I just discovered a vurnability in NCT booking system.

CiniO

To book, rebook or cancel your NCT booking online you need car registration number and date of first registration.

Both those can be read when looking at the car.
Reg is obvious, and first registration date in vast majority of cases can be read from NCT disc.

Generally speaking that means, that malicious neighbour can easily cancel my NCT booking just a day before my test, making me liable for cancallation charges.

Don't you think there should be something done about it?

ASOT

cheers for the guide , Canceling my neighbors because hes a cun7.

racso1975

guess you shouldn't have shagged his wife so.......honestly do you think somebody would bother

wiger toods

CiniO wrote: »

To book, rebook or cancel your NCT booking online you need car registration number and date of first registration.

Both those can be read when looking at the car.
Reg is obvious, and first registration date in vast majority of cases can be read from NCT disc.

Generally speaking that means, that malicious neighbour can easily cancel my NCT booking just a day before my test, making me liable for cancallation charges.

Don't you think there should be something done about it?

I dont think your malicious neighbour would even have kopped that, until now that is

paddydriver

Neighbour musn't have much to do if they are going online on NCT the whole time seeing if they can cancel your test:D

challengemaster

You'd have to check every day for 3 months leading up to the NCT renewal date to check when they've booked it for, then wait until right before it and cancel. I'm sure people have better things to be doing, tbh.

EI_Flyboy

Hmmm... They could book without your knowledge and then cancel it without you ever knowing!

biko

CiniO wrote: »

Don't you think there should be something done about it?

Not really. I've never heard about this being misused, and even if it was occasionally it's hardly worth changing the system for.

Stalker types can get people's names from those details off the NCT system too, not good really.

msg11

challengemaster wrote: »

You'd have to check every day for 3 months leading up to the NCT renewal date to check when they've booked it for, then wait until right before it and cancel. I'm sure people have better things to be doing, tbh.

Revenge is long and sweet...

CiniO

biko wrote: »

Not really. I've never heard about this being misused, and even if it was occasionally it's hardly worth changing the system for.

You really think that ability to login into someone account on NCT booking website by just knowing the details which are displayed to public on every car is not a problem?
I'd say there's no need for any major change of system.
Just something different than first registration date would be nice (like any info from reg cert instead of something which is available to public on discs).

Eoin

Does the NCT booking site show your address as well, or is that just the motortax.ie site?

galwaytt

LOL, I know there's a long waiting list for tests and all, but cancelling your neighbour's one, just so you can get yours done ?

Wow, that is a new low.

Or, an amazing new form of OCD.....:D

unkel

Lads, I LOLLED at ASOT's post too, but the OP has a point. The security of the booking system of the NCT was engineered by an imbecile.

Plenty of other imbeciles made other rules in this country too. Like the one who declared that you are legally ok to drive a car when you have just failed your driving test (and have proven you are incapable of safely driving a car)

Too tired to make this into a proper rant about imbecilities in the Irish legal system...

mawk

Whats the fee for cancelling?
That could be a really obnoxious prank

fletch

I noticed something similar when booking mine...I could easily book a load of other cars in with registration numbers close to mine as the date of registration was the same or within a day or so.

BrianD3

I noticed this a while ago and mentioned it here as a possible (but unwieldy) way to track down a car eg if your family owned a car years ago and you know the first reg date and would like to buy it back or at least find out who owns it. If it is going for an NCT you can find out when and where and can "accidentally" bump into the owner at the test centre.

Could also be used for more malicious purposes eg road rage followup or finding out where a car is kept to steal it.

PS if you enter the date of first reg wrong three times, it locks that registration number out of the online system for a few days.

Grolschevik

RoverJames wrote: »

Stalker types can get people's names from those details off the NCT system too, not good really.

Nice one! Thanks for the tip! :pac:

Bodhan

The date of first registration isn't on my disc in the window, it is on the cert though.
Is it only on some of the disc's, if so which ones? This might make for an interesting story

testicle

Bodhan wrote: »

The date of first registration isn't on my disc in the window, it is on the cert though.
Is it only on some of the disc's, if so which ones? This might make for an interesting story

The date of expiry is though, and the date of first registration is that date back in the year of registration, is it not?

CJhaughey

I would say that this falls under the Data Protection Act, and that if this was misused then the NCT would have to explain that the system is robust and reliable.
Going by whathas been posted it is neither.
Ergo if you have had a test booked and cancelled then you should not be liable for the cost and the NCT will have to modify their system in order to prevent this information from being freely available.

The Guvnor

This post is vaguely on topic...:D

Whilst browsing Halfords in Newry two days ago I was after a shiny metal tax disc holder. I found one thanks - looks great.

However I could not find any similar items for holding my insurance cert and in the future my nct cert then of course, very slowly the penny finally dropped!

Cue visions of me slack-jawed / pondering this information for a while before saying something wonderfully incitely like 'now that you mention it...':D

Why do we in Ireland bother with having to display anything more than just our tax disc?

Cinio good find mate!

barura

The Guvnor wrote: »

This post is vaguely on topic...:D

Whilst browsing Halfords in Newry two days ago I was after a shiny metal tax disc holder. I found one thanks - looks great.

However I could not find any similar items for holding my insurance cert and in the future my nct cert then of course, very slowly the penny finally dropped!

Cue visions of me slack-jawed / pondering this information for a while before saying something wonderfully incitely like 'now that you mention it...':D

Why do we in Ireland bother with having to display anything more than just our tax disc?

Cinio good find mate!

If you wanted to stay secure, you can take your insurance disc in your wallet. You can do some malicious stuff with something as simple as that....

CiniO

Bodhan wrote: »

The date of first registration isn't on my disc in the window, it is on the cert though.
Is it only on some of the disc's, if so which ones? This might make for an interesting story

Usually date of expiry of you NCT disc would be a day before you date of first registration.
Of course not always (f.e. imported cars), so as I said it doesn't apply to everyone.