Anyone Can Push Updates to the DOGE.gov Website
www.404media.co
SubscribeJoin the newsletter to get the latest updates.The doge.gov website that was spun up to track Elon Musks cuts to the federal government is insecure and pulls from a database that can be edited by anyone, according to two separate people who found the vulnerability and shared it with 404 Media. One coder added at least two database entries that are visible on the live site and say this is a joke of a .gov site and THESE EXPERTS LEFT THEIR DATABASE OPEN -roro.Doge.gov was hastily deployed after Elon Musk told reporters Tuesday that his Department of Government Efficiency is trying to be as transparent as possible. In fact, our actionswe post our actions to the DOGE handle on X, and to the DOGE website. At the time, DOGE was an essentially blank webpage. It was built out further Wednesday and Thursday, and now shows a mirror of the @DOGE X account posts, as well as various stats about the U.S. governments federal workforce.Two different web development experts who asked to remain anonymous because they were probing a federal website told 404 Media that doge.gov is seemingly built on a Cloudflare Pages site that is not currently hosted on government servers. The database it is pulling from can be and has been written to by third parties, and will show up on the live website.Both sources told 404 Media that they noticed Doge.gov is pulling from a Cloudflare Pages website, where the code that runs it is actually deployed.This post is for paid members onlyBecome a paid member for unlimited ad-free access to articles, bonus podcast content, and more.SubscribeSign up for free access to this postFree members get access to posts like this one along with an email round-up of our week's stories.SubscribeAlready have an account? Sign in
0 Commentaires ·0 Parts ·118 Vue