| 6 days ago | mod | Removed Comment HATE 404's paywall (i don't care what they call it)
full text follows
---
The doge.gov website that was spun up to track Elon Musk’s cuts to the federal government is insecure and pulls from a database that can be edited by anyone, according to two separate people who found the vulnerability and shared it with 404 Media. One coder added at least two database entries that are visible on the live site and say “this is a joke of a .gov site” and “THESE ‘EXPERTS’ LEFT THEIR DATABASE OPEN -roro.”
Doge.gov was hastily deployed after Elon Musk told reporters Tuesday that his Department of Government Efficiency is “trying to be as transparent as possible. In fact, our actions—we post our actions to the DOGE handle on X, and to the DOGE website.” At the time, DOGE was an essentially blank webpage. It was built out further Wednesday and Thursday, and now shows a mirror of the @DOGE X account posts, as well as various stats about the U.S. government’s federal workforce.
Two different web development experts who asked to remain anonymous because they were probing a federal website told 404 Media that doge.gov is seemingly built on a Cloudflare Pages site that is not currently hosted on government servers. The database it is pulling from can be and has been written to by third parties, and will show up on the live website.
Both sources told 404 Media that they noticed Doge.gov is pulling from a Cloudflare Pages website, where the code that runs it is actually deployed.
One of the sources told 404 Media that they were able to push updates to a database of government employment information after studying the website’s architecture and finding the database’s API endpoints.
This person showed me two database entries they were able to push to the website, which are live on doge.gov as I write this (archived here and here):
“Feels like it was completely slapped together,” they added. “Tons of errors and details leaked in the page source code.”
Both sources said that the way the site is set up suggests that it is not running on government servers.
“Basically, doge.gov has its codebase, probably through GitHub or something,” the other developer who noticed the insecurity said. “They’re deploying the website on Cloudflare Pages from their codebase, and doge.gov is a custom domain that their pages.dev URL is set to. So rather than having a physical server or even something like Amazon Web Services, they’re deploying using Cloudflare Pages which supports custom domains.”
On Wednesday, we reported that waste.gov, another website created to track government waste, was sitting live with a placeholder Wordpress default template page and sample text. After our article was published, waste.gov was put behind a password wall. It has been widely reported that DOGE has secured administrator access to the codebases at various government agencies, including the Department of Treasury.
DOGE did not immediately respond to a request for comment. by  @ErsatzCoalButter@beehaw.orgreason: don't copy/paste articles please |
| 6 days ago | mod | Removed Comment "This retard thinks Elon Musk cares about being stupid" - Elon Musk, probably by @Midnitte@beehaw.org reason: let's don't be casual with slurs, please. |
| 12 days ago | mod | Removed Comment Yeah, yeah. Whatever, mate. by Engywuck reason: be nice |
| 13 days ago | mod | Removed Comment If you use Chrome I will consider you a moron. I will not be taking questions. by  @blackstrat@lemmy.fwgx.ukreason: Let's not |
| 13 days ago | mod | Removed Comment Yes, I want. Goodbye. by Engywuck reason: don't get in slap fights |
| 13 days ago | mod | Removed Comment Why do you even bother replying if you're going to be like this? So you can have the last word? by @algorithmae@lemmy.sdf.org reason: don't get in slap fights |
| 13 days ago | mod | Removed Comment Yes. by Engywuck reason: don't get in slap fights |
| 16 days ago | mod | Removed Post ‘Forbidden Words’: Github Reveals How Software Engineers Are Purging Federal Databases reason: duplicate |
| 1 month ago | mod | Removed Comment I had a hunch TikTok users weren't the sharpest tools in the shed, but now I know for certain. by @DdCno1@beehaw.org reason: Be nice |
| 1 month ago | mod | Removed Comment according to [this](https://www.pewresearch.org/short-reads/2024/12/20/8-facts-about-americans-and-tiktok/) from Pew Research, a third of adults in the US use TikTok (based on a poll they conducted, because TikTok doesn't release user numbers publicly, and I doubt people would trust them if they did)
if your reaction to this is "oh all 100+ million of those people are idiots"...I dunno, congrats on thinking you're smarter than most people. have a gold star. go brag about your IQ and cranium volume on Twitter or something. this is just a relentlessly lazy and stupid take.
(and for the record, I don't use TikTok, or RedNote, so this isn't me taking it personally) by @spit_evil_olive_tips@beehaw.org reason: don't feed |
| 1 month ago | mod | Removed Comment While I know that humor is subjective and you can interpret a single, isolated sentence in many ways, consider thinking about how serious a person actually was before aggressively accusing them of having a "relentlessly lazy and stupid take" on a topic. The fact that I used a humorous idiom might have been a hint. And yeah, I very much took this personally.
According to [this article on a Norwegian study with 50,000 participants](https://www.gsb.stanford.edu/insights/not-joke-cost-being-humorless), being humorless has a significant impact on your long-term health and longevity. For the sake of your health, so that you can hurl unfounded accusations at me for many more years to come, have a laugh every once in a while. [Here's some Monty Python to get you started.](https://youtu.be/C-M2hs3sXGo)
To clear things up with you, I am of course not saying that all TikTok users are idiots - just most of them.
This was also a joke, by the way. It's based on the equally common and effective technique of surprising the reader with a humorous statement after having said something normal and serious. Before you're getting your panties in a twist, I am of course being condescending to make this funnier. Or maybe it's for some other reason? by @DdCno1@beehaw.org reason: Be nice |
| 1 month ago | mod | Removed Comment For real I made a post about it on videos@shitbear and everyone lost their shit def a Chinese community good riddance! by  @NastyNative@mander.xyzreason: Not nice, low effort |
| 1 month ago | mod | Removed Comment I wonder if they have internal studies on how or if social contagion works. I mean they sure have the raw data from 2 decades and the competence to chew that data into results. These new decisions might very well be based on such studies.
Any disgruntled Meta employees in here who might know anything? :) by @vga@sopuli.xyz reason: Take this somewhere else please |
| 1 month ago | mod | Banned @BrainInABox@lemmy.ml from the community reason: begone expires: 11 days ago |
| 1 month ago | mod | Removed Comment Lol, you seriously banned someone for lightly questioning American atrocity propaganda? Are you going to ban people for saying Iraq didn't have WMDs too? What about for saying Hamas didn't bake babies in ovens? by @BrainInABox@lemmy.ml reason: Sure |
| 1 month ago | mod | Removed Comment > the phenomenon of Western influencers profiting from spreading Chinese misinformation and disinformation is not new.
There are documented videos of Xinxiang being a bustling prosperous region with luxurious mosques. There are no videos of concentration camps. Instead of calling it misinformation to counter the narrative US empire prefers you to believe, it is not unreasonable for China to try and correct that narrative.
Its not as if western whinning/misinformation comes with any progress metrics for it to stop using it as an excuse to demonize China. by @humanspiral@lemmy.ca reason: genocide denial |
| 2 months ago | mod | Removed Post AI Agent Takes Action Without Being Told, To Be Released This January reason: No |
| 2 months ago | mod | Restored Post AI Agent Takes Action Without Being Told, To Be Released This January |
| 2 months ago | mod | Removed Post AI Agent Takes Action Without Being Told, To Be Released This January reason: No |
| 2 months ago | mod | Removed Comment It never did anything. My fucking autocorrect has the same agency as chatgpt. Fucking american cunts by  mayoooooreason: Not Nice |
| 2 months ago | mod | Removed Comment Tim is sucking it hard baby by @Eryn6844@beehaw.org reason: adds nothing, could be interpreted as homophobic |
| 2 months ago | mod | Removed Comment [@InevitableList](URL)
Isn't it somewhat strange that Tiktok, whose parent company is forced to closely surveill and censor each politically undesired content in its home country, while it is at the same time not only unable to suppress but reportedly even promotes obviously harmful content on its platforms outside China? by @tardigrada@beehaw.org reason: Not nice |
| 3 months ago | mod | Removed Comment  by  𝕸𝖔𝖘𝖘reason: spam |
| 3 months ago | mod | Removed Comment Ad hominem, very civilised. Still missing the point OP was not advocating communism but using the allusion to it as a boogey man.
Interesting story about your elders, if true, they sound like brave people who were delt a shit hand. Nobody deserves this, much respect to their memory. You're still American. by @Viri4thus@feddit.org reason: ??? |
| 3 months ago | mod | Removed Comment Ich glaube nicht, dass du mit dieser Gesprächstaktik bei mir oder irgendwem anderes auf einen grünen Zweig kommen wirst. Viel Spaß damit, den Sinn hinter dem ersten Satz mit einem Übersetzungsprogramm zu verstehen. by @DdCno1@beehaw.org reason: ??? |
| 3 months ago | mod | Removed Post New Upgrade to ChatGPT Set to Change How We Live. reason: low quality post |
| 4 months ago | mod | Restored Post China's New Hypersonic Passenger Plane Can Fly From London to New York in Under 2 Hours |
| 4 months ago | mod | Removed Post China's New Hypersonic Passenger Plane Can Fly From London to New York in Under 2 Hours reason: poor quality source; feel free to repost with better source. |
| 4 months ago | mod | Banned @basmati@lemmus.org from the community reason: weirdo |
| 5 months ago | mod | Banned Maria-Yardena71 from the community reason: Spam |
| 5 months ago | mod | Removed Post Why Is Demand for Memory Packaging High in APAC? reason: AI slop/spam |
| 5 months ago | mod | Removed Post Report: Rwanda used Israeli spy tech to tap phones of top Ugandan officials reason: This article is more than 3 years old. |
| 5 months ago | mod | Removed Post ‘New NSA document highlights Israeli espionage in US reason: Post title is misleading. |
| 6 months ago | mod | Removed Post AIPAC Planned to Spend $100M on Elections This Year. It Already Surpassed That. reason: off topic |
| 6 months ago | mod | Removed Post What is OpenAI? reason: what is this |
| 6 months ago | mod | Removed Post Massive Cyber Attack On AWS Targets 230 Million Unique Cloud Environments reason: seems to be AI slop |
| 6 months ago | mod | Banned  @1984@lemmy.today from the community reason: just in case :) expires: 6 months ago |
| 7 months ago | mod | Banned @divergency@scribe.disroot.org from the community reason: continuing to shit up thread even after mod post |
| 7 months ago | mod | Banned Beacon from the community reason: persistently argumentative over removal of comment |
| 8 months ago | mod | Banned @Oisteink@feddit.nl from the community reason: Here's the door |
| 8 months ago | mod | Removed Post Introducing a new RISC-V Mainboard from DeepComputing reason: duplicate post |
| 8 months ago | mod | Removed Post Introducing a new RISC-V Mainboard from DeepComputing |
| 9 months ago | mod | Removed Post Roller Garage Door: The Perfect Combination of Security and Style reason: Spam |
| 9 months ago | mod | Restored Post Roller Garage Door: The Perfect Combination of Security and Style |
| 9 months ago | mod | Removed Post Roller Garage Door: The Perfect Combination of Security and Style reason: Spam |
| 9 months ago | mod | Banned elearningads from the community reason: Spam |
| 9 months ago | mod | Removed Post Online E-Learning advertisement | PPC Advertising for E-Learning reason: Spam |
| 9 months ago | mod | Removed Post Minimum ! reason: duplicate/crossposted to the same community. |
| 10 months ago | mod | Banned baileyterr from the community reason: Spam |
| 10 months ago | mod | Banned baileyterr from the community reason: Spam |
| 1 year ago | mod | Banned conciselyverbose from the community reason: Repeated personal attacks expires: 1 year ago |
| 1 year ago | mod | Banned Aniki 🌱🌿 from the community reason: you're being weirdly antagonistic and you need to not do that. this is a one day vibe check ban expires: 1 year ago |
| 1 year ago | mod | Banned Komal from the community reason: spam |
| 1 year ago | mod | Banned remtasiparis from the community reason: Spam |
| 2 years ago | mod | Banned @animedao9@beehaw.org from the community reason: spam |
| 2 years ago | mod | Appointed TheRtRevKaiser as a mod to the community |
| 2 years ago | mod | Banned @daisywilson453@discuss.tchncs.de from the community reason: Spam |
| 2 years ago | mod | Banned RitikaB from the community reason: Spam expires: 7 months ago |
| 2 years ago | mod | Banned RitikaB from the community reason: Spam |
| 2 years ago | mod | Banned RitikaB from the community reason: Spam expires: 2 years ago |
| 2 years ago | mod | Banned RitikaB from the community reason: Spam expires: 2 years ago |
