News for hackers. Stuff that matters.
Re:Spammers Abusing Trust in US .Gov Domains by Someone1234 on Friday March 18, 2016 @11:09AM (#11312262)
Bit.ly could follow the links, see if they redirect, and if they do then don't flag them as ".gov" if they don't terminate on a ".gov" site.

Ultimately however it would be better to eliminate these insecure redirects because even without bit.ly spammers can use .gov websites to make their link seem more legitimate.

Re:Spammers Abusing Trust in US .Gov Domains by duskwuff on Friday March 18, 2016 @03:55PM (#11314450)
Or a step further: don't use the usa.gov URLs for any link that appears to contain an embedded URL (e.g, contains "http://" or "https://").
Re:Spammers Abusing Trust in US .Gov Domains by Artur_Gaspar on Friday March 18, 2016 @11:40AM (#11312477)
It's not hard to not redirect bit.ly but redirect victims that click the link.

Some .gov sites need the redirect for whatever reason, but they could check the referer.

Re:Spammers Abusing Trust in US .Gov Domains by nateabele on Friday March 18, 2016 @11:26AM (#11312375)
This is clearly a public safety issue. Private industry should set up a licensing board that regulates government use of technology, contingent on some demonstration of competence.