WikiLeaks Mirror Sites Lose Web Hosting Services

報告者：劉旭哲

• 前情提要：– 11/28 公布文件 & 移至 Amazon Cloud– 12/03 Amazon 終止與 Wikileaks 的服務– 12/09 Amazon 遭受報復者的 DDoS– 12/09~ 專注 DDoS 於 PayPal 、 MasterCard 等不

提供帳戶服務的銀行• And now… ？？？

• Web host SiteGround has suspended the accounts of at least two WikiLeaks mirror sites

• SiteGround and its upstream provider , SoftLayer

• Claim the presence of the files put the host at risk for a DDoS attack.

• Violate the company’s Acceptable Use Policy and ToS.

• One user, Mark McCoy, posted on his blog the entire e-mail thread between him, SiteGround and SoftLayer.

• In letter, initially informed McCoy ： • "some illegal activity" had been performed

through his site.• "severely" violated SiteGround’s Terms of Use

and Acceptable Use Policy.– Be hacked 〈 FTP 〉– McCoy got log about his account.

• SiteGround said in the letter that when "illegal activity" is detected

• The company had to "take immediate actions to stop that activity," or risk having the entire server "unplugged."– 要求刪除文件或停止使用服務

• “Before I delete the ‘evidence,’ could you tell me what the exact violation is ？ "wrote McCoy

• He had malware or an exploit on the site, not HTML and Javascript files.– But no update

• It's incredibly disappointing to see more service providers cutting off customers simply – Because they decide (or fear) that content is too volatile

or unpopular to host– They can cut off anyone for anything

• WikiLeaks lost its Web and DNS services shortly after it began posting the leaked cables.

• Since then, it has moved to non-U.S.-based providers and relies on more than 1,000 mirror sites to stay online.

• http://www.eweek.com/c/a/Security/WikiLeaks-Mirror-Sites-Lose-Web-Hosting-Services-836497/

• http://markmccoy.com/wp/2010/12/14/government-uses-private-enterprise-to-stifle-wikileaks-support/