TI-2026-065D — The Glass House

Series: The Return · Part D · Classification: HIGH · Confidence: MEDIUM (role convergence documented; specific state disclosure inferred)

Parts A through C established what Tencent's AS132203 does to others: it hosts a web front that harvests .env secrets (A), it rents the same address pools to independent operations (B), and it does not, contrary to a tempting reading, monitor our coverage of it (C). This part turns the lens around. Before we finish accusing the harvester, we should look at the walls of the house it harvests from. They are made of glass.

Executive Summary

The entity that collects the world's communications is itself the most collected. Tencent — 740M+ QQ users, 650M+ WeChat users, operator of AS132203 — sits exposed in three directions at once:

• Compelled inward. Under China's National Intelligence, Cybersecurity and Data Security Laws, the PRC state holds legal authority over Tencent's user data. The floor of the house is transparent to its own government.
• Penetrated from outside. WikiLeaks Vault 7 shows the CIA's Engineering Development Group catalogued "Tencent QQ, a cross-platform communications library." Metasploit ships a QQ credential-gatherer. Tencent's own products carry public RCEs. The walls are transparent to foreign and commodity collectors.
• Rented to harvesters. From its windows, the AS132203 substrate throws stones — hosting the operations that sweep other people's .env files (Parts A/B).

This is not the claim that Tencent's software is uniquely insecure — it is not, and we refuse that cheap narrative (see §VII). The finding is role convergence: collector, collected, and landlord-to-harvesters, all in one building. The great harvester lives in a house of glass — transparent to Beijing by law, catalogued by Langley by trade, colonized by criminals by rent.

I. The Floor — Compelled Inward

The most consequential wall is the one facing the state. Paul Scharre's Four Battlegrounds documents the legal architecture plainly: China has, since 2015, passed the National Security Law, Cybersecurity Law, National Intelligence Law, Data Security Law and Personal Information Protection Law — and, in Scharre's phrasing, "the government's authority would exist even without these specific laws." He names Tencent — owner of WeChat, QQ and Qzone — among the four platforms (with Meta, Google, ByteDance) that dominate the global marketplace, in the specific context of China's export of surveillance capability.

The National Intelligence Law is the load-bearing beam: it obliges organizations and citizens to "support, assist and cooperate with" state intelligence work. Applied to Tencent, that is legal authority over the message traffic of a large fraction of a civilization.

Calibration, stated plainly: this establishes authority, not a specific act. That the PRC state can compel Tencent's data is documented [DOCUMENTED]. That any particular dataset was handed over is [INFERRED] from the framework, not shown by us. We hold that line deliberately — it is the difference between analysis and assertion. But the authority alone is the point: a collector whose collection is legally collectible by its own state is, structurally, glass on the floor.

II. The Walls — Penetrated From Outside

If the floor faces Beijing, the walls face everyone else — and they are just as clear.

Read together: Western SIGINT studied Tencent's comms stack (Vault 7), off-the-shelf pentest tooling automates stealing from its consumer app (Metasploit), and its own AI/media products ship with remote-code-execution holes. A house whose contents are catalogued by the world's best-funded intelligence service and by a free framework any teenager can download is not a fortress. It is a display case.

III. The Windows — Renting Stones to Throw

The third exposure is the one this series began with. Tencent's AS132203 is, per Part A, a live web front sweeping other parties' .env/.git secrets at a 43.5% effective-bad-rate; per Part B, a shared substrate whose recycled address pools host independent harvesting operations. So the same building that is transparent to the state and catalogued by foreign tooling is also the one from which secret-harvesting stones are thrown at everyone else.

The symmetry is the story. Tencent is simultaneously the subject of collection (floor and walls) and the platform of collection (windows). It harvests and is harvested in the same breath.

IV. The Seven Questions

Who is this? Tencent Holdings — messaging collector, gaming hegemon, cloud landlord (AS132203). Why does it matter here? Because the actor we have spent three parts documenting as attack infrastructure is itself the most exposed entity in the frame. Who does it claim to be? A private consumer-technology company; in PeeringDB, a Content network. Who is it really? An entity whose data is legally reachable by the PRC state, whose apps are documented foreign-collection targets, and whose cloud is rented to harvesters — private in form, transparent in fact. Whom is it related to? The Chinese state (by law), foreign SIGINT (as target), and its own tenants (as landlord). Where is the money? Everywhere at once — ads and games monetize the collected users; IaaS monetizes the harvesting tenants. Both meters run on the same glass. What is the official anchor? China's codified law regime (National Intelligence / Data Security), the Vault 7 disclosures, public CVE/Metasploit records, APNIC/PeeringDB registration. All public. All load-bearing.

V. What If — The Alternatives

• What if the compulsion laws are dormant paper? Possible in any single case, which is exactly why we mark specific disclosure as inferred. But "the law is rarely invoked" is not "the law does not exist," and for a threat model the authority is the exposure. A safe deposit box whose landlord holds a legal master key is not secure merely because the key is seldom turned.
• What if the Vault 7 QQ reference is trivial? It is a topic listing, not a compromise report — we say so. But its mere presence in the CIA's engineering materials is a data point about who studies Tencent's stack, and it does not stand alone; it sits beside the Metasploit module and the CVEs.
• What if this is just "every big tech company is exposed"? Partly true — and the crux of the counter-narrative below.

VI. Steelman — "Every Platform Is a Glass House"

The strongest rebuttal: Meta, Google and Apple are subject to FISA §702, National Security Letters and their own CVE streams. Western pentest tooling harvests Chrome and Outlook credentials too. Singling out Tencent's transparency is the same China-panic double standard you claim to avoid.

This is the right challenge and we take it seriously. Two honest concessions: yes, every hyperscale platform is exposed to some state's legal reach and to commodity tooling; and no, Tencent's CVE count does not make its software worse than Silicon Valley's. If the argument were "Chinese software is uniquely insecure," it would fail, and we would not make it.

But the convergence is not symmetric in one specific way that survives the steelman. Meta and Google are transparent to a state and targeted by adversaries; they are not, in our data, also the rented substrate of the very harvesting they enable — and their legal regime (however invasive one judges §702) is adversarial and litigated, not a duty-to-"support and cooperate" written into intelligence law. The narrow claim that survives: Tencent uniquely combines all three roles — state-compellable collector, foreign-collected target, and harvester-hosting landlord — under a legal regime of affirmative cooperation. That combination, not any single wall, is the glass house. We name it by the same instrument we turned on AWS, Azure and Google in 032H, and we would retract it the day the data stopped supporting it.

VII. Read Between the Lines

• A company that runs a Content-labelled network, harvests secrets from its cloud, and holds the messages of a billion people is not hiding in the dark. It is the best-lit building on the street. The threat is not opacity; it is the opposite.
• The same property that makes Tencent valuable to Beijing — total visibility into its users — makes it valuable to everyone else who can reach a wall. Centralized collection is centralized exposure. You cannot build a panopticon and live outside it.

VIII. The Human Layer

Set aside the ASNs and the CVEs. At the bottom of the floor-facing wall is a person sending a WeChat message to their mother, a QQ chat between two teenagers, a payment, a location, a confession — carried by a platform whose data is legally reachable by the state and technically reachable by tooling in a free framework. The harvesting this series documents from Tencent and the harvesting documented of Tencent meet at the same place: ordinary people's secrets, held in a glass house none of them chose to live in. That is the cost, and it does not appear on either meter.

IX. Verdict

Tencent occupies a rare transparency asymmetry: an entity built to collect communications is itself simultaneously compellable inward by PRC law, collected from outside by foreign SIGINT and commodity tooling, and the landlord of infrastructure harvesting others. Confidence: MEDIUM — the three roles are individually documented, but specific state disclosure is inferred from the legal framework and the CVE/exploit exposure is real without being unique. The finding is convergence, held to the same double standard we apply to Western platforms. The great harvester lives in a house of glass.

Crosslinks

• ← TI-2026-065A / 065B / 065C — the web front, the shared substrate, and the retired self-monitoring lead.
• TI-2026-042I — The Tencent Cash Machine — the financial anchor beneath this structural one.
• TI-2026-045C — The Tencent Paradox: State Claims — the state-adjacency argument this part extends into exposure.
• TI-2026-032H — The Double Standard — the rule that licenses naming Tencent by the same instrument as AWS/Azure/Google.

Sources: WikiLeaks Vault 7 (CIA EDG), Metasploit Framework, CVE-List-V5 / Trickest-CVE, DOJ APT41 indictment, Four Battlegrounds (Scharre), Alibaba/Duncan Clark — all in the OSINT library; plus LSN honeypot + web-threats data (065A/B). Calibration: legal authority documented, specific disclosure inferred; exposure real, not claimed unique. TLP:WHITE.