Massive Leak Of Chinese VMS Provider Exposes Xinjiang Surveillance

By Charles Rollet, Published on Feb 20, 2019

A subsidiary of China’s claimed largest VMS provider is tracking the precise location and ethnicity of millions in China’s Xinjiang region, according to a massive data leak.

The news made headlines around the world, in large part due to a growing international outcry over the Chinese government’s strict surveillance and mass detention of members of the Muslim Uyghur minority in Xinjiang.

xianjiang leak2

In this note, we examine how the leak happened, which video surveillance companies are involved, and other factors, including:

What Happened
Types of Data Collected
Subsidiary Details
SenseTime relationship
NetPosa Background
Intel's Investment
Hikvision/Dahua Competition
Cybersecurity, Ethics Concerns
Impact

Overall, the leak raises significant privacy and human rights concerns about how video surveillance data is processed in China, a country whose firms now dominate much of the video surveillance industry.

What ********

*** ********** *** ******* by ***** ************* ********** Victor ****** [**** ** longer *********] ** ****** ********* *********:

****** **** ** *** gained ************ ****** ** the ******** ** *********, a ********-***** *******, ******* an **********************. *** ******** *** "fully ********** ** ******" from **** **** ***** he ******** *********,****** **** **** **** agency ***, *******:

*** *** ******* *** they **** ********** ** clue ***** ******* ********

****** ** *** ******** was ****** ***** ****** contacted *********, ******* ********** ********* ** *** ******* informing ********* ***** *** to *** ***** ****** concerns ***** *** **** it *********.

“Muslim *******” *******

****** ******* ******** ********* *** personal **** ** **** 2.5 ******* ******, ********* passport ******, *******, ***, birthday, *** ******** *******. The ******* ****** ********'* ****** *********** and '******** ************ *******', which**** ********* ******* ****** ** checkpoints *** *** ****** areas. ****** ******* *** system *** *********** * "Muslim *******":

Ethnicity ********

**** ****** ** *** database ************** ** ***** *********. ***** **% **** members ** *****’* ****** Han ********, **% **** Uyghur, *** *** **** were ******* ** ***** typically ****** **********, **** as ******* *** *** people.

****: *** ********* ******** is **** ****** **** Chinese ********** *******, *** video ******** / **, though **** *************, *.*.,*********, **** **** ******* / ********* '********' *********.

Location ********

****** ** *** ******** were**** ******* ** ********, ******* ***** **** had ****** **** *** facial *********** ******* **** the **** ** *****.

**** *** ** **** period**** *.* ******* *********** were ******, ********* ** ****** like************ ******** *********** *** known ** **** ********* extensive ****** *********** *******. (See********* **** ******* ********** Forced ****** *********** ****** 967 *******.)

SenseNets *******

*********, ** 深网视界 ** Chinese, ******* “*******-**** **** learning **********” ** ***** surveillance *******, “********** ** the ****** ******** *****,”********* ** ** ******** page ** *** *******. (********** ********** **** *** ****** China's ********.)

************ ******* **** ********* *********** ******** *** “over **%” ********, **** hits ******* ** ***** matched ** “***** *** white *****” ** ********/*********** in **** ****.

** ***** **** ********* released ********* *********** ***** ******* ******* ****** ******** and ******** * ******* in * *** ******* thanks ** ****** *********** including ******** *** **** of *** *******'* ****:

SenseTime ***********

********* ********** ** ****** * ******* ***** 51% ** ******* *** provider********** **% ***********, * ****-***** ******* facial *********** ******* ********** ******** “*** *****’* **** highly ****** ** *******” (it *** ****** ** $*.* *********** ****.)

*******, ***************** *** ******* ********* ** **** 2018, ******* **** **% of *** ******* ***** by *******. **** *** noted ** ******* ***** in ***** ******** ** the ********* ****, ****** "********* ******** *******" ******** **** *** incident. ** ********** ** ******* *****, ********* ********* ****** from *********, *******:

*** *********** ******* ********* and ********* ** ****** to ******* ********** ********* support *** **** ** their ********, *** **** not ******* ****** ***********. *** product ******* ** *** data **** *** *** provided ** *********… ********* itself **** *** **** customer ****… ********* *** also ******* **** ******** measures **** ** **** anonymization *** **** **********.

****************, ******* ****** *********'* 'high ************' ****** ****, as * '**** ******* enterprise', **** ********* ******** now, ** * *** 2018 ******** *&* [**** no ****** *********]:

******* *** ********* **** certain *********** ** ***** concept ** **********. ********* has **** ************ *** technology ********** *** ******** depth. ** * **** economy **********, ******* ******* product ******* *** ************. The ****** **** *** on *** ***** ** friendly ************, [*******] **** still ********* **** ********* in ***** ******* ** the ******.

** **********, *********'* '**** requirements' ***** ** **** Netposa's ******* ****.

SenseNets ****** ******* **********

********* *****’* ******* *** provider *** *** ***** largest *** ******** ** the *****,********* ** *** *******, ****** ***. *** flagship *** ** ****** “PVG” ** ***** ***** Gateway [**** ** ****** available].

******* ***** **** ** its ******** **** ********* VMS ******** ** ******* police. ** * *&* session **** ********* ** 2018 [**** ** ****** available], ******* ******:

*** **** ******** ** the ******* ** ****** focused ** ****** ******** customers.

** *** **** *&*, NetPosa **** *** *** was **** ** ***** 3.5 ******* ******* **** by ******* ***********. ** contrast, **** *** ***** seen ******* **** ****** itself ** ***** *******.

******* ****** $*** ******* (*.** ******* ***) ** 2017*** $*** ******* (*.** billion ***) ** *** first ***** [**** ** longer *********]********** ****. ** ** highly **********, **** ** 2017 ****** ****** ** ~23%. *** ******* *** not *** ******** *** 2018 ****** *******.

No ****** ******** *********

**** ***** ** ******** disclosed ******** ********* ******* SenseNets ** ******* ** Xinjiang. *******, **** ******* exist, ** ********* ** the ********* ****.

Hikvision, ***** ** *********** *****

********** *** ********* **** won **** $* ******* projects ** ********, ** ***** ** evidence ** ******* / Sensenets ******* **** ***** or ********* ** ********. We ****** ** ******* since *********** ***** ***** projects *** ************ ******** or ******* **** *** Chinese ********.

Dismiss ***** *** *********

******* *** ********* *** companies ******, *******, ********** them ** * ********* 2018 ******** *&* [**** no ****** *********] **** as *************** ********* ** the *** *****:

*********, *****, *** ***** manufacturers *** ******** ****** have ********* ******** ***** business ** *** ****** and **** *** ** recent *****. *******, *******, as * ******** ******** focusing ** ***** ******** management *********, *** **** doing **** [*** *********] since *** *********… *** company *** * **** project ************** ******* *** customer ****, *** ** familiar **** *** ******** needs ** ******** *****

Intel **********

** ****, *****'* [**** no ****** *********] ********** arm ***** ******* ******** in *******.***** *******'* ****** ********* lits ********* ***** **** ** its *********, ** *** excerpt ***** *****:

**** ***** ****** ***** to **** ****. ******* there *** ***** *** US ********* ** *** supply ********** ** **** applications. ***** ** ******** is ****** ** ***** even **** **********.

******: *****, ** ** email, ****** ** "***** divested" **** ******* ** 2016.

NetPosa ****** ******* ***

******** ******* **** ** **********, *** ** ********** are *******. ** ** best ***** *** ******* out **** ****** ** manufacturer ******* ** ****, something ***** ******* **** NetPosa **** ******** **** $200 ******* ** ******* (see****** ******* ***** ***********).

Cybersecurity, ****** ******** ******

*** ********* **** ****** up **** *************, *******, and ****** ********.

*** **** **** ******* was **** ** ****** the ********* ******** ** easily ** * **** violation ** ***** ************* and ******* **********. *** researcher *** ******** *** database **** ****** ** could **** ******* ** destroyed *** ** *** data“**** *** *******”.

** ***** ** ******, the **** **** ********** authorities **** ********** **** on *******’ ********* *** location – **** ******* mosque ********** – ** a **** ******* ******. Going ** *** ****** ‘too *****’ ************ *** ** *** reasons******* **** **** ** China’s******* ******* ** “**-*********” camps ** ********.

*** ********* ******** **** brings ** *** ********* concerns **** *********’ ******* is **** ** *** Integrated ***** ********** ********, a ******** ********** ************ system ********** ****** ***** ****** **** ** **** troublesome ********** *** ********* in *** *****.

******

*** ********* **** ********* in ************* ****** *** invasiveness ** ******** ************ state *** *** *** Chinese ********** *** ********* video ************/****** *********** ** achieve ****.

** *** ****, ******* it ************** ********, **** **** ********** remains * **** ********* for ***********. *******, ** China,* ***-***** ************* *****, **** ****** *** simply ***********. ***** ** a *********** ************ **** for *** ***** ************ industry ** *** ******* state ***** ******* ****** Xinjiang *** *****.

**** ******* *** ** SenseNets *** ******* *** comment *** *** *** receive * *****, ** will ****** ** ** do.

Comments (23)

Undisclosed #1

02/20/19 06:31pm

* **** ** ******* with ** *** *** achieving *** ******* ** track ***** ****** ********. If **** ****** **** the ****** *** **** back ** **** ** educate *** *** ******** perspectives, ******* *** ******* thinkers ** *** ****. Evolution ** ** ********. You *** *** ** hang **** **** **** field *** ********** **** truck *** **** **** only **** ** ****.

*************** *****, ****** *** leading ** **** *** future.

Undisclosed #2

In reply to Undisclosed #1 | 02/20/19 08:35pm

"*** *** *** ** hang **** **** **** field *** ********** **** truck"

**** ** ************* *****.

**** ****** *** ****** in ********** ********* (****** China) *** ****** ** hold ** ** ** basic ***** ******* ** individuals.

John Honovich

IPVM | In reply to Undisclosed #1 | 02/20/19 08:56pm

*****: * *** ******* undisclosed ** ****** ** a ******* **** **** from ** ************* ********** torturing *** *** ******** in ************* *****.

Undisclosed #1

In reply to John Honovich | 02/20/19 09:33pm

*************** #* ****, **** to ** ** **********. You *** *** ******** undisclosed ** ***** ** china *** *** **** to ****** ****.***, ** those **** *** ******* any *********** ***********, ****** and ******* ********* ** the ************* ********** *** so ******* *** **** that **** *** ** China **** ********* ************* camps ** *******.

****, * **** *** like *********** *** **** times *** **** ** put **** **** ***** Bong ****!

***** *********** *** *** the *****!, **** ** what * **** ***** IPVM. ****** *** *** freedom **.

John Honovich

IPVM | In reply to Undisclosed #1 | 02/20/19 09:35pm

*** *** *** ******** undisclosed ** ***** ** china *** *** **** to ****** ****.***, ** those **** *** ******* any *********** ***********, ****** and ******* ********* ** the ************* **********

*** *** * ********!

*******: ******* ********** ****** ****

***, ** * ***** of * ****, ***** in ***** *** ****** blocked ***** **** *** BBC, ***, *** **** if **** **** ** authorized *** *** ****'* another *****...

Undisclosed Manufacturer #3

In reply to Undisclosed #1 | 02/21/19 02:30am

** ** ** ***** do *** **** ** running **** * ****, why ***** ** ********* it ? ***** **** not ** ******* * centralised ******** *** ********** control ?

*** ********, ********* *******.

Undisclosed #1

In reply to Undisclosed Manufacturer #3 | 02/21/19 02:42am

******* * ****** ********* analysis ** ****** ** survey ****** ********** * single/sole ****** ********. **** can ** ******** ** AI ******** ************** ********* agreeing ** * **** negotiated ************* ********** ****** mode ***********. *** ***** Spy **. ***** *** binary ******.

******, *** * ** now ********* ** ** 3rd ***** *** ***** so * *** ** longer **** ******** **** strap ******** ** * brewery ******.

***'* ****** **** ********, once * ** **** in *** ***+ ** state ** ****. trolls>.

****~!

****: * ** ** going ** *** **** Asian ****** *******, ****** IPVM.

***:*****://***.****.***/***/***-****-******-*****-*******

….******* ****** **** *********** expiration **** ***/*.

Undisclosed Distributor #4

In reply to Undisclosed #1 | 02/21/19 03:26am

******* *** ******* ******** on *** *****, ***** are ******* **** **** this *********** *** ** used *** ******* ******** and **** *********** ***'* even **** *** **** of **********

*****://**.*********.***/****/*****

Undisclosed #1

In reply to Undisclosed Distributor #4 | 02/21/19 03:59am

*** ***** ***** **(******** computable). ******* *** *** trust *** **** *****-**** policy ** ***** ******** argumentative ************ ********* ******** makers **** **** *** exploits ** ***** ****** circa ****.

* ***** ****** ******** non **** ************ *********** with ** ** ********* as * ********* ********* to **** ** *** out ** *** ****** "we ***** ******" ********.

**** ****** ** **** without ** **-***** *********** review. **** **** ******* the **** **** *****.

Undisclosed #2

In reply to Undisclosed Distributor #4 | 02/21/19 04:01am

*** ***** **** ****** ** ***** ******* ***** of **********... ******* **** *** *** they ****** **** ****.

***, ****** ************************* *** ***** **** to ******* ******* ******* - ********* *** ********* (unchecked) ** *** *** school *****-**** **********.

****** *** '****' **** better ***** **** ***** to ********* ***** ************ schemes.

** **** ** ***** times ******.

Undisclosed #6

IPVMU Certified | In reply to Undisclosed #1 | 02/21/19 10:49am

*************** *****, ****** *** leading ** **** *** future.

* **** **** *** future, **’* *** ******

Hal Bennick

Trafficware, a CUBIC Company
In reply to Undisclosed #1 | 02/21/19 03:34pm

********* ** ********, *** chaos ****** *******. *** are ****** *** ********** that *** ******** ******* is ********. *** *** want ** **** ** on *** **** ** Rome, *** ************ ** the ****, *** *** result.

Gary Gibson

In reply to Hal Bennick | 02/22/19 07:51pm

**** **** **** ****. Western ********* ***** ** be ******* *** ******* ** socialism ***** ****.

Undisclosed #2

In reply to Gary Gibson | 02/22/19 08:10pm

"******* ********* ***** ** be ******* *** ******* of ********* ***** ****."

***** * ***** **** this ********* (*** **** a ******** **** * am ******* ****** ** sending *** ** ******* in * *** *****) - * ***** **** what *** ***** ** is ******** **** * symptom ** *** ****** problem ******* **** ** the **/** ***** ** our ******* ******** *********** platforms:

********.

**** ***** ******* **** '******* **** ***** **** they **** ******* *** morally ******** *****' **** ****** **** upon ** ***** **** now.

**** **** ** ****** on *** ****** ** the '******* *******' - which, ** ******, ****** for ** ****** ****** with *** '***** ****'.

*** ***'* **** ***** with *****.... *******, ***** must ** *********.

***** *** ********* ***** we **** ** ** friends.

Undisclosed Manufacturer #3

02/21/19 01:23am

*********** *******, *** **** informative.

********* ******** ** ******* do *******, *** * would *** **** ** breathe.

***** *********** ***** *******, was ********* ******** *** of****** ** ********.

* ***** **** * hard **** ********* **** they *** ***** ********** that ** ** ****************. Plus, *** ***** ****'* show *** **** **** cameras ** *** **** the ******** ****.

John Honovich

IPVM | 02/21/19 02:24am

******: ******* ***** ** Intel

Intel **********

******, *****'*********** *** ***** ******* invested ** *******.***** *******'* ****** ********* lits ********* ***** **** ** its *********, ** *** excerpt ***** *****:

**** ***** ****** ***** to **** ****. ******* there *** ***** *** US ********* ** *** supply ********** ** **** applications. ***** ** ******** is ****** ** ***** even **** **********.

Undisclosed Integrator #5

02/21/19 08:53am

** *** **** ** not ****, ** ****** be ****, ****** ** manipulated!

***** **** **** **** big ****-***** ******* ***** implemented ****** *********** ****** in *** **. (**** as ******* *** *** Police). ****** **** **** an ******* *******...

*** ******** *******...

**** ********* ***** ********

Undisclosed Manufacturer #3

In reply to Undisclosed Integrator #5 | 02/21/19 10:40pm

*******.

David Soltesz

IPVMU Certified | 02/21/19 01:32pm

* ***** *** *** posts **** **** ****** the ********* ***** ** the *********** ***** *****.

*** *** ** *** run *** **** **** **********. ****** * ******** being **** ** ***** them ** *** ***** might *** ** * bad ****.

Undisclosed Manufacturer #7

In reply to David Soltesz | 02/21/19 03:19pm

* ******* *** ***** they ******* *** *** was ****** * *****.

Charles Rollet

02/23/19 03:13am

******, ** ** *****, ***** ****** that ** "***** ********" from ******* ** ****.

Undisclosed Manufacturer #3

In reply to Charles Rollet | 02/24/19 10:19pm

**** *** ** ****, but ** ***** ** if **** ** **** as ** ** **** they **** ***** ******* with *** *******, ** at ***** **** ***** has **** *********/******* ********* to **** *** ***** NetPosa *******.

Undisclosed Manufacturer #8

02/26/19 02:37am

***** **** ******** ******** in ***** ** *** particularly **** *********.

*****://*************.***/****/**/*******-*******-********.****

** ** *** ****** how **** ***** "*******" are **** ** *** eyes ** ********.

Read this IPVM report for free.

This article is part of IPVM's 6,602 reports, 890 tests and is only available to members. To get a one-time preview of our work, enter your work email to access the full article.