Why Google want to quit the “Where Amazing Happens” country? Why now? For what?

I’d like to pick out the important parts from the post on Search Engine Land and please use the Google Translate or something else to XXX them.

Google has revealed that the Gmail accounts of Chinese h@u@m@a@n rights activists were targeted last December in a hacking attempt. That, along with other issues, has convinced the company that it will no longer do censor results China as the Chinese g@o@v@e@r@n@m@e@n@t wishes.

-> Some Gmail accounts were attacked (which belongs to some Chinese h/u/m/a/n rights activists).

-> The hackers came from China. ( Do you have some ideas?)

-> Google will no longer do censor results in China as XXX wishes because of that and with other issues.

On Google’s blog, they said:

We launched Google.cn in January 2006 in the belief that the benefits of increased access to information for people in China and a more open Internet outweighed our discomfort in agreeing to censor some results. At the time we made clear that “we will carefully monitor conditions in China, including new laws and other restrictions on our services. If we determine that we are unable to achieve the objectives outlined we will not hesitate to reconsider our approach to China.

-> Google is continuously monitoring the conditions in China, including new laws and other restrictions on Google’s services.  ( How many services and products  have been blocked in China?)

-> If they determine that they are unable to achieve the objectives outlined, they will reconsider their approach to China without hesitate. ( So, the determination has been done…)

And, what now?

These attacks and the surveillance they have uncovered–combined with the attempts over the past year to further limit free speech on the web–have led us to conclude that we should review the feasibility of our business operations in China. We have decided we are no longer willing to continue censoring our results on Google.cn, and so over the next few weeks we will be discussing with the Chinese g@o@v@e@r@n@m@e@n@t the basis on which we could operate an unfiltered search engine within the law, if at all. We recognize that this may well mean having to shut down Google.cn, and potentially our offices in China.

-> Two things, The attacks and the attempts to further limit free speech on the web over the past years, have led Google to conclude that they should review the feasibility of their business operation in China.

-> Google is no longer willing to continue censoring their search results on Google.cn.

-> Google will be discussing with the Chinese g@o@v@e@r@n@m@e@n@t for how to operate an unfiltered search engine within the law in China, if at all.

-> Google recognizes that this may well mean having to shut down Google.cn, and potentially their offices in China.

The decision to review our business operations in China has been incredibly hard, and we know that it will have potentially far-reaching consequences. We want to make clear that this move was driven by our executives in the United States, without the knowledge or involvement of our employees in China who have worked incredibly hard to make Google.cn the success it is today. We are committed to working responsibly to resolve the very difficult issues raised.

-> It is an incredibly hard decision to review their business operation in China.

-> Google knows that it will have potentially far-reaching consequences.

-> This decision is made by Google’s executives in the United States.

-> The employees in China have no connection with this decision.

Why now?

Google says that in mid-December, it detected an attack from China on its “corporate infrastructure” that resulted in the theft of “intellectual property” from Google. What that property was isn’t disclosed, but it seemed to involve trying to access the Gmail accounts of some Chinese human rights activists. Google says no actual emails were recovered.

-> In mid-December, Google detected an attack from China on its “corporate infrastructure”.

-> This attack resulted in the theft of “intellectual property” from Google.

-> The attack seemed to involve trying to access the Gmail accounts of some Chinese h/u/m/a/n rights activists.

-> Google says no actual emails were recovered from that attack.

But…

We have evidence to suggest that a primary goal of the attackers was accessing the Gmail accounts of Chinese h/u/m/a/n rights activists. Based on our investigation to date we believe their attack did not achieve that objective. Only two Gmail accounts appear to have been accessed, and that activity was limited to account information (such as the date the account was created) and subject line, rather than the content of emails themselves.

-> Google have evidence to suggest that the primary goals of the attackers.

-> The goal was accessing the Gmail accounts of Chinese h/u/m/a/n rights activists.

-> Based on Google’s investigation, the attack did not achieve that objective.

-> But two Gmail accounts appear to have been accessed.

-> The activity was limited to account information such as the date the account was created and subject line, rather than the content of emails themselves.

Also as part of its investigation, Google says it has also determined that Gmail accounts of some activists HAVE been accessed but not because of a Google security breach but instead do to activists being victims of malware or phishing attempts:

As part of this investigation but independent of the attack on Google, we have discovered that the accounts of dozens of US-, China- and Europe-based Gmail users who are advocates of h@u@m@a@n rights in China appear to have been routinely accessed by third parties. These accounts have not been accessed through any security breach at Google, but most likely via phishing scams or malware placed on the users’ computers.

-> Google has determined that Gmail accounts of some activists HAVE been accessed.

-> But it wasn’t Google’s fault.

-> These activists are victims of malware or phishing attempts.

Google does not explicitly say that the Chinese g@o@v@e@r@n@m@e@n@t itself was behind or condoning the attacks, nor could I get them to confirm this in talking about the move. But that’s the implication. It makes little sense to tell the Chinese g@o@v@e@r@n@m@e@n@t that you’ll no longer cooperate with it on censorship because of hacking attempts unless you believe those had g@o@v@e@r@n@m@e@n@t approval.

-> Google does not explicitly say that the Chinese g@o@v@e@r@n@m@e@n@t was behind or condoning the attacks.

-> But that’s the implication.

-> Unless Google believes those activities had g@o@v@e@r@n@m@e@n@t approval,  it makes little sense to tell the Chinese g@o@v@e@r@n@m@e@n@t that google will no longer cooperate with it on censorship.

For more information, please visit the following sites/posts:

Search Engine Land

NY Times

© Donald for 作甚@ZUOSHEN.COM, 2010. | 本文永久链接:http://zuoshen.com/2010/01/13/750/ | 16 comments
Post tags: Google

为了尽量达到极速，所以不得已使用非常那个啥的X雷。不过，速度其实没达到最高速度…

后来用uTorrent试了下，几个PT种子果然立竿见影。放上一张cfosspeed的截图。

目前我的硬盘表示情绪稳定…

这不是炫耀帖，嗯…

© Donald for 作甚@ZUOSHEN.COM, 2010. | 本文永久链接:http://zuoshen.com/2010/01/12/749/ | 23 comments
Post tags: Wordpress, 这能有什么标签？！？！

话说对于从来不用百毒的我来说…我居然是通过看别的地方的新闻才知道的…

插入刚才我自己访问的图片一张，可惜没看到当时据说图文并茂的景象。

© Donald for 作甚@ZUOSHEN.COM, 2010. | 本文永久链接:http://zuoshen.com/2010/01/12/744/ | 9 comments
Post tags: Wordpress, 喜悦, 开心, 高兴

NospamNX拦住1630个垃圾评论，Akismet的垃圾队列里10个，其中4个是误杀，6个是我自己看到人肉垃圾以后放进去的…

这几天天天从Akismet里面救评论出来，X。这不，今天Muki不知怎么也跑到垃圾评论队列里了…

由此得出结论，我本打算使用Akismet作为处理人肉垃圾的第二道防线的想法是彻底失败了…而且，就如曾经我就极度看不上Akismet的时候一样，这回Akismet也没让我失望，依然是严重的不靠谱。

就此禁用。

© Donald for 作甚@ZUOSHEN.COM, 2010. | 本文永久链接:http://zuoshen.com/2010/01/09/741/ | 19 comments
Post tags: NoSpamNX, spam

其实我一直感觉Gtalk处于Google比较边缘化的状态，没想到这产品还挺注重本地化的嘛。在世界人民还在用Gtalk 1.0.0.104的时候，简体中文和繁体中文版却升级到了1.0.0.105，这说明Google是多么重视使用中文的群体啊～这个奇怪的1.0.0.105版本的Gtalk也出现挺长时间的了，估计现在应该有很多人在用吧。曾经有消息说都Gtalk都升级到了105，但至少今天（2010年1月7日），我从Google.COM的Gtalk简体中文下载页面下载到的是1.0.0.105，但英文下载页面下载到的仍然是1.0.0.104，而不是105。

不过这个难得领先全球的版本升级了点什么呢…貌似唯一的升级就是，取消了Google Talk原有的从客户端到服务器端的加密，变成了一个完全明文传输的小喇叭型通讯工具。这…你说是一项改进呢还是为了那个啥的一项那个啥呢…

据说在Gtalk的早期版本，只在登录阶段进行加密，但是在后来就更改为全程加密了。关于Gtalk的加密与否，Google官方的答复是这样的：

Please note that the connection between the Google Talk client and the Google Talk server is encrypted. This prevents others from seeing your mail notifications, Friends list, and other personal settings. The encryption also prevents others from seeing messages between your
desktop and Google’s servers. However, encryption is not end-to-end, so there is no guarantee that the messages are encrypted when sent to another user. IMs will not be encrypted in these scenarios:

- Sender/recipient is using Gmail’s chat features over HTTP
- Sender/recipient is on a federated network that doesn’t support
encryption
- Sender/recipient is behind IMLogic or another similar proxy  （来源）

也就是说，正常情况下，理论情况下，没什么特殊情况下，Google Talk和Google Talk的服务器之间的连接是加密的（采用TLS方式加密）。所以正常情况下，其他人通过各种OOXX方式是无法看到你的邮件提示，好友列表，你发送和接收的信息，或者其他个人设置的。但在下列情况中不会加密：

发送者/接受者在通过HTTP方式下的Gmail聊天功能聊天（所以，请使用HTTPS)

发送者/接受者在不支持加密的网络环境中

发送者/接受者在IMLogic或者类似的代理服务之后

所以如果俩人都用Gtalk，都是正常的网络，应该至少大概约摸着收发信息的整个过程都应该是加密的。

那GTalk 1.0.0.105是否也具有这种特性呢？

在Google Talk的维基百科页面上是这么说的：

“在2009年8月26日左右發現，Google提供給中國大陸的Google Talk 1.0.0.105版本，其透過網路傳輸的聊天內容是未經加密的。而為其他國家提供的最新版本為1.0.0.104，是使用TLS加密的。”

感兴趣的朋友可以看看维基百科条目中的引用部分。

不过没有自己调查就没有发言权，到底此时此刻Gtalk是否区别对待不同用户，今天我自己测试了一下1.0.0.104和1.0.0.105两个版本的加密情况。同样按照上面提到的站点中的办法，利用WireShark进行抓包。

首先我使用Gtalk 1.0.0.105测试，感谢流星做麻豆，他使用1.0.0.104英文版：

从图中可以看到，1.0.0.105的信息收发完全是明文传输，而且，相当详细。从收发双方的Gmail地址到信息内容到其他细节，一应俱全。使用这样的聊天工具在网上畅聊，基本上跟用那个不靠谱的聊天工具也差不到哪儿去了。看不看你的聊天内容纯属别人愿意不愿意的问题，你没得选择。

另外，从中还可以看到一个问题，由于Gtalk不是端对端加密，换句话说就算是用1.0.0.104，你也只能保证你发出的信息到Google Talk的服务器这段是加密的，但是从服务器再到收信息那个人那儿的安全就无法保证了。比如如上例，尽管流星使用的是1.0.0.104，但是那只能保证他的信息到服务器是加密的，但是传到我这里的过程就又是明文的了。

下面换用GTalk 1.0.0.104继续抓包：

不管怎么说，我是没从这图里面看到什么我认识的信息，不管是email地址，还是信息本身…而且1.0.0.104也没什么需要设置的，直接就是现在这个样子了。

你说这两个版本哪个更安全？如果你非要用中文版，那当我没说。如果你不在乎隐私或者“我也没说什么大不了的事情，爱看不看”，那也当我没说…不过要我自己推荐的话，当然还是用英文的1.0.0.104了，并且是最好大家都用，这样才能达到Gtalk原本设计的加密效果。

不知道这不是一个规律，很多东西的“中文版”都会有额外的功能或者阉割的功能，哦对了，这也要那个啥特色。

如果你在用第三方客户端，比如Miranda IM或者Pidgin，找找你的Gtalk账户里的选项，应该有一项是TLS加密，勾选它也可以达到客户端到服务器的加密效果。如果你要更安全，那么你需要一些特别的东西了。

最简单最易用的端对端加密是什么呢？别用Gtalk了，换Skype吧，并且还不能是那个XXX Skype，得是原装的…如果你非要用Gtalk，那么Miranda IM是个理想的选择。

曾经我写过一篇如果用另一款多协议集成类IM Pidgin加密Gtalk/MSN/QQ的文章，但是遗憾的是由于用于加密的Pidgin Encryption插件很久没有更新了，无法在最新版的Pidgin中使用，所以这个办法只能放弃。不过还好，Miranda IM也有非常丰富的插件，同样可以实现非常安全的端对端加密。

实现Miranda IM的端对端加密也很简单，需要两个两个插件： SecureIM和Crypto++。前者是加密插件，后者是插件所需的库。然后呢既然是端对端那么准备聊天的两个人都需要安装这两个插件。启用，设置，俩人配对，搞定。通过它们可以实现AES192或者PGP/GPG加密，想偷看？难度比较大…端对端加密的意义还在于，通过识别密钥，你还能够确定你和对方是否都在加密状态下，并且和你聊天的是不是真正你想聊得那个人…

如何用Miranda IM实现端对端加密不是这篇文章的主要内容，这篇文章想告诉你的是，如果你在用GTalk 1.0.0.105，如果你对安全和隐私比较在意，请换成更安全的1.0.0.104版本，并且告诉你的朋友也更换。我觉得所有的聊天信息都是明文在网上飞一点也不好玩…

对此感兴趣的朋友，也可以自己下载两个版本进行对比测试，WireShark也是免费软件，使用很方便。

再次祝大家新年快乐！

© Donald for 作甚@ZUOSHEN.COM, 2010. | 本文永久链接:http://zuoshen.com/2010/01/07/740/ | 30 comments
Post tags: Google, Gtalk, Wordpress, 加密, 隐私

忙到爆的这几个月，真是…希望2010年自己还能继续坚持这个blog，嗯…忽然发现挂代理上来比较快…

祝大家2010年都身体健健康康的，事事顺心！暂时能想到的“大家”列在下面，排名不分前后左右东南西北，如有遗漏真不是故意的：

酋长

冰古

aunsen

loke

Yacca

老N

霍师太

Sivan

Macally

流星

老李

Betty姐姐

小郭

火星星

bobosky

猫言猫语

大狗

Louis Han

搜稀奇（我改～呵呵）

卡巴在线那哥们

Rockoy

Wayne

毒龙

Leo.N

xxxl

Swanche

Johnzon

游侠客

志言

小E

PT Ubuntu

Muki (这绝对是失误…)

以及我暂时没想起来的还有所有在我这留过言的朋友们，但是不包括那个啥和那个啥还有那个啥。

拜拜了2009，嗯…

© Donald for 作甚@ZUOSHEN.COM, 2009. | 本文永久链接:http://zuoshen.com/2009/12/31/735/ | 40 comments
Post tags: 新年快乐

比如一款软件它会自动汇报你当前运行的所有进程，以及指定目录中的文件的文件名等等信息，而它并不是一款P2P分享软件，也不是杀毒软件，你会用么？

比如一款软件它会每隔一段时间就自动连网和远程服务器通信，但是内容加密你自己根本无从知晓，用途？往好了说会提供“高度精确”的按照你的口味的广告，不过得先记录你的使用网络习惯，这样的软件你用么？而且还是一款号称可以让浏览器更安全的不怕漏洞所谓XX盾？

比如一款输入法它会自动记录你输入的内容，甚至切换到英文模式下输入的内容它也都能记住，它的更新频率比一般杀软还频繁，联网通讯内容同样你不知情，这样的软件你会用么？

比如一款浏览器可以自动同步你的浏览历史，收藏夹，设置等等内容，但是和它的服务器连接都不是安全连接，而且服务器还位于某个神奇国度，你觉得有没有必要使用这样的浏览器，或者如果非要用的话，还要不要自动同步自己的这些信息呢？

比如一款号称P2P的分享软件却无法控制具体哪些文件可以上传哪些不要上传甚至不知道到底这个软件把上行带宽都占满在干什么，这软件你敢用么？

比如一款即时通讯软件，两人聊天之际还把聊天记录在远程服务器那边在你不知情的情况下还留着一份副本，时不时的再搜索一下你的特定目录中的文件，这样的软件你会用么？

有意思的是，这些软件都很热门，用户群也很庞大。如果你问一个用户，你不觉得这些软件的这些行为危害，威胁到了自己的隐私，或者至少让自己感到有不安全感了吗？典型的答案不外乎：

1. 我没什么见不得人的，X正不怕影子歪。谁愿意看看去。

2. 无所谓了，我又没犯法…

所以…对隐私权的无视导致软件商们的明目张胆地收集用户信息，然后再把这些用户信息用到各种地方去…

于是乎，如今很多国内流行的主流软件都这德行，升级赶超杀毒软件，杀毒软件管得宽的犹如HIPS，开个输入法还有联网动作，开设置继续联网，用个播放器还好几个进程，号称防护浏览器漏洞，结果也不知道到底它在上传什么用户信息…不是木马胜似木马…

解决方案：防火墙，或者换其他的…用防火墙将某些频繁联网的进程完全阻止，比如输入法的某些神奇进程…有些则只能换用替代软件，只要用就肯定解决不了的，比如杀软，比如什么漏洞防护，比如什么即时通讯软件…当然还有一种解决方案：

“我又没什么见不得人的，谁愿意看看去”。

如今的软件们啊，唉～靠谱的太少了…

© Donald for 作甚@ZUOSHEN.COM, 2009. | 本文永久链接:http://zuoshen.com/2009/12/12/734/ | 28 comments
Post tags: AntiVirus

我这是电信宽带，嗯…看来在访问国外网站上都是半斤八两，这不秀个带宽还得两遍=。=

话说看这个趋势，以后上网也就是聊聊QQ，看看新闻联播，然后再去偷偷菜抢枪车位什么的了，要嘛宽带..

BT站要关，VeryCD估计也好不了，唉…

© Donald for 作甚@ZUOSHEN.COM, 2009. | 本文永久链接:http://zuoshen.com/2009/12/07/733/ | 25 comments
Post tags: Wordpress, 这能有什么标签？！？！

放张那天用QQ旋风下载的图吧：

貌似如今瓶颈出在我的路由器上了，真囧…

© Donald for 作甚@ZUOSHEN.COM, 2009. | 本文永久链接:http://zuoshen.com/2009/12/07/732/ | 23 comments
Post tags: Wordpress, 这能有什么标签？！？！

昨天找到了一个非常强力非常强大的工具，sougou2google，通过它可将搜狗输入法的细胞词库转为谷歌拼音可用的词库。于是乎，喜欢轻便好用的谷歌输入法的朋友们也能沾上搜狗的光了。

根据作者的介绍，这个工具由java写成，所以想使用它需要先装jdk或者jre。不过作者很体贴，已经把常用的词库都转换好了，可以满足绝大多数人的需要了。

感谢jiazhoulvke开发的这么好的工具，感谢搜狗的好词库，如今谷歌输入法也变得准确多了，嗯…

Sougou2Google词库转换工具以及转换好的词库可以到作者的Google Code项目页下载，如果要自己转换，记得看看作者的说明：）

© Donald for 作甚@ZUOSHEN.COM, 2009. | 本文永久链接:http://zuoshen.com/2009/12/03/729/ | 22 comments
Post tags: Google