At The Register, Shaun Nichols talks about the new, weaponized Great Firewall of China:
China has upgraded the website-blocking systems on its borders, dubbed The Great Firewall, so it can blast foreign businesses and orgs off the internet.
Researchers hailing from the University of Toronto, the International Computer Science Institute, the University of California Berkeley, and Princeton University, have confirmed what we’ve all suspected: China is hijacking web traffic entering the Middle Kingdom to overpower sites critical of the authoritarian state.
Typically, connections to web servers in the People’s Republic must pass through the nation’s border routers, which may inject malicious JavaScript into the fetched web pages. This code forces victims’ browsers to silently and continuously fire requests at selected targets.
These sites may end up being overwhelmed and crash as a result — a classic denial of service — meaning no one in the world can access them.
It is a clear case of China engineering a way to knock arbitrary websites off the internet for everyone, it seems.
Such an attack was launched last month at California-based GitHub.com, which was hosting two projects that circumvented the Great Firewall’s censorship mechanisms, and GreatFire.org, a website dedicated to fighting China’s web blocking. GitHub mitigated the assault to mostly stay online.
This weaponized firewall has been dubbed the Great Cannon by the researchers, and typically hijacks requests to Baidu’s advertising network in China. Anyone visiting a website that serves ads from Baidu, for example, could end up unwittingly silencing a foreign site disliked by the Chinese authorities.
