SubscribeLog in
Connect with us

China Digital

Cybersecurity Researcher Discovers Unsecured Database with Millions of Chinese Social Media Chat Logs

Victor Gevers says it is his mission to “report vulnerable systems.”

Manya Koetse

Published

on

Image by iFeng Games (games.ifeng.com)

First published

Victor Gevers, a Dutch researcher at the cyber-security NGO GDI Foundation, has discovered that a Chinese database containing 364 million records including personal identity data, images, and chat conversations of PRC citizens, was left open for anyone to see who searched for its IP address.

Some of the information records allegedly come from apps developed by Chinese tech giant Tencent, including WeChat (Weixin), WeChat Wallet and QQ, but also from Alibaba’s Wangwang Message (阿里旺旺), which is the main chat program used on China’s most popular e-commerce site Taobao.

Gevers tweeted about his findings earlier this week (@0xDUDE). Journalist Yuan Yang reported about the issue in the Financial Times on March 4, writing that a large number of the records had the names and addresses of Chinese internet cafes on them.

Chinese internet cafes are legally required to install monitoring software on their computers (Wǎngbā guǎnlǐ ruǎnjiàn 网吧管理软件 “Internet cafe management software”). Well-known examples of this software are PubWin, Sicent (万象), Zuolun (左轮), or Fangzhu (方竹).

Gevers extensively tweeted about the open database over the past few days. On March 2nd, Gevers wrote on Twitter:

So this social media surveillance program is retrieving (private) messages per province from 6 social platforms and extracts names, ID numbers, ID photos, GPS locations, network information, and all the conversations and file transfers get imported into a large online database.”

On Tuesday, March 5th, Gevers also spoke to the Dutch ‘Foreign Desk’ (Bureau Buitenland) Radio 1 program, saying:

We assume that these messenger services are being screened by Chinese authorities, and of which [the information] is collected in one place. What we saw is that the profiles connected to GPS locations, device use, which wifi networks were used, Chinese ID numbers, ID photos – basically the full profile relating to the conversations. And then these conversations were sent out to various provinces across seventeen servers.”

On Twitter, he further stated:

Around 364 million online profiles and their chats & file transfers get processed daily. Then these accounts get linked to a real ID/person. The data is then distributed over police stations per city/province to separate operators databases with the same surveillance network name.”

On March 4th, Gevers also wrote that “[Chinese internet] is a space filled with open databases,” later tweeting that the same holds true for other countries, including the US.

News of the online leak was also picked up by various Chinese media outlets, including tech news site Driver China (驱动中国). Chinese news sites Sina, Sohu, Phoenix News, Techcrunch.cn, IThome.com, and Q Daily also reported about the issue, but these news articles were all pulled offline at time of writing, coming up with a ‘404’ error message.

One Chinese blog reporting on the issue did not only highlight that the database discovered by Gevers was accessible for people who knew of its IP address, but, noteworthy enough, also reported that it was available for viewing “free of cost.”

The issue was discussed on Weibo, where hashtags such as “360 million records leaked” (#中国3.6亿份聊天记录被泄露#) popped up with hundreds of views, but comments were soon taken offline.

As the annual Two Sessions (两会), China’s most important political event of the year, are currently taking place, Chinese social media is seeing increased censorship and control.

One of the comments that did get through on Weibo noted that as long as news reports were being ‘harmonized,’ it would be difficult for people to tell if this is “fake news” or not.

The fact that Chinese authorities screen digital data is no secret. In 2016, China’s Ministry of Public Security announced that messages posted on social media platforms such as Weibo, Baidu Tieba, or WeChat, could be identified as legal evidence and that China’s public security organs have the right to access electronic information and collect user data.

As a hacker and researcher, Gevers says his mission is to “report vulnerable systems” and sometimes “share what we learn.”

By now, the internet service provider behind the server has been warned about the open database, and within two hours after receiving the warning, the database was no longer accessible.

But how is such a leak possible in the first place? According to Gevers, the answer is quite straightforward: “The problem here is a knowledge gap. And that [knowledge] problem is not just an issue in China, it’s a worldwide problem (…) among people who build these kinds of systems,” he said on Dutch Radio 1.

Gevers’ research also made headlines in February of this year, when the Dutch hacker revealed that millions of personal record information data stored by the Chinese AI-based security software company Sensenets were openly accessible.

For more about the Sensenets leak, check here. To follow Victor Gevers on Twitter see twitter.com/0xDUDE.

By Manya Koetse

Spotted a mistake or want to add something? Please email us.

©2019 Whatsonweibo. All rights reserved. Do not reproduce our content without permission – you can contact us at info@whatsonweibo.com.

Manya Koetse is the founder and editor-in-chief of whatsonweibo.com. She is a writer, public speaker, and researcher (Sinologist, MPhil) on social trends, digital developments, and new media in an ever-changing China, with a focus on Chinese society, pop culture, and gender issues. She shares her love for hotpot on hotpotambassador.com. Contact at manya@whatsonweibo.com, or follow on Twitter.

Continue Reading
1 Comment

1 Comment

  1. Avatar

    Joey

    March 5, 2019 at 10:45 pm

    Lovely, Dutch researcher working to improve the security of China’s surveillance systems. Too young, too simple, sometimes naive…

Leave a Reply

Your email address will not be published. Required fields are marked *

China Books & Literature

Why Chinese Publishers Are Boycotting the 618 Shopping Festival

Bookworms love to get a good deal on books, but when the deals are too good, it can actually harm the publishing industry.

Ruixin Zhang

Published

on

JD.com’s 618 shopping festival is driving down book prices to such an extent that it has prompted a boycott by Chinese publishers, who are concerned about the financial sustainability of their industry.

When June begins, promotional campaigns for China’s 618 Online Shopping Festival suddenly appear everywhere—it’s hard to ignore.

The 618 Festival is a product of China’s booming e-commerce culture. Taking place annually on June 18th, it is China’s largest mid-year shopping carnival. While Alibaba’s “Singles’ Day” shopping festival has been taking place on November 11th since 2009, the 618 Festival was launched by another Chinese e-commerce giant, JD.com (京东), to celebrate the company’s anniversary, boost its sales, and increase its brand value.

By now, other e-commerce platforms such as Taobao and Pinduoduo have joined the 618 Festival, and it has turned into another major nationwide shopping spree event.

For many book lovers in China, 618 has become the perfect opportunity to stock up on books. In previous years, e-commerce platforms like JD.com and Dangdang (当当) would roll out tempting offers during the festival, such as “300 RMB ($41) off for every 500 RMB ($69) spent” or “50 RMB ($7) off for every 100 RMB ($13.8) spent.”

Starting in May, about a month before 618, the largest bookworm community group on the Douban platform, nicknamed “Buying Like Landsliding, Reading Like Silk Spinning” (买书如山倒,看书如抽丝), would start buzzing with activity, discussing book sales, comparing shopping lists, or sharing views about different issues.

Social media users share lists of which books to buy during the 618 shopping festivities.

This year, however, the mood within the group was different. Many members posted that before the 618 season began, books from various publishers were suddenly taken down from e-commerce platforms, disappearing from their online shopping carts. This unusual occurrence sparked discussions among book lovers, with speculations arising about a potential conflict between Chinese publishers and e-commerce platforms.

A joint statement posted in May provided clarity. According to Chinese media outlet The Paper (@澎湃新闻), eight publishers in Beijing and the Shanghai Publishing and Distribution Association, which represent 46 publishing units in Shanghai, issued a statement indicating they refuse to participate in this year’s 618 promotional campaign as proposed by JD.com.

The collective industry boycott has a clear motivation: during JD’s 618 promotional campaign, which offers all books at steep discounts (e.g., 60-70% off) for eight days, publishers lose money on each book sold. Meanwhile, JD.com continues to profit by forcing publishers to sell books at significantly reduced prices (e.g., 80% off). For many publishers, it is simply not sustainable to sell books at 20% of the original price.

One person who has openly spoken out against JD.com’s practices is Shen Haobo (沈浩波), founder and CEO of Chinese book publisher Motie Group (磨铁集团). Shen shared a post on WeChat Moments on May 31st, stating that Motie has completely stopped shipping to JD.com as it opposes the company’s low-price promotions. Shen said it felt like JD.com is “repeatedly rubbing our faces into the ground.”

Nevertheless, many netizens expressed confusion over the situation. Under the hashtag topic “Multiple Publishers Are Boycotting the 618 Book Promotions” (#多家出版社抵制618图书大促#), people complained about the relatively high cost of physical books.

With a single legitimate copy often costing 50-60 RMB ($7-$8.3), and children’s books often costing much more, many Chinese readers can only afford to buy books during big sales. They question the justification for these rising prices, as books used to be much more affordable.

Book blogger TaoLangGe (@陶朗歌) argues that for ordinary readers in China, the removal of discounted books is not good news. As consumers, most people are not concerned with the “life and death of the publishing industry” and naturally prefer cheaper books.

However, industry insiders argue that a “price war” on books may not truly benefit buyers in the end, as it is actually driving up the prices as a forced response to the frequent discount promotions by e-commerce platforms.

China News (@中国新闻网) interviewed publisher San Shi (三石), who noted that people’s expectations of book prices can be easily influenced by promotional activities, leading to a subconscious belief that purchasing books at such low prices is normal. Publishers, therefore, feel compelled to reduce costs and adopt price competition to attract buyers. However, the space for cost reduction in paper and printing is limited.

Eventually, this pressure could affect the quality and layout of books, including their binding, design, and editing. In the long run, if a vicious cycle develops, it would be detrimental to the production and publication of high-quality books, ultimately disappointing book lovers who will struggle to find the books they want, in the format they prefer.

This debate temporarily resolved with JD.com’s compromise. According to The Paper, JD.com has started to abandon its previous strategy of offering extreme discounts across all book categories. Publishers now have a certain degree of autonomy, able to decide the types of books and discount rates for platform promotions.

While most previously delisted books have returned for sale, JD.com’s silence on their official social media channels leaves people worried about the future of China’s publishing industry in an era dominated by e-commerce platforms, especially at a time when online shops and livestreamers keep competing over who has the best book deals, hyping up promotional campaigns like ‘9.9 RMB ($1.4) per book with free shipping’ to ‘1 RMB ($0.15) books.’

This year’s developments surrounding the publishing industry and 618 has led to some discussions that have created more awareness among Chinese consumers about the true price of books. “I was planning to bulk buy books this year,” one commenter wrote: “But then I looked at my bookshelf and saw that some of last year’s books haven’t even been unwrapped yet.”

Another commenter wrote: “Although I’m just an ordinary reader, I still feel very sad about this situation. It’s reasonable to say that lower prices are good for readers, but what I see is an unfavorable outlook for publishers and the book market. If this continues, no one will want to work in this industry, and for readers who do not like e-books and only prefer physical books, this is definitely not a good thing at all!”

By Ruixin Zhang, edited with further input by Manya Koetse

Independently reporting China trends for over a decade. Like what we do? Support us and get the story behind the hashtag by subscribing:

Spotted a mistake or want to add something? Please let us know in comments below or email us. First-time commenters, please be patient – we will have to manually approve your comment before it appears.

©2024 Whatsonweibo. All rights reserved. Do not reproduce our content without permission – you can contact us at info@whatsonweibo.com.

Continue Reading

China Digital

China’s 2024 Gaokao Triggers Online Discussions on AI

It’s Gaokao time! For the first time, China’s Gaokao essay topic was about the latest AI developments, triggering discussions on social media.

Manya Koetse

Published

on

This week, China’s National College Entrance Exams, better known as the “Gaokao” (高考), became one of the most-discussed topics on Chinese social media. ‘Gaokao,’ ‘AI,’ and ‘Gaokao essay’ were the hottest words on Weibo by the end of the week.

The Gaokao (literally: ‘higher exams’) are a prerequisite for entering China’s higher education institutions and are usually taken by students in their last year of senior high school. June 7th marked the first day of the Gaokao, which will continue until June 9th.

For the over 13.4 million participating students, the Gaokao week is a pivotal moment. Scoring high on this exam can grant access to better colleges, significantly improving their chances of obtaining a good job after graduation. Given the potentially life-changing results, the Gaokao period is a stressful time for both students and their parents.

The Gaokao essay (高考作文) is a significant component of the Chinese language exam, testing students’ writing skills, critical thinking, and ability to express ideas coherently. The essay, which must be completed within a limited time, requires students to discuss given topics.

These topics are generally related to Chinese society and culture, consistently attracting attention on social media. This year, multiple essay questions were related to AI and social media.

Those taking the Beijing exam (北京卷), for example, received a question related to the “like” function on WeChat, suggesting that some people feel strongly about the number of “likes” they receive and give, asking students to reflect on the phenomenon of receiving and giving “likes” on social media.

But the question receiving the most attention on social media was part of the New Curriculum Standard Test I (新课标I卷), which is distributed among different provinces.

 
Students vs. Chatbots: Letting AI Write an Essay on AI
 

Students received the following topic prompt for their Gaokao essay, which should be at least 800 characters long:

With the spread of the internet and AI applications, we can quickly get answers to more and more questions. Will this also lead to us having fewer problems?” (随着互联网的普及、人工智能的应用,越来越多的问题能很快得到答案。那么,我们的问题是否会越来越少?)

The question sparked discussions because it was the first time a Gaokao essay question focused on AI applications designed to interact with users, like ChatGPT.

Although many thought the essay question was easy—unlike this year’s math exam—it still generated some interesting reflections.

Some Weibo users responded that the answer to the question was within the question itself. One Weibo blogger answered: “If there were no AI, we wouldn’t have this question, so problems/questions related to AI will only increase. The emergence of new things will inevitably be accompanied by new problems.”

Others commented on the concerns brought by the emergence of AI applications like ChatGPT. In early 2023, hashtags such as “Ten Professions That Could be Replaced by ChatGPT” (#可能被ChatGPT取代的10大职业#) gained a lot of attention on Chinese social media, where many were concerned that jobs from various industries, including customer service, programming, media, education, market research, finance, etc., would soon be done by AI chatbots instead of humans.

In line with this thought and the AI theme of this year’s Gaokao essay, netizens and some Chinese media outlets decided to let various language models take the exam and see how they would perform: could AI actually do better in writing an essay about AI than Chinese students? (Related hashtags: #让AI写高考作文#, #假如AI写高考语文作文#; #ChatGPT来交卷了#).

Xinhua, for example, asked Open AI’s ChatGPT to answer various questions. Sina Tech (新浪科技) also asked OpenAI’s ChatGPT to answer the AI-related essay question, along with Chinese chatbots, like Baidu’s Erniebot (文心一言), Tencent’s Yuanbao (元宝), iFlytek’s Sparkdesk (星火), and Alibaba’s Tongyi Qianwen (通义千问). Toutiao News did the same, letting three chatbots (ChatGPT, Erniebot, Tongyi Qianwen) compete against each other.

There is no general consensus on how well these AI chatbots can write a Gaokao essay. Although compared to last year, there are now more and better domestic AI models, OpenAI’s ChatGPT-4 is generally still seen as the best chatbot out there.

This was its answer (originally in Chinese, translated to English with ChatGPT):

 

New Issues and Thoughts Brought by Technological Progress

With the popularization of the internet and the application of artificial intelligence, we can quickly obtain a large amount of information, and many questions can be answered in a short time. However, does this mean that we will have fewer questions? I believe the answer is no.

Firstly, although technology provides us with convenience, new technologies also bring new problems. The popularization of the internet has made information dissemination faster, but at the same time, the authenticity and accuracy of information have become new concerns. Fake news, information overload, and privacy breaches are increasingly prominent issues. These new problems need to be identified, understood, and resolved by us.

Secondly, the application of artificial intelligence, although it improves efficiency, also brings ethical and social issues. The transparency of AI decision-making, algorithmic bias, and the impact on the job market are all urgent issues that society needs to address. People need to constantly raise new questions to ensure a balance between technological progress and social welfare.

Furthermore, the development of technology prompts us to reflect more deeply on humanity itself. We need to rethink the relationship between humans and technology and consider the role and boundaries of technology in our lives. These philosophical issues are more important than ever.

Therefore, technological progress does not reduce our questions but rather prompts more new questions and reflections. It is these constantly emerging questions that drive social progress and human thought. We need to embrace the challenges brought by technology with a more open and critical attitude and actively seek solutions.

 

Although the domestic chatbots gave somewhat different answers, the overall tone was similar, though some commenters argued that ChatGPT was still the strongest, along with iFlytek’s Sparkdesk.

An online poll asking Weibo users to grade the ChatGPT essay from lower than 20 points up to the full 60 points saw divided responses, though a majority rated it as lower than 20 points.

How well can ChatGPT write an essay about AI? Opinions are divided.

This shows that many commenters think that AI chatbots are still not able to beat humans when it comes to writing Gaokao essays.

Commenters reacted to the various AI-generated essays in various ways, including:

• “Actually, none of them are very good. They are too formulaic and standardized, lacking the natural creativity and originality that humans possess.”
• “They just give soulless standard answers.”
• “It’s all about ‘firstly,’ ‘secondly,’ ‘furthermore.'”
• “There are no examples, no points proven; it should be a low grade.”
• “It’s just too stiff.”
• “This is like reading reports, not essays.”
• “AI places more emphasis on logic, which aligns with the writing style of foreigners.”
• “There’s no feeling in these essays; there’s a certain kind of AI feeling to AI.”

Meanwhile, some bloggers are taking up the challenge and are publishing their own online essays in response to the Gaokao question.

Some of them are not worried that chatbots will take over their critical tasks: “AI will be AI. There’s no connection to the social realities, and it’s as cold as ice.”

“Their words might make sense, but they lack feeling.”

But for some discussing the topic, they have come to realize that they are already depending too much on digital tools and AI applications for their everyday tasks, writing: “I made an attempt to write an essay, but discovered I already forgot how to do it!” For them, the discussion itself is a wake-up call that writing an essay from scratch is a skill that requires practice and cannot be fully replaced by chatbots, making personal creativity essential to score points and avoid the ‘AI-fication’ of texts.

PS:
In his book China’s Millennials, Eric Fish describes the limits on Chinese students’ answers; taboo responses, such as those containing harsh criticisms of the Chinese government or society, could potentially lead to failure. Although the essay is purportedly meant to showcase the student’s creativity, it must adhere to the unwritten rules of what is socially acceptable.

By Manya Koetse

Spotted a mistake or want to add something? Please let us know in comments below or email us. First-time commenters, please be patient – we will have to manually approve your comment before it appears.

©2024 Whatsonweibo. All rights reserved. Do not reproduce our content without permission – you can contact us at info@whatsonweibo.com.

Continue Reading

Subscribe

What’s on Weibo is run by Manya Koetse (@manyapan), offering independent analysis of social trends in China for over a decade. Subscribe to show your support and gain access to all content, including the Weibo Watch newsletter, providing deeper insights into the China trends that matter.

Manya Koetse's Profile Picture

Get in touch

Would you like to become a contributor, or do you have any tips or suggestions? Get in touch here!

Popular Reads