> It's the global catalog that helps everyone – security teams, software vendors, researchers, governments – organize and talk about vulnerabilities using the same reference system so why was only the US federal government funding it, especially if it wasn't expensive to maintain? this is the follow up question to every headline and won't be seen as controversial later, so why bother treating it as controversial to s…
I think others have already stated about the U.S. having a leadership position by running this...So i'll just comment on the the funding of this DB. I mean, sure, i'm all for optimizing things...but it strikes me that some decisions by the current U.S. administration - like not wanting to fund this - seem very penny wise and pound foolish. Like, for whatever it costs to run this DB (and i truly have no idea of the costs), i bet you that the operational benefits to U.s. companies, organizations is well worth the spend. Separate of any political benefits, i'm referring to hard and tactical benefits that arise from this existing. Someone is simply looking at a long list of items on a budget, not understanding that each item might have different weights, values, etc...and simply slashing like a toddler...and either not caring the ramifications, or not understanding them (or secondary trickle effects).