Saturday, April 26, 2008

LHDN E-Filling Security

Have you filled in your Personal Income Tax yet to the Lembaga Hasil Dalam Negeri (LHDN) or Inland Revenue Board Malaysia ?

If not .... you have 4 more days to go !!!!!

Just a note to all usgin E-Filling, kindly read the alert by our fellow blogger (Sabahan.com )
Kindly note that this incident happened about a year ago (Apirl 2007)

....... extract for article .......

"Unfortunately, Rickey of WattaHack has written an alarming post regarding a serious security flaw he discovered while filling his tax returns via LHDN e-Filing recently.
He was shocked to find he was able to see the other tax payers account details after clicking the “Save & Continue” button. It looks like this is a simple cookies permission problem or perhaps database related problem but I don’t know for sure.
If that’s the case, it seems to me the developers were either not fully qualified or didn’t do enough testing before the system went live.
The security flaw was discovered on 7 April, I am not sure if it has been fixed at the time of this writing but two days after the discovery, the flaw was still in the wild.
A person named Najlah Ishak who claimed to be the Public Relations Officer for LHDNM did post a comment where she asked to be contacted at 019-222 0034.
What I find unsettling was that we don’t know if Najlah really works for LHDN. She could be an impersonator trying to take advantage of the situation. If she is the real Public Relations Officer, she should have made it easier for the blogger to report the problem by giving her official contact number or LHDN email address. "......

.....

  • This year I am going to use the e-filing system again and I really hope it is as secure as they made us believe.
    Update: This problem has been fixed.
  • Although the problem is reported as fixed ..... but for security, it is advisable to use the traditional way, manual submission.......
  • However, nowadays, you can either pay someome to do it, or invest in a software that can help you optimized and get the most of your return like the popular Taxsaya software..... best of all .... its FREE

>
AddThis Social Bookmark Button

0 comments: