> Someone in the original HN thread about funding wrote a post explaining how poorly run CVE org was and it had been like that for years. Sure, but that doesn’

> Someone in the original HN thread about funding wrote a post explaining how poorly run CVE org was and it had been like that for years. Sure, but that doesn’t change anything, does it? Most people that use or have benefited from the CVE program are not even aware of these criticisms, and I’d be willing to bet that the majority of people who _are_ aware only became so in the past week. > This is purely a reputational concern. Being on government networks doesn't make it instantly more trustworthy or safe. I did not say the concern was the safety of the CVE program. The concern is influence over the world’s inbox for 0days and the tangible ways that can be used to a nation’s benefit. It is most certainly not just a reputational concern. If China had stepped in last week and took the reins there would be groups within both industry and government having mild freakouts this week.