I think I’ve found a serious flaw with the MyJPJ apps.

Did u know, the apps allowing anybody to register as long as u have an ic number that registered to JPJ database. Yes. without any verification that u own the ic number.

The only thing preventing you from registering with someone else ic are the term and condition. This could lead to some people with bad intention to use someone else ic and register the apps to get information such as home address and picture of u.

And i could see in future that some people could not register their account as the account might be registered earlier by someone else.

i do realised, u are required to put your phone number. But u can put anybody phone number. Right?

I might be wrong. Need to verify with someone with IT security expert or anybody?




-----


This post has been edited by fadzly: Jun 21 2023, 12:50 PM

Polis selalunya akan minta ic dan lesen. Lu fikirlah sendiri.

Technically now you can use najib ic number to register 1 account with dummy but working email address

But not sure it got validate with phone number or not

This post has been edited by fantasy1989: Feb 10 2023, 07:56 PM

Had registered mysikap much earlier.
Even register oso need fingerprint at JPJ

they can overwrite email address iinm

dont play2 with government stuff....if you got caught and they decided to open case on you, it will be permenant record unless you ready to live like scammer

This post has been edited by mrhulk: Feb 10 2023, 08:04 PM

that's is why u better fast fast register your ic first. if not, account get "hijack" by others.

If u can register ur parents account using your phone number and email, means everyone can be your parents.

Old people are not tech savvy. Hence they are the one prone to complication like this.

Means someone can use this information to register.
https://rafiziramli.com/2013/04/saman-tertu...n-mengenai-aes/

that's why with Recent jpn leak... someone who bought the Database just need to make a script to mass register for everyone in merehsia...

kekk...

- MySikap at website maximum is 12 chars for password but MyJPJ app I am able to put in a 13 char password
- My wife's account that I registered at MySikap has my phone number and my own MyJPJ app also has my phone number. - dunno if this will complicate things or not using same phone number for two different person.
- I used my password to enter MySikap website - cannot. Same password use for MyJPJ app can go in. WTF?

This post has been edited by N9484640: Feb 10 2023, 08:59 PM

If they cannot handle this, they should not drive

actually, if u want, you can just brute force, since mainly numeric and most of the number also within a specific range, sumore got millions of rakyat, which mean high probability to hit result. first 6 number is date so pandai pandai la construct base on date range, following 2 digit, is state code (also within a specific range). last 4 digit just hantam.

This is what i scared will happen.

It somewhat similar to MySejahtera where u can register anybody like KJ to be your dependent. But good thing with MyS, they are not releasing private information.

When i want to register after i insert my ic, it says already registered and prompt me to log in.

But I belum register before wor.

How?

Apps issue or my ic been used by others?!

Anyone also experience the same?

possible to prevent this is mandatory scan physical IC, only matching IC able to proceed an account.
or get a TAC at booth like EPF online registration.

This post has been edited by kel32: Feb 10 2023, 09:30 PM

Wifu can check your car ownership and see whether you got unknown car or not. If got, better prepared for good explanation. Or else wifu will think you got mistress.

Why need to register jpj account ?

Cukur dah register, good luck to those kenak hacked for late registration.. huhu

that jpj app is using mysikap credential, no?

This post has been edited by anakkk: Feb 10 2023, 09:49 PM

lol. read about myjpj la bro. jgn blur sotong. read the news