Because vulnerability management has nothing to do with national security, right?

  • Wimster@europe.pub
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 days ago

    Oh my God, and then I think of all the hundreds of thousands of veterans who voted for Trump. You did a great job.

  • nightm4re@feddit.org
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 days ago

    My European friends here: do whatever you can to make EUVD a viable alternative. It’s a vulnerability database led by the European Union Agency for Cybersecurity enisa. Since their website is relatively new, you can help by providing feedback though this survey. Yes, the CVE funding has been continued for another year. But a sustainable approach to vulnerability management cannot be dependent on a single government-owned / funded entity any longer! I wish the board members all the best in transferring CVE to a new umbrella organization, but now is a great time to also consider global alternatives.

  • oysvendsen@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 days ago

    😳 Is the program entirely funded by the US government?

    What can EU and other governments/businesses do about this? Or what are they doing?

  • ccbrown@programming.dev
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 days ago

    Terrifying. Unfortunately it’s difficult to explain to laypeople why the CVE system is so important. Our nation’s leaders certainly won’t get it. Hopefully the experts are able to get through to them when it’s time to renew again. And maybe we can reduce our government dependence a bit by then.

    • rottingleaf@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 days ago

      Rather they want new vulnerabilities to go right to the market and remain unknown for longer, because that makes the surveillance and other criminal activity by the government easier.

  • sugar_in_your_tea@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    0
    ·
    3 days ago

    Updated to add at 1700 UTC, April 16

    In an 11th-hour reprieve, the US government last night agreed to continue funding the CVE program.

    Not sure how much more whiplash I can take…

    • ameancow@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      3 days ago

      They want us to all tune out. This is all by design so we don’t know what’s real or not anymore, then they can get away with even more and nobody will care.

      This is what they’ve been doing for years and years, this is just more of the same.

      • MrScottyTay@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        0
        ·
        2 days ago

        I think a lot of it is too get and propogate misinformation because some people won’t hear about the 180s and still talk about as if they happened

      • tehn00bi@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        3 days ago

        I’m not sure about “they” the US government, but it’s absolutely a Russian/ Authoritarian state playbook.

        • ameancow@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          ·
          3 days ago

          Oh absolutely 100% this has had foreign involvement, the KGB handbook (literally) describes how to plant chaotic agents into a democratic nation’s population to boost both sides of every social debate or argument. The digital age made this the easiest tactic in the world and every nation that’s been “annexed” by Russia experienced this sowing of absolute weaponized bullshit and hate.

    • Stamau123@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      3 days ago

      someone told them what the acronym really meant, musta thought it was an EV credit or something

  • sinceasdf@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    3 days ago

    False alarm

    Updated to add at 1700 UTC, April 16 In an 11th-hour reprieve, the US government last night agreed to continue funding the CVE program.

    • dantheclamman@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      3 days ago

      I don’t think it’s a false alarm, in the sense that it is totally reasonable to be alarmed. They are cutting crucial stuff before they know what it is. There are a lot of things being cut where we’re only going to understand the impact years from now.

      • sinceasdf@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        3 days ago

        Sure, but there’s a limited bandwidth for people’s intake of information. This in particular is no longer a cause for alarm.

  • SoftestSapphic@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    3 days ago

    Oh, there goes the majority of the cybersec vulnerability disclosure space

    This is the platform most of the world uses to keep track of publicly known vulnerabilities

  • OCATMBBL@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    3 days ago

    We as a society need to start defining our damn acronyms. Stop assuming everyone knows what every acronym is, because they do not.

  • oppy1984@lemm.ee
    link
    fedilink
    English
    arrow-up
    0
    ·
    3 days ago

    So either the EU steps up and funds them until the administration tariffs the EU until they stop.

    Or we rely on the big tech companies to step up and fund them and risk pissing off the administration.

    Honestly the only way I see them coming back is either up root their lives and move to the EU with a funding guarantee, or the EU just sets up their own program.