4 ms·

It's a near certitude that Russia and China each have databases of exploitable software errors and prize zero days. It was to the advantage of the US and allie

It's a near certitude that Russia and China each have databases of exploitable software errors and prize zero days. It was to the advantage of the US and allies to coordinate and lead in tracking and fixing such errors. Multiple countries, companies, and individuals contributed finding and fixing bugs. The administrative task of keeping track was one part of a greater picture, a part that came with first to be advised and other perks. It's not that the US had a responsibility to take on the lead admin task, more that in past times the US saw an advantage to being at the centre of global action. This is just another part of increasing US isolationism.

wichitawch 2y ago
> It was to the advantage of the US and allies to coordinate and lead in tracking and fixing such errors. From what I understand of the article, none of these allies were funding it. > Multiple countries, companies, and individuals contributed finding and fixing bugs. Clearly that itself isn't enough. Someone has to pay for maintaining this service. It appears that no one other than USA spent money in funding it.
- hiddencost 2y ago
  [flagged]
  - digitalPhonix 2y ago
    Funnily this was on the front page recently: https://seths.blog/2025/04/how-to-win-an-argument-with-a-toddler/ https://seths.blog/2025/04/how-to-win-an-argument-with-a-tod... Don't bother; they're a brand new user trying to cause trouble
    - epistasis 2y ago
      In public spaces like this, though on the face of it the argument might appear to be with the toddler, it's also about batting down the idiocy and not letting it swamp out basic common sense and reason. Bluesky has a different tact that also works: block and hide and don't engage. However in forums like HN, where earnestness and questions are so prevalent, leaving these baiting questions and statements unanswered instead leaves them as bastions of the mind rot. Because these toddler-level arguments are being repeated daily through propaganda channels all over the internet, and if they are never answered, the constant swarm of propaganda takes in even more people.
      - pjc50 2y ago
        I do sometimes wonder how different HN would be if it had "block". Mind you I think few people are getting their propaganda from here, it's more likely to be downstream of other well-poisoners.
- epistasis 2y ago
  Why would other companies pay for it if they had never been asked? Why would it be shut down without asking for others to fund it, if it's some sort of burden on the US? Programs like this pay for themselves many times over. There are only two reasons for cutting this: absolute idiocy, or active sabotage of the US.
- lyu07282 2y ago
  Almost every other western country does fund their own databases, CVE was just significant because its the one central source of truth. its like a standard. Instead of having to coordinate with dozens of different registries every time you publish a vulnerability you just communicate with one instead. Researchers also don't directly talk with MITRE they go through one of the intermediaries that assigns the number.

wichitawch 2y ago

> It was to the advantage of the US and allies to coordinate and lead in tracking and fixing such errors. From what I understand of the article, none of these allies were funding it. > Multiple countries, companies, and individuals contributed finding and fixing bugs. Clearly that itself isn't enough. Someone has to pay for maintaining this service. It appears that no one other than USA spent money in funding it.

hiddencost 2y ago
[flagged]
- digitalPhonix 2y ago
  Funnily this was on the front page recently: https://seths.blog/2025/04/how-to-win-an-argument-with-a-toddler/ https://seths.blog/2025/04/how-to-win-an-argument-with-a-tod... Don't bother; they're a brand new user trying to cause trouble
  - epistasis 2y ago
    In public spaces like this, though on the face of it the argument might appear to be with the toddler, it's also about batting down the idiocy and not letting it swamp out basic common sense and reason. Bluesky has a different tact that also works: block and hide and don't engage. However in forums like HN, where earnestness and questions are so prevalent, leaving these baiting questions and statements unanswered instead leaves them as bastions of the mind rot. Because these toddler-level arguments are being repeated daily through propaganda channels all over the internet, and if they are never answered, the constant swarm of propaganda takes in even more people.
    - pjc50 2y ago
      I do sometimes wonder how different HN would be if it had "block". Mind you I think few people are getting their propaganda from here, it's more likely to be downstream of other well-poisoners.
epistasis 2y ago
Why would other companies pay for it if they had never been asked? Why would it be shut down without asking for others to fund it, if it's some sort of burden on the US? Programs like this pay for themselves many times over. There are only two reasons for cutting this: absolute idiocy, or active sabotage of the US.
lyu07282 2y ago
Almost every other western country does fund their own databases, CVE was just significant because its the one central source of truth. its like a standard. Instead of having to coordinate with dozens of different registries every time you publish a vulnerability you just communicate with one instead. Researchers also don't directly talk with MITRE they go through one of the intermediaries that assigns the number.