E-hasil...income tax.......

2 weeks ago, i went to LHDN Malaysia - Kelana Jaya Branch....though of wanna to open an income tax account for myself since i dun have any yet...

Me: I wanna to open an income tax account. How do i apply it?

Officer: How much do you earn monthly?

Me: RM XXXX

Officer: You no need to open acccount, you are not qualified for paying income tax

Me: I wanna to open one, just for future use

Officer: No need la....if your income doesnt reach to RM30k yearly, we wont help you to open file.

Me: .......

I wonder whether is it they though my salary will never reach to that level......in future i still have to come to open again......just waste peoples time. So i have to ask my company admin whether can help me create a new account or not. She promised to help me for that and she also told me the officers who working in LHDN is one kind..........Finally i got the account.


Few days later.....

Went there again to get the Electronic pin code for eletronic income tax submission(E-filling). Reach there, got the temporarily pin number. The officer request me to register my information with using the laptop which is prepared. Loading the first page is already kind like SLOW..........After key in my IC no, press Search...WAIT...WAIT..WAIT....3minutes over, the screen display "The page cannot be found", click back again, submit again.....same time happened again....In the end, the officer just inform us their server was down...

There are also few of the peoples have same situation as me, the officer just give us a brief tutorial with open the "User manual" where we can download from their official site, scroll it page by page...and also ask us to read it at home. One of the important msg that she informed us abt "Whatever message box prompt out on screen just press "YES"". And then she said we only can register our info another day later after they help us to insert our record when the server is up.


Few days later which is today, suddenly remember i havent register my info yet, faster rush back home and do it. Key in the url https://e.hasil.org.my/, SLOW.......wait wait wait....finally appear the screen.......

1 - First Step - Register
Follow the instruction, inserted the temporarily pin code that you got from the LHDN and insert another new pin code (not really consider as a pin code....because you might able to guess their pin code if you know that person well enough). After submited, it really got a lot of msgbox prompt out with the same message and also same option either press "Yes" or "No". What you need to do is just keep on PRESS Yes Yes Yes. Finally you will get a digital certificate


2 - Upload your digital certificate to their digicert server. Click on the link, it prompt out a window to save the "eFiling Backup Module 1.10.exe" file. After that, install it, key in your pin code where you did in the first step. And then just keep on press Yes Yes Yes for the prompt message.

3 - Download your digital ceriticate from their digicert server for your own backup. Wonder who's wonderful idea of just now ask you to upload that certificate to their server, and now you have to download the same thing again from their server......
Same thing, another worst thing is ask you to download another program which is "eFiling Backup Local Module 1.7.exe".............install it.....and it will questionning you about your IC no and also pin code.....then download that digital certificate which is in PFX format.

4 - download the form, fill in and submit, that's all........

Does it sounds good? Well.....after you read the following statement, then only give your comment about it.



My comment about their service is:
1) Troublesome - Only allow you to create the account when only you reach to that 30k....................everyone is possible to reach to that level in few years time, no matter early or late they still need to have the account....Why should make peoples life difficult to come so many time just to PAYING the FREE MONEY to them.....we doesnt earn anything, understand?



My comment about their system is:
1) Speed slow - You will realize it when you start to visit their web page, not even you access from outsider, even you went to their branch and use their laptop to visit their site, also very very very slow............

2) Inreliability - Server always down, mine is not the first time. Even my colleagues went there, they told my colleagues server down, my colleague take a look, and tell them pls go to check the cable whether got plug in properly to the hub or not...then only get solved..............WHY there is NO ONE Support their system.......

3) Poor Security - All our backup digital certificate placed into a server and everyone can access into it. Frankly to say, they didnt do any encryption of the file name for each of our digital certificate file and also secure the way of retrieving it. As long as you already uploaded a backup to their server and someone know about your income tax account number, it will be VERY RISKY and also can be VERY EASILY to download your digital certificate if that person have the basic knowledge about HTML. Never the less, dun forget that there are some information stored into that certificate!

4) Unsecure for us - They keep a copy of our digital certificate when we doing the backup. If it is just for backup, fine! But then why is the purpose they also stored our digital certificate pin code? Some more one thing stupid enough is if you click on "download digi cert" from their server, their prompt you to key in your IC no and your pin code, then it allow us to download our digital certificate, IN ADDITION, DISPLAY YOUR DIGITAL CERTIFICATE PIN CODE on screen...........who's wonderful idea is that? If let said the first pin code is use to download the certificate, then why should them provide the feature of display the second digicert pin code after that? (Note: Your pin code for retrieving the digicert is different than the pin code in digicert unless you set both to the same)

If they really wanna do such the thing, then back to the question, what is the purpose of the digicert if it cant be used for the "Personal privacy" since there are some where where you can retrieve your pin code. And that pin code should be only know by yourself but no one else............Some more the question of the hint of your password is like "Apakah nama ibu anda?, "Apakah makanan kegemaran anda?", and "Apakah rancangan TV kegemaran anda?"....

If i am your family's insurance agent, of course i able to know what is your mothername...If i am one of the people who close to you, i also would able to guess what is your favorite food and your favorite tv show........Once i get the answer, i also able to download your digital certificate and also the system is SMART enough to tell me about our digital certificate pin code too!!!!



The rest.........no mood to talk more....really broke my heart until cant fall sleeep at 1am morning.