Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CVE program faces swift end after DHS fails to renew contract [updated]

csoonline.com

Post reply on HN
Print view View original

191–200 of 1001 posts

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#191

Post by chris_wot »

mmooss wrote: post #126
epistasis wrote: post #113

Earlier quoted context omitted.

Your words don't make any sense in this environment. The idea that any person at an agency could stand up to or convince the DOGE team of anything is preposterous. Anything that weakens the US or puts our cybersecurity in a place that Russia can exfiltrate data will happen. This is not about the US needing anything and it's silly to think otherwise. See also the NLRB whistleblower and the security backdoors that DOGE…

> Your words don't make any sense in this environment. The idea that any person at an agency could stand up to or convince the DOGE team of anything is preposterous. Your comment embraces and spreads the powerlessness they want you to feel and spread. Of course you can stop them - like any other negotiation in life, especially non-friendly ones, you need to make it in Trump's interest either by carrot or stick. Trump…

No, it's definitely DOGE doing all of this. Each one of these young fools need to be named and shamed. The level of damage they have done is unprecedented. They will, in their later years, hopefully look back at this time in their life with a great deal of shame and embarrassment.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#192

Post by yowzadave »

drivingmenuts wrote: post #127
chris_wot wrote: post #91

Earlier quoted context omitted.

So much for the wunderkinds in DOGE.

Given that the Kids at DOGE are all computer experts, this reeks of a calculated move.

They are clueless kids at their first job, following the orders of their hero. You think they’ll resist when the boss tells them, “cut everything”?

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#193

Post by cma »

transpute wrote: post #124
cma wrote: post #119

Earlier quoted context omitted.

I tried to look over the history and I only see a funding increase, CISA cut $3.7 million at the end of 2023 for the next year and in response NIST reallocated extra funding to NVD: $8.5 million in 2024 A funding shortfall and strain isn't a funding cut. And from what I see there was a funding increase.

Would appreciate a pointer to the source, thank you. 2025 article claims 30% increase in 2024 workload, https://www.securityweek.com/mitre-signals-potential-cve-pro... > According to NIST, while the National Vulnerability Database (NVD) is processing incoming CVEs at the same rate as before the slowdown in spring and early summer 2024, a 32 percent jump in submissions last year means that the backlog continues to gro…

Can search these for the links

2023

> CISA had previously been supporting the NIST NVD program with approximately $3.7 million per year in interagency funding, which they have discontinued

2024

> While NIST has since reallocated $8.5 million to NVD for fiscal years 2024 and 2025

Assuming that's spread over both years it wasn't as big of an increase as I said, but is still an increase even inflation adjusted.

> 2025 article claims 30% increase in 2024 workload

Underfunding in the face of more workload isn't itself a funding cut.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#194

Post by benatkin »

GolberThorce wrote: post #167
cantrecallmypwd wrote: post #95

Earlier quoted context omitted.

This is bikeshedding. The point is an authoritative process and an identifier All this does is help Putin and other rich grifters.

you like to say word 'bikeshedding', adoption of formal intellectualish sounding terminology even when inappropriate is orange-site affliction I advise against. I am saying this for your own sake... speak truths with POWER

It's a legitimate term. It's like criticizing use of the word startup or demanding someone put a dash in frontend or backend.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#195

Post by tigerBL00D »

CamperBob2 wrote: post #178
cantrecallmypwd wrote: post #90

Earlier quoted context omitted.

Vampire capitalism. They want civilization to break down so they can offer a solution for profit. The enemies of all people and life on the planet are a tiny group of oligarchs and their supplicants.

This isn't capitalism, any more than arson, burglary, or extortion is capitalism. Get some new material.

To be fair, we don't yet know how capitalism ends.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#196

Post by inejge »

King-Aaron wrote: post #37
giraffe_lady wrote: post #18

Earlier quoted context omitted.

> I'm trying to steelman Why? This administration is not acting in good faith, you don't have to act as if they are. People and institutions doing that is part of how we got here in the first place.

I still find it wild that so many people are trying to frame these decisions through a political lens. This is the actions of a foreign bad actor dismantling critical institutions from within, not "bad policy". Surely there's an antibody response.

> I still find it wild that so many people are trying to frame these decisions through a political lens.

Why? The decisions are pretty well politically aligned with the ideology which detests the size and scope of the government (realistically, those aspects which the ideologues feel are not in their interest). What is unexpected is the swiftness and the brutality of action, but revolutions tend to be messy, and make no mistake, this is a revolution.

> This is the actions of a foreign bad actor

Now this sounds like a coping strategy: everything is so preposterous it couldn't possibly be homegrown. Foreign influence and underhanded actions are as old as human interactions, but IMO outright plants can't succeed without a massive economic and power asymmetry between the adversaries.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#197

Post by sofixa »

Aurornis wrote: post #99
ggm wrote: post #51

I wish this hadn't happened. I wonder what level of compartmentalisation inside DHS means they didn't see this as having sufficient downsides? I ask this, because I don't think anyone in the subject matter specialist space would have made a strong case "kill it, we don't need this" and I am sure if asked would have made a strong case "CRISSAKE WE NEED THIS DONT TOUCH IT" -But I could believe senior finance would do t…

This sort of thing is happening across the federal government. There is no rhyme or reason. DOGE has been given an unrealistic target for cuts and they're desperately cutting whatever they can get their hands on. If you look at the federal budget it's nearly impossible for DOGE to hit their stated goals without touching benefits like medicare and social security (which are off limits so far) so the only option is dee…

> This sort of thing is happening across the federal government. There is no rhyme or reason. DOGE has been given an unrealistic target for cuts and they're desperately cutting whatever they can get their hands on

You make it sound like poor DOGE employees are being forced to do this on this kind of schedule, which definitely isn't the impression I got. They're all a bunch of incompetent overconfident weirdos who think they know better and what to do. Is there any pressure to do anything quickly?

And the US federal budget is quite easy to trim. E.g. remove an aircraft carrier from the planned construction pipeline and you've saved $15 billion with no actual ramifications.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#199

Post by jjav »

aprilthird2021 wrote: post #149
01HNNWZ0MV43FF wrote: post #133

Earlier quoted context omitted.

A lot was lost in the midterms and Supreme Court appointments. Hopefully these 4 years energize people to vote. I know protesting and direct action and so on are also important, but the gradient is not negative for voting for every office you can vote for in every election.

Yes, the next elections are all I have to look forward to really.

Given the current government has blown off an unanimous 9-0 supreme court decision, right now I can't feel too optimistic there will even be more elections.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#200

Post by toomuchtodo »

guywithahat wrote: post #166
toomuchtodo wrote: post #109

Earlier quoted context omitted.

They are breaking down the federal government intentionally. DOGE was never going to hit their goals, they were impossible to hit. The goals were just cover to take full control over anything they can get their hands on. > Even my die-hard Republican distant relatives are suddenly shocked because programs they benefited from are being cut. They thought they voted for something different. They voted for others to be h…

[flagged]

The Verge: Elon Musk's DOGE figured out one thing: if you control the computers, you control everything. - https://youtube.com/shorts/XSKXIUuDV1c

The Moving Goal Posts in Musk’s DOGE Cuts: Why Elon Musk and his team have struggled to make the spending cuts they promised - https://www.nytimes.com/2025/04/14/us/politics/elon-musk-dog... | https://archive.today/GPDNY - April 14th, 2025

Elon Musk dramatically lowers his DOGE spending cut targets (again) - https://www.msnbc.com/rachel-maddow-show/maddowblog/elon-mus... - April 11th, 2025

See How Government Spending Is Up Even as Musk Touts Savings: Musk team’s $150 billion in savings barely dents $6.8 trillion in spending largely on autopilot, WSJ analysis finds - https://www.wsj.com/politics/policy/trump-doge-government-sp... | https://archive.today/DGGhX - April 11th, 2025

"A system’s function or purpose is not necessarily spoken, written, or expressed explicitly, except through the operation of the system. The best way to deduce the system’s purpose is to watch for a while to see how the system behaves. Purposes are deduced from behavior, not from rhetoric or stated goals.” —- Donella Meadows

Post reply on HN