I think I’ve found a serious flaw with the MyJPJ apps.

Did u know, the apps allowing anybody to register as long as u have an ic number that registered to JPJ database. Yes. without any verification that u own the ic number.

The only thing preventing you from registering with someone else ic are the term and condition. This could lead to some people with bad intention to use someone else ic and register the apps to get information such as home address and picture of u.

And i could see in future that some people could not register their account as the account might be registered earlier by someone else.

i do realised, u are required to put your phone number. But u can put anybody phone number. Right?

I might be wrong. Need to verify with someone with IT security expert or anybody?