• Germany's news in English

'A 17-year-old nerd could hack the Bundestag'

The Local · 25 Jun 2015, 11:57

Published: 25 Jun 2015 11:57 GMT+02:00

Facebook Twitter Google+ reddit

“If one were to capture this system, there would be a potential way from outside to the inside,” expert Kristian Köhntopp told the Süddeutsche Zeitung (SZ) on Thursday.

Köhntopp had earlier posted an analysis of the Bundestag's domain names [web addresses] showing that “the boxes [computers] all have one foot in the internet and one in the [internal parliament] intranet”.

By accessing computers belonging to the different party groups in the Bundestag, an attacker could potentially worm his way through their public-facing internet presence into internal, private – or even classified – information.

He calls the way the MPs' computers are set up an “ideal bridgehead” which could be used by attackers to scan the Bundestag network and identify weak points.

Once such a vulnerable spot is found, the hackers could work their way from computer to computer through the system until they acquired administrator rights, granting them wide-ranging powers over the machines and their data.

There is no suggestion that the method discovered by Köhntopp was used by attackers in a recently-unmasked hacking attack on the parliamentary network which has baffled IT security experts.

'A 17-year-old could take over completely'

Köhntopp told the SZ that he himself hadn't tried using the method to penetrate the Bundestag network.

“This isn't effortless, it's particularly time-intensive,” he said. But “a 17-year-old nerd with generous free periods at school has total potential to take over the place completely” - never mind foreign intelligence services.

“A successful attacker from the internet potentially has access to the internal network and to the internal content offered by the server there,” Chaos Computer Club press spokesman Linus Neumann confirmed.

But he also agreed with Köhntopp's assessment that it would be a challenging project to use the weak points to break into the internal network.

Story continues below…

“If the system looks so prone to failure from the outside, how does it look inside the internal network,” Köhntopp wondered.

The Bundestag refused to respond to questions from the SZ about the potential entry point for hackers, saying that “we can't give any information about this question for IT security reasons.”

And they completely refused to answer a question asking whether the Bundestag shouldn't have especially high security.

For more news from Germany, join us on Facebook and Twitter.

The Local (news@thelocal.de)

Facebook Twitter Google+ reddit

Your comments about this article

Today's headlines
Berlin Holocaust memorial could not be built now: creator
The Memorial to the Murdered Jews of Europe, in Berlin. Photo: DPA.

The architect of the Berlin Holocaust memorial has said that, if he tried to build the monument again today, it would not be possible due to rising xenophobia and anti-Semitism in Germany and the United States.

'Liberal' Germany stopping Europe's 'slide into barbarism'
Ian Kershaw. Photo: DPA

Europe is not slipping into the same dark tunnel of hate and nationalism that it did in the 1930s - mainly thanks to Germany - one of the continent's leading historians has said.

Eurowings strike to hit 40,000 passengers
Travelers impacted by the strike on Thursday wait at Cologne Bonn airport. Photo: DPA.

The day-long strike by a Eurowings cabin crew union is expected to impact some 40,000 passengers on Thursday as hundreds of flights have been cancelled.

Deutsche Bank reports surprise quarter billion profit
Photo: DPA

Troubled German lender Deutsche Bank reported Thursday a surprise €256-million profit in the third quarter, compared with a loss of more than six billion in the same period last year.

US 'warned Merkel' against Chinese takeover of tech firm
Aixtron HQ. Photo: DPA

The German government withdrew its approval for a Chinese firm to purchase Aixtron, which makes semiconductor equipment, after the US secret services raised security concerns, a German media report said Wednesday.

Long-vanished German car brand joins electric race
Photo: DPA

Cars bearing the stamp of once-defunct manufacturer Borgward will once again roll off an assembly line in north Germany from 2018, the firm said Wednesday.

Eurowings cabin crew union to strike all day Thursday
Photo: DPA.

UPDATE: A union representing cabin crews on Lufthansa's budget airline Eurowings has announced that strikes will last all day Thursday as ongoing contract negotiations continue to falter.

Hesse hopes to set example by building Iraqi orphanages
Refugee children in northern Iraq. Photo: DPA

The wealthy central German state of Hesse has set aside €1 million to build a school, family homes and an orphanage in northern Iraq, in an effort to help refugees there.

The Local List
10 German clichés that foreigners get very wrong
David Hasselhoff. Photo: DPA

Whether it be efficiency, humourlessness or a love of a certain Baywatch star, there are many cliches stuck in the heads of foreigners about Germany. But how true are they?

Fake Germanwings victim relative convicted in Cologne
A torn piece of metal at the crash site in 2015. Photo: DPA

A German court on Wednesday gave a woman a year's suspended jail sentence for posing as the cousin of a victim in last year's Germanwings plane crash and obtaining compensation offered by the airline.

10 German clichés that foreigners get very wrong
Sponsored Article
Last chance to vote absentee in the US elections
10 ways German completely messes up your English
Germany's 10 most weird and wonderful landmarks
10 things you never knew about socialist East Germany
How Germans fell in love with America's favourite squash
How I ditched London for Berlin and became a published author
12 clever German idioms that'll make you sound like a pro
23 fascinating facts you never knew about Berlin
9 unmissable events to check out in Germany this October
10 things you never knew about German reunification
10 things you're sure to notice after an Oktoberfest visit
Germany's 10 most Instagram-able places
15 pics that prove Germany is absolutely enchanting in autumn
10 German films you have to watch before you die
6 things about Munich that’ll stay with you forever
10 pieces of German slang you'll never learn in class
Ouch! Naked swimmer hospitalized after angler hooks his penis
Six reasons why Berlin is now known as 'the failed city'
15 tell-tale signs you’ll never quite master German
7 American habits that make Germans very, very uncomfortable
Story of a fugitive cow who outwitted police for weeks before capture
jobs available
Toytown Germany
Germany's English-speaking crowd