Slashdot Mirror
Why Internet Explorer Still Dominates South Korea.
New submitter bmurray7 writes "You might think that the country that has the fastest average home internet speeds would be a first adapter of modern browsers. Instead, as the Washington Post reports, a payment processing security standard forces most South Koreans to rely upon Internet Explorer for online shopping. Since the standard uses a unique encryption algorithm, an ActiveX control is required to complete online purchases. As a result, many internet users are in the habit of approving all AtivceX control prompts, potentially exposing them to malware."
I know too much about this. I'm a Korea-phile, so last year I applied to a graduate school in South Korea and they required me to download like 2 or so add-ons to IE to even complete the online application.
Well, according to the Wikipedia article linked in the summary, it is is supported in NSS, and hence in Firefox (since version 3.5.4).
As for whether or not there is something else required as well as the cipher itself, dunno.
As someone who did IT work in South Korea this year for couple of weeks, I never felt so defeated trying to upgrade 15 computers from XP to Windows 7. We basically had to give everyone admin rights just for them to do their job. Bank sites that had 11 (!) ActiveX plugins with 3-factor security (password, token, plus USB key with a cert) just for them to log in - and they routinely "update" their controls, which of course, require Admin rights.
The branch manager didn't understand at first why we were having so much difficulty. I had to explain to him that if we adhered by our security standards, we'd have to close the branch because there wasn't a single operation they did which would otherwise be allowed.
I should also add that no Java or ActiveX is required to do online banking in Finland. If you want to see how a nice, clean and secure bank website is created, Finns are not a bad choice to consult.
The summary is slightly miss-leading. There isn't 1 standard for ActiveX control, every single goddamn site uses their one ActiveX or Java applet, and you have to install it. I have never seen a more backwards methodology than what Korea has for online purchasing.
The strange thing is, if you use a phone, things are much simpler (generally there is an app). In addition, because of Naver's dominance in the country, almost all sites are integrated with it, and at least offer ways of finding information through it (but not purchasing).