Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CVE program faces swift end after DHS fails to renew contract [updated]

csoonline.com

Post reply on HN
Print view View original

931–940 of 1001 posts

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#931

Post by cortesoft »

nxobject wrote: post #783
tlogan wrote: post #739

Earlier quoted context omitted.

My guess is that they’ll be phased out next year. The long-term goal seems to be transitioning the CVE program into something more like an industry-led consortium. (If you did not notice they operate zero budgeting approach: cut everything and if something is very important reverse it. But you cut first and then ask questions.) It’s worth noting that MITRE is a DoD contractor (with minor contracts from other agencies…

I’m a little hesitant to trust a CVE database operated by private industry on the grounds of conflict of interest for that reason, too.

You aren’t worried about the conflict of interest with a government run system, given the desire of governments to be able to intercept all communication?

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#932

Post by tlogan »

chowchowchow wrote: post #845
tlogan wrote: post #829

Earlier quoted context omitted.

Project 2025 lays out a clear vision for the privatization and decentralization of federal functions. It’s not subtle—it explicitly calls for it. Separate from whether we support this or not: Trump is doing—or promising to do—exactly what he said he would. We can disagree with the policies, but it’s not accurate to say he or his team are directionless or incompetent. They have a coherent (if controversial) agenda. So…

Actually Trump repeatedly said he didn't know about project 2025. He's so scattered in his campaigning that it's possible to pretty much justify any action as "what he said he would do." But saying executing project 2025 is exactly what he SAID he would do defies all reality. It may be what intelligent observers expected him to do but it is not what he said. Edit: good lord people I’m not defending Trump I’m saying h…

> Actually Trump repeatedly said he didn't know about project 2025.

His exact quote is: "I have nothing to do with Project 2025." Meaning sure - he did not write it. I doubt he read it - it is 900+ pages long document :-)

Anyway, he might fooled some people but I doubt - my understanding was that he is going to follow Project 2025. It is good time to rewatch this: https://www.youtube.com/watch?v=gYwqpx6lp_s

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#933

Post by mrguyorama »

ggm wrote: post #80
markhahn wrote: post #77

Earlier quoted context omitted.

it might be ignorance; it might be malice. it might also be deliberate: that they actually don't think the government should be involved in this sort of thing. after all, someone could be making a profit on this, and that seems to be their highest value. if gov is involved, that makes it a communal effort, and you know what else starts with "commun-"? yes, those reasons are stupid and ignorant AND intentional. but is…

Hanlon's razor. I also tend to impute malice to things I don't like, but I think it's hard to go past stupidity.

Hanlon's razor is utter trash. In most contexts that people bring it up, sufficient stupidity IS malice, because at a certain level of resources and responsibility, you do not have an excuse to be that stupid

You can only get into such a position if you've ignored smart people telling you "No". That's malice.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#934

Post by tylermw »

stonogo wrote: post #920
tylermw wrote: post #814

Earlier quoted context omitted.

MITRE is a Federally Funded Research and Development Center (FFRDC), which is a distinct type of federal contractor with strict conflict of interest regulations. They are owned by the federal government, but operated by contractors and are specifically structured and regulated to minimize conflicts of interest, so are distinct from "private industry" in many regards. You can read a congressional report by the CRS des…

MITRE is absolutely not an FFRDC. It's a regular old 501(c)(3) which happens to manage FFRDCs.

Yes, you are correct, I should have typed "runs". But the point is that MITRE runs the U.S. National Cybersecurity FFRDC that maintains the CVE system, and FFRDCs are deliberately structured to minimize potential conflicts of interest (GP comment) and are definitely distinct from private industry (parent comment).

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#935

Post by mrguyorama »

ourmandave wrote: post #679
this15testingg wrote: post #429

Earlier quoted context omitted.

exactly; I hope ycombinator and its proponents can enjoy living in the ancap fantasy land where you have to pay to be alerted for a climate change fueled mega hurricane (also caused by this exact same reckless, unregulated greed) because NOAA was disbanded. Billionaires shouldn't exist, but neither should millionaires.

Will they have a free tier where I can sit through 30 second ads? =(

The insurance industry long ago figured out that nothing has the profit to effort ratio of "pay us or die", and so any capitalist endeavor that is not somehow restrained will attempt to approach this perfection.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#936

Post by zeebeeblebrox »

derefr wrote: post #903
nxobject wrote: post #783

Earlier quoted context omitted.

I’m a little hesitant to trust a CVE database operated by private industry on the grounds of conflict of interest for that reason, too.

I'm the opposite — and I think this might be the "4D chess"† interpretation of this move as well. In peacetime, I think everyone is generally alright with something centralized like the CVE database. But in what increasingly seems like the lead-up to wartime ... I'm hesitant to trust a CVE database operated or funded unilaterally by a single government — or even multilaterally, if the governments are all ones that al…

[dead]

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#937

Post by MiguelX413 »

GuinansEyebrows wrote: post #921
MiguelX413 wrote: post #514

Earlier quoted context omitted.

[flagged]

You have got to stop engaging with the idea of “woke” as a specific ideology to stand against. It’s like you purposefully intend to misunderstand common shared meanings of words.

I never believed in such a thing. I don't understand where you possibly could have gotten the idea that I adhere to such a thing.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#938

Post by MiguelX413 »

cortesoft wrote: post #931
nxobject wrote: post #783

Earlier quoted context omitted.

I’m a little hesitant to trust a CVE database operated by private industry on the grounds of conflict of interest for that reason, too.

You aren’t worried about the conflict of interest with a government run system, given the desire of governments to be able to intercept all communication?

No, particularly because CVE has no communications functionality.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#939

Post by tw04 »

riffraff wrote: post #207
tw04 wrote: post #198

Earlier quoted context omitted.

I think you mean wonder kids.

wunderkind is a loanword, it's one of those cases of a German word being used but being odd in English since it's so similar. Like kindergarten which is often speller as "garden". https://en.m.wikipedia.org/wiki/Wunderkind_(disambiguation)

It was sarcasm that apparently went over everyone’s head. See: Ted Lasso.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#940

Post by chowchowchow »

tlogan wrote: post #932
chowchowchow wrote: post #845

Earlier quoted context omitted.

Actually Trump repeatedly said he didn't know about project 2025. He's so scattered in his campaigning that it's possible to pretty much justify any action as "what he said he would do." But saying executing project 2025 is exactly what he SAID he would do defies all reality. It may be what intelligent observers expected him to do but it is not what he said. Edit: good lord people I’m not defending Trump I’m saying h…

> Actually Trump repeatedly said he didn't know about project 2025. His exact quote is: "I have nothing to do with Project 2025." Meaning sure - he did not write it. I doubt he read it - it is 900+ pages long document :-) Anyway, he might fooled some people but I doubt - my understanding was that he is going to follow Project 2025. It is good time to rewatch this: https://www.youtube.com/watch?v=gYwqpx6lp_s

I am certain you can find more than one quote of his relating to Project 2025. In any event this also doesn't disagree with what I said more broadly, which is, he was not forthright about his plan to do exactly what Project 2025 said, so you can't say he's doing exactly what he said. But anyone with a hint of insight could understand that was his plan.

I'm responding to someone who said Trump is doing what he SAID he would do, and that is all I intended to correct.

Post reply on HN