牧天的故事

Google昨日在其官方博客上发表文章，称有可能关闭Google.cn以及其中国办事处，退出在中国的运营。翻译如下：

Google对中国的新态度

发布者 David Drummond, SVP，SVP, Corporate Development and Chief Legal Officer （高级副总裁，企业发展和首席法律官）

2010-01-12 15:00:00

像许多其他著名的组织一样，我们也会不定期地面临不同程度的网络攻击。09年12月中旬，我们监测到一起高度复杂的有针对性的攻击，这次攻击来自中国，针对我们的基础设施，想要盗窃了来自Google的一些具有知识产权的信息。然而，我们很快就查明，这次攻击一开始好像是单纯的安全事件，尽管很重要，但它确实与其他攻击是不一样的。

首先，这次攻击不只在Google上发生。我们调查后发现，至少还有20个大型公司也遭受了同样的针对性攻击。这些公司涵盖了广泛的商业领域，包括互联网、金融、科技、媒体和化工等领域。我们目前正在通知这些公司，并且与美国有关当局进行协作。

其次，我们有证据表明，这些攻击者的主要目的是访问中国人权主义者的Gmail账户。 根据我们到现在为止的调查，我们相信他们的攻击并没有实现这一目的。只有两个Gmail账户似乎已被非法访问过，但是这次行动仅获取了账户的有限信息（如账户创建的日期）和邮件主题列表，而电子邮件内容没有被获取。

再者，在这项调查的有一部分和对Google的攻击并不相关。但是我们发现，数十个在美国、中国和欧洲的Gmail用户，这些用户也是在中国的人权倡导者，他们的账户基本是通过第三方平台被例行访问。这些账户还没有通过Google的任何安全漏洞被非法访问过，但这些用户的电脑极有可能被网路钓鱼诈骗或放置恶意软件。

我们已经从这次攻击种获取了很多信息来改进基础设施和建筑，从而提升Google和我们用户的安全防护。就个人用户而言，我们建议在电脑上部署信誉高的反病毒和反间谍软件，为他们的操作系统安装补丁，并且更新其网页浏览器。在点击即时消息和电子邮件中的链接时要非常保持谨慎；在被要求回答或分享个人隐私信息如密码时也要非常小心。 你可以在这儿阅读我们更多的网络安全建议。如果你想要了解这些攻击的信息可以阅读美国政府的报告（PDF格式）、Nart Villeneuve的博客和关于GhostNet间谍事件的简报。

我们已采取了一些特别的措施和很大范围的人士分享了这些攻击的信息，不仅仅是因为安全和人权的因素，也因为这个信息深入全球范围关于言论自由讨论的核心。在过去二十年里，中国的经济改革规划和公民的企业思想已经使亿万中华儿女脱离了贫困。 事实上，这个伟大的国家已经成为世界经济进步和发展的核心。

我们在2006年1月推出了Google.cn。为中国人民提供更多信息和一个开放的互联网，我们坚信这一举措所带来的益处要大于我们同意审查部分搜索结果所引起的不适。当时我们明确表示：“我们将会密切监视中国的政策，包括新的法律和其他一些对我们的服务的限制。如果我们确定无法完成目标，我们将毫不犹豫地重新考虑对待中国的态度。”

这些攻击，以及他们所宣布的监督与控制，结合过去一年试图进一步限制网上言论自由，已经使我们得出结论：我们必须重新审视我们在中国业务运营的可行性。

我们已经决定，我们不愿再继续审查Google.cn上的内容。所以在未来的几个星期内，我们将与中国政府磋商我们的观点：在法律范围内，我们能够运作一个不用过滤内容的搜索引擎，如果完全有可以的话。 我们认识到，这很可能意味着必须关闭Google.cn，甚至是我们在中国的办事处。

重新审视我们在中国的业务运营，这个决定很艰难，同时我们也知道这可能产生影响深远的后果。 我们要明确，这次决策变动主要是我们在美国的管理人员所作出的。我们在中国的员工极其努力的工作成就了Google.cn今天的成功，但是他们并没有参与此次决策，也不知情。我们承诺将负责地解决这次变动所带来的非常困难的问题。

翻译：牧天

原文出处：http://googleblog.blogspot.com/2010/01/new-approach-to-china.html

原文：

A new approach to China

1/12/2010 03:00:00 PM

Like many other well-known organizations, we face cyber attacks of varying degrees on a regular basis. In mid-December, we detected a highly sophisticated and targeted attack on our corporate infrastructure originating from China that resulted in the theft of intellectual property from Google. However, it soon became clear that what at first appeared to be solely a security incident--albeit a significant one--was something quite different.

First, this attack was not just on Google. As part of our investigation we have discovered that at least twenty other large companies from a wide range of businesses--including the Internet, finance, technology, media and chemical sectors--have been similarly targeted. We are currently in the process of notifying those companies, and we are also working with the relevant U.S. authorities.

Second, we have evidence to suggest that a primary goal of the attackers was accessing the Gmail accounts of Chinese human rights activists. Based on our investigation to date we believe their attack did not achieve that objective. Only two Gmail accounts appear to have been accessed, and that activity was limited to account information (such as the date the account was created) and subject line, rather than the content of emails themselves.

Third, as part of this investigation but independent of the attack on Google, we have discovered that the accounts of dozens of U.S.-, China- and Europe-based Gmail users who are advocates of human rights in China appear to have been routinely accessed by third parties. These accounts have not been accessed through any security breach at Google, but most likely via phishing scams or malware placed on the users' computers.

We have already used information gained from this attack to make infrastructure and architectural improvements that enhance security for Google and for our users. In terms of individual users, we would advise people to deploy reputable anti-virus and anti-spyware programs on their computers, to install patches for their operating systems and to update their web browsers. Always be cautious when clicking on links appearing in instant messages and emails, or when asked to share personal information like passwords online. You can read more here about our cyber-security recommendations. People wanting to learn more about these kinds of attacks can read this U.S. government report (PDF), Nart Villeneuve's blog and this presentation on the GhostNet spying incident.

We have taken the unusual step of sharing information about these attacks with a broad audience not just because of the security and human rights implications of what we have unearthed, but also because this information goes to the heart of a much bigger global debate about freedom of speech. In the last two decades, China's economic reform programs and its citizens' entrepreneurial flair have lifted hundreds of millions of Chinese people out of poverty. Indeed, this great nation is at the heart of much economic progress and development in the world today.

We launched Google.cn in January 2006 in the belief that the benefits of increased access to information for people in China and a more open Internet outweighed our discomfort in agreeing to censor some results. At the time we made clear that "we will carefully monitor conditions in China, including new laws and other restrictions on our services. If we determine that we are unable to achieve the objectives outlined we will not hesitate to reconsider our approach to China."

These attacks and the surveillance they have uncovered--combined with the attempts over the past year to further limit free speech on the web--have led us to conclude that we should review the feasibility of our business operations in China. We have decided we are no longer willing to continue censoring our results on Google.cn, and so over the next few weeks we will be discussing with the Chinese government the basis on which we could operate an unfiltered search engine within the law, if at all. We recognize that this may well mean having to shut down Google.cn, and potentially our offices in China.

The decision to review our business operations in China has been incredibly hard, and we know that it will have potentially far-reaching consequences. We want to make clear that this move was driven by our executives in the United States, without the knowledge or involvement of our employees in China who have worked incredibly hard to make Google.cn the success it is today. We are committed to working responsibly to resolve the very difficult issues raised.

Posted by David Drummond, SVP, Corporate Development and Chief Legal Officer