{"id":117235,"date":"2017-09-11T22:30:29","date_gmt":"2017-09-12T02:30:29","guid":{"rendered":"https:\/\/canadianinquirer.net\/v1\/?p=117235"},"modified":"2017-09-11T22:30:29","modified_gmt":"2017-09-12T02:30:29","slug":"rogue-korean-child-monitoring-app-is-back-researchers-say","status":"publish","type":"post","link":"https:\/\/canadianinquirer.net\/v1\/2017\/09\/11\/rogue-korean-child-monitoring-app-is-back-researchers-say\/","title":{"rendered":"Rogue Korean child monitoring app is back, researchers say"},"content":{"rendered":"
\"Citizen<\/a>
Citizen Lab and Cure53 now say the app appears to have been rebranded as \u201cCyber Security Zone\u201d \u2014 the equivalent of putting a fresh coat of paint on a dangerous old clunker. (Photo<\/a>: Citizen Lab\/Twitter<\/a>)<\/figcaption><\/figure>\n

SEOUL, Korea, Republic Of \u2014 A South Korean child-monitoring smartphone app that was removed from the market in 2015 after it was found to be riddled with security flaws has been reissued under a new name and still puts children at risk, researchers said Monday.<\/p>\n

The app \u201cCyber Security Zone\u201d is part of government efforts to curb what authorities consider excessive cellphone use by young people. Parents are required by law to install monitoring software on smartphones for all children 18 and under.<\/p>\n

The app is almost identical to a previous system, \u201cSmart Sheriff,\u201d which left children’s private information vulnerable to hackers, according to internet watchdog Citizen Lab at the University of Toronto. Both were developed under the auspices of MOIBA, the industry association for South Korean cellphone service providers.<\/p>\n

\u201cThe flaws in the apps open the door to possible breaches of sensitive information including passwords, phone numbers, and other user data,\u201d Citizen Lab said in a statement.<\/p>\n

\u201cSmart Sheriff\u201d was one of a family of apps intended to monitor children’s online behaviour. Some, like Smart Sheriff, act as filtering or blocking tools, while others send alerts to parents if children swear or talk about sex or bullying.<\/p>\n

The apps have raised privacy activists’ hackles, but experts have also been scathing about their lack of security. Cure53, a German auditing firm, said in 2015 that Smart Sheriff was \u201cfundamentally broken.\u201d<\/p>\n

Citizen Lab and Cure53 now say the app appears to have been rebranded as \u201cCyber Security Zone\u201d \u2014 the equivalent of putting a fresh coat of paint on a dangerous old clunker.<\/p>\n

\u201cUsers are being misled,\u201d said the Citizen Lab report.<\/p>\n

MOIBA denied the two systems were the same and an official of the group said a review by the government’s Korean Internet & Security Agency found security for \u201cCyber Security Zone\u201d satisfactory.<\/p>\n

\u201cWe cannot agree to the opinion that the application was not developed with security in mind,\u201d said the official, Noh Yong-lae.<\/p>\n

Noh said MOIBA cut ties with the developer of \u201cSmart Sheriff\u201d and hired another company to update and develop apps.<\/p>\n

KISA officials who looked at the Citizen Lab report said their agency’s audit failed to catch at least one security lapse: the app’s developer had not encrypted a key to the password. That stemmed from the app’s design.<\/p>\n

\u201cThey should not have built the app this way,\u201d said Kim Chan-il, a KISA manager. He said the government and MOIBA should make sure to hire developers who pay attention to security and have enough time to build an app.<\/p>\n

An audit by KISA \u201cdoes not guarantee security against all weaknesses,\u201d Kim said.<\/p>\n

Rates of smartphone and internet use in South Korea are among the world’s highest. The government operates filters to block access to pro-North Korean websites and material deemed pornographic.<\/p>\n

South Korean authorities believe monitoring and censoring children’s smartphone use is part of the state’s duty to protect teenagers against harmful content such as pornography.<\/p>\n

There is broad public support for the government to stop online behaviour that is deemed to be an addiction. The government spends public money to help users break habits of excessive computer gaming and internet use.<\/p>\n

The backlash to \u201cSmart Sheriff\u201d prompted the government to ease enforcement by proposing a bill in parliament that would allow parents to opt out of installing a monitoring device.<\/p>\n

The proposal \u201cshows the government acknowledges its original position was wrong, but it’s not enough,\u201d said Kelly Kim, general counsel at OpenNet Korea, a civic group, who co-authored the Citizen Lab report. \u201cThe mandate is unconstitutional and should be abolished.\u201d<\/p>\n

The child surveillance apps are part of a \u201cclean internet\u201d campaign launched by the government with MOIBA since 2013. MOIBA received nearly 963 million won ($853,000) this year for the campaign.<\/p>\n

The South Korean telecom regulator, Korea Communications Commission, has promoted the two apps developed by MOIBA among teachers, parents and students.<\/p>\n

Despite that, the app has received many negative reviews. The children’s version has been downloaded about 6,000 times and the parent version about 30,000 times.<\/p>\n

A commission official, Kwon Man-sub, said if new security risks are found, the government is willing to review them.<\/p>\n

\u201cBy law, we have a duty to protect juveniles,\u201d Kwon said.<\/p>\n","protected":false},"excerpt":{"rendered":"

SEOUL, Korea, Republic Of \u2014 A South Korean child-monitoring smartphone app that was removed from the market in 2015 after …<\/p>\n","protected":false},"author":33,"featured_media":117241,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[2131,23541,23542],"class_list":["post-117235","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-app","tag-cyber-security-zone","tag-smart-sheriff","mauthors-youkyung-lee","mauthors-raphael-satter","mauthors-the-associated-press"],"_links":{"self":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/posts\/117235","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/users\/33"}],"replies":[{"embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/comments?post=117235"}],"version-history":[{"count":0,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/posts\/117235\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/media\/117241"}],"wp:attachment":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/media?parent=117235"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/categories?post=117235"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/tags?post=117235"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}