Monday, September 22, 2008

Yang Yun Speaks Out

"I was only 14 years old"

I'd like to conclude writing about the age controversy in Chinese gymnastics with this document. Produced by Heather Lawver and Cindy our volunteer translator, here for the first time in English is Yang Yun's confession to having cheated at the 2000 Olympic games in Sydney. While Marion Jones does her time in prison for cheating, Yang Yun still holds her Olympic medal. This video lets us put to bed once and for all the question of whether China's government has issued false documents that have allowed their gymnasts to win medals. The only question left is: how many times have they done it?

While the Internet has made electronic identity easier to wipe out and easier to censor, it has also made the distribution of truth much harder to suppress. In conclusion, here's Yang Yun in her own words. I'm very proud to have worked with so many people around the world on this project: a sincere thank you to everyone who helped.
-stryde.hax


Tuesday, September 2, 2008

A Conspiracy in Plain Sight

A Land of Make-Believe

Who can forget Marion Jones? Seven years after she won gold medals in the Olympic games in Sydney, she was prosecuted by her own government for her role in an illegal steroids distribution ring. Sentenced to a jail term of six months for lying to federal prosecutors about her involvement, she is still currently in jail. After her admission of cheating she was stripped of every Olympic medal she ever won.

The reality of Jones's fate is not what I'm writing about today. I want to write about a land of make believe. Pretend for a moment that Jones went on to tell everyone that she cheated in the Olympics on film in a movie about her life. What if Jones went on to become a television reporter, and the mayor of her town gave a speech about her Olympic performance in which he bragged about her steroid use? And what if nobody cared? That would be a very interesting, very different world, wouldn't it?

We're Living In It

Consider for a moment the strange case of Chinese Olympic gymnast Yang Yun. Competing in the same games as Jones in Sydney, Yun won the bronze medal on the uneven bars. Soon thereafter, she was featured in a state sponsored documentary film, "Yang Yun: My Olympics". In this film she states that she competed as a 14-year-old at Sydney, two years underage. A confidential source forwarded me a copy of this film recently, and I have posted it at the Internet Archive. If Yang Yun's videotaped admission isn't enough, consider this jubilant speech still hosted (for now!) on the government web server sports.gov.cn. How old is this document? Annual copies have been saved by the Internet Archive dating back to 2002. The Google Translated version from 2002 is in agreement with the currently hosted version. This document is a transcript of a speech given 17 October 2000 by Fu Guoliang, the head of the Hunan Provincial Sports Bureau, to his colleagues. In addition to the automated translation, I've had this document inspected by multiple contacts who speak Chinese because of the translation subtlety I'm about to share with you.

体操运动员杨云实际年龄才14岁,在悉尼初试身手,
就引起体操界的注目并夺得一枚铜牌,前程不可限量。

Gymnast Yang Yun's real age was only 14. She tried 
her hands in Sydney for the first time and attracted
the attention of the gymnastic community by winning
one bronze medal. Her future is limitless.
translation courtesy Cindy

For those who are skeptical, please download this document straight from the government web server it's hosted on and translate it on your own. Google Translate and World Lingo do a pretty good job. The translation above is spot on: Guoliang is really saying real age, a differentiation one would not normally make. In fact, in the entire course of this speech, he never once uses the phrase "real age" when referring to the age of other gymnasts. Is it conspicuous that the phrase "real age" is used to qualify the age of a gymnast who competed under a government issued passport with a completely different birthday? Whether this distinction is made in order to emphasize that her actual age is different from the one on the passport she competed under, or in order to differentiate between the Chinese cultural traditions of "real age" vs. "virtual age", the point is clear: Yang Yun competed at fourteen years of age. How stunning is it that this is a point of pride to a government official?

In Plain Sight

Is this information a conspiracy? A big secret? Take a look at this message board listing posted by insiders within the Chinese gymnastics team:

这个时候是不是不太方便谈这些关于生日、年龄的事,
尤其是两大UB高手的,免得被间谍抓到把柄//

Talking about these birthday and age matters isn't 
too convenient right now, especially for the two
big uneven bars aces [He Kexin and Yang Yilin],
to avoid having (the information) grabbed by spies.

Certainly someone thinks there's still a need for secrecy. Personally, I'm no longer so sure. It may come as a shock that every 'revelation' in this entry was uncovered months ago by Diane Pucin. Her article received the same reception from the IOC as my blog: a cacophony of silence. Certainly Marion Jones needed to be concerned about 'spies'. However I believe the Chinese gymnastics team need fear no such threat of justice.

Which Reality?

Taking a look at the two different experiences of Jones and Yang, it's easy to conclude that a double standard is being applied. As Sally Jenkins so deftly points out, the IOC once barred Greek sprinter Ekaterina Thanou from competition simply for a pattern of doping offenses, despite her having tested negative for the Games. Given the documents above, does the Chinese government have a history of age falsification in gymnastics? Can a reasonable person conclude that there is a pattern? And if so, how do we explain the double standard?

One Standard

The answer, of course, is that the IOC is much smarter than we are. They are applying a single standard: What The Government Says Is True. The US government declared Jones a cheater, and the IOC applied their standard and stripped her medals. The Chinese government maintains that their gymnasts are of age, and the IOC again applied their standard and agreed. It seems that someone at the IOC is a fan of great literature, and is making an exercise of applying the classics:

He who controls the present, controls the past. He who controls the past, controls the future.

Tuesday, August 26, 2008

An Identity Erased

Another One Bites the Dust

Two days ago, I challenged the Chinese government to a race. I posted a link to a government spreadsheet hosted on a government web server which contained the name, age, sport, and government ID number of Jiang Yuyuan, another member of China's Olympic gymnastics squad, which showed that she competed underage. After having carefully collected a series of verifiable mirrors of the document, I linked to it for public download. And now that citizen journalists (and professional journalists) all over the globe have downloaded it and verified it en masse, the the document finally got deleted nearly two days later. Now to be purely objective I should probably state that I can't verify the reason for deletion, but at this point the options seem limited. An Excel spreadsheet going back years containing over twelve thousand athlete names vanishes 48 hours after I publish a link to it? That's no accident. Personally I don't think 48 hours is a very good level of effort for a professional censor, but then I've never done that type of work. So I'm interested in what you folks have to say. So here's my poll, let me know if you think 48 hours to censor deserves a Gold, Silver, or Bronze medal.

Here's what censorship looks like:
http://www.zjsports.gov.cn/zjty/node12/node43/userobject1ai4698/00000002.xls

And here's what freedom looks like:
MIRROR : wikileaks.org
MIRROR : Internet Archive
MIRROR : UCLA News Radio
MIRROR : heathershow.com

Sunday, August 24, 2008

UPDATED Consistency Problems with Cui Dalin's Statement

updated 8/25, scroll down for update

From the New York Times article published Aug 24:

Cui Dalin, the vice minister of the General Administration of Sport of China, said He Kexin, the uneven bars Olympic champion, had moved from one team to another last year, and a wrong birth date was written on the registration forms for the new team.
“During the registration, there were some discrepancies in the age of the athlete, therefore that mistake has led to a series of misunderstandings afterward,” Cui said during a closing news conference for the Chinese sports delegation here. “I can say for sure the age of the Chinese gymnasts comply with the rules.”

I think we can all breathe easier now that officials are beginning to address the problems that so many have observed. However having spent some time studying the documents, I'm concerned about what I perceive to be a discrepancy. The alleged mistake led to at least three separate Excel spreadsheets, now deleted, showing a birthday for Kexin of Jan 1, 1994. This in itself is interesting. However my interest is in Cui's statement that the change occurred "last year". Last year was 2007, and as alert readers of this blog will recall, the Internet Archive has kept two copies of a document published to sport.gov.cn which establishes Kexin's birthday as 1-1-1994. The problem here is that the Internet Archive saved one of these copies in June of 2006, two years ago. Additionally, when the document was stored in the Internet Archive, the document contained a publication date of January 27, 2006. Neither of these dates is in the least bit consistent with Cui's statement.


update 8/25

And that's just the beginning of the problems with Cui's statement. I'll start with a summary, and I'll follow with documents. On this blog, I've listed (over time) four different documents: three Excel spreadsheets and a web page, all deleted from www.sport.gov.cn, the General Administration Sport China web site, and they are all available mirrored or cached online. Two of the documents are after the team transfer that Cui is referring to in his statement: these are the zctc.xls documents. One of them is the web page that documents the team transfer of He Kexin, this is the web page saved in the Internet Archive. The most important document, however, is 05ticao.xls, still saved in the Baidu cache at the time of this writing. Turns out "ticao" is the Pinyin for "gymnastics", so this document is basically "05gymnastics.xls". It predates the team transfer that Cui is speaking to. And all four documents show He Kexin's birthday as Jan 1 1994. How can a mistake a "year" ago made during a team transfer have affected He Kexin's records well before the team transfer, in 2005? Here's a link to Baidu cache of 05ticao.xls (this will expire someday soon, I'm reserving this space for a mirror link). It's a registry of gymnasts for 2005. For the following sectoin, you can copy and paste to search within the document to follow along. The document tells the gymnast totals:

注:总注册1016人;其中确认676人;首注329人;交流11人.
Total registration 1016 people, among which 676
people were previously registered, 329 people are
first-time registrations, and 11 people are "exchange".

These exchanged gymnasts are the exchanges that Cui is referring to in his statement, however, this year was not an exchange year for He Kexin. This was He Kexin's first registration year, see row 799:
799,"何可欣","女","1994.1.01","北京","北京","北京市体育局","首注"
799, He Kexin, F, 1994.1.01, Beijing, Beijing,
Beijing Municipal Sports Bureau, First Time Registration

Next the document identifies its originator:
体操中心体操部
(Gymnastics Center, Gymnastics Section)

And finally, the document contains its signing date:
2005-3-17

Cui's statement is not a reasonable explanation for the discrepancies that have been found. This list of gymnasts for 2005, published by Cui's organization, the General Administration of Sport China, lists He Kexin as having been born in 1994 during her first time registration. This is before her transfer in 2006, which is listed in this athlete exchange agreement archived by the Internet Archive in 2006. The team change that Cui cites in his statement as having happened a year ago actually happened two years ago, and He Kexin's original registration with a 1994 birthday in early 2005 is far too early to be explained by a mistake "last year".
end update


Now that Chinese officials have broken their silence on the inconsistencies that are surfacing, I'm hoping we can all expect a statement soon on the case of Jiang Yuyuan, whose name and government ID number appear in a government-hosted spreadsheet I linked to earlier this evening. Alert readers will of course realize that Chinese government ID numbers embed the birth date, hence the string "19931001" inside this government ID number should be addressed in any future clarifications.

In conclusion, here are links to the Internet Archive's 2006 copies of the athlete exchange agreement hosted on www.sport.gov.cn, Ciu Dalin's General Administration of Sport China.


Internet Archive history of document
Translated version of 2006 copy

Ready, Set, Censor!

Are you faster than the delete button?

DOCUMENT:
http://www.zjsports.gov.cn/zjty/node12/node43/userobject1ai4698/00000002.xls

DOCUMENT METADATA:
Size: 3438080 Bytes
SHA-1 Signature: 1e1ee2513116b729b927a056cae1af9e87bdfc7e

DOCUMENT SOURCE:
Zhejiang Provincial Sports Administration
http://www.zjsports.gov.cn
IP Address: 60.191.63.85

DOCUMENT MIRRORS:
Mirror @wikileaks Courtesy Dan Schmitt
Internet Archive (Direct Download)
UCLA Radio Courtesy Carey Shenkman
Mirror @www.heathershow.com Courtesy Heather Lawver

DOCUMENT ANALYSIS:

Registration Number: TC2001C017
Name: Jiang Yuyuan 江钰源
National Id Number: 330302199310013648
Gender: F
Date of Birth 10/1/1993
Training: Gymnastics

Jiang Yuyan's Wikipedia page states:
After beginning her gymnastics career 
in Guangxi Province, she transferred to the
Zhejiang Provincial Team in 1999

SCREENSHOTS:



Highlight of row 11279, showing Jiang Yuyan

Screenshot of the WorldLingo translation engine, with the name from row 11279 pasted in.

Credit where credit is actually due

I am dedicating this post to my anonymous source, without whom this would not have happened, as well as the large Internet community within China whom I believe started this investigation at much greater risks to themselves. In addition I'd like to cite four articles which pre-date this blog which cover a lot of the same material, though with a different presentation. It's impossible for me to know if I've run across the same or different documents than these reporters, because I've never had access to their urls. That said, these folks were covering this story long before I ever tried to learn anything about it.

What Now?

This has been an exhausting week. I honestly don't know what there is left to do, after posting this document. It's an original document straight off a government web site, with government id numbers, birth dates, etc. There are over ten thousand names and hand entered details. How could anyone ever forge something like that? It would take an army to gather that amount of detail and make it stand up to scrutiny. I think I'm going to grab a beer and watch this young woman's identity vanish into thin air. If you're watching it with me, think about our upcoming American elections, which are going to be decided by voting machines which generate only electronic documents. Think about the permanence and weight of electronic documents. And think about a future in which our identities are purely electronic. Cheers!




update An article from 2007 which states that He Kexin was 13 at the time (making her 14 in 2008) is still hosted on a government website. Which would make five documents regarding Kexin, for anyone counting.

Watch Government Censorship Live!

Here Goes Nothing

I have received a tip from an insider within China. What I was sent is a link to a government document which is still hosted on a government web server. I have downloaded it and done as much due diligence on it as I am able, and the results are amazing. This document contains a much deeper level of information on a Chinese gymnast than was previously available. I am in the process of asking trusted helpers to mirror this document and vouch for it.

1984 in Prime Time

What I am going to do is this. At exactly 1800 Eastern Standard (2300 GMT), I will post a direct link to a primary document hosted on a government server in China. Then, we will have a race. We will see how many people can download and verify this document before it is wiped out. And for those watching, you will have a chance at a glimpse of our possible shared future: the erasure of an entire identity.

At What Risk?

I may end up with egg on my face here. It is possible the folks at the Great Firewall will detect my Internet activity and delete the document before I release it to the public. I am willing to take this risk. I have a copy, I will swear to its authenticity. I have uploaded it to wikileaks with a delayed release. I believe the opportunity is worth the risk. I hope you will join me.


-stryde.hax

Saturday, August 23, 2008

And Then They Were Gone

Dude, Where's My Cache?

Remember when this all began, four days ago, I asked the world to cache the documents discovered in the Baidu cache, just in case they disappeared? Well sometime between last night and today, they did just that. A day after the Wall Street Journal was able to retrieve a copy from the Baidu cache, it dissappeared. Here are the original links: cache1 cache2. Surprisingly, the document I linked in a subsequent post is (at the time of this post) still present: cache3. Does this removal necessarily mean malfeasance? We can't be certain, as all search engine caches have a timeout period, in which older documents are expunged. Maybe this was just the natural timeout period of the documents, maybe not. Either way, it now becomes imperative to build mirrors of the third document, cache3, as we can reasonably expect it to dissapear soon.

The good news is, hundreds of people mirrored these documents before they were removed, and can vouch for what they saw. Here are just a few of the massive outpouring of volunteer mirrors that showed up in the comments section:

Behind the Wall?

I've received so much information in that last few days I don't know how to get to it all. Here's a small excerpt of an email I received from within China:

As a fellow resident in China, some 60 miles north of Grace, I must say that Grace's comment is at least partially correct. China is in many ways a wonderful place. However, I must take factual exception to some of her statements. While your blog has not been discovered by authorities yet, if I do a search for "NYTimes and underage gymnasts" on Google my internet connectivity at home is suspended for 15 minutes, and I am unable to establish any outside connections to ANY website from any computer in my home. In addition, while researching the gymnasts scandal, my internet searches routinely turned up blank pages for well known sites whose uptime is better than four 9s and my internet connection was suspended several times for 15 minutes each

Like the earlier email from Grace this one is impossible to verify, but the assertions made within are repeated often by those living within China.

Full of Sound and Fury, signifying...?

In the end, what does this all mean? Aside from the three spreadsheets I found, there is this fourth document, hosted by the Internet Archive, also hosted by the General Administration Sport China (www.sport.gov.cn), also currently missing, which states that He Kexin's birthday is Jan 1, 1994. That's four documents removed from the same government web server that are all in complete agreement about He Kexin's birthday. Stored on multiple web servers around the world! In fact, the Internet Archive keeps a history of when it stored its document copies, and it goes back to the year 2006, showing two separate, identical retrievals of the now-removed document. And what of the amazing Huffington Post article which predates my blog, showing screenshots of official news reports in which He Kexin's age is suddenly changed from 14 to 16, and a list published by the Chengdu government showing He Kexin's birthday to be, again, Jan 1 1994? What can we do with this vast preponderance of electronic evidence, all of which has been removed from the servers that once hosted it?

A Future Yet to be (Re)Written

We live in the Information Age, and we are facing a future in which all documents will be electronic. Doubtful? Later this year, American voters will elect a president using electronic voting machines which don't leave a paper trail. Americans can sign up now for bank accounts which are completely electronic and generate no consumer available paper records. And most DMV's, state agencies for issuing official id, are online now. A future of electronic records? We're living in it.

No Proof

If you receive a printed bank statement one month that says you have $3000, and the next month it says you have $2000, you can take both statements to court. If you have online banking, what do you take to court? If you vote electronically, what is the standard of proof for an audit? How can anyone prove the validity of a digital document? That was the question I faced four days ago, and my ad-hoc solution of community mirroring shows the dearth of solutions available to the public. The nature of digital documents has changed irrevocably, and our institutions have failed to keep up. Digital documents are invisibly malleable and non-persistent.

Invisibly malleable. The art of paper document forgery is as old as art forgery, dating back hundreds of years. Meanwhile digital document forgery is as easy as changing one number in a spreadsheet, and right now we lack the tools to track these changes. The coming wave of remote application providers like Google Docs might someday be able to provide us with a chain-of-trust type solution to this problem, but that day is a long way off. In the meantime, we face this problem with voting machines, where digital changes to vote tallies cannot be detected. The public deserves a solution to this problem, and it is a challenge for the information security industry to provide it. For now, I favor paper verified voting.

Non-persistent. The problem of non-persistence is the problem that the international community is now having with the electronic documents mentioned in this blog and elsewhere regarding He Kexin's age. In the blink of an eye, a document can be removed from the web server that hosts it, and someone seeking to prove the historical existence of that document has no recourse whatsoever. In a future in which all identity documents are electronic, does that mean that someone's identity can be erased? I would answer with a question: is He Kexin being erased, or overwritten? I'll let anyone who has read this blog reach their own conclusions in that regard. But again, I challenge the information security community: we need a solution. Recently my colleague Mike Zusman and researcher Dan Kaminsky gave presentations at Blackhat highlighting fundamenatal problems with the mechanisms that allow Internet users to trust that they are arriving at the web site they requested. These problems are related: how do we verify sites, and how do we verify documents hosted on sites? DNS security, SSL security, and the unfilled need for a legally admissable Internet Notary that can prove the historical existence of electronic documents. These are the solutions to the problems I've encountered this week. These are the solutions which can keep our elections safe, and preserve our culture of verifiable documents. I for one look forward to a future where innovative solutions to these problems are available to the citizens of the world.


-stryde.hax


Check out this recently submitted link from an anonymous user comment, in English! "14-year-old newcomer to the national team"! Google Cache


No longer anonymous. The above link was submitted by Jody Lanard M.D.