Skip to main content

Search

Items tagged with: korea


Registration and the Call for Proposals are now open for DebConf24. This year's event will be held in Busan, Korea, and will offer Talks, Hacking sessions, activites, discussions, and of course a legendary cheese party! https://debconf24.debconf.org/news/2024-04-15-dc24-registration-cfp-open/ #debian #debconf24 #busan #korea https://micronews.debian.org/2024/1713220443.html?utm_source=dlvr.it&utm_medium=mastodon #debian


The #DebConf24 Logo Contest is now open for voting! Clean your screens, glasses, squint, or view with your perfect vision these amazing submissions on display for your selection. :) https://app.formbricks.com/s/clrun50b6cw9xstcjvtull9vm #debian #debconf24 #debconfBusan #korea https://micronews.debian.org/2024/1706311060.html?utm_source=dlvr.it&utm_medium=mastodon


The #DebConf24 Logo Contest is now open for voting! Clean your screens, glasses, squint, or view with your perfect vision these amazing submissions on display for your selection. :) https://app.formbricks.com/s/clrun50b6cw9xstcjvtull9vm #debian #debconf24 #debconfBusan #korea


People following my account for a while probably noticed me talking about South Korea every now and then. I’ve hinted towards doing some important research, and now the time has finally come for the first disclosures.

But first I need to do a bunch of explaining because most people (my past self from a few months ago included) are largely unfamiliar with the Korean software landscape. See: they have those “security” applications that everyone has to install if they want to use online banking for example.

What could possibly go wrong with applications developed by private vendors without any kind of security vetting and that everyone in a country has to install, whether they like it or not? A lot of course.

In this first blog post I explain how in my limited understanding the current situation came about, show why the companies lack incentive to really invest in security and give you a first slight idea of the disastrous consequences.

No, I’m not exaggerating. The next blog post is scheduled for January 9th, and it will be about a specific application. I submitted seven vulnerability reports for this one. It took a real issue and claimed to have solved it – by making matters considerably worse than they were.

https://palant.info/2023/01/02/south-koreas-online-security-dead-end/

#infosec #ApplicationSecurity #privacy #korea