[Full-disclosure] www.dia.mil

[Valdis.Kletnieks at vt.edu]

On Mon, 27 Oct 2008 21:33:19 +0400, Razi Shaban said:
> Yes, they're including a remote javascript. Then again, tens if not
> hundreds of thousands of other websites include the very same script.
> If statcounter's servers aren't very secure, they would have already
> been compromised.

One would *hope* that a major country's spook agencies kept themselves to a
*slightly* higher security standard than Sixpack Joe's Website and
Bait-n-Tackle Emporium.  The risk/benefit analysis for the average .com and
the average .spook are a bit different.

> On the other hand, look at the voting machines the US gov't has
> contracted. They have a tendency to screw up with technology, making
> this one of their lesser problems (if you want to consider it a
> problem at all).

A totally separate problem, but one that's not in DIA's jurisdiction.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20081027/e8aa79f7/attachment.bin