Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CVE program faces swift end after DHS fails to renew contract [updated]

csoonline.com

Post reply on HN
Print view View original

881–890 of 1001 posts

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#881

Post by Jotra7 »

mike_hearn wrote: post #767
danso wrote: post #675

Earlier quoted context omitted.

> But, to CVE or not to CVE ... that is not the question. US deficit spending is out of control. This sort of thing had to happen some day. I suppose more people would be more amenable to these wholesale cuts if the current administration weren't blowing through even more money than before [0]: > The new Treasury Department data shows a deficit of $1.307 trillion for October through March, the first six months of the…

Yes. The Republicans are not and never have been united around fiscal conservatism. Eliminate-the-deficit libertarians are one faction within the party but not the dominant one, and Trump doesn't come from it. Same with most right wing parties the world over: the bigger faction is usually one that likes both tax cuts and spending increases. That's why deficits are out of control across the west: between the tax-and-s…

[dead]

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#882

Post by rco8786 »

mike_hearn wrote: post #756
rco8786 wrote: post #722

Earlier quoted context omitted.

> why is it the government's job to do this This is like, exactly the sort of thing that the public sector should be doing. There's no profit incentive for this to happen in the private sector. I don't disagree with your overall sentiment re: unsustainable debt. But the answer must be reform and taking hard looks at the military budget, not just randomly cutting programs that you disagree with politically. More like…

But, why is there no profit incentive to do this when for-profit companies are already doing so? https://github.com/advisories Note that many of these entries start with GHSA not CVE. Agree that the military budget should face large cuts too, unless I guess a major war breaks out.

They are doing it, but there's no profit incentive. Github is a bit of a special case because of their commitment to OSS and the broader engineering community, but the moment a downturn occurs and MS takes a harder look at P&Ls, you better believe that's on the chopping block.

The public sector is exactly where you need things that are important to society but don't make money.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#883

Post by sweezyjeezy »

drstewart wrote: post #877
lentil_soup wrote: post #772

Earlier quoted context omitted.

because they already do? https://euvd.enisa.europa.eu/ please, stop spreading your weird anti-europe views

Great. Then there's no loss here. What's the big deal?

Your comments feel a bit incoherent - just extend your reasoning for why you think Europe should want to fund this back to the US again.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#884

Post by voxic11 »

hubabuba44 wrote: post #579
nosianu wrote: post #499

Earlier quoted context omitted.

Or they wanted this, because this could be part of the privatization of many government functions. They, or at least some of them, could see this as controlling this function for money. It's a regular stream too, the valuable subscription model and customers who really need the service (and if they don't, just add a new law in the name of IT security forcing firms to sign up).

To me it looks too chaotic to be a planned privatization plan but who knows.

I think its part of the tried and true strategy of causing chaos then blaming the government for it and presenting privatization as the solution.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#886

Post by timacles »

deadbabe wrote: post #691
4ndrewl wrote: post #296

To the "I wish HN would stay out of politics" crew. You can stay out of politics, but politics will always come and find you.

Not keeping politics out of our lives is the reason we’ve ended up with a totalitarian fascist dictatorship. If politics is forbidden, people have to just make up their own minds and vote for what makes sense to them, instead of banding together and slowly intensifying to the most radical extremes in bids to outdo each other. Everytime you discuss politics on the internet, you entrench the current administration.

Fascinating logic. The victims are at fault. If only they did something different the abusers would have never had to abuse them.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#887

Post by SlightlyLeftPad »

chowchowchow wrote: post #845
tlogan wrote: post #829

Earlier quoted context omitted.

Project 2025 lays out a clear vision for the privatization and decentralization of federal functions. It’s not subtle—it explicitly calls for it. Separate from whether we support this or not: Trump is doing—or promising to do—exactly what he said he would. We can disagree with the policies, but it’s not accurate to say he or his team are directionless or incompetent. They have a coherent (if controversial) agenda. So…

Actually Trump repeatedly said he didn't know about project 2025. He's so scattered in his campaigning that it's possible to pretty much justify any action as "what he said he would do." But saying executing project 2025 is exactly what he SAID he would do defies all reality. It may be what intelligent observers expected him to do but it is not what he said. Edit: good lord people I’m not defending Trump I’m saying h…

People have got to learn how to read between the lines with Trump and those around him. When the things he says he is going to do and the things he’s actually doing are exactly the things laid out in project 2025, the connection to the project is immediately clear and establishes that he was lying about knowing nothing about it.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#888

Post by chowchowchow »

SlightlyLeftPad wrote: post #887
chowchowchow wrote: post #845

Earlier quoted context omitted.

Actually Trump repeatedly said he didn't know about project 2025. He's so scattered in his campaigning that it's possible to pretty much justify any action as "what he said he would do." But saying executing project 2025 is exactly what he SAID he would do defies all reality. It may be what intelligent observers expected him to do but it is not what he said. Edit: good lord people I’m not defending Trump I’m saying h…

People have got to learn how to read between the lines with Trump and those around him. When the things he says he is going to do and the things he’s actually doing are exactly the things laid out in project 2025, the connection to the project is immediately clear and establishes that he was lying about knowing nothing about it.

Obviously

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#889

Post by petesergeant »

giraffe_lady wrote: post #775
petesergeant wrote: post #208

Earlier quoted context omitted.

>> I'm trying to steelman > Why? It's a sensible practice and good practice

I just don't see how it is universally so, frankly. As a general guideline sure but some discernment is necessary nothing is gained from steelmanning apartheid or the third reich or torture prisons or or you see my point I hope.

How can you argue effectively against something if you don't understand the strongest version of the argument _for_ it?

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#890

Post by guerrilla »

tylermw wrote: post #814
nxobject wrote: post #783

Earlier quoted context omitted.

I’m a little hesitant to trust a CVE database operated by private industry on the grounds of conflict of interest for that reason, too.

MITRE is a Federally Funded Research and Development Center (FFRDC), which is a distinct type of federal contractor with strict conflict of interest regulations. They are owned by the federal government, but operated by contractors and are specifically structured and regulated to minimize conflicts of interest, so are distinct from "private industry" in many regards. You can read a congressional report by the CRS des…

They were talking about AFTER that when it is privatized. That's what the comment they're responding to was talking about, not it's current state.
Post reply on HN