A security researcher told TechCrunch that a government server was exposing military emails to the internet because no password was set.