We’re all aware of the Chinese Great Firewall, the tool the Chinese government uses for mass censorship and for safeguarding and strengthening its totalitarian control over the country and its population. It turns out that through a Chinese shell company called Geedge Networks, China is also selling the Great Firewall to other totalitarian regimes around the world. Thanks to a massive leak of 500 GB of source code, work logs, and internal communication records, we now have more insight into how the Great Firewall works than ever before, leading to in-depth reports like this one from InterSecLab.
The findings are chilling, but not surprising. First and foremost, Geedge is selling the Great Firewall to a variety of totalitarian regimes around the world, namely Kazakhstan, Ethiopia, Pakistan, Myanmar, and another unidentified country. These governments can then ask Geedge to make specific changes and ask them to focus on specific capabilities to further enhance the functionality of the Great Firewall, but what it can already do today is bad enough.
The suite of products offered by Geedge Networks allow a client government unprecedented access to internet user data and enables governments to use this data to police national and regional networks. These capabilities include deep packet inspection for advanced classification, interception, and manipulation of application and user traffic; monitoring the geographic location of mobile subscribers in real time; analyzing aggregated network traffic in specific areas, such as during a protest or event; flagging unusual traffic patterns as suspicious; creating tailored blocking rules to obstruct access to a website or application (such as a VPN (Virtual Private Network) or circumvention tool); throttling traffic to specific services; identifying individual internet users for accessing websites or using circumvention tools or VPNs; assigning individual internet users reputation scores based on their online activities; and infecting users with malware through in-path injection.
↫ The Internet Coup: A Technical Analysis on How a Chinese Company is Exporting The Great Firewall to Autocratic Regimes
Internet service providers participate in the implementation of the suite of tools, either freely or by force, and since the tools are platform-agnostic it doesn’t matter which platforms people are using in any given country, making international sanctions effectively useless. It also won’t surprise you that Geedge steals both proprietary and open source code, without regards for licensing terms. Furthermore, China is allowing provinces and regions within its borders to tailor and adapt the Great Firewall to their own local needs, providing a blueprint for how to export the suite of tools to other countries.
With quite a few countries sliding ever further towards authoritarianism, I’m sure even places not traditionally thought of as totalitarian are lustfully looking at the Chinese Great Firewall, wishing they had something similar in their own countries.
Hot take: Uncensored access to the internet is not some god-given right, it’s a right given to you by your government.
“But I can always use a VPN!”, well, no, that assumes your government allows payment processors to pay the VPN provider AND that they don’t block the VPN provider’s website AND that they don’t block the IP addresses of the VPN provider’s servers.
The reason I am saying this is because governments we don’t think of as authoritarian such as the UK government are already talking about banning VPNs so they can’t be used to work around the “Online Safety Act” (which itself is a fairly Orwellian law, as it requires doxxing yourself and providing ID data to random private companies).
Also, the EU is proposing an “EU Chat Control Law” which would require chat providers to scan private messages under the guise of protecting the children, even in encrypted chats, so communications privacy isn’t a god-given right either.
My point is, nerds think there will always be one neat technical trick to avoid censorship and ensure communications privacy, but when it comes to anti-censorship and communications privacy solutions that people who aren’t massive turbonerds can actually use, those solutions exist because the government allows them to exist.
Unfortunately this is quite a complex topic.
First of all, of course censorship is evil and I am very happy to not living in China and against all authoritarian idea.
At the same time I made the experience, that liberty and freedom of speech request for education and responsibility.
I stay at places where even a rumor of witchcraft can result in a violent mob killing hundreds of people just because they belong to minorities. Where people believe literally everything they see on TikTok. You joke about Voodoo stopping bullets? Here, this is perceived reality.
In such an environment, my compass for freedom and liberty starts turning and indeed I can see a need for fragile governments to execute some control.
There is no easy answer.