Live data from Hacker News

CVE program faces swift end after DHS fails to renew contract [updated]

csoonline.com

321–330 of 1001 posts

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#321

Man, I just can’t even muster the snark I usually have for these sorts of boneheaded decisions. This sucks, plain and simple.

I can't believe what a bunch of bollocks this administration is. I couldn't believe it the first time, and this time I thought "Well at least I'm ready, it will be a lot like last time" and it's so much worse

> it will be a lot like last time

A lot of people seemed to have had this theory, despite all the evidence to the contrary.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#322
post #314

If there are any Europeans here, I'd love to make my vulnerability database that's accumulated from all linux security trackers and the CVE/NVD open source if I can manage to find some folks who'd help with maintenance. Currently hosting costs are unclear, but it should be doable if we offer API access for like 5 bucks / month for private and 100 / month for corporate or similar. Already did a backup of the NVD in th…

The AGPL is a nonfree (and nonsensical) license. There’s nothing wrong with normal GPL.

Is there a non-free license approved by FSF and OSI and compatible with DFSG?

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#324
post #187
post #153

Earlier quoted context omitted.

> DOGE is doing this, it's not a "scapegoat", and Trump is not going to negotiate anything here, that's ridiculous. DOGE follows Trump's direction and acts on his behalf, as you must know. They make a big deal out of DOGE so Trump's name is less attached to these actions. Then they can take much of the blame with them when they go away, with Trump and the GOP blaming them for 'excesses'. > Trump is not going to negot…

Currently the "discussion of leverage" you are talking about is out of the hands of the leaders who run these programs. The amount of disrespect you have shown for someone that is just telling you 99% of federal workers have absolutely no leverage says a lot.

Isn't the US supposed to be the birthplace of modern democracy? When did you guys forget about protests and rallies?

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#325
post #312

As a newly minted cynic, this seems like a cynical play to save someone's budget. Step 1: Post discreetly to a forum with minimal information and an absurdly short deadline Step 2: Phone your friend, the former board member, to make your case on LinkedIn Step 3: Ring up a friendly journalist and give them a tip Step 4: Reference the insuing chaos as justification for keeping your project funded Note that the article…

Have you seen proof that this is what has been happening? Your explanation is much more convoluted than "DHS cut funding, like the administration has said it is going to do".

These explanations are not mutually exclusive.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#326
post #175

Earlier quoted context omitted.

A lot was lost in the midterms and Supreme Court appointments. Hopefully these 4 years energize people to vote. I know protesting and direct action and so on are also important, but the gradient is not negative for voting for every office you can vote for in every election.

[flagged]

We never ever told people they are losers for wanting a better life. One of the most popular candidates for the Dem ticket was Bernie Sanders. He actually wanted to cut our biggest budget line items and spend them on the things people worry about the most (healthcare, something most Americans worry about being able to afford).

Trump is a literal billionaire. How is him telling the sons of people who used to do manufacturing that they're okay any better than a Harvard educated lawyer saying he feels for them (Trump and Vance are both Ivy League educated, btw)?

I also want Americans to have a better life. I also think we spend way too much elsewhere instead of at home. A lot of Democrats think that and drive policies for that. Trump may care about that too, but you can't vote for who makes you feel good. You have to learn how to vote for who will actually improve your life. We are the rulers of America, we have to understand our economy, our government, etc. No one is going to do it for us. I'd much rather vote for someone who talks down to me and will deliver stability than a guy who hypes me up and tanks the economy

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#327
post #21

If you work on OSS software on CVE management, then you already know that NVD funding reductions have been ongoing for more than a year. April 2024, https://nvd.nist.gov/general/news/nvd-program-transition-ann... NIST maintains the National Vulnerability Database (NVD).. This is a key piece of the nation’s cybersecurity infrastructure. There is a growing backlog of vulnerabilities.. based on.. an increase in software…

I've noticed that there's a post like this in most articles on HN that could be construed as negative for the current administration: some vague false statement followed by either a factually incorrect explanation or some quote that does not support the statement.

Why do you post this on a comment that is neither of those things then?

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#328
post #153

Earlier quoted context omitted.

> DOGE is doing this, it's not a "scapegoat", and Trump is not going to negotiate anything here, that's ridiculous. DOGE follows Trump's direction and acts on his behalf, as you must know. They make a big deal out of DOGE so Trump's name is less attached to these actions. Then they can take much of the blame with them when they go away, with Trump and the GOP blaming them for 'excesses'. > Trump is not going to negot…

> You need to make it in Trump's interest to keep the CVE program. This guy is ~80 years old and bragged about "person, woman, man, camera, TV." He recently got into a Tesler and exclaimed "everything's computer!" Have you seen the way his aids explain executive orders to him (like a child) before he signs them? He doesn't have the foggiest notion of comprehension of what the CVE program is, or how it would benefit h…

he sure understand two things.

one it costs the us and is needed by everyone, so he thinks but paying it someone will pick it up and then the us will be the free loader.

second, he understands that helps he and his pals wash dirty money.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#329

Earlier quoted context omitted.

Everything is political now by design. It's meant to reach into every facet of society and community and restructure it.

Everything was always political. Laws, the economy, conflcit. How is any person not affected by these? The government is responsible for all or a large part of how a country functions. People who say "I'm not political" are deflecting to avoid conflict

I mean I think The Republican Incumbent was chosen specifically as a tool because he is so extreme, pervasive and demoralising and creeps into everything. Definitely by Russia, maybe also by our "friend" in the ME. Although it's not that reported on they are on friendly terms.

Disaffection lends itself easily to creating a Russia-style society. This all feels pretty Dugin-esque, and his proposition (return to values, reject interest/hope in politics because it is always flawed anyway, bind together under the state) fits perfectly, and is finding prominence at the perfect time.

Just my opinion, but to me this seems far more akin to Dugin than whatever Curtis Yavin is pushing

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#330

Earlier quoted context omitted.

Everything is political now by design. It's meant to reach into every facet of society and community and restructure it.

Everything was always political. Laws, the economy, conflcit. How is any person not affected by these? The government is responsible for all or a large part of how a country functions. People who say "I'm not political" are deflecting to avoid conflict

> People who say "I'm not political" are deflecting to avoid conflict

A great truth. Even isolating yourself from society like a hermit is still a political decision: you are rejecting society as it is, and prefer to live in your own solo society. That's politics.

Post reply on HN