Two weeks later, simon thinks hes being followed again. Around the same time, simon receives an anonymous e mail. Its title chinese agents will find you and bring you back. Simon cheng is one of the leading figures in the hong kong democracy movement. Four years ago, he was working at the british consulate and was asked to monitor escalating protests. Weeks later, he vanished during a consulate trip to mainland china. Simon says the police used his visit to a Massage Centre to accuse him of soliciting prostitution. They framed me up to say i solicited prostitutes. Simon says he was accused of being a british spy, then tortured. He says he was restrained in a device known as a tiger chair. Seen here in videos from chinese social media. When simon was released, he fled to the uk and has now been granted asylum. In london, he set up an organisation to help others whove left hong kong. Today, his house is on a special Police Protection register and hes constantly looking over his shoulder. The Chinese Embassy in london didnt answer panoramas questions about simon cheng. My name isjohn culver. I was an analyst specialising on east asia for the Central Intelligence agency. Its gotten more like classic cold war. For decades, chinese intelligence was fairly casual, not very aggressive, and thats changed progressively over 20 years and especially over the last decade. So, were seeing more what i would call classic spycraft. China has become a superpower in the last two decades economically booming, militarily confident and increasingly authoritarian. Youre seeing a more assertive Chinese Foreign policy. Theyre asserting their power as the second largest economy and by most measures, the second most Capable Military force on the planet. In march, xijinping secured an unprecedented third term as chinas president. I think they are now pushing harder. President xi is taking tighter and tighter control. He believes that the west is incapable of making decisions about china because of their worry about the trade and the way they do business, and i think hes probably right. President xi isnt just taking tighter control at home, but abroad as well. His Police Forces have been accused of setting up a network of overseas police stations. We have identified over 100 stations in at least 53 countries. Human rights group safeguard defenders says some of these sites may have been used for Persuasion To Return operations of chinese ex pats. Using public records, they estimate more than 7,000 people around the world have been forced to return to china. I mean, imagine the idea that you are not safe anywhere, that they can get to you anywhere you are, that they will employ every means necessary, you know, to either shut you up or get you back to china. I dont think theres anything more sinister than that. Police here are aware of at least three sites in the uk. 0ne located at an office block in croydon. 0ne at an Estate Agency in hendon. And one at a restaurant in glasgow. The government says no evidence of illegal activity has been identified. But says the sites were set up without permission and their presence will have intimidated those who have left china and sought safety and freedom here. But china has moved quickly to close down alleged overseas police stations. In america, there have been arrests by the fbi. Here, the government has been accused of not acting fast enough. The uk government has shifted its position weakened it, in my view and now refuses to say whether china poses a threat. I think the phrase is an epoch defining challenge, and were going to meet it, apparently, with robust pragmatism. Certainly, i dont think the chinese care. The directors of two businesses associated with the sites in hendon and glasgow didnt respond to panorama. The owner of the third in croydon says the accusations against him are baseless. China may be targeting its critics abroad, but should we all be worried about chinese cameras lining our streets . Hikvision and dahua are two of the biggest Video Surveillance companies in the world. With combined annual profits of almost £2 billion. Chinas been accused of using these cameras to control and monitor the minority Muslim Uyghur population. Cameras made by hikvision and dahua line the streets, where theyre not only watching people but actively analysing them, even with horrendous features like ethnicity alerts, where they can pick people out of a crowd that they believe to be uyghur. The Chinese Embassy in london says the. Hikvision says it. And. Dahua says it. Hikvision and dahua cameras can also be found up and down the uk. We spent months and months submitting thousands of freedom of information requests, and we found that the majority of public bodies are using Chinese State owned Surveillance Cameras. These companies have dominated, completely dominated, the Surveillance Market in the uk. Nobody knows how many hikvision and dahua cameras are in the uk, but Big Brother Watch says 227 councils and 15 Police Forces use hikvision and 35 councils use dahua. Youre talking about data on millions and millions of people that could be processed to potentially generate very detailed reports about each of us and what we do. And if that sounds hyperbolic, then you really need to understand what it is the Chinese Government does in terms of surveillance in its own country, against its own population. Panorama can now show how Security Issues in some hikvision and dahua cameras can be exploited. Ipvm is one of the worlds leading authorities on surveillance technology. Working with the bbc, they designed a series of tests. First, ipvm Supplied A Hikvision camera to put inside broadcasting house. We have a camera installed in a bbc studio in london, and we are going to hack it remotely using a back door that hikvision built into its own products. Panorama couldnt install the camera on a bbc network for security reasons, so it was put on a test network with no firewall and little protection. As a one off experiment, conor and john have agreed to play the role of hackers. They start by locating the camera inside broadcasting house, then attack its security. So all we need to do is plug in the ip address of the target and copy and paste a string of 13 characters to the end of the address of the device we want to get into. Hacking a Computer System without permission is a criminal offence, so not all of the details are being shown. Having gained access, Conor Now Times how long it takes to get control of the camera. Ready, set, go. Ok, im getting the user list. The only user on this device is admin. Im going to set the password to 12345ipvm. And ive set the password. Were done. 11 seconds. We have access to that camera now. So here, if we zoom in tight on the keyboard, we can see the keys that hes pressing to put his password in for his laptop. So now, two things have happened. I own that device now, i can do whatever i want with it. I can disable it or i can use it to watch whats going on at the bbc. The second thing is that the bbc no longer has control of that device. Zoomed in, i can see his phone screen. So we now have a username and password for the bbc network. Right. And we have the passcode to a bbc employees phone from this camera. Correct. And this is akin to a Locksmith Giving you a key to your home. Yeah. And then secretly making a master key for all of the locks in that community. Thats effectively what Hikvision Engineers did. Hikvision says its products do not have a backdoor and were not deliberately programmed with this flaw. The Camera Panorama tested contained a vulnerability first discovered in 2017. Hikvision pointed out it released a Firmware Update to address it almost immediately and says this demonstration was not representative of devices operating today. The test camera had not received the Firmware Update. Ipvm Research Suggests many other cameras around the world have also not been updated. These are cameras in peoples homes, in their businesses, on streets, inside their offices. There are more than 100,000 cameras online that are still vulnerable, that havent had their software updated. Test number two. Can the hackers crack dahuas cameras . In their us facility, theyre going to try to infiltrate the software controlling them. If they can, they could take charge of an entire network of Surveillance Cameras. Were getting unauthorised route access to the server. So now, if i open up the client for dahua dss. There we go, were in. And we have full access to this system now. Now theyre inside the system, they can use it to eavesdrop. What a lot of people dont realise about these cameras is that a large majority of them have microphones. Now, often theyre turned off by the user, but when we hack into the system like this, we can turn that microphone back on and listen in. So its as simple as clicking audio. Yeah. Now were wiretapping them. Whats the zoom ratio . Up to 25 zoom ratio. Really . This is a very easy to exploit wiretap. Yeah. Dahua says when it was made aware of the vulnerability late last year, it. And quickly fixed the problem through Firmware Updates. Hikvision and dahua cameras are used to monitor many police and government buildings. In a single afternoon, panorama found hikvision cameras outside the department for international trade, the department of health, the Health Security agency, defra, and an army reserve centre. The us Surveillance Camera commissioner says there are so many of them, theyre like digital asbestos. We have a previous generation that has installed this equipment largely on the basis that it was cheap and got thejob done. We have now realised it has serious and inherent risks, so what do we do about it . Do you trust hikvision and dahua . Not one bit. Chinese made Surveillance Cameras have been found surprisingly close to home. I walked into the home office lobby. As i was there standing at the desk waiting for my id to get checked, you know, as i do, given myjob, ive looked around to see what kind of cameras they were using. Conor had been invited to a meeting with Civil Servants in 2021 to discuss surveillance technology. I immediately spotted a camera on the ceiling which i knew to actually be manufactured by dahua. It never occurred to me that by going to a meeting at the home office, id actually be able to say, you know, not only are these two critical vulnerabilities, in fact, they can be used on the cameras you have in your lobby. With the gallop of technology, we are finding ourselves exposed to things that didnt happen in the past. Perhaps in the old days you mightve said if you were bugging someone, you had to break in late at night and plant a bug. These days, the targets putting it in for you. The government says it takes and has a that includes removing. And has a. That includes removing chinese owned cameras from sensitive sites. Security experts fear the threat could be even greater than just watching and listening. The cameras could be used as a trojan horse to play havoc with Computer Networks and spark civil disruption. If you look at all our Critical National infrastructure, all things that keep us going so access to, you know, transport, fresh water, fresh food, power all those things rely very heavily on remote surveillance. So if you have an ability to interfere with that, you can create mayhem cheaply and remotely. Weve all seen the italian job in our youth where you bring the whole of turin to a halt through the traffic light system. Well, that mightve been fiction then. It wouldnt be now. Thats a very potent weapon that you have. Why would we put that in the hands of another state . Hikvision says its an independent company and isnt a threat to uk national security, it has never conducted espionage related activities for any government, nor will it, and that its products are compliant with uk laws and regulations. Dahua says its not state backed and its equipment could not interfere with the uks critical infrastructure. A fox news alert now. Its not a bird, its not a plane. There is a suspected l chinese spy balloon. Chinese Spy Balloon Hovering over the. From eyes on the street to the eye in the sky, chinas now been accused of using a giant balloon to spy on america. Chinas decision to fly a Surveillance Balloon over the continental United States is both unacceptable and irresponsible. Why havent we shot this balloon out of the sky . Theres lots of questions, i but the Commander In Chief is awfully quiet. President biden was forced to act. Theyre shooting it. That was like a missile that came out of that plane. Oh, my god, they shot it down. Ever since the balloon was shot out of the sky, Intelligence Agencies have been scrambling to get to the bottom of what it was doing and where it had been. Enter corey jaskolski, founder of a revolutionary Artificial Intelligence company. He used his ai programme to do what no human could sift through millions of Satellite Images to locate the balloon. Looking for something thats maybe a0 metres across and were looking for that in millions and millions and millions of Square Kilometres of earths surface. After processing a vast amount of satellite data, the ai programme shed new light on the location of the balloon before it was shot down. So you see the bright side of the balloon and then you see The Dark Side of the balloon, just like you see The Dark Side of the moon. From here, corey tracked the balloon back to the most likely launch site Hainan Island in the south china sea. Looks like on the day of the launch there was cloud cover. And if i were going to launch a balloon, i wouldve chosen a cloudy day to do that in order to minimise the chance of detection. China claimed the balloon was a civilian airship used for Scientific Research such as meteorology. The balloon that we saw was not a weather balloon. Its far larger with a lot more complexity. In terms of the payload package, its very large. You know, its been compared to multiple school buses. The balloon is suspected to have been gathering whats known as signals intelligence. If youre trying to pick up Cellphone Transmissions or understand communication patterns, then i could theoretically see where the balloon could be a useful platform for that. The balloon appeared to be equipped to do just that. According to the us state department, it had multiple antennas, likely capable of collecting and geolocating communications. Coreys Research Shows that at one point the spy balloon was only around 80 miles from an Air Force Base in montana which houses nuclear missiles. I am sitting in my driveway and this thing is up in the sky. Its been there, stationary,. For about the last 35 minutes. The Chinese Embassy says this was an isolated event. But working with corey, panorama has uncovered evidence about more spy balloons. First, corey found four Satellite Images of a balloon and was then able to plot its Route Across Northern Japan from china in Early September 2021. This one did not launch from hainan. It launched from more interior china, just south of mongolia. Japan is a key american ally. There are more American Forces stationed here than in any other foreign country. It is strongly presumed that the balloons were reconnaissance balloons flown by china. The Ministry Of Defence ofjapan is taking all precautions to monitor the situation on a daily basis. Japan says if more balloons are discovered in its airspace, it may shoot them down. For protecting lives and the property of people in the territory ofjapan, it is possible to respond to that situation with the use of weapons. Since then, panorama has been searching social media and Press Reports Across East Asia for sightings of unexplained objects in the sky. We gave these photographs, taken by taiwans Weather Service in September 2021 over the capital taipei, to corey. He then cross referenced them with satellite imagery. We were able to take wind models and calculate from that sighting where the balloon mightve been previously and where it was going because of the wind. And within 90 seconds, we found the balloon off the coast of taiwan. The taiwanese government has told panorama it believes it was a weather balloon. But corey says thats unlikely. So i suspect, just based on the diameter of the balloon and the fact that the Operating Altitude looks similar, that looks an awful lot like the balloon that flew over the United States, overjapan. Taiwan is fearful of chinas military ambitions. The democratically governed island has, according to xijinping, always been part of china. Last year, the Chinese Military rehearsed a full scale attack. China has fired multiple Ballistic Missiles during a set of Military Exercises in the air and the sea encircling taiwan. President biden has said the us would defend taiwan if china attacked. There are fears of a confrontation in the south china sea. There have been two near misses since may. The chinese fighterjet came dangerously close to an american surveillance plane. The two ships missing each other by only 150 yards. I think that a crisis is now a matter of when, not if. The Chinese Embassy says. And it always acts. And respects. It says it rejects. All major nations have Intelligence Operations that use modern technology. But some fear where these spy games may lead. China is a long term threat to us. Its intention to become, by the middle of the 215t century, the dominant superpower, to depose america, and to change the world and its Government Systems and values in a way that better suits its interests, is indeed a threat to our way of life. Whether by balloons, overseas police stations, or advanced surveillance technology, today the Chinese Government has the tools to watch the world like never before. Given the pace of advancement, you know, where will we be in ten years or 20 years in terms of the capabilities of these devices . That is what keeps me up at night the most. These technologies can do a lot for our security and to improve society, but if they are mismanaged, it could be a disaster for free society and democracy. Live from london, this is bbc news. After five nights of rioting across france, an appealfor calm from the grandmother of the boy whose killing by police sparked the violence. Iam i am outside the france interior ministry. Close by, president macron has been holding urgent talks on what to do about this ongoing situation. A warning from nhs england patients are paying the price for Strike Action and the disruption for Strike Action and the disruption could get worse. Could get worse. Laws aimed at curbing protest laws aimed at curbing Protest Methods have come into force methods have come into force in england and wales. In england and wales