The contract with MITRE has been extended.
https://www.forbes.com/sites/kateoflahertyuk/2025/04/16/cve-...
My guess indefinitely.
DOGE might be a bunch of idiots, but in the entire DOD, there are non-idiots.
CVE program faces swift end after DHS fails to renew contract [updated]
721–730 of 1001 posts
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#722Earlier quoted context omitted.
The scores were never going to be that accurate across people's environments (IDK how much other places relied on them, places I worked never did that much) and issues with the scores don't seem to be a good justification to torch the whole CVE system anyway.
Why isn't it a good justification? I think the question everyone in this thread should ask is: why is it the government's job to do this, especially given the prior widespread view that they're doing a bad job? Is the software industry so immiserated by poverty that it cannot organize its own distribution of security bulletins? Clearly not: GitHub already runs its own vuln tracking scheme that's better integrated wit…
> why is it the government's job to do this
This is like, exactly the sort of thing that the public sector should be doing. There's no profit incentive for this to happen in the private sector.
I don't disagree with your overall sentiment re: unsustainable debt. But the answer must be reform and taking hard looks at the military budget, not just randomly cutting programs that you disagree with politically.
More like the Clinton approach.
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#723To the "I wish HN would stay out of politics" crew. You can stay out of politics, but politics will always come and find you.
> the "I wish HN would stay out of politics" crew.
Sadly, this crew includes the site's moderation.
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#724Earlier quoted context omitted.
I miss that, too, but the way we get there is by re-establishing democratic norms and boundaries. The United States is flirting with fascism, and globally we are seeing the fallout from that and the cascading effects of climate change, not to mention the impacts of AI on employment, surveillance and censorship, social media, etc. Keeping politics out of forums like the ones you mentioned is like keeping oxygen out of…
Flirting? That was years ago. Fascism has its shit in U-Haul and is ready to move in.
Nah, it's already almost done moving its stuff in.
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#725Earlier quoted context omitted.
The problem with discussing politics is that it gives you the kicks. Its very easy to get into a feedback loop and take things quite far off civility. I am also guilty of it, many times. IMHO there needs to be a mechanism for breaking the loop and then we can have civil online political discussions. Unfortunately most places just ban it or ban those who got into the loop, either way its ugly. IRL when discussing poli…
No thank you. I am absolutely uninterested in civil discussions with people who literally want to kill me and deport my good friends to guantanamo bay cuba. When you accept nazism you throw the concept of civil discourse out the window.
Having civil discussions with people who disagree isn't about politeness or acquiescence. Having political discussions per the same rules we use for technical debates, like steel manning, allows information to actually flow both ways. I'm up to four people now that I changed parties between 2020 and 2024. That doesn't seem like a lot, but if everyone was doing it it would make a difference. It took time. I had to non judgementally listen to their concerns and intuit the fears underneath. They were reasonable intelligent people operating off of propaganda mostly. The emotional hook had been set and used draw them further and further into false narratives that fed their fears and hopes. To think I am immune isn't realistic either. My triggers are getting used to pull me the other direction, to make me uncompromising, and to view those who disagree as inhuman. Some of that is game theory polarizing us, but some of it is the intentional result of the Kremlin's standard divide and conquer they have been using on us for over half a century. The antidote is calm conversations with voters who have been made scared about irrational things, and looking to see what fears we are being manipulated with as well.
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#726To the "I wish HN would stay out of politics" crew. You can stay out of politics, but politics will always come and find you.
To play devil's advocate - it's horrible when gaming, programming, business or even porn forums get overrun by politics. It's not that the political topics are unimportant but all my feeds just end up looking the same as each other and the same as a newspaper app. I hate election nights because of this.
Inverse devils advocate:
But look at it this way: I see the us political spectrum melting down into authoritarianism and you’re complaining you don’t need to be reminded of it.
A similar analogy would be if we are at your house, and it catches fire, and you complain that it is interfering with watching Netflix while I’m trying to call 911 for help.
From my perspective you are ignoring your own demise and from your perspective I’m just being annoying.
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#727To the "I wish HN would stay out of politics" crew. You can stay out of politics, but politics will always come and find you.
ah yes, losing the... CVE database is truly the wake up call to get engaged in politics.
I mean sorry but I'm not sure if you're being ironic. It sounds like something you'd read on ngate
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#728Maybe Europe should charge the US for access to their CVE databases.
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#729Earlier quoted context omitted.
> I never EVER saw politicians act proactively for the good of the nation or the people, This is almost certainly because those cases don't make the news.
They do where I live, but those are drops in the bucket compared to the industrial scale theft(wealth transfer) the central government operates.
Well, in the United States it doesn't make the news.
Re: CVE program faces swift end after DHS fails to renew contract [updated]
#730Earlier quoted context omitted.
I fear the situation either ends badly or in a bloodshed. They aren't respecting the courts, so assuming they will accept defeat in elections is naive.
Maybe that's the only way that people can learn.
No. Look at the bloodshed in the Middle East. Man is a bad animal.