More on Cyber Leaks and Cyber Warfare in Korea

Press coverage of the recent cyber attacks on Nate and Cyworld and the resulting leakage of personal information is just beginning. Readers who found my previous post interesting may wish to read today's article in the Joongang Daily. It notes that controversy is heating up over Korean Web portal operators’ collection and storage of private data after the country’s worst cyber hacking case put over two-thirds of its population at risk of identity theft.
It also put a question mark on the effectiveness of the country’s controversial Internet regulations, such as the real-name verification law, which critics argue provide incentives for online companies to hoard personal information.

“While they didn’t have the ability to protect private data, they have been excessively collecting it,” said Lim Jong-in, dean of the Graduate School of Information Security at Korea University, referring to the country’s major Web portals.

Korean Internet users rely heavily on do-it-all, one-stop Web portals. They visit industry leader Naver at least three times for every four Internet uses, according to market research firm Metrix Corp., and the three most-visited Web portals account for more than 90 percent of the country’s Web search traffic.
These Web portals ask for names, resident registration numbers, birth dates, addresses and phone numbers to join their services, which are accumulated, some of them encrypted, in their servers for at least five years and become attractive “booty” for hackers.
“Instead of mere lists of online accounts, [hackers] could steal the full package of real world identities,” said Nakho Kim, a media researcher at the University of Wisconsin-Madison. “Due to government policies and industry laziness, many Korean online services tend to collect a lot of personal identity information.”
Readers following the broader global context of the recent cyber attacks on Nate and Cyworld will want to read The New York Times article entitled "Security Firm Sees Global Cyberspying."

Thoughts on North Korea, Cloud Computing and Cyber War

Several articles jumped off the computer screen at me this morning as I reviewed my Google alerts and read the morning papers.  One was the Chosun Ilbo article noting that Korea University has established a cyber defense course at its Graduate School of Information Security. It noted that cyber terrorists of the future will need to be even more sophisticated than they are now as South Korea is set to establish its first academic program dedicated to training military officials specializing in countering cyber warfare. The main focus of the program at Korea University will be threats from North Korea, the Ministry of National Defense said on Thursday as it announced the plan.  Coincidentally, The Korea Times carried an opinion article entitled "Defending Cyberspace."  That piece contains some rather sobering, if they are accurate, assessments of the capabilities of North Korean hackers.  I would simply note that South Korea's heavy dependence on Microsoft Windows and the associated security risks are a well documented phenomenon, referred to by many as Korea's "Microsoft monoculture."   Over and above that, the extremely rapid diffusion of smart phones and tablets in the South Korean market is creating a whole new space for potential security threats.
The above articles already had me musing about possibilities when I ran across Roger Strukhoff's blog piece entitled "The Geopolitical Context of Cloud Computing."   The article starts by noting that cloud computing is a global phenomenon and exists within a very serious geopolitical context. The technology is not discrete from government policy, and technology marketers must be exquisitely aware of this. The highest profile example is Google's ongoing sparring with the Chinese government. But in a way, we're all Google and we should understand why. The author makes the following point about the most immediate effect of the information revolution on politics. ...the geopolitical actions of government leaders in Beijing, Washington, and dozens of other national capitals has a direct, immediate effect on the technology industry today. As the onset of World War I demonstrated, a provocative event in the relatively modest outpost of Sarajevo unleashed simmering tensions among the great powers of the age, resulting in tens of millions of deaths in the two wars that followed. Today's geopolitical landscape is at least as fraught with tripwires as that of 1914. In almost 100 years, all of our technology has not made us humans any more peaceful or cooperative. Strukhoff's full piece is worth reading.
I am formulating an argument that the growth of cyberspace is emerging as perhaps the single most important factor in, among other things, Korean unification.   Comments welcome and you can watch for more on this topic in future poses.

North Korea using Twitter and YouTube

The New York Times carried an interesting article today on how North Korea is using Twitter and YouTube to bolster its propaganda efforts.  During the last month, a series of video clips have been posted to YouTube, brimming with vitriol and satire against leaders in South Korea or in the U.S.  During the past week, North Korea also began operating a Twitter account under the name uriminzok or "our nation."
A spokesman for the National Unification Ministry in Seoul said “It is clear that these accounts carry the same propaganda as the North’s official news media, but we have not been able to find out who operates them." The two Koreas agreed to stop their psychological war after their first summit meeting in 2000, but the situation has changed following the sinking of a South Korean warship in the West Sea earlier this year.

Korean Cyber-Warfare

The Korean War may have ended in an armistice, but it seems to be continuing in cyberspace.  The latest evidence of this is in press reports that the South Korean-U.S. joint war plans, referred to as Operation Plan 5027, may have been hacked.  According to The Korea Times, the Defense Ministry announced that computer hackers who may be from North Korea might have gained access to this secret plan.
The Chosun Ilbo reported that an officer with the U.S.-Korea Joint Forces Command had used an unsecured USB memory stick and that, in the process, some contents of the secret plan were accessed by a hacker with a Chinese IP address.  North Korea is believed to have military personnel who specialize in hacking.