Federal agencies work hard to secure their online presence, but some website compromises are being uncovered through an unlikely source. We'll dig into what those discoveries reveal about the challenge of keeping track of sprawling government web infrastructure. Interview transcript Eric White So with an emphasis on NSFW, this is a vulnerability pertaining to .edu and .gov domains that you seem to have discovered that there’s a little bit of it was something that wasn’t necessarily they had on their radar, but it seems as if OnlyFans takedowns are helping .gov and .edu domains protect themselves a little more. Why don’t we just start from the beginning on what exactly you were looking for and how you found out about this? Greg Pollock Sure, I was conducting a kind of routine investigation of a website that had other indicators of compromise. And as part of that process, I go to Google, I just search across that site to see what’s going on with this thing. At the bottom of that page, at the bottom the search results, I see a little notice that I had never seen before, which said some results have been omitted because of DMCA notices against the content. So I click through and there I see a DMCA takedown notice from clearly an adult content creator, sent to mostly adult content piracy sites, but also this government domain that I was looking at. I thought, well, that’s pretty weird. What’s going on there? And so pulling on that thread led me to discover how this is happening across lots of domains and how those DMCA copyright notices can be a pretty effective way to look for domains that are somehow advertising search results they don’t mean to. Eric White And when you say they are advertising,