Koreans Advised to "Avoid Vista" for Now
An anonymous reader writes "The Chosonilbo reports that several government ministries in South Korea are advising users not to install Windows Vista, at least until popular online services can be made compatible. The problem is that ActiveX is pervasive in the Korean webspace, employed by everyone from web games to online banking. Upgrading to Vista is expected to render many of these services unusable. Portions of the popular "Hangul" word processor, a major competitor to Office in that country, are also not functioning under Vista. The Ministry of Information is planning to publish compatibility information for popular websites, and urging users to carefully research the implications of upgrading."
Short version: they use Active-X because of US export policy.
Long version: Before Clinton allowed export of strong encryption, web browsers outside US only supported 40-bit encryption. So instead of using ssl with 40-bit keys, the Korean government adopted something called SEED, a homegrown algorithm with support for longer keys. So all the online banking stuff was done with it. This was around when IE was taking over the browser market, so banks used Active X to implement SEED. People liked it because it allowed them very nice and frequently updated widgets, and most people were running windows anyway.
Fast forward 10 years, the whole country is dependent on Active-X and therefore MS, with *zero* support for alternatives. As everyone is using IE, most web sites (including Korean Government sites) are designed only for IE+Acitve-X. All banking, shopping, stock trading, is done through Active-X, with no alternatives. This discourages people from using anything but Windows, perpetuating the monopoly. Korea is the only country where the stock market and most financial system shutdown because of the MS-SQL slammer worm (back in Jan '05). With help from rampant software piracy, MS is *the* dominant player in *all* software markets, and Korea's culture of homogeneity has simply perpetuated the monopoly.
I'm hoping people learned their lesson and will shift to more standards compliance and alternative implementations, but somehow I don't think so. In fact, the Korean Government will demand MS "fix" "their" problem, as obviously it is MS's fault for breaking "the Internet".
In Soviet Russia, articles before post read *you*!
Uhhh... you really cannot offload security to a client. Trust me. I work for a fortune 500 with more than 150,000 employees. We have converted most of our apps to be web apps. All security was brought to the server side because we had so many issues with clients systems. Any one that offloads security to a client is a dolt IMO. It will come back to bite you big time. :-)
General, you are listening to a machine! Do the world a favor and don't act like one.