Security expert: Hackers could upload code to Healthcare.gov to take control of usersâ€™ computers
Hackers could steal personal information, modify data or attack the personal computers of the websiteâ€™s users, he said. They could also damage the infrastructure of the site, according to Kennedy, who is scheduled to describe his security concerns in testimony on Thursday before the House Science, Space and Technology Committeeâ€¦
Kennedy said he last week presented technical details describing the vulnerabilities in the site to seven independent cyber security experts, who reviewed videos of potential attack methods as well as logs and other documentationâ€¦
â€śThe site is fundamentally flawed in ways that make it dangerous to people who use it,â€ť said Kevin Johnson, one of the experts who reviewed Kennedyâ€™s findings.
Johnson said that one of the most troubling issues was that a hacker could upload malicious code to the site, then attack other HealthCare.gov users.
â€śYou can take control of their computers,â€ť said Johnson, chief executive of a firm known as Secure Ideas and a teacher at the non-profit SANS Institute, the worldâ€™s biggest organization that trains and certifies cyber security professionalsâ€¦
â€śWe donâ€™t know how bad it is because they donâ€™t have to tell us,â€ť Strand said.