Security expert: Hackers could upload code to Healthcare.gov to take control of usersâ computers
Hackers could steal personal information, modify data or attack the personal computers of the websiteâs users, he said. They could also damage the infrastructure of the site, according to Kennedy, who is scheduled to describe his security concerns in testimony on Thursday before the House Science, Space and Technology CommitteeâŚ
Kennedy said he last week presented technical details describing the vulnerabilities in the site to seven independent cyber security experts, who reviewed videos of potential attack methods as well as logs and other documentationâŚ
âThe site is fundamentally flawed in ways that make it dangerous to people who use it,â said Kevin Johnson, one of the experts who reviewed Kennedyâs findings.
Johnson said that one of the most troubling issues was that a hacker could upload malicious code to the site, then attack other HealthCare.gov users.
âYou can take control of their computers,â said Johnson, chief executive of a firm known as Secure Ideas and a teacher at the non-profit SANS Institute, the worldâs biggest organization that trains and certifies cyber security professionalsâŚ
âWe donât know how bad it is because they donât have to tell us,â Strand said.