#sii — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #sii, aggregated by home.social.
-
Chilean IRS uses RSA-SHA1. LOL.
#CyberSecurity #Chile #IRS #SII #Taxing #Taxes #TAx #Security #Programming #Coding #Code #SoftwareDevelopment #WebDevelopment #WebDev
-
Half of chilean companies are going to hate me for this.
#Programming #Coding #Code #SoftwareDevelopment #WebDevelopment #PHP #Laravel #GitHub #SII #IRS #Taxing #Taxes #Tax #Legal #Chile
-
My proposal:
1. DTE as JSON objects. Use JSON-LD v1.1. It's W3C standard. Plus, in 2028 will have YAML compatibility.
2. Use OAuth 2.0. For fuck sake, it's RIGHT. FUCKING. THERE.
3. Use a simple "signature" keys. It's 2026, we use HTTPS, nobody is going to eavesdrop.
4. Get short-lived token → create document → sign it → send it with the token as Auth: Bearer. Is *THAT* easy.
#Chile #IRS #SII #JSON #W3C #XML #SII #Taxing #Tax #Taxes #SoftwareDevelopment #Software #Programming #Coding #Code
-
El SII concreta destitución de exjefa de gabinete por perdonazo irregular a empresa del grupo Fernández León | vía #ReporteaCL
#apuntes #corrupción #elenaamaya #fernándezleón #impuestosinternos #perdonazo #sii
-
Meiggs en la mira del SII: descubren red de evasión que defraudó más de $9 mil millones al Fisco | vía #UChileRadio
#evasores #fisco #impuestosinternos #leydepropiedadintelectual #meiggs #sii #toldosazules
-
Oh my fucking god. The documentation says, and I'm not kidding: follow the standard, but do it our way anyway.
The purpose of using a standard, is to follow the standard.
The only excuse for this is offering something better than the standard for sake of convenience. This shit is XMLDSIG. Of course convenience was lost the moment I opened the documentation.
#Chile #SII #IRS #Taxing #Tax #Taxes #Programming #SoftwareDevelopment #WebDevelopment #XML #Rant
-
For fuck sake, all tax documents must be encoded in... ISO-8859-1.
Why the fuck.
#Chile #SII #IRS #Taxing #Taxes #Tax #Programming #SoftwareDevelopment #Development #WebDevelopment #WebDev
-
And the official documentation for the SII for electronic taxing is... incomplete. Who would have thought...
#Chile #SII #IRS #Documentation #Programming #XML #Taxing #Taxes #Tax #SoftwareDevelopment #WebDevelopment #WebDev
-
What pisses me off from Chilean IRS (SII) is NOT that they use 20 year old protocols.
It’s the lack of modern alternatives.
We have HTTPS anywhere, JSON schemas (that can work on YAML), and Swagger. Plus, multi core servers and Fiber Optics. How the fuck it’s that difficult to implement?
What the fuck are they afraid of?
#Chile #SII #IRS #Taxing #Taxes #Economy #Finances #API #Programming #WebDevelopment #WebDev #SoftwareDevelopment #Technology
-
XML is the fucking evil incarnate and institutions that use it indiscriminately should burn to the ground with everyone alive inside it.
Not talking about the SII (Chilean IRS). Of course I wouldn't.
#SII #IRS #Tax #Taxing #Taxes #Chile #Programming #XML #SoftwareDevelopment #WebDevelopment #AppDevelopment #Development #Software
-
Do you want a funny weekend project?
The Chilean #SII, akin to the #IRS from United States, asks to sign tax documents using SHA1-RSA.
This encryption is susceptible to Marvin Attack, Collision Vulnerability, and SHAttered Attack.
Literally, all business in #Chile are vulnerable to these attacks.
#Security #SecOps #Tax #Taxing #Taxes #Sec #SHA #Vulnerability #Encryption #Decryption
-
My suggestion to #SII:
1. Move from XML to YAML.
2. Move from certificates to 256-bit tokens tokens
3. Use HTTPS exclusively.
4. Use `Authorization: Bearer` to identify the envelope sender.
5. Use SHA256 + Secret Salt to sign each document.Bring your shit to 2025 standards, for fuck sake.
-
Second consecutive day dealing with the Chilean IRS (SII) documentation.
Now I understand why business charged. If bucks for connecting their servers to the SII. It’s a monster on its own.
But it’s slowly wrapping in my head how to deal with it.