As someone very confused as to what people are commenting about, thank you. I'm clearly just seeing the post-patch version
Re:Captcha.nsa.gov
by casefields on Monday February 03, 2020 @03:05PM
(#22228376)
Before they fixed it, it redirected to Googles homepage in Portuguese.
It wasn't a redirect. They served a Google homepage, but it was still an nsa.gov url
I still see a Google homepage
That's what it was. The NSA was reverse proxying Google.
The legit explanation (given the domain name) is probably they wanted to use reCAPTCHA, but block all non-NSA hosts with a firewall or something.
This is not great, because the NSA expanded its attack surface to all of google.com.
The more conspiracy explanation is that this is actually a phishing page set up, and due to a misconfiguration it's exposed under captcha.nsa.gov, but Occam's Razor should apply here.
Re:Captcha.nsa.gov
by littlestymaar on Monday February 03, 2020 @09:30PM
(#22231782)
I think you meant “Hanlon's razor”[1].
As far as I can tell, it's what you'd see hitting https://www.google.com.br/ from Brasil, but in English.
Re:Captcha.nsa.gov
by tsukurimashou on Tuesday February 04, 2020 @06:50AM
(#22234541)
Hahaha, I don't think they were expecting all that traffic from this being posted on HN
Edit: This seems to have been online since 2018, see https://web.archive.org/web/20181206224407/http://captcha.ns....