You'd think that this would be WAY more secure.... But as Slashdot.org are reporting here, and The Register are reporting here, an "unbelievably badly-protected admin interface welcomes you to register whatever domain you please (https://Rotten.mil anyone?), or edit anything they've already got. The interface is so ludicrously unprotected that it's been cached by Google and fails to mention that you must be authorized to muck about with it. Incredibly, default passwords are cheerfully provided on the page."
From the quick read that I gave it, both sites seem to refuse to divulge the actual Google searches that one must do to get to the page, but I am sure that if you are acually interested that much, you can work it out. I am just hazarding a guess here, but "Register .mil domain" might even do something. I have not tried, but I am sure others will.
Porn.mil? Warez.mil? Brittany-spears.mil? I am sure we will hear of them all.