• sugar_in_your_tea@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 day ago

    Do we think doge.gov has a QA group? Do we think there’s more than two people who review changes?

    Idk, I don’t work there, nor have I looked into how they’re structured. I’m not going to make assumptions though.

    I’d bet you company has spent a fair number of years getting to this point

    Yeah, we have a bunch of tooling to make all that magic “just work.” It runs tests, check the health of deploys (and has a sane failover if it’s unhealthy), etc. There’s a lot to it, but at the end of the day, if I really want to, I can push and deploy straight to prod w/o anyone else being involved (I’d probably get fired, but I could do it).

    The tech stack isn’t nearly as interesting as the processes surrounding it.

    proper certificate

    I assume you’re talking about the DB and not the website itself, which is protected by a proper certificate, at least as of Tuesday (that’s when the certificate starts being valid). I don’t know when the website was launched, so I can’t comment on anything before that point, though the domain seems to have been registered since the day after inauguration.

    the entire financial information of the United States Government

    That’s largely public info, no? I don’t know what exactly is exposed, but honestly, pretty much all financial information (aside maybe from the military and intelligence) should be public record. If it’s not, I’d welcome a breach that exposes it so journalists can look it over and find out what they’re trying to hide.

    • Optional@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 day ago

      mmmm all the same I’d rather not have AI slurping up all my tax records to sell me a mortgage rate I’d have to take.