So... Gomen didn't think of this loophole before they launch the program?

PETALING JAYA: Former deputy international trade and industry minister Ong Kian Ming has urged Malaysians to register their Padu account immediately due to cybersecurity concerns.

“Please register your PADU account at http://padu.gov.my immediately. If not, anyone with your IC and postcode of your IC address can register your IC on your behalf since registration is b4 the eKYC approval which takes 3 days. It will be a hassle to get back your account!”, Ong claimed in a post on X (formerly Twitter).

To register for a Padu account, members of the public need to provide their full name along with an NRIC number and matching postcode. They also need to provide a valid cellphone number to receive an OTP (one-time passcode).

The process also requires users to perform an eKYC step to verify their account. However, based on LifestyleTech’s checks, users can skip the eKYC step and the account will be created under the person's NRIC number.

LifestyleTech also found that users can receive the OTP through any phone number keyed into the form.

In a follow-up post Ong, who is also the former Bangi MP, added: “Padu sending you your OTP immediately after registration is not the problem here. Anyone with access to the electoral roll (for e.g.) or any database with names, IC Nos and Addresses, can key in any phone no for the OTP to be sent to and register a ton of PADU accounts.”

The website will subsequently prevent users from creating a new account based on their already-registered IC number.

Ong’s post has received more than 92,300 views since it was posted at 2.47pm today. Other X users have tagged Economy Minister Rafizi Ramli to look into the issue as his ministry is spearheading the initiative.

Padu was launched today for users to update their personal details and receive access to targeted government subsidies.

Malaysians have until March 31 to register.

https://www.thestar.com.my/tech/tech-news/2...-your-knowledge

who manage this padu thing? izit heitech padu?

To be fair there is not much of value inside there when you first register.

What I am concerned about is there is no 2FA to secure your account once you do key in your info.

Lapizi should have launched my digital id first before this IMHO.

Deswai I always been saying most of the country’s issue isn’t which political party is in power but the mindset of the nation, which nobody is interested to fix. Only fight for votes and who is in power.

Shit same smell and use, different kaler and shape only. Tahi is still tahi.

Actually which government can be held accountable? All also act like dictatorship when rakyat (legit) complain.

Feedback form box underneath is tong sampah 😆

I thought need to selfie with IC. Some govt online services use it now.

Ps previously was changing voter address online. And recently it was either voluntary EPF deposit and/or SSPN new savings account creation that also had it