BSI publishes revised version of the AusweisApp

The Federal Office for Information Security (BSI) launched a revised version of the AusweisApp released for download. Shortly after the launch of the software in November 2010, they had to be taken off the market because of serious safety deficiencies.

January Schejbal, member of the Pirate Party of Germany, had discovered two vulnerabilities in the time of the update function that allows an attacker could foist any certificate from any URL of AusweisApp. The recently introduced version 1.02 will not have these gaps more.

Unusually, however, that the certificate for the software (issued by Verisign and are valid until 05.27.2012), which is to guarantee the authenticity of the software, the Swiss company OPENLiMiT cubes, which developed the app together Siemens IT Solutions and Services, is issued. Many Germans are likely to associate the AusweisApp the BSI rather than a Swiss company.

Little to inspire confidence is also an indication to the download size of the software. In the early afternoon, it was given with 69 MB, but in fact there are only 49 MB. This error has been corrected, the BSI. During operation of the AusweisApp connect to other inconsistencies. After installation, it comes with two computers, an error message that the program could be started. In fact, the program is started, however, is successful and the AusweisApp working properly. In a third PC update function results in an error message. Only on two test PCs running the software installation and operating problems.

Problem is the working speed of the app: After double-clicking the program icon goes so much time that the user believes he has not even started the application. Also demonstrates the AusweisApp than 130 MB of memory and loads the CPU in idle mode.

Related Post