4 ms·
I don't see why this should be publicly funded, so I don't really see an issue with this. The industry benefits from having a CVE database, so the industry sho
by Ferret7446 2y ago
I don't see why this should be publicly funded, so I don't really see an issue with this. The industry benefits from having a CVE database, so the industry should fund it.
- klysm 2y agoThere are going to be all kinds of messed up incentives if this is funded from industry.
- throitallaway 2y agoTrue, although Google's Project Zero seems to be run pretty well.
- worthless-trash 2y agoDifferent goals, not cve related.
- Ferret7446 2y agoLike what?
- airhangerf15 2y agoLike there aren't any messed up incentives with it funded by the government? Um, Vault 7? Snowden? PRISM? Did you literally just forget the past two decades of domestic spying and the NSA withholding critical vulnerabilities they were currently using?
- klysm 2y agoAnd how does that relate to this exactly?
- guhidalg 2y agoNo, "the industry" is all of us alive in the 21st century who depend on software to make material decisions and to be resilient to attacks and tampering. We were all funding it, and now surely we will see some big tech company now assume responsibility from the federal government (please god don't let it be Oracle...)
- kristjansson 2y agoBecause secure systems benefit the public generally, not just the corporations that make a profit operating those systems.
- maronato 2y agoThe industry won’t want to fund it. It’ll want to profit from it.
- insane_dreamer 2y agoSo you trust industry now?
- sMarsIntruder 2y agoSame question would be for government funded agencies.
- insane_dreamer 2y agoNo, because the gov funded agencies don't have a personal stake in the outcome. That's why industry regulating itself doesn't work, and why government regulations exist.
- Xelynega 2y agoDon't open source developers and users of their software also benefit from the CVE database? If it were privately funded, what incentive would these private companies have to track bugs for these open source projects that don't make money?
- sMarsIntruder 2y agoThe insane number of downvotes you’re getting for saying basic common sense stuff, it’s why we should push for stricter political rules here in HN. You didn’t say something wrong or controversial, just an opinion. Some ideologies love to pay things with other people’s wallets, and they’ll do whatever they can to pursue this.
- sMarsIntruder 2y agoEspecially the L guy who downvoted this after 10 seconds. get a life