Comment

Comment on CVE Board members launch the CVE Foundation, a dedicated, non-profit to continue identifying vulnerabilities, after the US ended its contract with Mitre

Buelldozer@lemmy.today ⁨1⁩ ⁨week⁩ ago

Good. Despite the fact that my Government is currently being run by baboons the US Government shouldn’t have been the sole carrier of such a globally important program. Companies, The CVE program is central to how security companies, Qualys being an example, make absolute shedloads of money.

These companies shouldn’t be getting a free ride; it’s only right that they contribute to maintaining the resource.

source

Sort:hotnew top

ArcaneSlime@lemmy.dbzer0.com ⁨1⁩ ⁨week⁩ ago
In fact, I can think of a few reasons the US gov shouldn’t even be trusted to fund this. Namely the CIA/NSA possibly saying “bitch we fund you, don’t report these things we exploit or no more money.”

source
- Buelldozer@lemmy.today ⁨1⁩ ⁨week⁩ ago
  
  Does “US gov funded” immediately make me suspicious of it happening? Yes.
  
  As it should. Frankly NO Government should have sway over the CVE program, they are all shady AF and every one them would absolutely do what you are describing if they felt it was in their interest.
  
  source