Economy Ministry swiftly fixes security loophole in Padu, thanks user for highlighting issue

The Star

The Economy Ministry said that it has swiftly addressed a security flaw in the Central Database Hub (Padu) after a user highlighted a loophole within the system.  It was found that the loophole allowed third parties to use a user’s MyKad number to change a password in Padu  Read more at http://tinyurl.com/325xc88u  WATCH MORE: https://thestartv.com/c/news SUBSCRIBE: https://cutt.ly/TheStar LIKE: https://fb.com/TheStarOnline

Transcript

00:00 The economy ministry has swiftly addressed a security flaw in the central database hub

00:08 of Padu after a user highlighted a loophole within the system.

00:13 It was found that the loophole allowed third parties to use a user's MyCard number to change

00:18 a password in Padu.

00:20 In an expose, a user showed how he used Padu's Application Programming Interface or API to

00:26 override a third party's password using the person's MyCard number.

00:30 An API is a software intermediary that allows two applications to talk to each other.

00:37 In a reply on X, the ministry said it is constantly monitoring external feedback and working on

00:42 the necessary improvements.

00:44 Chief Statistician Datuk Sri Dr Mohamad Uzi Mahadin also thanked the user who pointed

00:49 out the flaw as the statistics department is among the agencies responsible for Padu.

00:54 Padu launched on January 2 is a correlation of all the personal data held in various agencies.

01:01 One of its objectives is to provide a profile of households and their disposable incomes

01:05 for better distribution of targeted subsidies and assistance.

01:09 [END]

01:11 Page 1 of 2

01:12 Page 2 of 3

01:13 Page 3 of 4

01:13 Page 5 of 6

Category

Transcript

Recommended