IMPORTANT - LHDN Please look into this Security Flaw... As I was filing my tax returns via e-Filing I encountered something that made me worried. As I clicked the save & continue button but the page refreshed with some other person's Tax No. as well as their PRIVATE & CONFIDENTIAL info!
I find this NOT amusing as leaking anyone's financial info makes me lose trust in the system and LHDN. Imagine I got to view 2 other person's data!
If anyone here has direct access to LHDN's Head Officer please inform him/her as to this matter to rectify ASAP!
NOW I'M SERIOUSLY WORRIED!!!!
P/S: I'm not here to undermind LHDN's effort with regards to e-Filing. I hope LHDN doesn't view this in wrong light, cause I hope they rectify this ASAP as I too would like to file my Tax returns via e-Filing before the dateline as a responsible citizen!
Latest update 090407 - I couldn't sleep well last nite. Been thinking of this issue.
I think when I click continue (a) and someone else clicks continue (b) as well the server serves back the refreshed pages from (b) to me and (a) to the other person. How else can others see another's info at the same time unless its been swap somewhere along the line.
Like I mentioned I made a call to one of the person via the phone no. listed in the e-filing tax return and talk with the them. As they also could see another person's info filled in the page. One wonders how many are actually facing this swapping of info?
What if a robber/kidnapper gets some nice info on some Dato's tax returns? He/she would know he's particulars and the amount of money he earns yearly and tax he declares as well as his bank account no. Sounds like a Hollywood movie title to me..... "Tropicana Log-in"
I wouldn't be bothered if Newspapers and TV stations were truthful enough to highlight some Bugs in the system. But it will not see the light of day cause of some higher directive and guess what? Blogs are the only place to post this matter so someone can take action to rectify it ASAP without having to go thru debates and red-tapes (I presume).
Well if its still like this next week I won't know what to say other than good luck to those still posting their info online. I hope its correct and not accidentally edited by some other person and submitted in wrongly.
FYI: I didn't even know I was filling in the wrong form, until I saw the top part that listed the tax no. and I tot that's not my TAX NO.! that's not my NAME either! then only did I realise this problem...
Latest update 120471 again - Thanks Malay Mail & LHDN at least its looked into. Even though the heading makes me look like a fool but who cares as long as LHDN e-Filing is fool proof. Rest assured if its confirmed Bugless, I'll post my Tax Returns knowing its safer than before. Anyway thanks to those that did respond and may have rectified it! (but hey "it didn't happen")
Penman RockyBRU Sheih Irene Stephen Francis aka Shanghai Fish NIAMAH!!! Bumiputera Nila Tanzil The Brave Screenshots MalaysiaKita - Bakaq Eli Wong Ancient Mariner aka Capt. Yusof Ahmad SassyJam7 The News Speculator 3540 Jalan Sudin Gerbang Ruhanie Blackinkorea Zorro-Unmasked BigDog As Zewt As It Gets Wattahack CarbonCopy MarinaM June X2 Daphne Ling Shar101 Raden Galoh Penarik Beca Mat Salo aka Borneo Blues she ~ Nong Abdullah Rajah Ram anon fm Miri aka Clemfour Pasquale AnakMerdeka arifabdull Bobby Ong walski Picatho MustStopThis! TheMalaysian SiN Poetic Justice Politikus Davina Maobi Mere Scribbling Malaysia Watch ~ HJ Angus Mental Jog Tokasid PeRManEnTly cUrSEd 5X Mom Membebel Aisehman Tokkok Potshots Bro Rickywan SuperWilson ktemoc Uncle LKS The HuStLeR DiaRieS Aja Raksha Reta Seth Dabido Tiuniasing Cakap Tak Serupa Bikin Hooi Ching 7th Rangers 24th Floor aka F1ex Caker Susan Loone The Seinsintrovert Helen Swifty & Co Politics 101 Zaianne Dracolshian Desiderata Multidimid aka powerpresentpoint Rojaks Rockson! wenjunlim Dai Cha Fan ~ Ah Tiu & Ah Giu ShadowFox's Hideout Cely's Perfect Day Husin Lempoyang M. Bakri Musa Crankshaft DanseMacabre ~ Galadriel Lalat Sepanyol aka Spanish Fly 4896 FlyOnThaWall Projek90hari <--Gip him support! Freelunch 2020 Pathfinder Dina Zaman KualaLumpurIsHome Saidondengki Heartsong AhPek ~ Choy-San-Yeh CaffeinBar MetroBlogginG KL Hatz Watch3r! BolehNation Nasi Lemak RotiCanai Teh Tarik Sagaladoola Straight Talk ~ Khoo Kay Peng Chow Kon Yeow FallenPatriots Bullets of Quills & Ink TV Smith SOPO Sentral Malaysia Unplugged What A Lulu KennySia Infernal Ramblings ~ John LeeMK Mage P's Lab Being Unreasonable ~ Ko-Chi Keris Silau Kata Tak Nak ~ Che Gu Penang the__earthinc aka Mad Druid Snap Happy! Roxanne The Other Malaysia - Farish Noor .:?Ares?:. Magick River aka Antares Mr. Brown Live Well Simple MalaysiaKiri ~ Suara Orang2x Kecil S.O.B. Nation