Security expert: Hackers could upload code to Healthcare.gov to take control of usersā computers
Hackers could steal personal information, modify data or attack the personal computers of the websiteās users, he said. They could also damage the infrastructure of the site, according to Kennedy, who is scheduled to describe his security concerns in testimony on Thursday before the House Science, Space and Technology Committeeā¦
Kennedy said he last week presented technical details describing the vulnerabilities in the site to seven independent cyber security experts, who reviewed videos of potential attack methods as well as logs and other documentationā¦
āThe site is fundamentally flawed in ways that make it dangerous to people who use it,ā said Kevin Johnson, one of the experts who reviewed Kennedyās findings.
Johnson said that one of the most troubling issues was that a hacker could upload malicious code to the site, then attack other HealthCare.gov users.
āYou can take control of their computers,ā said Johnson, chief executive of a firm known as Secure Ideas and a teacher at the non-profit SANS Institute, the worldās biggest organization that trains and certifies cyber security professionalsā¦
āWe donāt know how bad it is because they donāt have to tell us,ā Strand said.