China has long been a billion-plus-person experiment in total state surveillance, with virtually no legal checks on the government’s ability to physically and digitally monitor its citizens. When so much control of citizens’ private data amasses within a few government agencies, however, it doesn’t stay there. Instead, that bounty of private info has also leaked onto a lively black market—one where insiders sell off their own access to any scammer or stalker willing to pay.At the Cyberwarcon security conference in Arlington, Virginia, on Friday, researchers from the cybersecurity firm SpyCloud…