The Register has an article discussing some frightening .mil vulnerabilities, including a publicly available site for registering .mil domains.