Re:Update on campaign targeting security researchers
by neom on Wednesday March 31, 2021 @11:00PM
(#26656159)
For some things in SK you have to download a bunch of weird proprietary government .exe's that seem to only run in conjunction with specific combinations of windows and IE. I was pretty shocked when my wife and I went to get our marriage certificate from the government, and going to get our marriage certificate was finding an old windows NT system at her college library that everyone used to do their government related .exe stuff. We had to download 2 or 3 apps to do it, I'm not even sure what they all did, just a bunch of programs you had to run in a specific order, some of them provided iFrame type windows to logins, it was really strange.
Re:Update on campaign targeting security researchers
by bawolff on Wednesday March 31, 2021 @10:59PM
(#26656156)
I wonder why they needed an active x control for that. TLS/SSL client certificates have been supported by all browsers since basically forever, going back even further than active x.
Re:Update on campaign targeting security researchers
by thephyber on Wednesday March 31, 2021 @11:19PM
(#26656293)
If I had to guess, HTTPS / SSL was governed by US export restrictions above a certain strength so S Korea managed to use the existing extensibility built into the browser the government wanted to support.
Re:Update on campaign targeting security researchers
by freeone3000 on Wednesday March 31, 2021 @10:53PM
(#26656120)
It's ActiveX-based, which essentially runs nowhere but IE. Edge's support for ActiveX is running it in an IE tab.
Re:Update on campaign targeting security researchers
by thephyber on Wednesday March 31, 2021 @11:23PM
(#26656314)
Yes, I roughly understand the limitations of the existing implementation. but it is not the only browser or platform and it’s not like the S Korean government is not capable of noticing the market share / cybersecurity trends of the past decade+.
I guess I had assumed that the standard was compatible with newer versions of Windows or MS browsers. Really sad if it isn’t.