IPinside

lastmod 2023-01-26created 2023-01-262 edits

IPinside: Korea's mandatory spyware

• IPinside: Korea's mandatory spyware | GeekNews
  • [Original] IPinside: Korea’s mandatory spyware | Almost Secure
  • [Korean] KoreaSecurityApps/02_ipinside_lws_agent.md at main · alanleedev/KoreaSecurityApps

This time it is a vulnerability disclosure for IPinside LWS Agent, made by Interezen. It is an application meant to prevent online fraud by de-anonymizing users based on their real IP address to verify that they are the real user, but its excessive data collection risks infringing on privacy, and the encryption it actually uses is easy to break, so it does not even properly protect the user data it collects.

See also

• Information Security
• Common Vulnerabilities and Exposures (CVE)
• Vulnerability
• South Korea's online security dead end series
  • TouchEn nxKey
  • IPinside