Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CVE program faces swift end after DHS fails to renew contract [updated]

csoonline.com

Post reply on HN
Print view View original

981–990 of 1001 posts

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#981

Post by transpute »

derefr wrote: post #903
nxobject wrote: post #783

Earlier quoted context omitted.

I’m a little hesitant to trust a CVE database operated by private industry on the grounds of conflict of interest for that reason, too.

I'm the opposite — and I think this might be the "4D chess"† interpretation of this move as well. In peacetime, I think everyone is generally alright with something centralized like the CVE database. But in what increasingly seems like the lead-up to wartime ... I'm hesitant to trust a CVE database operated or funded unilaterally by a single government — or even multilaterally, if the governments are all ones that al…

> That's not the case with the CVE database under its current ownership. There's no established way to namespace it, no obvious way to split it up and keep it all working.

Work on supply chain security has lead to the introduction of standardized SBOMs, as an artifact required by some large customers to accompany software binaries. It should be possible to associate each software binary CVE with a vendor SBOM and organization country code. Large multinationals might have geo-specific binaries to confirm with regional regulations like the EU CRA.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#982

Post by gryfft »

goku12 wrote: post #946
gryfft wrote: post #236

Earlier quoted context omitted.

¿Por qué no los tres?

I don't know Spanish. So I used an online translator. I can see how greed and malice can go together. But idiocy? I don't know.

The trick is that there's more than one person involved in making these things happen. In this way, greed, malice, and idiocy can work hand in hand. Such is entropy.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#983

Post by ethbr1 »

dang wrote: post #955
jeff_carr wrote: post #721

The contract with MITRE has been extended. https://www.forbes.com/sites/kateoflahertyuk/2025/04/16/cve-... My guess indefinitely. DOGE might be a bunch of idiots, but in the entire DOD, there are non-idiots.

Thanks. It's always a puzzle what to do with threads based on articles that have since been superseded by later developments. Do we start a new thread based on a new article? The new article / thread usually fails to do very well, partly because there just was a big discussion, and partly because hearing about something getting fixed is less interesting and exciting than the original stimulus. I've been playing recen…

Maybe [updated] as a more neutral term to indicate post-submission change?

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#984

Post by ethbr1 »

andreygrehov wrote: post #964
marcusb wrote: post #922

Earlier quoted context omitted.

Yes, imagining that the quasi-government organization that is solely tasked with cutting spending might have cut spending at an agency where they are currently cutting spending is a “huge leap.” What was I thinking?

What you’re doing is jumping from “DOGE made cuts” to “DOGE killed a 25-year contract” with zero evidence beyond coincidence. That’s not analysis - that’s just reaching. If this were a clean budget cut, the contract wouldn’t have been renewed at the last minute. That kind of flip-flop screams internal disarray or political games, not a calculated DOGE move. You’re not connecting dots, but drawing them in with a crayo…

> That kind of flip-flop screams internal disarray or political games

Or that the people responsible for renewing the contract were previously fired without enough notice to effect an orderly transition of work.

Which seems par for DOGE's hamfisted approach.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#985

Post by gabesullice »

girvo wrote: post #978
gabesullice wrote: post #325

Earlier quoted context omitted.

These explanations are not mutually exclusive.

I think they are a little, but you didn't answer my question?

I think my post aged quite well, considering the resolution happened a few hours later, no?

Your post was implicitly invoking Occam's razor and so the premise of the question was about deciding which explanation to believe. I rejected that premise because it wasn't necessary to decide between the two explanations—they weren't mutually exclusive.

The only proof I had was that I've seen enough of these events resolve themselves very similarly to the way this one was resolved—which is why I was recommending a "wait and see" approach.

Call it wisdom or "lived experience".

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#986

Post by Latty »

outside1234 wrote: post #930
Latty wrote: post #311

Earlier quoted context omitted.

I find it a little incredible people are still talking about "four years". They tried to reject the election result and do a coup, and were rewarded for it by getting back into power. They are refusing to follow the law or the courts. They are sending people to gulags in foreign countries. All the checks and balances were destroyed last time. The party has been stripped of anyone who would fight the admin or reject t…

Number one rule in opposing anti-democracy forces is to NOT OBEY IN ADVANCE. We are going to have elections.

I'm not suggesting anyone give up on the elections: I'm saying prepare for the inevitable attempt to rig them. Voting alone is not enough, people must be ready for mass civil unrest when they throw out votes and claim victory.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#987

Post by Braxton1980 »

dcow wrote: post #508
darkwater wrote: post #330

Earlier quoted context omitted.

> People who say "I'm not political" are deflecting to avoid conflict A great truth. Even isolating yourself from society like a hermit is still a political decision: you are rejecting society as it is, and prefer to live in your own solo society. That's politics.

I don’t think that’s totally accurate. If I live as a hermit but perform my civic duties like voting and paying any taxes, I don’t see how choosing to live in solitude is anything more than a lifestyle choice.

I don't think he was saying it's more than a lifestyle choice just that your still involved, a non action is an action.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#988

Post by throwanem »

deadbabe wrote: post #691
4ndrewl wrote: post #296

To the "I wish HN would stay out of politics" crew. You can stay out of politics, but politics will always come and find you.

Not keeping politics out of our lives is the reason we’ve ended up with a totalitarian fascist dictatorship. If politics is forbidden, people have to just make up their own minds and vote for what makes sense to them, instead of banding together and slowly intensifying to the most radical extremes in bids to outdo each other. Everytime you discuss politics on the internet, you entrench the current administration.

I understand how you get here, but you haven't considered what would be required in practice to "forbid politics." Banning speech would be where you would have to start, and by the time you were finished Walter Freeman might grow a bit faint.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#989

Post by marcusb »

andreygrehov wrote: post #964
marcusb wrote: post #922

Earlier quoted context omitted.

Yes, imagining that the quasi-government organization that is solely tasked with cutting spending might have cut spending at an agency where they are currently cutting spending is a “huge leap.” What was I thinking?

What you’re doing is jumping from “DOGE made cuts” to “DOGE killed a 25-year contract” with zero evidence beyond coincidence. That’s not analysis - that’s just reaching. If this were a clean budget cut, the contract wouldn’t have been renewed at the last minute. That kind of flip-flop screams internal disarray or political games, not a calculated DOGE move. You’re not connecting dots, but drawing them in with a crayo…

What I'm doing is drawing a reasonable inference based on the evidence available to me. Specifically:

* The group is question (DOGE) is tasked with cutting spending deemed superfluous or wasteful.

* The group in question is actively cutting spending at the agency in question (CISA)

* The group in question is actively cutting spending with the vendor in question (MITRE)

* The leader of the group in question (Elon Musk) has said, more or less explicitly, that they have a bias more towards cutting spending and less towards getting the spending cuts right. They expect mistakes to be made. (If you want to dispute or nitpick this, I'll link you to the video where he laughs about cutting ebola prevention funding.)

* The boss of the group in question (Trump) really doesn't like CISA. See: the Chris Krebs debacle.

So, that's what I'm doing. What are you doing? It seems to me that you are trying to fit the available facts to your preferred narrative, instead of the other way around. And what does the contract having existed for 25 years have to do with anything? DOGE has admitted to cutting programs that have been funded for far longer. It is completely irrelevant.

Re: CVE program faces swift end after DHS fails to renew contract [updated]

#990

Post by xpe »

lenerdenator wrote: post #961
xpe wrote: post #891

Earlier quoted context omitted.

> Malicious idiots surrounded by sheepish intelligent people. Prefixing people with "sheepish intelligent" is bound to oversimplify this. Many of the non-DOGE employees who directly see wrongdoing are likely making calculated decisions on what to do. It depends on many factors, including the law and whistleblower protections. Many of them are responding in various ways that they hope will have an impact. Some resign…

The current administration is shipping people out of American territory to a hellhole in El Salvador without trial. It'd like to do that more often. Whistleblower protections don't mean much if the brute squad snatches you off the street and throws you on a plane regardless of what the law says.

> Whistleblower protections don't mean much if the brute squad snatches you off the street and throws you on a plane regardless of what the law says.

Activism isn't either/or; do what you think is best!

Post reply on HN