"THESE 'EXPERTS' LEFT THEIR DATABASE OPEN."
  • moitoi@lemmy.dbzer0.comEnglish
    96·
    24 hours ago

    Firing the IT people because they cost too much is always a good thing to show you the incompetence.

    • statler_waldorf@sopuli.xyzEnglish
      16·
      20 hours ago

      Bosses when the IT dept is furiously responding to an outage: What do we pay you for?

      Bosses when everything is running smoothly: What do we pay you for?

      • JustAnotherKay@lemmy.worldEnglish
        1·
        6 hours ago
        PEDANTRY PAST THIS POINT

        This joke would have worked even better (it already works well) if you put the lines in the other order

        Edit: I know markdown, I should not struggle with formatting this much lmao

  • Snapz@lemmy.worldEnglish
    28·
    21 hours ago

    Remember that if you can see something that obvious, imagine all the quiet changes people are making that aren’t being immediately found. Not only the deliberate horseshit from musk and his facsy tots, but other attempts to distort data from traditional bad actors like China and Russia

    • AlbertSpangler@lemmings.worldEnglish
      2·
      17 hours ago

      Literally every country should do this. Any single country with internet access and even the start of a cyber security org should be extracting what they can, getting whatever access they can.

  • Optional@lemmy.worldEnglish
    1122·
    1 day ago

    “Basically, doge.gov has its codebase, probably through GitHub or something,” the other developer who noticed the insecurity said. “They’re deploying the website on Cloudflare Pages from their codebase, and doge.gov is a custom domain that their pages.dev URL is set to. So rather than having a physical server or even something like Amazon Web Services, they’re deploying using Cloudflare Pages which supports custom domains.”

    Elmo’s a genius you know

      • Optional@lemmy.worldEnglish
        463·
        1 day ago

        Most websites run off of a server. They’re just using a “repeater” (CloudFlare Pages) to serve directly off of their Github or whatever which is sort of top-shelf slapdashery.

        Not serious. Not competent.

        • sugar_in_your_tea@sh.itjust.worksEnglish
          241·
          1 day ago

          What’s sloppy about it? Plenty of blogs and other static sites work that way. In fact, that’s largely how we do deployments at my company, we merge to a special branch and it triggers a deployment.

          The database being open is completely sloppy, but deploying through a source control platform is fine.

          • Optional@lemmy.worldEnglish
            336·
            24 hours ago

            Well, it’s sloppy for a government website. This is not a private enterprise running out of someone’s garage. There’s many reasons why that should not be an acceptable paradigm for posting government information.

            If you’re running a sandwich shop or a metal working shop, posting your phone number and address through CloudFlare Pages is probably fine.

            • sugar_in_your_tea@sh.itjust.worksEnglish
              121·
              24 hours ago

              This is not a private enterprise running out of someone’s garage

              Neither is the company I work for. We’re not Amazon, but we handle billions of revenue, our users have very high risk jobs, and they are using our software more and more to do these high risk jobs. We have a lot of controls about how things get released (QA team, and every change is tested before and after deployment), we just use our source control to handle the actual deployment.

              Whether it’s sloppy depends on their processes (i.e. who validates the change?), not the tools they use.

              We don’t use Cloudflare Pages, but we do use automatic deployments, and pretty much anyone on the team can submit a change for deployment. It’ll get reviewed before going live, but that’s a limitation we’ve placed on the tools and process.

              • Optional@lemmy.worldEnglish
                141·
                24 hours ago

                No doubt your company has more invested in the domain name than a pointer to pages.dev, as well.

                Do we think doge.gov has a QA group? Do we think there’s more than two people who review changes? Or that they even review changes at all?

                The setup your company has and what this appears to be (it’s true, this is speculation) is probably vastly more than just “we both use git to manage production pushes”. I’d bet you company has spent a fair number of years getting to this point, and doge.gov has not even secured a proper certificate while suggesting they’re competent to handle the entire financial information of the United States Government.

                • sugar_in_your_tea@sh.itjust.worksEnglish
                  3·
                  23 hours ago

                  Do we think doge.gov has a QA group? Do we think there’s more than two people who review changes?

                  Idk, I don’t work there, nor have I looked into how they’re structured. I’m not going to make assumptions though.

                  I’d bet you company has spent a fair number of years getting to this point

                  Yeah, we have a bunch of tooling to make all that magic “just work.” It runs tests, check the health of deploys (and has a sane failover if it’s unhealthy), etc. There’s a lot to it, but at the end of the day, if I really want to, I can push and deploy straight to prod w/o anyone else being involved (I’d probably get fired, but I could do it).

                  The tech stack isn’t nearly as interesting as the processes surrounding it.

                  proper certificate

                  I assume you’re talking about the DB and not the website itself, which is protected by a proper certificate, at least as of Tuesday (that’s when the certificate starts being valid). I don’t know when the website was launched, so I can’t comment on anything before that point, though the domain seems to have been registered since the day after inauguration.

                  the entire financial information of the United States Government

                  That’s largely public info, no? I don’t know what exactly is exposed, but honestly, pretty much all financial information (aside maybe from the military and intelligence) should be public record. If it’s not, I’d welcome a breach that exposes it so journalists can look it over and find out what they’re trying to hide.

          • criss_cross@lemmy.worldEnglish
            5·
            24 hours ago

            Yeah I think the static page thing was just there to illustrate how the coders reverse engineered the api and saw what was getting called.

            I agree static content alone on CF isn’t “bad”. This perfectly illustrates why you have to have your API shit together when you go with this approach.

      • Optional@lemmy.worldEnglish
        71·
        1 day ago

        Ohhhh . sssuuure. I mean, when he’s not ketted out to the gills.

        So. Regularly. Maybe even often?

  • Fizz@lemmy.nzEnglish
    196·
    1 day ago

    This is so embarassing. It can’t be the case that these idiots are actually in control of the united states.

    • Martijn@lemmy.mlEnglish
      114·
      1 day ago

      It all seems to be rushed and it’s all an attack on political opposition. Doing it well isn’t important. Like a monkey throwing shit at another monkey, they don’t care that they have some shit on their hands, they threw shit at another monkey and that’s what counts. Unfortunately the shit throwing monkeys are the president of the USA and the wealthiest person in the world.

    • eran_morad@lemmy.worldEnglish
      8·
      1 day ago

      You can thank your compatriots for this horror show. Huh. There’s a double entendre there if you’re familiar with the Russian language, or if you’ve read A Clockwork Orange.

      • rottingleaf@lemmy.worldEnglish
        31·
        1 day ago

        There’s a double entendre there if you’re familiar with the Russian language

        As a Russian speaker, I don’t understand this. Could you elaborate?

    • Optional@lemmy.worldEnglish
      71·
      1 day ago

      It can’t be the case that these idiots are actually in control of the united states.

    • KeenFlame@feddit.nuEnglish
      11·
      1 day ago

      Nah they have people helping them. At any second you could stop and they would have no power. But you continually support their project

  • IHeartBadCode@fedia.io
    1622·
    1 day ago

    Fucking CyberTruck like fucking pile of shit website. What kills me the most is that the fucking things they’re screenshoting, those pages have literal “export to XML” buttons that they could fucking export, save the XML to some shared drive that gets swept, and the put it in some actually secure database.

    This whole fucking thing reeks of some fucking weeb ass Roblox hackers whose last project consisted of Lua Script emulating some fucking redstone calculator they wrote in Minecraft. And the export fuction on the thing? It’s just one dimension SUM function CSV exports. Literally no other dimenstions of values to add, shit I would be fucking surprised if a single one of the people writing the goddamn have ever heard of OLAP.

    And to top it off, we already have a fucking website that does what this fucking place does, but 846 decillion times better. And it doesn’t have a fucking Instagram esque reel of Tweets of people taking fucking screenshots of an open database.

    I can’t wait till the next dumbass gets into the White House and turns this pile of grabage off. Paying these idiots millions to power and run the hardware this pitiful excuse of a website runs on. And all we got for that money is some shit that is about on par as the shit you get from some O’Reilly book called “Building a Government Website Crash Course” with a Bald Eagle dying of bird flu on the cover.

    This fucking idiot maybe wants to fucking learn what the hell SQL is.

    • philpo@feddit.orgEnglish
      921·
      1 day ago

      But the government does not use SQL per ELMO.

      I am waiting for this idiot to come up with something like EIQL (Elmo’s idiotic query language).

      • snooggums@lemmy.worldEnglish
        49·
        1 day ago

        Musk is wrong about literally everything. Must be nice to have enough money to make up for being a fucking moron.

        • SoleInvictus@lemmy.blahaj.zoneEnglish
          17·
          1 day ago

          I don’t know if there’s enough money in the world to make up for that horse’s ass. All his purchased government position does, beyond destroying the US government, is broadcast how he’s a feckless moron to anyone who isn’t just as stupid.

          Unfortunately, Musk isn’t alone: many US citizens are that stupid.

      • rottingleaf@lemmy.worldEnglish
        51·
        1 day ago

        So you are telling me Musk has been touching techy things since about 1995 till now, and thinks there’s an organization without any SQL at least someplace? I wouldn’t dare suggest that about ISIS.

        Any website - OK, web is inefficient and shouldn’t be used. But their operations planning just wouldn’t work so well without proper business analytics infrastructure.

    • griD@feddit.orgEnglish
      6·
      1 day ago

      I can’t wait till the next dumbass gets into the White House and turns this pile of grabage off. Paying these idiots millions to power and run the hardware this pitiful excuse of a website runs on. And all we got for that money is some shit that is about on par as the shit you get from some O’Reilly book called “Building a Government Website Crash Course” with a Bald Eagle dying of bird flu on the cover.

      Thanks, I needed that. Poetic.

    • rottingleaf@lemmy.worldEnglish
      62·
      1 day ago

      emulating some fucking redstone calculator they wrote in Minecraft

      Let’s stop right here for a bit. With redstone in Minecraft you can make the same logical constructs that in real world lead from a bipolar transistor to a machine capable of decoding your porn in real time. And people, including kids, do design those.

      Please show some respect.

      Those who make calculators in Minecraft are not the dumb kind.

      Literally no other dimenstions of values to add, shit I would be fucking surprised if a single one of the people writing the goddamn have ever heard of OLAP.

      But yes, weird to expect almost college kids to have the experience needed. I can imagine some of them having the necessary education, but for a data analyst the mathematical basis is simple and the rest is experience.

  • Lost_My_Mind@lemmy.worldEnglish
    591·
    1 day ago

    Please…show this to The Onion. Let The Onion post some updates…it’s their ultimate wet fantasy.

  • Evotech@lemmy.worldEnglish
    5731·
    1 day ago

    I’m torn on this, on one hand I know there must be millions of dollars in contracts for pointless reports and a huge amount of government wasteful spending in general.

    On the other hand, musk and trump are absolute morons. And they will cut shit just because they don’t know what the words mean.

    • roofuskit@lemmy.worldEnglish
      1521·
      1 day ago

      They’re not cutting actual waste. Their goal is to cripple the parts of the government that stopped them from doing illegal shit.

    • FatCrab@lemmy.oneEnglish
      711·
      1 day ago

      If you are “torn” on whether it is a good thing to grant a wealthy campaign donor unfettered and unquestionably illegal access to government and bureaucratic infrastructure, with zero accountability or oversight, and who has displayed absolutely zero competence at managing any public institution (and in fact has a record of incompetence at managing private enterprises), then I honestly think you’re one of the millions of Americans who just needs to fuck off and stop contributing to adult decision-making. You’re simply not up to the task.

    • funkless_eck@sh.itjust.worksEnglish
      23·
      1 day ago

      Waste is how you frame it.

      Even literal poop has a benefit.

      I do client work, sometimes it drives me mad how much time I “waste” making PPT slides that are just prettier BI dashboards, but then the client sees it, sends that one slide to his boss and everyone claps me on the back.

    • wuphysics87@lemmy.mlEnglish
      21·
      1 day ago

      Whoever dismantles the pre-existing structure will be the one who will have the chance to rebuild it. This is the entire reason they are doing it. Great if you share their vision. Not so much if you don’t.

      • kent_eh@lemmy.caEnglish
        3·
        22 hours ago

        will be the one who will have the chance to rebuild it

        Assumingbthey have any intention of rebuilding it.

      • kent_eh@lemmy.caEnglish
        1·
        22 hours ago

        will be the one who will have the chance to rebuild it

        Assumingbthey have any intention of rebuilding it.

        • spooky2092@lemmy.blahaj.zoneEnglish
          30·
          1 day ago

          What a shit take. Not all change is good change, and if you think this will be a good change, boy do I have some great ocean front property in Colorado to sell you.

          • sugar_in_your_tea@sh.itjust.worksEnglish
            61·
            1 day ago

            Yeah, my preference for government is to not change. Enforce the laws we have efficiently, and don’t bother me too much. Big changes carry a lot of (usually) subtle carveouts for special interests.

      • knightly the Sneptaur@pawb.socialEnglish
        57·
        1 day ago

        Look at the bright side, the Evil Empire is over! America is done. Cooked. The next few years are gonna suck a lot but the deteriorating conditions will finally push Americans into a second revolution.

    • JacksonLamb@lemmy.worldEnglish
      4·
      22 hours ago

      “Im torn on this, on one hand I know I have an untreated open wound on my leg, on the other hand here’s a 6 year old kid in a “doctor is in” t shirt who wants to smear whipped cream on it as a treatment”.

      What’s to be torn by? False dichotomy.

    • meyotch@slrpnk.netEnglish
      3·
      22 hours ago

      No you don’t know that. You are repeating a trope without substance. Sure there’s probably huge waste at the pentagon but that’s not on the chopping block here.

  • fl42v@lemmy.mlEnglish
    351·
    1 day ago

    What did you expect from a department named after a memecoin anyways