Live data from Hacker News

CVE program faces swift end after DHS fails to renew contract [updated]

csoonline.com

391–400 of 1001 posts

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#391

To the "I wish HN would stay out of politics" crew. You can stay out of politics, but politics will always come and find you.

What people mean when they say this is that they don't want to engage in party political and/or tribal political discussions. They don't want to do this because it just means rehearsing talking points.

People are not dumb. They know that politics is everywhere but they want to live and love and talk about things that are interesting.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#392
post #52
post #48

Weren't there major problems with the current CVE implementation, especially with the waves of script kiddies and AI tools spamming the database and the fact that projects who take security seriously have little to no say in the "score" that gets assigned?

and then a random 9.8 critical comes that affects some software you have in a way that makes it a 0 in your environment but it doesn't matter cause the cve tanks your organizational Security Score (tm) by 10 arbitrary points and management is wondering when you'll secure the company again because the Security Score is their only tangible deliverable to measure success

Solving this problem in a generalized way is really hard.

Maybe I have a dependency on Foo which has a critical vulnerability in a feature that I don't use. I suppress the warning and all is well. Then two weeks later someone on my team decides to use that feature, not knowing that there's a problem with it. Now we're fucked, and we'll never know because the vulnerability has been suppressed.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#393

Earlier quoted context omitted.

Everything was always political. Laws, the economy, conflcit. How is any person not affected by these? The government is responsible for all or a large part of how a country functions. People who say "I'm not political" are deflecting to avoid conflict

> People who say "I'm not political" are deflecting to avoid conflict A great truth. Even isolating yourself from society like a hermit is still a political decision: you are rejecting society as it is, and prefer to live in your own solo society. That's politics.

[dead]

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#394

If there are any Europeans here, I'd love to make my vulnerability database that's accumulated from all linux security trackers and the CVE/NVD open source if I can manage to find some folks who'd help with maintenance. Currently hosting costs are unclear, but it should be doable if we offer API access for like 5 bucks / month for private and 100 / month for corporate or similar. Already did a backup of the NVD in th…

(Spain, doing storage and web hosting) What usually worries me the most is the administrative or management part, which I don't know how big would be for this project...

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#395

Earlier quoted context omitted.

Sorry, I made the mistake of installing PyPy.

I assume that this comment should go somewhere else or I'm not able to decipher the message ;)

PyPy's logo is a snake eating its tail.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#396

Earlier quoted context omitted.

Everything is political now by design. It's meant to reach into every facet of society and community and restructure it.

Everything was always political. Laws, the economy, conflcit. How is any person not affected by these? The government is responsible for all or a large part of how a country functions. People who say "I'm not political" are deflecting to avoid conflict

One of the benefits a working democracy conveys to its citizens is that they largely don't have to care about politics. They can trust that government action is relatively consistent over time, that laws will be enforced fairly enough, that their property will be protected to a reasonable degree, that the currency will be reasonably stable, that the roads will be maintained, that some public transport will be available, that sudden wars won't erupt around them, and so on.

That's what makes working democracies successful. But it seems that it also makes democracies vulnerable because people don't realize they have these benefits because they live in a working democracy. They start to think these benefits have nothing to do with politics and are just the way things are, like the laws of nature.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#398

I'm trying to steelman but I really can't think of a non- nefarious justification for this

Reduce spending. Steelmanning (not actually believing this): it probably cost a lot for what is essentially a database, and can be done cheaply by private sector (Google, Microsoft).

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#399

Man, I just can’t even muster the snark I usually have for these sorts of boneheaded decisions. This sucks, plain and simple.

I can't believe what a bunch of bollocks this administration is. I couldn't believe it the first time, and this time I thought "Well at least I'm ready, it will be a lot like last time" and it's so much worse

[deleted]

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#400

Earlier quoted context omitted.

I can't believe what a bunch of bollocks this administration is. I couldn't believe it the first time, and this time I thought "Well at least I'm ready, it will be a lot like last time" and it's so much worse

A lot was lost in the midterms and Supreme Court appointments. Hopefully these 4 years energize people to vote. I know protesting and direct action and so on are also important, but the gradient is not negative for voting for every office you can vote for in every election.

I fear the situation either ends badly or in a bloodshed. They aren't respecting the courts, so assuming they will accept defeat in elections is naive.
Post reply on HN