3 ms·
So who will maintain it then? Either the EU or China I suppose. They can easily fund it. Maybe the Dutch should go ahead.
by rurban 2y ago
So who will maintain it then? Either the EU or China I suppose. They can easily fund it.
Maybe the Dutch should go ahead.
- lars_francke 2y agoENISA in Europe has the mandate of building a EU vulnerability database for the NIS 2 directive anyway and it's coming soon... And CIRCL in Luxembourg are providing vulnerability-lookup which can also assign IDs but in a more decentralized way: https://www.vulnerability-lookup.org/documentation/ https://www.vulnerability-lookup.org/documentation/ VulnerableCode can help with discovery etc. https://vulnerablecode.readthedocs.io/en/latest/introduction.html#what-can-i-do-with-vulnerablecode https://vulnerablecode.readthedocs.io/en/latest/introduction... So, parts of this are already in place and I assume this will be a big boost towards a new vulnerability ecosystem.
- esnard 2y agoThis sounds like good news, thanks! Do we already have an ETA for the ENISA vulnerability database?
- jeroenhd 2y agoUs Dutch have https://advisories.ncsc.nl/advisories https://advisories.ncsc.nl/advisories although a lot of that is just analysing CVEs and their impact on society. An EU solution would probably be much better. Would suck for Americans, though, they'd need to get up early to meet European office hours.