Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CVE program faces swift end after DHS fails to renew contract [updated]

csoonline.com

Post reply on HN
Print view View original

711–720 of 1001 posts

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#711

Post by the-chitmonger »

sofixa wrote: post #202
01HNNWZ0MV43FF wrote: post #133

Earlier quoted context omitted.

A lot was lost in the midterms and Supreme Court appointments. Hopefully these 4 years energize people to vote. I know protesting and direct action and so on are also important, but the gradient is not negative for voting for every office you can vote for in every election.

> Hopefully these 4 years energize people to vote You are assuming there will be next elections that are free, fair, and matter. Trump says a lot of things that ultimately doesn't matter, but he has also said, and is the type of brute to believe it, that he intends to stay in power. He and his cronies have successfully dismantled the checks and balances that should have prevented him from doing they, legally. IMO the…

Let's pray that his health suffers, in that case. I am so unbelievably tired of reading the news and seeing another pillar of civilization dismantled.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#712

Post by flanked-evergl »

drstewart wrote: post #626
epistasis wrote: post #271

Earlier quoted context omitted.

What commercial company is going to "fund" this? It's such a strange idea, disconnected from the real world. You may as well say "companies can start doing road maintenance, as they are so reliant on them for their very existence." And perhaps if there had been more than a days notice, some consortium could be pulled together, but who's going to pay? Why would private companies do this, how do they profit? CVE progra…

>but who's going to pay? The EU. They can have all the massive advantages that funding MITRE will give them. Why won't they step up to the plate? It's killing the EU and they have absolutely no idea how anything works. It's why they're a dying empire.

I will bet money that removing the cap from a bottle will be a hate crime in Europe before they start funding a institution like MITRE that actually functions.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#713

Post by titaphraz »

blueflow wrote: post #377
4ndrewl wrote: post #296

To the "I wish HN would stay out of politics" crew. You can stay out of politics, but politics will always come and find you.

The problem is not political topics, it is how people discuss them.

It's exhausting because of https://en.wikipedia.org/wiki/Firehose_of_falsehood

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#714

Post by bspammer »

jl6 wrote: post #373

It’s a reckless move to cut funding so abruptly, but taking a step back from the short-term chaos, it probably is an anomaly that this was government funded. All of private tech relies on it, and private tech is big enough to pay for it. I hope that the trillion dollar babies consider this an opportunity to pool together to form a foundation that funds this, and a bunch of other open source projects run by one random…

The US government itself uses the database, so there is a strong national security interest in it not being in private hands.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#715

Post by pixl97 »

chillingeffect wrote: post #572
franktankbank wrote: post #553

Earlier quoted context omitted.

Raw milk is delicious, my ancestors have been drinking it for millennia.

And we enjoyed our milkborne tuberculosis, typhoid, scarlet fever, diphtheria, and septic sore throat thoroughly, too. The risks actually doubled the joys. Why does a supposedly enlightened society step all over my right to choose which eliminated diseases to bring back?

Oooh, ooh, oh, don't forget the brucellosis either.

But hey, I only get to enjoy this if the measles here in Texas don't get me first.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#716

Post by rco8786 »

hansvm wrote: post #48

Weren't there major problems with the current CVE implementation, especially with the waves of script kiddies and AI tools spamming the database and the fact that projects who take security seriously have little to no say in the "score" that gets assigned?

Every system has problems. The challenge is to address the problems and fix them. Not just delete the entire system and claim a win.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#717

Post by pixl97 »

jzb wrote: post #689
acdha wrote: post #661

Earlier quoted context omitted.

I miss that, too, but the way we get there is by re-establishing democratic norms and boundaries. The United States is flirting with fascism, and globally we are seeing the fallout from that and the cascading effects of climate change, not to mention the impacts of AI on employment, surveillance and censorship, social media, etc. Keeping politics out of forums like the ones you mentioned is like keeping oxygen out of…

Flirting? That was years ago. Fascism has its shit in U-Haul and is ready to move in.

Ready to move in, are we sure it's wallet isn't on the nightstand and the keys are hanging beside the door?

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#718

Post by jetster735180 »

com wrote: post #610
newsclues wrote: post #479

Earlier quoted context omitted.

Why EU? Canada may be another friendly option

Canada’s been described as the Ukraine of North America. Let’s not site global critical infrastructure within 150km of US land borders for a generation, please.

I don't believe I've heard that before.

As a Canadian, I can confirm it's nothing like what's happening in Ukraine.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#719

Post by criddell »

tobr wrote: post #447
stingraycharles wrote: post #385

Earlier quoted context omitted.

Depends. We’re a small, very international startup and have a super strict “no politics” policy. Politics and work are not a good combination when you’re employing people from all over the world. But I would not consider it a political statement to adopt this policy.

How do you define politics? For example, are employees allowed to be LGBTQ? Are they allowed to mention their relationships to colleagues?

For a lot of people on HN, a ban on politics discussions in the office is impossible because we have to deal with software licenses.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#720

Post by AlexandrB »

kelsey98765431 wrote: post #683
mrtksn wrote: post #672

Earlier quoted context omitted.

The problem with discussing politics is that it gives you the kicks. Its very easy to get into a feedback loop and take things quite far off civility. I am also guilty of it, many times. IMHO there needs to be a mechanism for breaking the loop and then we can have civil online political discussions. Unfortunately most places just ban it or ban those who got into the loop, either way its ugly. IRL when discussing poli…

No thank you. I am absolutely uninterested in civil discussions with people who literally want to kill me and deport my good friends to guantanamo bay cuba. When you accept nazism you throw the concept of civil discourse out the window.

No thank you. I am absolutely uninterested in civil discussions with people who literally want to control everything I say and put my good friends into reeducation camps. When you accept communism you throw the concept of civil discourse out the window.
Post reply on HN