dgacmu 11 hours ago

This is the CVE program, since the title doesn't specify it

WhatsName 11 hours ago

Honest question, since giving our CVEs has been outsourced to numbering authorities anyways how much money is needed to run this?

  • dathinab 5 hours ago

    on a "governmental budged" level?

    probably so little it's nothing

    but on a personal/small company level that still isn't nothing I guess

    you need above average robust and secure servers

    And the amount of "false", "duplicate" or otherwise bad CVEs is pretty insane and you engineers with enough experience to get pretty well paid jobs, which also are trustable to go through it, filter it and apply scores. And this not always being done supper well is kinda where some projects starting to have their own numbering service comes.

    I wonder if there had been a discussion like: A forceful requirement to replace all employees with AI and a firm refusal that doing so isn't viable as this is to prone to malicious prompt injection attacks and as final consequence it got de-funded with DOGE claiming they can just run it them-self for a fraction of them money.

lokar 11 hours ago

Security compliance is going to be so much simpler now!

jmclnx 9 hours ago

Nice, since Trump and Friends are done ensuring our food and health system will stop inspections causing increased sicknesses. Time to do the same with Cyber Security.