A recent data leak from Geedge Networks, a key developer behind China's internet censorship infrastructure, has unveiled that the "Tiangou Secure Gateway" (TSG), an internet censorship package exported to nations including Pakistan, relies on critical Western technology. Specifically, the updated Pakistani firewall, identified as the Web Monitoring System [WMS 2.0] and powered by Geedge's technology, requires components from the French multinational company Thales. Without a valid license from Thales, the firewall component of the Tiangou system reportedly ceases to function, effectively crippling its censorship capabilities.
The Tiangou Secure Gateway, Geedge Networks' flagship product, functions as a national firewall and traffic management solution, offering capabilities akin to China's Great Firewall. This system enables governments to perform deep packet inspection, block VPNs, throttle traffic, and monitor individual internet users. The leak, originating from Geedge Networks, confirmed international deployments of its surveillance technology in countries such as Pakistan, Ethiopia, Kazakhstan, and Myanmar, often under the guise of conventional cybersecurity.
Thales Group, a global leader in advanced technologies, provides solutions across aerospace, defense, security, and digital identity, including cybersecurity. The discovery of Thales's components being integral to such censorship systems raises significant ethical and regulatory questions for Western companies whose products might inadvertently support authoritarian control. The exact nature of Thales's awareness regarding the end-use of its technology in these censorship frameworks remains a subject of concern.
The reliance on a specific Western vendor's license highlights a notable paradox within the complex global supply chain of technology. As stated in a recent social media post, "> The craziest thing we've learned so far is that the centralized internet censorship package China exports to Pakistan and elsewhere ('Tiangou Secure Gateway') has Western tech dependencies." The post further emphasized, "> Without a valid Thales license, the firewall simply stops working," calling it a "Common globalization W." This situation underscores the intricate interdependencies and potential vulnerabilities inherent in modern technological ecosystems.