Tuesday, January 1, 2019

Why Chinese government spying is the scariest sort: an explainer

I'm in the US for the holidays, and a segment came on some silly morning show (they're all silly) about how China is "revolutionizing" shopping and payment through cell phone payment apps at a far higher rate than the US. Or, as the silly hosts of this silly program described it, "China is decades ahead of the US in shopping technology".

And I made a remark about how that's actually terrifying, because the Chinese government watches essentially everything you do on your cell phone in China, and can and will use it against you. They don't even try to hide it. That everyone I know who is knowledgeable about cybersecurity in any way uses a second dummy cell in China for all of the apps there that come packaged with nasty spyware.

The person I was watching the program with looked duly horrified - after all, the silly segment by that silly host on that silly TV show was making China out to be this amazing technological wonderland of the future (the tone was similar the one taken in this article, but if anything less critical). What I was saying was totally at odds with that.

She came back with "you know, I'm sure the US government does that too, we just don't know about it."

Sure. I mean...kinda. But it's not at all the same thing. I don't blame her for her reaction, by the way - when your exposure to current affairs in China comes entirely from Western media, and mostly Western media that is uncritical about China but highly critical of domestic affairs, interspersed with ads for Shen Yun (with no context whatsoever pointing out that a.) the Chinese government hates them, which is great but also b.) that they are owned by a wealthy cult-like religious organization which is not great), then this would be your natural reaction.

But there is a world of difference, and it's important to know why.

I'm going to come at this from a non-expert, non-academic, non-technical point of view. If you want detailed, professional analysis go somewhere else. I've noticed, however, that the average non-expert finds these issues too dense and daunting and typically doesn't read or fully understand them. Hell, I can't claim to fully understand them (this, for example, is barely readable to me despite being highly important). Instead, I'm hoping to tackle this in a way that helps the average reader comprehend what is so terrifying about China's government surveillance, in particular.


"But the US government does the same thing!" 

This is an issue in that the US government does have some unsettling rights to surveillance and data under the Patriot Act. I don't like it either, and I've had it and other surveillance programs affect me three times that I know of, including having to sign something that allowed the US government to monitor one of my bank accounts in Taiwan, and being unable to open a new IRA in the US.

So, yes, it's creepy and horrible. Please don't categorize me as a defender of the actions of the US government.

But. But! This is really not on the same level as what the Chinese government does.

For reasons explained below, it's doubtful that the US government is directly intervening in what private businesses do, forcing them to put spyware into their devices or app/online offerings. They're not using what data they do collect in the same way as China, and while maddeningly opaque and bureaucratic, the very fact that the US is a democracy with certain freedoms of expression and information means it is still more transparent than China.

Oh yeah, and say what you will about who is watching what you do online, but the US government isn't going to disappear you because you said something online that they don't like. Even if you make suspicious purchases or phone calls, or visit certain sites, you might find yourself detained or questioned, but you won't be disappeared in an unmarked van.

No, you won't. Don't give me any conspiracy theory nonsense. But in China this is a real thing



"The US government could just be putting spyware in our phones too!" 

Maybe. Somehow, though, I doubt it.

As far as I'm aware, the US government doesn't "own" (or have some sort of control over) the various tech companies that make our stuff. The US government can't tell Apple, Google, Paypal, Venmo etc. what to do the way the CCP can tell Huawei, Xiaomi, ZTE, Baidu and Alipay what to do. It's an open secret - if it's a secret at all - that Communist Party members and officials have a controlling stake in those Chinese companies and they almost certainly do have those companies install spyware and other backdoor access to data in their products.

It is not clear at all that the US has the same thing, and I doubt they do.

The US media, for all we deservedly criticize it, is pretty good at rooting out this stuff, investigating it and exposing it in detail. We know that Donald Trump committed tax fraud thanks to an in-depth investigation by the the New York Times, to give just one example.

If the US government were ordering Apple to install spyware into their phones, or ordering Google to have government spyware installed on everyone's phone with every download of the Chrome app, while those companies would certainly not be transparent about it (seeing as they're not transparent about much), it would still likely break in the media eventually. Criticize it all you want - I do! Push the media to be better. But it's a lot better and a lot freer than in many places, including China.

If anything, you should be scared that the Chinese government, not the American government, is putting some scary things into products by non-Chinese companies. Though it's perhaps less likely as they don't actually control these companies, most of the production takes place in China and some of the components of these products are designed/produced by Chinese companies, so it's still a real possibility.


"But the US monitors our financial transactions and punishes us too, through credit scores!" 

I don't care for credit score companies either. I understand why some institutions would want a heads-up as to how well or poorly you are likely to be able to pay your bills from them, but the way scores are calculated is not nearly as transparent as it needs to be, and in some ways is unfair.

However, most developed countries have some form of credit score system, and the effects are not as far-reaching.

In China, the social credit system being developed will operate on such a greater scale than any credit scoring system that the two can't be seriously compared. A bad credit score might make it hard to get a credit card or loan (or, if it's bad enough, a bank account), and you may be denied a visa to go abroad by that country's embassy, but it won't stop you from buying flight or train tickets or from getting a passport. China eventually willEven articles trying to downplay the threat are unconvincing. It is very real, and it's the outcomes, not the details, that matter.

Even if the US government is spying on us in the same way and to the same degree that the Chinese government spies on their citizens (and, possibly, us) - which they almost certainly are not -  a system designed to force you to be a "good citizen" is not the outcome and nobody is talking seriously about building one.

If that were to change (and in the Trump era, who knows?) we still have ways of fighting back that Chinese citizens do not. We can still speak openly about it. Journalists can investigate and publish stories. If nobody will publish your story you can publish it yourself (and who knows, you might go viral or at least show up in search results). We can file lawsuits against the government. We can vote the bastards out of office. We can push for better legislation. We can take to the streets. We can fundraise for a series of legal moves, lobbying and awareness campaigns that aim to change the way things are. It's hard to do, but it is possible and, most importantly, all of this is legal.

In China, none of it is. In China, you have no recourse. You can't protest, you can't sue, you can't raise money for these causes, you can't easily investigate (nothing is transparent enough for you to be able to do so - there is no Freedom of Information Act), and you can't vote in any meaningful way.

Also, in the US, it is still possible to exist (though with difficulty) without giving the government access to a lot of your data. You don't need to use any apps that you don't want to, and you can still (mostly) pay in cash for things. In China, I hear time and time again that it is impossible to keep in touch with people without WeChat (a social media app that definitely funnels information to the government, and every expert I know says likely comes packaged with all sorts of spyware quietly downloaded on your phone) or Weibo (same). You can't hail a taxi without a WeChat-related app, and may not even be able to buy anything at department stores or go out to eat.

It's becoming impossible to pay for things in China without some sort of phone payment app like WeChat Pay or Alipay. Taxis will upcharge you to an insane degree, and some places won't take cash at all. You can't function in China without signing up for these payment apps, meaning you cannot exist somewhat anonymously in even the simplest ways. In the US, you still can.


"But Facebook and Google collect our data too!" 


They do, and that sucks. And the data seems to be mostly used for selling ads. Even though, if I have to see ads, I'd rather see ones that might interest me, I don't really want companies to refine how well they can target me to convince me to spend my money through psychological means that I often find deceptive. That said, I can and do ignore them. It is possible to not buy. You can not pay attention to ads or fake news targeted at you (another way that our data was problematically used). You can ignore memes (I do), check sources (I do), and think critically about what you are reading and seeing, where it comes from and why it appeared on your news feed or in your search results. I do.

That data is not being handed to an autocratic government (the US has many flaws, but it is not an authoritarian state. China is) to build a massive social credit system that you can't opt out of and that you can't ignore the way you can a shitty ad or lizard-brain meme. You can choose not to use any apps you don't trust in the US, and you can choose not to believe or pay attention to dodgy things targeted at you.

And we know that data is not being handed over for the same purposes, and we know the US government doesn't control these companies, because if it were, there would be no reason for Google or Facebook executives to testify before Congress.

You don't have any of those options in China, and there is no need (from the government's perspective) for either testimony or transparency. You know why.


"If you have nothing to hide, then you have no reason to fear!" 

Yeah okay um...who determines whether you have nothing to hide? You, or the horrible government that is monitoring you? Who decides if you've done nothing wrong - them or you?

Do you really trust them to agree with you that you have done nothing wrong? All the time?

What happens when you do have a complaint with the government? A legitimate complaint that is nonetheless not allowed? What if your complaint is that they disappeared your daughter, forced you to have an abortion, or expropriated your house without compensation? What if you took a trip to Taiwan and realized that the situation there was completely different from what you'd always been told, and simply wanted to say that honestly? What if you had an 'undesirable' friend who was not a model citizen like you, but you'd known them since childhood, cared about them and knew them to be a good person? What if the only way to boost your own social credit score was to disavow this friend? What if that person wasn't your friend but your brother, or mother? What if merely calling that person from your compromised phone put them in danger?

Even if you'd been a model citizen up to that point, what happens when suddenly you are faced with this choice?

Don't even get me started with "I have nothing to hide."

No comments: