News for hackers. Stuff that matters.

A comment on Captcha.nsa.gov. Parent comment

Re:Captcha.nsa.gov by casefields on Monday February 03, 2020 @03:05PM (#22228376)
Before they fixed it, it redirected to Googles homepage in Portuguese.
[ Parent | on HN ]
Re:Captcha.nsa.gov by dahfizz on Monday February 03, 2020 @03:06PM (#22228387)
It wasn't a redirect. They served a Google homepage, but it was still an nsa.gov url
[ Parent | on HN ]
Re:Captcha.nsa.gov by mirimir on Monday February 03, 2020 @05:27PM (#22230011)
Here: https://web.archive.org/web/20200203154312/https://captcha.n...
[ Parent | on HN ]
Re:Captcha.nsa.gov by a012 on Monday February 03, 2020 @08:41PM (#22231505)
I still see a Google homepage
[ Parent | on HN ]
Re:Captcha.nsa.gov by dannyw on Monday February 03, 2020 @09:02PM (#22231620)
That's what it was. The NSA was reverse proxying Google.

The legit explanation (given the domain name) is probably they wanted to use reCAPTCHA, but block all non-NSA hosts with a firewall or something.

This is not great, because the NSA expanded its attack surface to all of google.com.

The more conspiracy explanation is that this is actually a phishing page set up, and due to a misconfiguration it's exposed under captcha.nsa.gov, but Occam's Razor should apply here.

[ Parent | on HN ]
Re:Captcha.nsa.gov by littlestymaar on Monday February 03, 2020 @09:30PM (#22231782)
I think you meant “Hanlon's razor”[1].

[1]: https://en.m.wikipedia.org/wiki/Hanlon%27s_razor

[ Parent | on HN ]
Re:Captcha.nsa.gov by mirimir on Monday February 03, 2020 @10:16PM (#22232017)
As far as I can tell, it's what you'd see hitting https://www.google.com.br/ from Brasil, but in English.
[ Parent | on HN ]