A lot of Korean govt tech is also just protected by defense in depth instead of strong principles. It's kinda sad that Japanese organizations that by most standards are much more behind SK in digitization tend to at least have half decent security fundamentals. Hell, a misconfigured key exchange in their switch took down the entire government for 4 days because they couldn't even find it.

One jarring thing I heard from friends is the hacky MDM the ROKA would try to install on phones of conscripts who are serving. Instead of undermining the default security measures they should just ban all outside interconnected devices or buy a half decent MDM instead, but then again the contract wouldn't go to some politically connected dev consultancy.

ROKA (and a lot of Korean government institutions) are just plain incompetent at long term maintenance tbh (which makes sense as most infra in SK is newish - only 30-50 years old at most).

They should also just end KATUSA which is clearly being abused by the politically connected.