Law news
Google to stop censoring search results in china after hack attack
GOOGLE has decided to stop censoring search results in China, after discovering that someone based in that country had attempted to hack into the e-mail accounts of human rights activists. The company disclosed the move in a startling announcement posted to its blog late Tuesday, January 12, 2010.
Google said it was prepared to pull its business out of China, if issues around the surveillance and its decision to stop censoring results could not be resolved with the Chinese government.
Although the company did not accuse the Chinese government of being behind the hack attacks, Google said that the attacks, combined with attempts by China over the last year to “further limit free speech on the web” led it to conclude that it needed to “review the feasibility of our business operations in China.”
The company decided it will no longer censor search results on Google.cn, which it had been doing as a concession to the Chinese government since 2006 in order to be able to operate in China. The company didn't say when it would stop censoring material but stated that it would be discussing with Chinese authorities how it might continue to operate legally in China, if at all, with an unfiltered search engine.
“We recognize that this may well mean having to shut down Google.cn, and potentially our offices in China,” wrote David Drummond, Google's chief legal officer and senior vice president for corporate development.
A source knowledgeable about the issue told Threat Level that the company is concerned about the repercussions of its decision on its employees in China. The source said the company timed its announcement for late Tuesday in the United States to come after the close of the stock market but also to coincide with early morning in China so that employees there would learn about what was happening before they arrived to work.
The search and advertising giant discovered in December that it was the target of a “highly sophisticated” cyber attack on its corporate infrastructure, which resulted in the theft of intellectual property. However, in investigating the incident, the company wrote on its blog, it soon realized the attack was something more than a simple security breach.
At least 20 other large companies were targeted as well, including other internet and technology companies as well as businesses in the financial, media and chemical sectors.
Google concluded that the primary goal of the attackers who targeted its network was to hack into the Gmail accounts of Chinese human rights activists. The attackers appeared, however, to succeed at obtaining access to only two accounts. That access was limited to basic account information, such as the date the account was created and the subject lines of e-mail, not the content of the correspondence. Google spokesman Gabriel Stricker told Threat Level that the company has already notified the owners of those accounts.
Stricker also told Threat Level that the company went public with the information as quickly as it could. “We have been working hard to secure our systems, confirm the facts, and notify the relevant authorities,” he said.
The source who is knowledgeable about the investigation, however, told Threat Level that Google's decision to disclose the attack on Tuesday was also partly due to a decision made by the other targeted companies to keep the attack under wraps. “They made a specific decision not to go public,” the source said. “You can either go out [with the information] or not, and for whatever reason, they've decided not to [disclose].”
He said Google felt it was important to alert the people who are potentially affected by the attack the activist community. Shortly after Google disclosed the hack, Adobe posted its own announcement, disclosing that it became aware Jan. 2 that it had been targeted in a “sophisticated, coordinated attack against corporate network systems managed by Adobe and other companies.”
Adobe wrote that it currently had no evidence to indicate that any sensitive information belonging to customers or the company had been compromised.
The source familiar with the investigation told Threat Level that the intellectual property the hackers obtained from Google was not data that would give them a business advantage over the company, but data that would help the hackers gain access to the activist accounts.
The source said that Google was able to determine definitively that the attack originated in China, and that the attack was sophisticated in a way that Google does not generally experience. The source added that the implications of the attack are “extremely dark and extremely disturbing.”
“This is truly, truly beyond the pale,” he said. “The political nature of this and the attempt to monitor activists, not only in China but out of it, is chilling.”
In a separate investigation, the company said it discovered that the Gmail accounts of dozens of human rights advocates in the United States, China and Europe were accessed by third parties. These breaches, however, appeared to be the result of phishing attacks targeted at the users with the aim of stealing their account login credentials.
Google launched its Chinese-language search engine, Google.cn, in January 2006. The company said at the time that it did so in the belief that a search engine would help open access to information for Chinese residents. To obtain permission to operate in China, however, the company had agreed to censor search results that the Chinese government deemed objectionable. Google was harshly criticized by civil liberties groups for its concession to Chinese authorities. The company now appears to be regretting that decision.
Source: UN Wire.
