Contd. Implications for Internet users in Geedge client countries
to bypass censorship face considerable risks. Even the use of established and reputable
VPN providers does not guarantee anonymity, as Geedge’s systems can be leveraged to
identify and target individuals circumventing censorship. In countries where the use of
VPNs and other circumvention tools is permitted, individuals may perceive a greater degree
of online security. However, it is crucial to acknowledge that even in these environments,
risks remain. Geedge’s technology allows governments to retroactively identify and track
users who previously employed blocked VPNs, highlighting the persistent threat of
surveillance and control. This capability underscores the ongoing challenge of maintaining
online privacy and freedom of expression in the face of increasingly sophisticated
censorship technologies. Furthermore, the potential for governments to compel VPN
providers to disclose user data remains a concern, even in jurisdictions with strong data
protection laws.
Implications for tech communities that care about free and open internet
The development and maintenance of circumvention tools and internet protocols are critical
to preserving access to information. However, the sophistication of the techniques
employed by Geedge demands a new level of collaboration and foresight from across the
free and open internet technology community.
The findings from this research related to Geedge’s efforts to identify anti-censorship
applications and their users compel developers of circumvention tools to work together to
strategize and potentially revise their approach to security and effectiveness. Hardening
VPN apps against reverse engineering could be a useful measure to prevent censors from
obtaining sensitive information. Additionally, by incorporating dynamic domain name
system (DNS) and IP address rotation into their designs, they can make it more difficult for
censors to identify and block all servers used by a particular VPN.
Similarly, we believe that this research should push internet protocol designers to
consider the implications of state-sponsored mass surveillance and censorship when
creating new protocols. By incorporating security features into future designs, they can
create more censorship-resistant internet protocols that prioritize user privacy and
freedom. Email protocols are particularly vulnerable to surveillance by these tools, and
implementing a system to warn users when a message is received without Transport Layer
Security (TLS) encryption could be an important step in promoting secure communication
practices.
These are just some initial ideas of how the tech community can respond to this challenge,
based on our initial analysis. Moving forward, stakeholders across the sector should
convene to discuss these approaches and collaboratively develop responsive and
comprehensive solutions to make these technologies more resistant and resilient.