Protected US military server poked via army recruitment website

Beads of sweat must have surely run down the face of one hacker who, while trying to score a bug bounty, inadvertently infiltrated an "internal US Department of Defence website that requires special credentials to access." The unnamed hacker used exploited a pair of vulnerabilities to gain access to the US Army network via an …

[Pascal Monett]

Money well spent

Anything that makes a nation's communication infrastructure more reliable is a Good Thing (TM). Maybe this will help the shoddy image the military has when it comes to IT security.

Are they going to do the same for the US Government ? Ha ha, just kidding.

[Anonymous Coward]

So...

No arrest warrants ? No extradition requests ? No hiding in a foreign embassy ?

This is news !

[Anonymous Coward]

Re: So...

Foreign embassies? Well, the only thing Assange can p0wn is the reason why Sweden is after him...

[Anonymous Coward]

Impressive

How could the army have been so naive as to leave a proxy open? My IPS system blocks about 200 proxy searches a day, so it's obviously an exploited pathway.

Then that system being able to reach onto the internal / restricted network seems dumb, but I'm sure is just a SNAFU.

Anyone got a copy of Computing for Dummies that they could loan to the DoD?

[Anonymous Coward]

Re: Impressive

The US government, like most governments, has a hard on for outsourcing, to the lowest bidder mind you. Instead of creating and training good qualified people "in-house". Need I say more?