Korea’s slipshod response to demise of Active X raises concerns

Microsoft’s new Windows 10 operating system and the Edge Web browser will be unable to fully access many local financial institutions and government organizations’ websites due to Korea’s persistence in using ActiveX software. 

Having found to have security gaps, ActiveX has long been phased out overseas, and even its developer Microsoft has dropped support for it in its latest browser.

However, ActiveX remains a requirement for accessing the websites and services of many financial institutions and government organizations.

As such, many local users are being forced to delay updating to the latest Windows 10 operating system or experience difficulties in using online banking and government services.

While authorities are now taking steps to address the situation, general use of the latest software from Microsoft – which still holds a dominant position in Korea – is likely to be delayed by months.

The Financial Services Commission on Sunday announced that financial institutions that operate websites and services incompatible to Windows 10 would address the issue by the end of November.

At present, 15 of the 17 banks that offer online transactions, and 24 of the 39 securities firms that do so have websites that are accessible with Windows 10 Internet Explorer.

According to the plan, those with incompatible websites – 2 banks and 15 securities firms – will have to take the necessary steps by the end of November.

Although a solution is on the way, it will be about four months after the new system’s launch.

Even then, the solution is to enable ActiveX-requiring websites to reroute an Edge user’s connection to the latest Internet Explorer system, which Windows 10 offers as a basic program alongside Edge.

The problem with ActiveX is not limited to government and financial websites.

According to reports, 98 out of top 100 websites in Korea currently use ActiveX software.

The delay in removing ActiveX software, however, appears to have been caused by problems regarding cost, rather than lack of information regarding its shortcomings or about its inevitable demise.

President Park Geun-hye has singled out ActiveX as something that needs to be removed on a number of occasions since last year, while local IT experts and enthusiasts had attempted to bring attention to the matter for years.

Local IT industry estimates that it could cost as much as 10 billion won ($8.6 million) to update websites operated by banks and other financial institutions.

While the cost holds the private sector back in catching up with international standards, the government lacks the means to forcibly prevent companies from using ActiveX. 

By Choi He-suk (cheesuk@heraldcorp.com)