Digging Under the Great Firewall of China

IT security expert Sebastian Wolfgarten wanted to find out if he could get around the so-called Great Firewall of China, a vast Internet censorship system that prevents Chinese citizens from accessing information their government deems sensitive. Yesterday, he told Chaos Communication Congress attendees how he did it.

Researchers have known for the past several years that when Chinese citizens type certain phrases like “Falun Gong” and “Taiwan” into Google, they receive very different results than people outside the region do. Wolfgarten wanted to know why, and whether there might be a simple technical way to dig a little escape route through the Great Firewall.

Getting into China's network turned out to be easier than you might imagine. Wolfgarten simply bought a server at a Chinese ISP by phone. Once the server was set up, he could log into it from Germany. And all the data that went through the server would be subject to the same digital censorship that Chinese citizens experience every day. He quickly discovered that when he requested information on Taiwan through his Chinese server, he got no data in return. Sometimes, he couldn't access his server for days on end. When he phoned the ISP for information, workers there told him the server was running. He was just blocked from reaching it.

Over the next year, he tried several methods for getting uncensored data to his Chinese server through the Great Firewall. He would log into the server, then make requests for information about Amnesty.org or Falun Gong. What he discovered was that there are three fairly simple ways to trick the automatic Chinese censorship system.

The first, and easiest, is to use the anonymous network Tor. Though there has been some debate as to whether Tor would work in China, it seems to be successful for now. Another method, which had been previously identified by researchers with the OpenNet Initiative a couple of years ago, involves essentially ignoring censorship commands sent by Chinese servers. Apparently the Great Firewall censors data by responding to forbidden key words with a network command called a "reset." The reset instructs the Chinese computer to drop its connection. The hitch is that the data is still coming in, but injected with the "reset" command. Program your own firewall to ignore "reset" commands and you've got uncensored data.

Crafty anti-censorship types in China can also get uncensored data by doing something called "tunnelling," which seems particularly appropros when dealing with a Great Firewall. Wolfgarten tested what happened when he hid requests for "Falun Gong" inside seemingly-innocuous requests for e-mail or basic network information. A computer outside the Wall unwraps the requests, gets the data, rewraps them and returns them to China uncensored.

Wolfgarten admitted that it's not clear that servers owned by foreigners are subject to the same treatment as Chinese-owned servers. He concluded by saying that a lot more research needs to be done, and invited others to help him.

You can read Wolfgarten's paper about his research here. --Annalee Newitz

Comments

[sourcingmap]

So i also come from China, but i something differert to show to us.
Chinese direct wholesale:http://www.sourcingmap.com
Chinese direc retail:http://www.uxcell.com

[Ray S]

There is an easy way to check in real time if any resource on the web is blocked by the Chinese government. It is at http://www.websitepulse.com/help/testtools.china-test.html