It's not exactly SK trusted Microsoft. Rather, some idiots had this brilliant idea that if you create a piece of code that hooks directly into Windows kernel a

It's not exactly SK trusted Microsoft. Rather, some idiots had this brilliant idea that if you create a piece of code that hooks directly into Windows kernel and messes around with device drivers, your users will be secure, because how would those evil hackers run keyloggers when your security plugin already hijacked keyboard events. So far so good, but then how do you disseminate this wonderful piece of security technology? By creating an ActiveX plugin and make every user download and install it before they can use your website. And since those pesky new versions of Windows will keep warning "This program may harm your computer, continue?", we just have to tell users to click "OK". But what if users are trained to always click OK and accidentally stumbles upon a fishing website? Stupid dummy users, they shouldn't have done that! If they accidentally went to a fishing website, downloaded a bad security plugin, and uploaded all their banking credentials, it's their fault! IIRC Microsoft practically begged South Korea to please stop using ActiveX, it was never a great technology and it outlived its usefulness a long time ago, could we please move on? Edit: As far as I remember, real fun started when you needed to access two banking websites. Now their security plugins start to fight each other!