Spa electronic visitor registration - beware of risk

[sanwa]

As part of digitalisation, recently it looks like many establishments have joined in digitalising the visitor registration.

This pose real risk of personal information and visits leaked. We have seen even government systems being hacked. No system is 100% hack proof. It can also be from anyone who has access to the backend systems including employees of the vendor (no information is known on how the data is safe guarded, no information on how long, how many years the data is kept)

Being online, the data is easily accessed anywhere anytime.

Beware of such risks.

[NottyMonkey]

Originally Posted by sanwa

As part of digitalisation, recently it looks like many establishments have joined in digitalising the visitor registration.

This pose real risk of personal information and visits leaked. We have seen even government systems being hacked. No system is 100% hack proof. It can also be from anyone who has access to the backend systems including employees of the vendor (no information is known on how the data is safe guarded, no information on how long, how many years the data is kept)

Being online, the data is easily accessed anywhere anytime.

Beware of such risks.

good advise. upz you my humble 15s

[bfreemen]

Originally Posted by sanwa

As part of digitalisation, recently it looks like many establishments have joined in digitalising the visitor registration.

This pose real risk of personal information and visits leaked. We have seen even government systems being hacked. No system is 100% hack proof. It can also be from anyone who has access to the backend systems including employees of the vendor (no information is known on how the data is safe guarded, no information on how long, how many years the data is kept)

Being online, the data is easily accessed anywhere anytime.

Beware of such risks.

https://www.bbc.com/news/world-asia-47027867

[localchineseguy]

Originally Posted by sanwa

As part of digitalisation, recently it looks like many establishments have joined in digitalising the visitor registration.

This pose real risk of personal information and visits leaked. We have seen even government systems being hacked. No system is 100% hack proof. It can also be from anyone who has access to the backend systems including employees of the vendor (no information is known on how the data is safe guarded, no information on how long, how many years the data is kept)

Being online, the data is easily accessed anywhere anytime.

Beware of such risks.

Note also that phone number is not required by law.

======
Register of clients
9. — (1) Before providing any massage or special treatment to a client, a licensee shall
require the client to furnish the following particulars:
(a) his full name;
(b) his identity card number or the particulars of his passport or other travel
document;
(c) his nationality; and
(d) the hour and date of his arrival at the establishment for massage.
(2) The licensee shall immediately enter the particulars specified in paragraph (1)
in a register.
(3) On the departure of a client, the licensee shall record against the relevant
entry in the register the hour of the client’s departure.
(4) The licensee shall keep the register for a period of one year from the date of
the final entry in the register.
(5) No licensee or employee shall enter or cause to be entered in the register any
particulars which he knows or could by the exercise of reasonable diligence
have ascertained to be false.

[afterburn]

Originally Posted by localchineseguy

Note also that phone number is not required by law.

Correct. Just scribble any old number, but make sure don't use number of someone you know

Some places use the number as your login, as in, it auto-populates your info in their electronic form. So if you give fake number, you got to remember it when you RTM, else fill up form again! Very ma fan, I avoid such places unless it's really very good.

Best go to those places that still scribble on book, never bother with QR or scan-in, OWO shop. Those shops registered as TCM also do not need to register customer information like spa, but have QR or TT implemented. However, QR/TT is definitely safer , in terms of data protection, than shop's own internal IT system. Who knows if the admin password is 12345678!

[kombust]

the strange thing is that their system knows the nric algorithm. if you key in fake nric it will be detected. i got a feeling their system is a gov system.

[saltwet]

Indeed, it is risky when providing our names and phone numbers. This is why more than a year that I do not go MPs that need registration. I will also not go any MPs that need to scan SafeEntry. Yes, I go to those that do not need both. Of course, there are different risks. But to gratify sexual desires, no choice la. Anyway, staying away from these digitalisations surely saves me from public embarrassment when I met Covid-19 places.

[stoicism]

Originally Posted by kombust

the strange thing is that their system knows the nric algorithm. if you key in fake nric it will be detected. i got a feeling their system is a gov system.

The parity check info is public info liao... No need to be govt affiliated.

[afterburn]

Originally Posted by saltwet

Indeed, it is risky when providing our names and phone numbers. This is why more than a year that I do not go MPs that need registration. I will also not go any MPs that need to scan SafeEntry. Yes, I go to those that do not need both. Of course, there are different risks. But to gratify sexual desires, no choice la. Anyway, staying away from these digitalisations surely saves me from public embarrassment when I met Covid-19 places.

They don't reveal any details about cases to the public nowadays. You just see friends, colleagues disappear or shops closed temporarily, mysteriously.

But true enough, cases on the increase, reopening carries on nonetheless. Not surprised it will be 200+ or more next week. It's like playing russian roulette

Edit : It is 200+ already TODAY !!!

[sgcscar]

The formula to calculate nric got reverse-engineered and posted online liao, now all can use to determine correct ic or not

[pete_the_fish]

Originally Posted by afterburn

They don't reveal any details about cases to the public nowadays. You just see friends, colleagues disappear or shops closed temporarily, mysteriously.

But true enough, cases on the increase, reopening carries on nonetheless. Not surprised it will be 200+ or more next week. It's like playing russian roulette

Edit : It is 200+ already TODAY !!!

Tio covid ok just make sure you no symptoms can liao...then gahmen give you 100 a day...can use to cheong when cleared lol

[candeo_88]

If MOH patient data can be leaked, if Starhub customer data can be leaked, if UOB customer data can be leaked...what makes you think data from visitor registration cannot be leaked, compromised and abused?

Does it mean we have to stop going to see doctor? Does it mean that we have to stop using any telco services? Does it mean that we stop using any banking services?

We are living in a digital world...wake up lah bro...duhz...

Originally Posted by sanwa

As part of digitalisation, recently it looks like many establishments have joined in digitalising the visitor registration.

This pose real risk of personal information and visits leaked. We have seen even government systems being hacked. No system is 100% hack proof. It can also be from anyone who has access to the backend systems including employees of the vendor (no information is known on how the data is safe guarded, no information on how long, how many years the data is kept)

Being online, the data is easily accessed anywhere anytime.

Beware of such risks.

[chiongsolo]

If the bro chiong spa or massage and dun wish family member especially wife, friends and colleagues to know when things happen then avoid at all cost. Dun go. Lol. Cos shiok shiok release stress within the 60 to 120mins. Then go home stress for the following week. Worried got kana or not. Lol.

[MichaelWinn]

Just visit fls or those who stay condos or old shophouses...these don't need any trace together or safe entry...more privacy

[Xgenre]

Originally Posted by MichaelWinn

Just visit fls or those who stay condos or old shophouses...these don't need any trace together or safe entry...more privacy

Not anymore. In the past, the neighbours at old condos close an eye. Now everyone is worried about covid cases happening in their neighbourhood. If they see a unit getting many different visitors, the neighbours are more likely to call the Government.