Risky Bulletin: Academics find source code overlaps between Geedge and China's Great Firewall
Academics linked Chinese vendor Geedge Networks' Tiangou Secure Gateway source code to one of the Great Firewall's three traffic filtering capabilities.
US researchers presenting at USENIX Security reconstructed Geedge Networks' Tiangou Secure Gateway firmware from over 100,000 leaked files, including Git repositories with commit history, and matched its filtering behavior to sections of China's Great Firewall. They found only 1 of 3 characterized DNS injectors matched Geedge code, noted the system relies on memory-unsafe C components and copied third-party code, and said its bugs could aid future circumvention tools. Geedge also exports censorship tools to Kazakhstan, Ethiopia, Pakistan, and Myanmar. The newsletter additionally rounds up multiple breaches.
- TSG firmware was reconstructed from 100,000+ leaked files; only 1 of 3 GFW DNS injectors matched Geedge code.
- Core components like SAPP are written in memory-unsafe C, undermining maintainability and correctness.
- Leaked code quality may be abused by future Great Firewall circumvention tools.
- Latvia's road traffic agency breach exposed 1.2M citizens' data; CSDD leadership resigned.
- Sakura Internet disclosed hackers accessed 583 customer accounts; ClarityCheck leaked 9M biometric facial images.
- Products
- Tiangou Secure GatewayTSG
- Threat actors
- Salt Typhoon
- Organizations
- USENIXBill MarczakRisky Business
From the original article
11 min read at news.risky.biz
In other news: Hackers breach Latvia's road traffic agency; US warns of AI attacks on Siemens PLCs; hacking tool enrolls an attacker's passkey to your account.
By Catalin Cimpanu · news.risky.biz
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.