4 ms·

It isn't just IE that is a problem. The encryption scheme developed by the government is largely broken (due in no small part to IE and ActiveX vulnerabilities)

It isn't just IE that is a problem. The encryption scheme developed by the government is largely broken (due in no small part to IE and ActiveX vulnerabilities). South Korean banks and other organisations are losing money due to fraud and blackhat activity but there is next to nothing they can do about it. It's really a huge mess. That and the government's encryption app is closed source and not peer reviewed. As always, the cause is that you are never smart enough to roll your own encryption standard. Any time someone asks you to roll your own encryption pinch yourself and smash your head on the desk, if you still want to code it smash your head again.

w1ntermute 14y ago
> As always, the cause is that you are never smart enough to roll your own encryption standard. This is where Korea's rather boneheaded form of nationalism causes problems: > "The Korean government took a great deal of pride in that breakthrough security technology," Kim said. "They wanted it to be widely used in Korea."
- brazzy 14y ago
  > Korea's rather boneheaded form of nationalism is there any other form?
  - corin_ 14y ago
    He really meant national pride, and like any type of pride that can be justified or foolish.
    - astrodust 14y ago
      At least it wasn't the sort of national pride where you want everyone in the world to use your national standard. Remember the Clipper chip?
luriel 14y ago
> It's really a huge mess. That and the government's encryption app is closed source and not peer reviewed. What is insane and scary is that anyone is forced to use the governments encryption app.
dasony 14y ago
> South Korean banks and other organisations are losing money due to fraud and blackhat activity but there is next to nothing they can do about it. Do you have any source to back that up? I talked to some security people and they used to tell me, although ActiveX is a pain, we are having much less damage from Internet banking. I'd love to have something that says this isn't the case. > That and the government's encryption app is closed source and not peer reviewed. The encryption algorithm itself (SEED) is open and is peer reviewed.

w1ntermute 14y ago

> As always, the cause is that you are never smart enough to roll your own encryption standard. This is where Korea's rather boneheaded form of nationalism causes problems: > "The Korean government took a great deal of pride in that breakthrough security technology," Kim said. "They wanted it to be widely used in Korea."

brazzy 14y ago
> Korea's rather boneheaded form of nationalism is there any other form?
- corin_ 14y ago
  He really meant national pride, and like any type of pride that can be justified or foolish.
  - astrodust 14y ago
    At least it wasn't the sort of national pride where you want everyone in the world to use your national standard. Remember the Clipper chip?

luriel 14y ago

> It's really a huge mess. That and the government's encryption app is closed source and not peer reviewed. What is insane and scary is that anyone is forced to use the governments encryption app.

dasony 14y ago

> South Korean banks and other organisations are losing money due to fraud and blackhat activity but there is next to nothing they can do about it. Do you have any source to back that up? I talked to some security people and they used to tell me, although ActiveX is a pain, we are having much less damage from Internet banking. I'd love to have something that says this isn't the case. > That and the government's encryption app is closed source and not peer reviewed. The encryption algorithm itself (SEED) is open and is peer reviewed.