Live data from Hacker News

CVE program faces swift end after DHS fails to renew contract [updated]

csoonline.com

671–680 of 1001 posts

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#671
post #449
post #387

Earlier quoted context omitted.

HN and founders will say "no politics here" on the regulated internet, drinking regulated water, eating regulated food, breathing regulated air.

Apart from the few maniacs On Here who seek out the unregulated intentionally. Raw milk (all those tasty diseases). "Research chemicals" (don't hear so much about that lately, but there were whole microdosing fads).

Banning raw milk is for health. Banning research chemicals is mostly an extension of the war on drugs. They aren't the same.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#672

To the "I wish HN would stay out of politics" crew. You can stay out of politics, but politics will always come and find you.

The problem with discussing politics is that it gives you the kicks. Its very easy to get into a feedback loop and take things quite far off civility. I am also guilty of it, many times.

IMHO there needs to be a mechanism for breaking the loop and then we can have civil online political discussions. Unfortunately most places just ban it or ban those who got into the loop, either way its ugly.

IRL when discussing politics and things don't go badly its thanks to 3rd party who will moderate or calm down the heated debaters.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#673

Earlier quoted context omitted.

So much for the wunderkinds in DOGE.

Given that the Kids at DOGE are all computer experts, this reeks of a calculated move.

Hang out around here for a while and you will realize quickly that us tech bros mostly just know tech stuff. Our perceived intelligence in topics which we don't spend our time on is called hubris and we are swimming in it at all times.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#674

Earlier quoted context omitted.

No it’s not. It’s a position that comes from experience of knowing that it’s a complete waste of time because nobody’s mind is being changed. Further, there are entire segments of political groups who just want to assume your beliefs like a political straw man so they can denigrate you. It’s an unhealthy waste of time and that doesn’t truly hit you until you invest the time in talking to an otherwise rational person,…

> it’s a complete waste of time because nobody’s mind is being changed. What you said can be true if you approach the discussion with an attitude of “I want to change everybody’s mind” instead of trying to get to some agreement and truth. Not only stating an opinion is compatible with a constructive discussion that could lead to a mutual adjustment of opinions—in fact, stating your opinion is a precursor to having a…

> Repeated exposure to alternative views from other people in your circles leaves no alternative except to adjust your own opinion on topic X.

I have not found this to be true when it comes to politically aligned beliefs.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#675
post #76

Earlier quoted context omitted.

The scores were never going to be that accurate across people's environments (IDK how much other places relied on them, places I worked never did that much) and issues with the scores don't seem to be a good justification to torch the whole CVE system anyway.

Why isn't it a good justification? I think the question everyone in this thread should ask is: why is it the government's job to do this, especially given the prior widespread view that they're doing a bad job? Is the software industry so immiserated by poverty that it cannot organize its own distribution of security bulletins? Clearly not: GitHub already runs its own vuln tracking scheme that's better integrated wit…

> But, to CVE or not to CVE ... that is not the question. US deficit spending is out of control. This sort of thing had to happen some day.

I suppose more people would be more amenable to these wholesale cuts if the current administration weren't blowing through even more money than before [0]:

> The new Treasury Department data shows a deficit of $1.307 trillion for October through March, the first six months of the fiscal year 2025. And spending is $139 billion more in the first three months of 2025 compared to the same period last year, with borrowing over that period $41 billion higher.

We're currently fighting no wars and yet Trump is proposing a record $1 trillion defense budget [1]:

> “We’re going to be approving a budget, and I’m proud to say, actually, the biggest one we’ve ever done for the military,” he said. “$1 trillion. Nobody has seen anything like it.

And that's before proposed cuts to tax revenue [2]:

> Extending the expiring 2017 Tax Cuts and Jobs Act (TCJA) would decrease federal tax revenue by $4.5 trillion from 2025 through 2034. Long-run GDP would be 1.1 percent higher, offsetting $710 billion, or 16 percent, of the revenue losses.

So this whole "we're just imposing much needed austerity" to justify penny-wise-pound-foolish policies is kind of laughable when the proposed increase to our peacetime defense budget alone wipes out Elon's most recent estimate of DOGE's total savings [3].

[0] https://apnews.com/article/trump-biden-budget-deficit-spendi...

[1] https://www.militarytimes.com/news/pentagon-congress/2025/04...

[2] https://taxfoundation.org/research/all/federal/trump-tax-cut...

[3] https://www.nytimes.com/2025/04/14/us/politics/elon-musk-dog...

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#676
post #350

only one country pays but all benefit from it. It should be funded by all who benefit like UN.

I'm sure that a hundred other countries will step up to fund it. But have you given any thought about why the US was so willing to sponsor it alone in the past?

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#677

I wonder what would happen to CVE program funding if Tesla and SpaceX would be zero-dayed to hell and back.

We will soon find out, probably.

I'm really curious about the "soon" part, though. What is the timeline for something very visible to happen, and still be directly relatable to DOGE ?

Just imagine if it happens in three years, after the midterms - someone will be able to blame the Dems for it :) !

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#678

How much was this contract worth? If it was $5000/yr it's very different to if it's $5M/year for what amounts to little more than an instance of mediawiki.

$44M/year? https://www.usaspending.gov/award/CONT_AWD_70RCSJ23FR0000015...

Totally worth cancelling then.

Some volunteer will set up a GitHub pages and mailing list to fulfill the same duties.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#679

The real irony here is that a lot of ycombinator founders and the people reading HN were exactly the ones making this possible and now start to wonder why the snake eats its own tail.

exactly; I hope ycombinator and its proponents can enjoy living in the ancap fantasy land where you have to pay to be alerted for a climate change fueled mega hurricane (also caused by this exact same reckless, unregulated greed) because NOAA was disbanded. Billionaires shouldn't exist, but neither should millionaires.

Will they have a free tier where I can sit through 30 second ads? =(

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#680

Earlier quoted context omitted.

> I never EVER saw politicians act proactively for the good of the nation or the people, This is almost certainly because those cases don't make the news.

Yup. Politicians react to the public when it stands up. Otherwise it will follow other agenda's. That is why it is critical to have an informed public. When journalism has to compete with corporate owned Fake News and Entertainment, journalism dies, and democracy will follow. Then, add the spy business of Big Tech in the mix, with algorithmic silo's. The people don't even realize they are locked up in a jar, where th…

>When journalism has to compete with corporate owned Fake News and Entertainment, journalism dies, and democracy will follow.

Which journalism are you referring to? The one owned by Rupert Murdoch? The Washington Post owned by Jeff Bezos? MSNBC? CNN? Are they better just because they're owned by different billionaires and interest groups?

I got news for you, the journalism you knew died a long time ago.

Post reply on HN