Sources detail the measures Google took to keep Dragonfly under wraps, including shutting out some members of the security and privacy teams from key meetings
pardon my lingo — “big yikes” if true. Yonatan at Google was an effective leader of large engineering projects: known for having both the ear of upper management, and the willingness & desire to listen to employee concerns; and to bridge that gap. Ryan Gallagher / @rj_gallagher : Some of those working on Dragonfly believed that Beaumont may have misrepresented Brin's position in an attempt to reassure them that the effort was fully supported at the highest levels of the company, when that may not have been the truth. Ryan Gallagher / @rj_gallagher : When Dragonfly leaked, Beaumont fumed, sources said. “His ideal circumstance was that most people would find out about this project the day it launched.” He told colleagues he feared the leaks may have scuppered the prospect of Google launching the platform in the short term. Ryan Gallagher / @rj_gallagher : “The [Dragonfly] project, as it was then specified, was not something I could sign off on in good conscience,” Zunger told me. Ryan Gallagher / @rj_gallagher : Every new product or service that Google develops must be reviewed by legal, privacy, & security teams, who try to identify potential issues or problems. But with Dragonfly, the normal procedure was not followed: Company execs appeared intent on watering down the privacy review. Ryan Gallagher / @rj_gallagher : Once you read my new story & the details about how Google execs shut out the privacy team on Dragonfly, revisit what Google's privacy chief told Congress in Sept: “I'm not clear on the contours of what is in scope or out of the scope of that project.” https://www.cnbc.com/... Ryan Gallagher / @rj_gallagher : The Dragonfly teams were instructed, however, that they were not permitted to discuss the issue directly with Brin or other members of Google's senior leadership team. Beaumont wanted all communication with top leadership to be directed through him. Ryan Gallagher / @rj_gallagher : Important to remember, none of this would be happening without the whistleblowers who took big risks to leak info on Dragonfly a few months ago. It'd still be secret without them. https://theintercept.com/... Ryan Gallagher / @rj_gallagher : When we revealed Dragonfly back in August, many people inside & outside of Google were stunned b/c they didn't understand how Brin could have reversed his strongly held position on censorship — particularly given that censorship & survellance have worsened in China since 2010. @mcmillen : I am not vouching for the truth of anything in this article, and not speaking on behalf of my employer — but I have trusted and respected @yonatanzunger for many years, and am glad he came forward to speak out about his involvement with Dragonfly. http://twitter.com/... Julia Carrie Wong / @juliacarriew : Google's own privacy team “concluded that Google would be expected to function in China as part of the ruling Communist Party's authoritarian system of policing and surveillance” http://theintercept.com/... Ryan Gallagher / @rj_gallagher : I spoke to @YonatanZunger, who was until last year a 14-year veteran of Google & one of the leading engineers at the company. He was among a small group who had been asked to work on Dragonfly — he was tasked with producing a privacy review of the China search engine. Ryan Gallagher / @rj_gallagher : Beaumont “wanted the privacy review [of Dragonfly] to be pro forma and thought it should defer entirely to his views of what the product ought to be. He did not feel that the security, privacy, and legal teams should be able to question his product decisions,” Zunger said. Mark Bergen / @mhbergen : “Two sources working on Dragonfly believed that Beaumont may have misrepresented Brin's position in an attempt to reassure the employees..."New Intercept story comes out swinging at Google's China chief. http://theintercept.com/...
Context & Ripple Effects
The Dragonfly story has been escalating since August, when documents showed Google using subsidiary 265.com to compile a list of sites China blocks, followed by reports that Sergey Brin only recently learned how far along the project was. October brought a transcript of search chief Ben Gomes's staff remarks that contradicted Google's public line on limited progress.
This Intercept report shifts the focus from what Dragonfly is to how it was run: sources describe a deliberate information architecture — communications with Brin and senior leadership routed through Ben Beaumont, the privacy review watered down, and security and privacy staff shut out of key meetings — even as Google's own privacy team concluded the product would embed the company in China's policing and surveillance apparatus.
First-order effects
- Google's security and privacy reviewers were structurally cut out of the decision loop, meaning the people whose sign-off Yonatan Zunger said he could not give in good conscience were never positioned to give it at all.
- Beaumont's reported gatekeeping of the Brin channel — and possible misrepresentation of Brin's position to reassure the team — means engineers working on Dragonfly were making commitments based on leadership support that may not have existed.
Second-order effects
- Each leak from inside the project narrows Google's room to maneuver: with whistleblowers already active and Congress named among the interested parties, continued secrecy now raises the cost of every subsequent disclosure rather than containing it.
- Ben Gomes's contradictory remarks and the exclusion of privacy staff put Google's internal review processes on trial alongside the product itself, forcing leadership to defend not just Dragonfly but whether its ethics and privacy reviews have any binding force.
Third-order effects
- If the pattern holds, large-scale ethical decisions inside major tech firms will increasingly be adjudicated by leaks and external bodies rather than internal review boards, since insiders now know those boards can be bypassed by routing around them.
- The episode points toward codified oversight — regulatory or congressional — for products that embed US companies in foreign surveillance systems, replacing the current model where the only check is whether executives choose to route a project past their own reviewers.
The trend: Big-tech ethics review is shifting from an internal checkpoint executives can route around to an externally enforced constraint, with insider leaks and legislative scrutiny filling the gap left by bypassed governance.