5 ms·

Honest question: Does this not already exist? - https://vulnerability.circl.lu/ https://vulnerability.circl.lu/ - https://osv.dev/ https://osv.dev/ - https:/

Honest question: Does this not already exist? - https://vulnerability.circl.lu/ https://vulnerability.circl.lu/ - https://osv.dev/ https://osv.dev/ - https://vuldb.com/ https://vuldb.com/ And a few others?

cookiengineer 2y ago
OSV is made by Google/Alphabet and therefore also prone to Trump intervention (see Gulf of Mexico executive order). The circl.lu might be actually a potential cooperation partner. (Vuldb is down right now)
- SSLy 2y ago
  you've slept just 3 hours? Go back to bed..
  - kiru_io 2y ago
    Maybe just a toilet break (see the bio): > Fun fact: All my comments have been written on the toilet. I don't use social media anywhere else.
    - biorach 2y ago
      https://xkcd.com/1369/ https://xkcd.com/1369/
    - cookiengineer 2y ago
      Yep, toilet and now back to bed :D
    - ljm 2y ago
      Taking TDD to a level it’s never been before
  - JCharante 2y ago
    hmm? it's already daytime in Europe where he's located
croes 2y ago
https://www.enisa.europa.eu/news/another-step-forward-towards-responsible-vulnerability-disclosure-in-europe https://www.enisa.europa.eu/news/another-step-forward-toward...
- belter 2y ago
  Other authorities: https://www.cve.org/programorganization/cnas https://www.cve.org/programorganization/cnas The CVE program is really important. This Administration is truly the example of the D.O.G.E. - Department Of Gaffes and Errors
- cookiengineer 2y ago
  > https://euvd.enisa.europa.eu/ https://euvd.enisa.europa.eu/ They already did it. Great! Maybe we can ask them how to contribute to their software, as it seems to be proprietary at the moment? edit: lol, their manifest.json is still the React boilerplate: https://euvd.enisa.europa.eu/manifest.json https://euvd.enisa.europa.eu/manifest.json Their database seems to also only contain fairly recent CVEs (up until 2019? some CVEs are missing...) and not before that
  - numpad0 2y ago
    All major powers have at least one each, some few for different parts of bureaucracy. Most of them are probably minimum budget operations just rsync-ing US CVD but they exist.
  - ozim 2y ago
    We can only hope they will get enough exposure now so they can get funding to fix stuff.
  - rickdeckard 2y ago
    To quote the article "Fourth, national vulnerability databases like China’s and Russia’s, among others, will largely dry up (Russia more than China)." "Fourth [sic], hundreds, if not thousands, of National / Regional CERTs around the world, no longer have that source of free vulnerability intelligence." "Fifth [sic], every company in the world that relied on CVE/NVD for vulnerability intelligence is going to experience swift and sharp pains to their vulnerability management program."

cookiengineer 2y ago

OSV is made by Google/Alphabet and therefore also prone to Trump intervention (see Gulf of Mexico executive order). The circl.lu might be actually a potential cooperation partner. (Vuldb is down right now)

SSLy 2y ago
you've slept just 3 hours? Go back to bed..
- kiru_io 2y ago
  Maybe just a toilet break (see the bio): > Fun fact: All my comments have been written on the toilet. I don't use social media anywhere else.
  - biorach 2y ago
    https://xkcd.com/1369/ https://xkcd.com/1369/
  - cookiengineer 2y ago
    Yep, toilet and now back to bed :D
  - ljm 2y ago
    Taking TDD to a level it’s never been before
- JCharante 2y ago
  hmm? it's already daytime in Europe where he's located

croes 2y ago

https://www.enisa.europa.eu/news/another-step-forward-towards-responsible-vulnerability-disclosure-in-europe https://www.enisa.europa.eu/news/another-step-forward-toward...

belter 2y ago
Other authorities: https://www.cve.org/programorganization/cnas https://www.cve.org/programorganization/cnas The CVE program is really important. This Administration is truly the example of the D.O.G.E. - Department Of Gaffes and Errors
cookiengineer 2y ago
> https://euvd.enisa.europa.eu/ https://euvd.enisa.europa.eu/ They already did it. Great! Maybe we can ask them how to contribute to their software, as it seems to be proprietary at the moment? edit: lol, their manifest.json is still the React boilerplate: https://euvd.enisa.europa.eu/manifest.json https://euvd.enisa.europa.eu/manifest.json Their database seems to also only contain fairly recent CVEs (up until 2019? some CVEs are missing...) and not before that
- numpad0 2y ago
  All major powers have at least one each, some few for different parts of bureaucracy. Most of them are probably minimum budget operations just rsync-ing US CVD but they exist.
- ozim 2y ago
  We can only hope they will get enough exposure now so they can get funding to fix stuff.
- rickdeckard 2y ago
  To quote the article "Fourth, national vulnerability databases like China’s and Russia’s, among others, will largely dry up (Russia more than China)." "Fourth [sic], hundreds, if not thousands, of National / Regional CERTs around the world, no longer have that source of free vulnerability intelligence." "Fifth [sic], every company in the world that relied on CVE/NVD for vulnerability intelligence is going to experience swift and sharp pains to their vulnerability management program."