Typo sends millions of US military emails to Russian ally Mali

bbc.co.uk

9 points·sorokod··5 comments

For years, holy crap! I would expect any government approved recipient lists to be a whitelist of sort.

Anyway, am I missing something, or for them to actually receive those emails, they should have routed mail connections on domains named exactly as the US ones, minus the suffix, otherwise the connection would be refused? Unless of course they're doing that on purpose and keeping the servers secret and silent for any other use that is not mail interception.

I've never contemplated a country TLD dashboard, but most hosting control panels will intercept any email that isn't correctly addressed if you setup a catch-all for a specific domain. Anyway, so much traffic coming one way should attract attention, somehow.

What's interesting is how nobody in the five eye military and intelligence communities were able to spot this for so long, which probably means worldwide metadata flow is not actively monitored, only searched for specifics.

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

I was a little worried about the 4-day hiatus in which this wasn't reposted on hacker news.

levenshtein distance = 2, close enough I guess.

Admittedly an unashamed nitpick, but ".mil" to ".ml" has an edit distance of 1.

Reply on news.ycombinator.com