Comment on Anyone Can Push Updates to the DOGE.gov Website
homesweethomeMrL@lemmy.world 1 week agoNo doubt your company has more invested in the domain name than a pointer to pages.dev, as well.
Do we think doge.gov has a QA group? Do we think there’s more than two people who review changes? Or that they even review changes at all?
The setup your company has and what this appears to be (it’s true, this is speculation) is probably vastly more than just “we both use git to manage production pushes”. I’d bet you company has spent a fair number of years getting to this point, and doge.gov has not even secured a proper certificate while suggesting they’re competent to handle the entire financial information of the United States Government.
sugar_in_your_tea@sh.itjust.works 1 week ago
Idk, I don’t work there, nor have I looked into how they’re structured. I’m not going to make assumptions though.
Yeah, we have a bunch of tooling to make all that magic “just work.” It runs tests, check the health of deploys (and has a sane failover if it’s unhealthy), etc. There’s a lot to it, but at the end of the day, if I really want to, I can push and deploy straight to prod w/o anyone else being involved (I’d probably get fired, but I could do it).
The tech stack isn’t nearly as interesting as the processes surrounding it.
I assume you’re talking about the DB and not the website itself, which is protected by a proper certificate, at least as of Tuesday (that’s when the certificate starts being valid). I don’t know when the website was launched, so I can’t comment on anything before that point, though the domain seems to have been registered since the day after inauguration.
That’s largely public info, no? I don’t know what exactly is exposed, but honestly, pretty much all financial information (aside maybe from the military and intelligence) should be public record. If it’s not, I’d welcome a breach that exposes it so journalists can look it over and find out what they’re trying to hide.
homesweethomeMrL@lemmy.world 1 week ago
mmmm all the same I’d rather not have AI slurping up all my tax records to sell me a mortgage rate I’d have to take.
sugar_in_your_tea@sh.itjust.works 1 week ago
Does DOGE have access to tax records? I’m guessing that’s not a thing since they’re focusing on spending instead of revenue, right?
homesweethomeMrL@lemmy.world 1 week ago
Good question, I dunno. I mean, it will be that time in just a two months so let’s stay tuned to this exciting show.
homesweethomeMrL@lemmy.world 4 days ago
And three fucking days later . . .
m.lemmy.world/posts/lemmy.world/c/…/25706573
wanderingmagus@lemm.ee 1 week ago
I wonder how they got that one judge’s daughter’s tax records with full name, place of employment and real signature.