15th, 2015 [February 15th, 2015]
- Censorship | American Civil Liberties Union - February 15th, 2015 [February 15th, 2015]
- Censorship Update: My channel is back! - Video - February 15th, 2015 [February 15th, 2015]
- Alex Kidd In The Enchanted Castle CENSORED - Rock Paper Scissors - Video Game Censorship - Video - February 15th, 2015 [February 15th, 2015]
- Internet Censorship - Big Brother is Watching Everything - YouTube - Video - February 15th, 2015 [February 15th, 2015]
- What is Censorship? - Global Internet Liberty Campaign ... - February 16th, 2015 [February 16th, 2015]
- GSC Owner Forces Censorship of Youtube Video - Video - February 16th, 2015 [February 16th, 2015]
- Before It's News Lisa Haven Used To Be A Skeptic! (On Chrislam, Facebook Censorship, The Madhi) - Video - February 16th, 2015 [February 16th, 2015]
- Mortal Kombat Shaolin Monks CENSORED - Intro Cutscene/Movie - Video Game Censorship - Video - February 16th, 2015 [February 16th, 2015]
- Top Censored Gaming - Sexy Edition Vol. 1 - Best Video Game Censorship - Video - February 16th, 2015 [February 16th, 2015]
- Soul Calibur CENSORED - Mitsurugi/Arthur Character - Video Game Censorship - Video - February 16th, 2015 [February 16th, 2015]
- Censorship Moments in Rooster Teeth - Video - February 17th, 2015 [February 17th, 2015]
- Chinas Internet Censorship Agency Has Its Own Anthem And We Translated It - Video - February 17th, 2015 [February 17th, 2015]
- Manga Censorship Discussion - Video - February 17th, 2015 [February 17th, 2015]
- Top Censored Covers - Gaming Box Art Vol. 1 - Best Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- Cars 2 CENSORED - Intro Cutscene/Movie - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- Tuff E Nuff CENSORED - Gameplay's Blood - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- Carmageddon (PC) CENSORED - Pedestrians & Blood - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- Carmageddon (PC) CENSORED - Intro Cutscene/Movie - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- Carmageddon 64 CENSORED - Pedestrians & Blood - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- Evil Zone CENSORED - Erel Plowse's Outfit - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- Pilotwings 64 CENSORED -Turin Shroud's Jesus Christ Face/Everfrost Island - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- D2 CENSORED - Inro Cutscene/Movie - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- Another World (Out Of This World) CENSORED - Nudity - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- D2 CENSORED - Jannie's Grandpa Boss/Tentacle - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- OBAMA WANTS INTERNET CENSORSHIP, START A NEW WAR, FORCIBLY VACCINATE YOU, AND SIGN THE TPP. - Video - February 18th, 2015 [February 18th, 2015]
- Silent Hill CENSORED - Grey Child/Mumbler Enemies - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- Mario Party CENSORED - Mini Games/Luigi & Wario Losing - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- Breath Of Fire 4 CENSORED - Ursula Dropping Pants For Sailors - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- Breath Of Fire 4 CENSORED - Fou-Lu Decapitating Emperor Soniel - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]
- Resident Evil 2 CENSORED - Player Death Scenes/Animations - Video Game Censorship - Video - February 18th, 2015 [February 18th, 2015]