---

剛朋友突然丟給我一個翻譯小作業...
就當我說夢話吧（附帶不自殺聲明）


=作業開始=

Hi, how are you? I do not know how exactly are you involved in the student
protests against CSSTA - but if you are, or if you know someone who is (like
member of organization, NGO, student group etc), you should be more cautious
these days on the internet/cyber front. We got reports suggesting increased
likelihood of Chinese driven targeted operations against these.
and the threat of Chinese targeted cyber attacks is considered valid - this
time against the student leaders, and the opposition organizations

（打招呼省略）


而且這些中方的網路攻擊，已受到認可－這次是針對學生領袖、以及異議組織。


I have read something and during my job I got to read some materials that are
not completely public

我由於工作的關係，讀到一些不完全公開的消息。


it will be most likely in one of following two things

有以下兩種可能：

a)denial of service - if they use some websites for cooperation,
communication, distribution of knowledge, these might get taken down

a) 拒絕網路服務－如果他們利用某些網站來串連、交流、或傳遞資訊，這些網站可能會
被撤掉

b) more personal - targeted phishing emails. Basically crafted emails to
representatives of the opposition, trying to take control of their accounts
and computers, steal data and basically all this usual stuff of espionage

b) 較個人的－針對式的釣魚郵件。針對異議領袖製作的郵件，試圖控制他們的帳號和電
腦、竊取個資、和常見的各種間諜行為。


there is not much to do, just have this in mind and be in increased
sensitivity to strange emails - Microsoft .rtf files might be used until
April 8th, masquerade .exe files and infected websites redirects the usual -
do not open attachments, do not visit links you got in the email, be more
suspicious than ever and for the denial of the service - have backups. Both
of the data (like contacts, prepared press kits etc) as well as means of
communication (phone numbers exchanged, different servers for storing
information people are informed about in advance, the usual)

目前我們也沒辦法，但請放在心上，並對奇怪的郵件多加提防－四月八日前不要用
 Microsoft .rtf （因為目前 .rtf 有重大安全漏洞，預計八日更新），小心
 masquerade、.exe 執行檔、網址連結或轉址…這些平常就該小心的東西。不要隨便開附
加檔案、不要打開奇怪郵件裡的連結，把警戒心拉到最高。



There is right now known vulnerability in Microsoft .rtf files - without any

countermeasure other than not to open them at all. If they are used, they
might be able to take over control over the target computer there is
announced fix that should come up by the 8th of April from Microsoft




The rest are just common attack vectors, which are not time specific - these
types like sending you email with file with .exe extension, .swf or redirect
to a webpage where these files are stored. But this is usually a common
attack technique, so nothing specific can be done to prevent it, other than
careful thinking




this is from our sources we use in our investigations, that we consider
trusted (and pay huge money for them:)) )

這是一個我們公司作調查用、值得信賴的來源（因為我們付了很可觀的 $$ 給這些來源
(燦笑)）


=作業結束=



總之請幫忙告訴你身邊的人，參與越深的越要小心

有些人很奇怪，老愛當北風，想把我們的外套吹掉...
那就給他們看看我們的實力和意志吧！大家加油！

版權沒有，歡迎隨意傳播、再製（請幫排版 大感謝）


--
--
※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 114.47.30.16
※ 文章網址: http://www.ptt.cc/bbs/FuMouDiscuss/M.1396455621.A.EAD.html