Live data from Hacker News

CVE program faces swift end after DHS fails to renew contract [updated]

csoonline.com

251–260 of 1001 posts

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#251
post #171

So who will maintain it then? Either the EU or China I suppose. They can easily fund it. Maybe the Dutch should go ahead.

ENISA in Europe has the mandate of building a EU vulnerability database for the NIS 2 directive anyway and it's coming soon...

And CIRCL in Luxembourg are providing vulnerability-lookup which can also assign IDs but in a more decentralized way: https://www.vulnerability-lookup.org/documentation/

VulnerableCode can help with discovery etc. https://vulnerablecode.readthedocs.io/en/latest/introduction...

So, parts of this are already in place and I assume this will be a big boost towards a new vulnerability ecosystem.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#252

Earlier quoted context omitted.

you like to say word 'bikeshedding', adoption of formal intellectualish sounding terminology even when inappropriate is orange-site affliction I advise against. I am saying this for your own sake... speak truths with POWER

It's a legitimate term. It's like criticizing use of the word startup or demanding someone put a dash in frontend or backend .

term is real... but is more like criticizing misuse of word startup. to be even more accurate it is what I said and not anything else

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#253
post #153

Earlier quoted context omitted.

DOGE is doing this, it's not a "scapegoat", and Trump is not going to negotiate anything here, that's ridiculous. What leverage do you have for the DOGE boys? What power? Resigning? Because on the Defense side of the government the best leverage that some teams have found is mass resignation, meaning that nothing happens. There is no negotiating with bullies, it merely breeds more concessions.

> DOGE is doing this, it's not a "scapegoat", and Trump is not going to negotiate anything here, that's ridiculous. DOGE follows Trump's direction and acts on his behalf, as you must know. They make a big deal out of DOGE so Trump's name is less attached to these actions. Then they can take much of the blame with them when they go away, with Trump and the GOP blaming them for 'excesses'. > Trump is not going to negot…

I'm curious by what means you think Trump can be bargained with.

Do you mean things like handsfull of like-minded countries selling t-bonds? No one in the R party has any leverage, and it's not clear that even a few US billionaires could exert any influence.

Do you really think Trump has ever heard of "CVE" or could comprehend them?

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#254

Earlier quoted context omitted.

No, we’re in a middle of a coup. Palantir or some other odious company will get paid 100x more to do something.

MITRE has a trademark on the term CVE.

As if laws have any meaning to this administration, and anyone expecting this will only last four years instead of turning into one of those countries so much admired by the captain at the helm, is fooling themselves.

When the citizens realise this, the structures to clamp down any revolution will be in place.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#255
post #175

Earlier quoted context omitted.

A lot was lost in the midterms and Supreme Court appointments. Hopefully these 4 years energize people to vote. I know protesting and direct action and so on are also important, but the gradient is not negative for voting for every office you can vote for in every election.

[flagged]

> The Democrats say "we feel your pain" Fuck them, truly. Voters do not want some Harvard educated lawyer to "feel their pain".

Yeah, apparently they want some billionaire who doesn't pay his taxes, who was given millions by his daddy, and who famously stiffed small business contractors at his buildings, to say he feels their pain.

That said, I actually upvoted your comment because right now it's heavily downvoted but I actually think there is an important point behind your comment. It may feel insane to me, but Trump is so beloved by his base because he was the first one to really acknowledge their anger and give it validity. "Make America Great Again" is a slogan that works because a lot of people have seen their financial and social position deteriorate over the past 30-40 years and they want to go back and they want someone to blame (even if going back is impossible and they're blaming the wrong people). Trump understood this, the Democrats didn't, or worse, branded anyone who harbored some of this anger as a bigot. This is basically how all fascist leaders come to power - the parallels with Mussolini are uncanny, right down to having a minor body part shot off in an assassination attempt.

Relevant recent example to me: a lot of folks can't understand the hypocrisy about bitching about inflation under Biden, but then saying "we'll hunker down" in response to the expected inflation from tariffs. The difference is the Trump base believes he is taking them "back to the promised land", and for better or worse Trump is definitely a man of action, so they're more willing to put up with temporary hardships if they think the direction is right. With Biden and the Dems, they just believe they'll get more of the "slow slide."

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#256

These four years are going to be the death of all of us.

War with China and doing enough reprehensible acts to stoke protests to declare martial law to stay in power indefinitely.

Wait until they start a war against Albania.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#257
post #51

I wish this hadn't happened. I wonder what level of compartmentalisation inside DHS means they didn't see this as having sufficient downsides? I ask this, because I don't think anyone in the subject matter specialist space would have made a strong case "kill it, we don't need this" and I am sure if asked would have made a strong case "CRISSAKE WE NEED THIS DONT TOUCH IT" -But I could believe senior finance would do t…

This sort of thing is happening across the federal government. There is no rhyme or reason. DOGE has been given an unrealistic target for cuts and they're desperately cutting whatever they can get their hands on. If you look at the federal budget it's nearly impossible for DOGE to hit their stated goals without touching benefits like medicare and social security (which are off limits so far) so the only option is dee…

> They thought they voted for something different.

They voted for the leopards to eat other people’s faces, not their’s.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#258

Reminds me of Trump's first term where he said if we stopped testing for Covid, we'd stop catching new cases and case numbers would go down. If you stop testing for vulnerabilities then vulnerabilities go down. Easy stuff.

What I don't get is why people make things up and then get angry at the thing they made up. Is there not enough real things to be angry at?

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#259

Earlier quoted context omitted.

it might be ignorance; it might be malice. it might also be deliberate: that they actually don't think the government should be involved in this sort of thing. after all, someone could be making a profit on this, and that seems to be their highest value. if gov is involved, that makes it a communal effort, and you know what else starts with "commun-"? yes, those reasons are stupid and ignorant AND intentional. but is…

> someone could be making a profit on this Yes, there are apparently various ways of profiting from vulnerabilities. The interesting question would be whether any of the regime insiders have a way to profit.

I think it's more of a principle: if it looks like someone could charge money for it, they think that would make the country stronger, because all they understand is first-order profit. Trump's ethics is "get away with whatever you can".

For instance, most people find healthcare middlemen (pharmacy benefit managers, etc) to be grotesque parasites. But to a laissez-faire fundamentalist, they're smart for finding a way to liberate some profit, even laudable.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#260
post #196

Earlier quoted context omitted.

I still find it wild that so many people are trying to frame these decisions through a political lens. This is the actions of a foreign bad actor dismantling critical institutions from within, not "bad policy". Surely there's an antibody response.

> I still find it wild that so many people are trying to frame these decisions through a political lens. Why? The decisions are pretty well politically aligned with the ideology which detests the size and scope of the government (realistically, those aspects which the ideologues feel are not in their interest). What is unexpected is the swiftness and the brutality of action, but revolutions tend to be messy, and make…

lol, coping strategy? I'm not American and have no reason to 'cope' with anything. There is enough evidence to make a strong allegation about Trump being a Russian asset.

The entire world seems to be able to 'cope' with that assessment.

Post reply on HN