The FCC.gov Website Lets You Upload Malware Using Its Own Public API Key

Re:The FCC.gov Website Lets You Upload Malware Using Its Own... by xenophonf on Thursday August 31, 2017 @11:40AM (#15141059)

Then again, this is government we are talking about so buying a $10 domain is probaly three weeks worth of paperwork.

It's not that bad.

It is slightly annoying that the procurement rules don't let sysadmins buy multi-year domain registrations---not even for .gov domains.

Ultimately, there's nothing stopping a federal employee or contractor from buying another domain except ignorance of good infosec practices. Even a .gov domain isn't all that expensive---$400/year is a drop in the bucket of federal spending.

[ Parent | on HN ]

Re:The FCC.gov Website Lets You Upload Malware Using Its Own... by jimktrains2 on Thursday August 31, 2017 @08:24PM (#15145191)

Wait, .gov domains cost money? I guess I just thought the us government assigned them as needed to agencies. Never thought about cross agency bills.

[ Parent | on HN ]

Re:The FCC.gov Website Lets You Upload Malware Using Its Own... by xenophonf on Friday September 01, 2017 @08:46AM (#15147889)

41 CFR part 102-173, the law that authorizes GSA to run the dot-gov registry, allows them to recover their operational costs from registrants:

https://www.gpo.gov/fdsys/pkg/CFR-2010-title41-vol3/xml/CFR-...

[ Parent | on HN ]

Re:The FCC.gov Website Lets You Upload Malware Using Its Own... by jimktrains2 on Friday September 01, 2017 @09:10AM (#15148040)

It completely makes sense, I just never thought about it.

[ Parent | on HN ]