A government notice told me to take civil defense training online, but instead of giving me a URL, it just said to search for it on a portal site. The same government that is famously strict about security somehow didn't seem to care whether users actually arrived at the real site. Here are some thoughts that came out of that experience.