• Optional@lemmy.world
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    1
    ·
    1 day ago

    No doubt your company has more invested in the domain name than a pointer to pages.dev, as well.

    Do we think doge.gov has a QA group? Do we think there’s more than two people who review changes? Or that they even review changes at all?

    The setup your company has and what this appears to be (it’s true, this is speculation) is probably vastly more than just “we both use git to manage production pushes”. I’d bet you company has spent a fair number of years getting to this point, and doge.gov has not even secured a proper certificate while suggesting they’re competent to handle the entire financial information of the United States Government.

    • sugar_in_your_tea@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 day ago

      Do we think doge.gov has a QA group? Do we think there’s more than two people who review changes?

      Idk, I don’t work there, nor have I looked into how they’re structured. I’m not going to make assumptions though.

      I’d bet you company has spent a fair number of years getting to this point

      Yeah, we have a bunch of tooling to make all that magic “just work.” It runs tests, check the health of deploys (and has a sane failover if it’s unhealthy), etc. There’s a lot to it, but at the end of the day, if I really want to, I can push and deploy straight to prod w/o anyone else being involved (I’d probably get fired, but I could do it).

      The tech stack isn’t nearly as interesting as the processes surrounding it.

      proper certificate

      I assume you’re talking about the DB and not the website itself, which is protected by a proper certificate, at least as of Tuesday (that’s when the certificate starts being valid). I don’t know when the website was launched, so I can’t comment on anything before that point, though the domain seems to have been registered since the day after inauguration.

      the entire financial information of the United States Government

      That’s largely public info, no? I don’t know what exactly is exposed, but honestly, pretty much all financial information (aside maybe from the military and intelligence) should be public record. If it’s not, I’d welcome a breach that exposes it so journalists can look it over and find out what they’re trying to hide.

      • Optional@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 day ago

        mmmm all the same I’d rather not have AI slurping up all my tax records to sell me a mortgage rate I’d have to take.