Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CVE program faces swift end after DHS fails to renew contract [updated]

csoonline.com

Post reply on HN
Print view View original

551–560 of 1001 posts

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#551

Post by bamboozled »

hansvm wrote: post #48

Weren't there major problems with the current CVE implementation, especially with the waves of script kiddies and AI tools spamming the database and the fact that projects who take security seriously have little to no say in the "score" that gets assigned?

Getting a bit tired of posts like this (no offense), something dumb / nefarious happens like funding is cut for , then someone posts an off the cuff comment or question like, "wasn't this not that useful because ?".

Why do people do this, to down play all the destruction of the last few months? Seems to be some type of coping mechanism.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#552

Post by chillingeffect »

rocqua wrote: post #351
rob74 wrote: post #331

Earlier quoted context omitted.

Well, that's kind of the point? The current administration doesn't care about cyber defense, any less than it cares about protecting the environment, protecting consumers, having top-notch universities and research, foreign aid etc. etc. Actually, it takes pride in not caring about all of these things.

My guess is that they feel they are supplying something the whole world is benefiting from, and they believe that unfair. That ignores the fact that the US benefits immensely from this, and that they benefit domestically from providing that benefit more widely by getting a lot of free contributions from the outside. But the US foots the bill of those who do get payed, so its unfair...

This american admin doesnt seem to understand the benefits of leadership. Like being de facto currency, ability to operate while deep in debt, etc.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#553

Post by franktankbank »

pjc50 wrote: post #449
h1fra wrote: post #387

Earlier quoted context omitted.

HN and founders will say "no politics here" on the regulated internet, drinking regulated water, eating regulated food, breathing regulated air.

Apart from the few maniacs On Here who seek out the unregulated intentionally. Raw milk (all those tasty diseases). "Research chemicals" (don't hear so much about that lately, but there were whole microdosing fads).

Raw milk is delicious, my ancestors have been drinking it for millennia.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#555

Post by watwut »

throwawaygmbno wrote: post #300
chris_wot wrote: post #191

Earlier quoted context omitted.

No, it's definitely DOGE doing all of this. Each one of these young fools need to be named and shamed. The level of damage they have done is unprecedented. They will, in their later years, hopefully look back at this time in their life with a great deal of shame and embarrassment.

It needs to be the "shame and embarrassment" Nazis felt at the end of WWII and not the traditional shame and embarrassment they are used to feeling after losing the civil war and Jim Crow laws. It will just happen again in a generation otherwise.

Nazi did not felt shame and embarrassment. They felt loss. They felt to be weak. Nazi and Germans felt sorry for themselves after the WWII. The feeling of sorry for stuff they have done to others is something Germany found a bit later, largely due to Nuremberg and general policies not allowing it to stay hidden.

Forget about them feeling sorry for anyone but themselves. They will feel resentful and as if they were being treated unfairly even when actual clear criminal investigation happens.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#556

Post by FirmwareBurner »

chillingeffect wrote: post #546
FirmwareBurner wrote: post #405

Earlier quoted context omitted.

>They've been aware of the risk of relying on the US for software security for years, but AFAIK there have been no efforts to do anything about it. Indeed. Just as Germany knew their economy is vulnerable to Russian gas and did nothing about it, even after the 2014 invasion of Crimea. Just as the west knew moving their entire manufacturing sector to one country would make them vulnerable, but choose to ignore it beca…

Perfect exmple of the "one-deep" conservative response. PP is looking for a pattern, finding, and abstaining from questioning or contextualizing it: Engaging only with the first or most obvious layer of an issue—never going deeper into context, nuance, or systemic causes. The quickest counterexample that comes to mind is Elizabeth Warren's Consumer Financial Protection Bureau. It has returned billions to American cit…

I'm gonna have to stop engaging with you here if you start a comment by accusing someone to be a conservative.

If your first reaction is putting people into political/ideological camps in order to make their arguments weaker and easier to attack form a holier than though political/ideological angle, it's game over for me as I like to judge actions objectively based on the outcomes, not conservative vs democrat, left vs right, etc. since corruption and incompetence is colorblind.

I don't care which side of the political isle did what, I'm pointing at the systemic failures of the entire system built like a house of cards by all political parties, which collapsed as no thought was put into building it, and only chased short term profits at the expense of long term security. Trying to finger point a single political side only detracts from the issue which is the classic "divide and conquer" tactic politicians have been using to deflect blame and get away with it.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#557

Post by fuckbrownpeople »

FirmwareBurner wrote: post #436
sharpshadow wrote: post #431

Earlier quoted context omitted.

Germany had with under the best deal for gas possible with Russia, I don’t understand the sentiment calling it a vulnerability. There is still a working pipeline available and Russia stated clearly if would continue delivering gas, if Germany wants to.

>I don’t understand the sentiment calling it a vulnerability - You're Germany. - You join NATO for protection from Russia, an actor with a long history of military aggression[1] - Your export economy is based on manufacturing. - The energy driving your manufacturing sector is ~60% cheap gas from Russia, your military aggressive partner. - Russia invades Georgia in 2008 and Ukraine in 2014 to no ones surprise - Leader…

[dead]

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#558

Post by [deleted] »

franktankbank wrote: post #553
pjc50 wrote: post #449

Earlier quoted context omitted.

Apart from the few maniacs On Here who seek out the unregulated intentionally. Raw milk (all those tasty diseases). "Research chemicals" (don't hear so much about that lately, but there were whole microdosing fads).

Raw milk is delicious, my ancestors have been drinking it for millennia.

[deleted]

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#560

Post by sMarsIntruder »

Ferret7446 wrote: post #137

I don't see why this should be publicly funded, so I don't really see an issue with this. The industry benefits from having a CVE database, so the industry should fund it.

The insane number of downvotes you’re getting for saying basic common sense stuff, it’s why we should push for stricter political rules here in HN.

You didn’t say something wrong or controversial, just an opinion. Some ideologies love to pay things with other people’s wallets, and they’ll do whatever they can to pursue this.

Post reply on HN