If there are any Europeans here, I'd love to make my vulnerability database that's accumulated from all linux security trackers and the CVE/NVD open source if I can manage to find some folks who'd help with maintenance. Currently hosting costs are unclear, but it should be doable if we offer API access for like 5 bucks / month for private and 100 / month for corporate or similar. Already did a backup of the NVD in th…
CVE program faces swift end after DHS fails to renew contract [updated]
531–540 of 1001 posts
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#532Earlier quoted context omitted.
> Not only that, but being owned by the EU gives the ability for MITRE employees to have the option to immigrate to the EU to protect against any retaliation. According to which rule would "owning by the EU" result in an option to immigrate? Immigration is handled on a per country basis. I don't see how the EU provide such an option.
https://eur-lex.europa.eu/eli/dir/2009/50/oj The EU has agreed upon programs in order to bring in, through an immigration policy, high skilled persons from non-member states. More importantly, working within the member nations, as to which member nation would want MITRE to be located within their borders, is not something that is a hard sell given that it has economic advantages for whichever state(s) onboard MITRE.
Where in this is the option that the EU provides an option to immigrate because the EU owns something?
I'm very well aware of knowledge workers. It's not something the EU can provide as an option. What you linked to is the legal framework around how EU members can provide such a thing.
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#533Earlier quoted context omitted.
Well, that's kind of the point? The current administration doesn't care about cyber defense, any less than it cares about protecting the environment, protecting consumers, having top-notch universities and research, foreign aid etc. etc. Actually, it takes pride in not caring about all of these things.
> The current administration doesn't care about cyber defense, any less than it cares about protecting the environment On the contrary, I would argue that they deeply care about the environment. The REAL point of all those tit-for-tat tariffs with China including with small mail/packages are to drastically cut cargo/shipping emissions. The threatening of annexation of Canada? That was really to get ~70% reduction in…
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#534This industry relentlessly lionized Trump and Musk, elevating them to positions of power and handing them the power to destroy at will. This is your moment! Enjoy it!
It’s astounding that the users here watched all the horrendous things going on and ignored them. But now the CVE numbers are gone it’s shocking and too far.
Many most voted and most commented submissions were the other things.
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#535Earlier quoted context omitted.
Not talking about politics is itself a political position (in favor of status quo).
No it’s not. It’s having discipline to not pollute unrelated conversations with your politics. I am very against the status quo but I don’t complain about it to a bunch of anonymous usernames on a forum focused on technology. You can believe something without proselytizing.
You can talk about politics without proselytising. Why should discussing a topic even invoke the words like “belief” and “proselytising”?
Not only stating an opinion is compatible with a constructive discussion that could lead to a mutual adjustment of opinions—in fact, stating your opinion is often a pre-requisite to having a discussion that could lead to it being changed.
The magic happens when person A realizes that another, equally sane person B can think very differently about topic X. At that point, the person A has to either 1) write the person B off as crazy (not so easy when that person is obviously sane in every other way), or 2) realize that there may be something to it and ever so slightly adjust own opinion on topic X, or at least become more tolerant.
Not being able or willing to freely exchange and converge on opinions with people whom you routinely meet in real life, only discussing them online in your respective bubbles, is a sure way to having only more and more wildly incompatible and divisive opinions, and I suspect it is exactly what has been happening in recent years.
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#536> A coalition of CVE Board members launched a new CVE Foundation "to ensure the long-term viability, stability, and independence of the Common Vulnerabilities and Exposures (CVE) Program." > https://www.thecvefoundation.org https://mastodon.social/@serghei/114346660986059236
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#537Earlier quoted context omitted.
Depends. We’re a small, very international startup and have a super strict “no politics” policy. Politics and work are not a good combination when you’re employing people from all over the world. But I would not consider it a political statement to adopt this policy.
How do you define politics? For example, are employees allowed to be LGBTQ? Are they allowed to mention their relationships to colleagues?
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#538Earlier quoted context omitted.
To play devil's advocate - it's horrible when gaming, programming, business or even porn forums get overrun by politics. It's not that the political topics are unimportant but all my feeds just end up looking the same as each other and the same as a newspaper app. I hate election nights because of this.
[flagged]
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#539Earlier quoted context omitted.
Germany had with under the best deal for gas possible with Russia, I don’t understand the sentiment calling it a vulnerability. There is still a working pipeline available and Russia stated clearly if would continue delivering gas, if Germany wants to.
>I don’t understand the sentiment calling it a vulnerability - You're Germany. - You join NATO for protection from Russia, an actor with a long history of military aggression[1] - Your export economy is based on manufacturing. - The energy driving your manufacturing sector is ~60% cheap gas from Russia, your military aggressive partner. - Russia invades Georgia in 2008 and Ukraine in 2014 to no ones surprise - Leader…
News from an American here, on an antidepressant and deathly fat from stress eating:
I’m worried about the eventual welfare of those protesting. I’m hearing that people of color are being told by their pastor to stay home rather than protest so as not to risk being used as scapegoats.
My family and friends are divided and still dividing over politics. I recently was crazily ranted to by big-personality entrepreneur immigrant that told me his story of how easy it was to come to the states, rags-to-riches, and how they were supporter of the administration because “they don’t want to pay taxes for illegals”. Part of the half of the U.S. that supports the administration isn’t just brainwashed, but has a very strong, angry, and desperate look, and the other part says “just wait four years and it will be over”, but it won’t; before the election, this party used gerrymandering and legal action to ensure that election, then post-election replaced election officials and many government officials.
The DOE is claiming anti-semitism and the need to have viewpoint diversity to deny funding to schools that are known for their open viewpoints.
And yet somehow I’m still surprised when they kill the CVE program.
It’s an ever-escalating circus of chaos, because our administration thinks this was needed to ensure U.S. interests, because those vulnerable in the U.S. were manipulated by outside actors and internal power-hungry politicians and zealots, and all is spun to just feed into the chaotic nationalism that is trying to one-up every other dictator that has ever lived.
To top all of this off, AI, which I use daily, will take my job before I retire, and I have no backup plan.
Despite all of this, I have the will to live, to support those whom I love (even the crazy ones), and to try to make the world better. I continue to pray for direction on all of this.
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#540Earlier quoted context omitted.
This sort of thing is happening across the federal government. There is no rhyme or reason. DOGE has been given an unrealistic target for cuts and they're desperately cutting whatever they can get their hands on. If you look at the federal budget it's nearly impossible for DOGE to hit their stated goals without touching benefits like medicare and social security (which are off limits so far) so the only option is dee…
Remember, DOGE has nothing to do with money or "efficiency". It's a pure ideological dismantling of the Federal government aimed at eliminating oversight, regulations, assistance and entitlements as envisioned by ultra-conservatives for decades. This isn't speculation or hyperbole, it's specifically laid out in their published plans: By hobbling or outright eliminating federal agencies responsible for executing the l…
And it's also happily breaking the law. The Executive doesn't legally have the power to allocate resources (or not), not to mention the power to arbitrarily suspend due process.