News for hackers. Stuff that matters.

A comment on Typo leaks millions of US military emails to Mali web operator.

Re:Typo leaks millions of US military emails to Mali web ope... by trustingtrust on Monday July 17, 2023 @08:20AM (#36757340)
A temporary solution would be to block all traffic of email to ml domain on computers and vpn used by the military and respond with an error. If anyone outside military computers and emails is sending such classified information this is a bigger problem and not just a typo issue.
[ Parent | on HN ]
Re:Typo leaks millions of US military emails to Mali web ope... by gilbertbw on Monday July 17, 2023 @08:27AM (#36757402)
It sounds like they already do:

> He said that emails sent directly from the .mil domain to Malian addresses “are blocked before they leave the .mil domain and the sender is notified that they must validate the email addresses of the intended recipients”.

One of the examples is a hotel booking confirmation, which would come from a third party.

[ Parent | on HN ]
Re:Typo leaks millions of US military emails to Mali web ope... by devrand on Monday July 17, 2023 @09:00AM (#36757748)
According to the article the issue is non-military originating emails. They used an example of a doctor’s office sending x-rays to a patient but mistyped the TLD.
[ Parent | on HN ]
Re:Typo leaks millions of US military emails to Mali web ope... by ElectricalUnion on Monday July 17, 2023 @09:39AM (#36758108)
Weird because the USA top level domain is supposed to be .us, with that being one of the first country code top level domains.
[ Parent | on HN ]
Re:Typo leaks millions of US military emails to Mali web ope... by jabroni_salad on Monday July 17, 2023 @09:59AM (#36758338)
It's my understanding that .gov and .mil were brought over from when those were independent networks, pre-internet.
[ Parent | on HN ]
Re:Typo leaks millions of US military emails to Mali web ope... by hgsgm on Monday July 17, 2023 @10:26AM (#36758624)
Now do .com, .org, and .net, which are all part of US.
[ Parent | on HN ]
Re:Typo leaks millions of US military emails to Mali web ope... by richij on Monday July 17, 2023 @10:44AM (#36758872)
No they're not.
[ Parent | on HN ]
Re:Typo leaks millions of US military emails to Mali web ope... by eindiran on Monday July 17, 2023 @02:14PM (#36761898)
From Wikipedia for .com:

> The domain was originally administered by the United States Department of Defense, but is today operated by Verisign, and remains under ultimate jurisdiction of U.S. law.

.edu holds US-centric requirements today. Not sure about .org, .net, etc.

[0] https://en.wikipedia.org/wiki/.com

[1] https://en.wikipedia.org/wiki/.edu

[ Parent | on HN ]
Re:Typo leaks millions of US military emails to Mali web ope... by lolinder on Monday July 17, 2023 @10:16AM (#36758516)
This is still a valid suggestion because a lot of the emails are from long-running government contractors. They may not be able to solve all of them, but requiring government contractors to block .ml domains in their email systems would be a start.
[ Parent | on HN ]