A massive leak of over 100,000 documents has revealed that Geedge Networks, a relatively obscure Chinese company, has been selling censorship and surveillance systems modeled after China’s Great Firewall to governments in various countries. Founded in 2018 and linked to the architect of China’s censorship infrastructure, Geedge markets itself as a provider of network monitoring and cybersecurity tools, but the leaked documents indicate deeper implications of its operations.
Researchers analyzing the leaked materials found that Geedge offers governments a sophisticated capacity to monitor online activity, block websites, and surveil individuals. The company’s flagship tool, the Tiangou Secure Gateway (TSG), can process the internet traffic of entire countries, allowing for extensive monitoring and filtering. TSG captures sensitive information from unencrypted traffic and applies deep packet inspection on encrypted communications to identify those using VPNs and other circumvention tools.
Geedge has already established operations in Kazakhstan, Ethiopia, Pakistan, and Myanmar, with plans that may extend to other nations, as indicated by job postings for engineers capable of working in various locations. The leak also included internal correspondence and technical documents, analyzed by a coalition of human rights and media organizations including Amnesty International and Justice For Myanmar.
According to Marla Rivera from InterSecLab, the system Geedge is selling grants governments unprecedented power to surveil their citizens, which poses significant risks to human rights. Unlike lawful interception, which operates under specific regulations, Geedge enables mass censorship and targeted monitoring based on user activity.
Within Myanmar, for instance, Geedge’s system reportedly monitors approximately 81 million internet connections simultaneously, with equipment installed in 26 data centers across 13 internet service providers. Documents have shown that Geedge identified 281 popular VPNs for blocking and flagged several commonly used apps, such as Signal, for prioritization.
Despite no direct evidence tying Geedge’s technology to specific censorship actions, patterns correlate significant operational changes with events like internet shutdowns. For example, in Ethiopia, a shift from passive monitoring to active interference occurred right before an internet blackout in early 2023, as revealed by the leaked documents.
Geedge’s roots trace back to its founding name, Zhongdian Jizhi, reflecting its ties to the China Electronics Corporation (CEC), a state-owned entity involved in military and security operations. The involvement of Fang Binxing, often dubbed the "father of the Great Firewall," further illuminates Geedge’s connection to the initial development of China’s censorship strategies.
Interestingly, Geedge does not only export censorship technologies; it also applies the knowledge gained abroad to enhance surveillance mechanisms at home, particularly in regions like Xinjiang, which has been under intense surveillance targeting the Uyghur population. The company collaborates with Chinese state institutions to adapt its systems to meet government demands.
In summary, the Geedge Networks leak exposes a troubling export of digital authoritarianism, highlighting the increasing globalization of surveillance technologies and their potential human rights implications worldwide. As countries seek to implement similar censorship systems, the lines between national security and individual freedoms continue to blur.
