4 ms·
Maybe we need a CVE-like database that isn't dependent on the government of the USA? This is a weakness of the IT world as such.
by kazinator 2y ago
Maybe we need a CVE-like database that isn't dependent on the government of the USA? This is a weakness of the IT world as such.
- bigyabai 2y agoThe US government is a pretty good steward of this sorta thing. We're generally reliable, can afford to spend a few pennies securing a lucrative international export, and hold platform-owners responsible even when their executives hide or intentionally obfuscate issues for marketing purposes. Who else can you seriously suggest, knowing the past 10 years of CVE history? Subcontract it to Cisco or Oracle?
- pabs3 2y agoCVE folks are working on diversifying their funding sources: https://www.thecvefoundation.org/ https://www.thecvefoundation.org/