4 ms·
As US vuln-tracking falters, EU enters with its own security bug database
- ta1243 1y agoThe is from a 2022 EU directive, well before recent US government actions, it's been developed for quite some time.
- Kon-Peki 1y agoThe EU Cyber Resilience Act, which is now in effect (but not fully enforced until 2027/2028), has additional details and also includes a reporting requirement (articles 14, 15, and 16).
- OJFord 1y agoTFA doesn't hide or sensationalise that, makes the point that it's timely.
- ta1243 1y agoHowever many people will infer causation from the timing. Half of people don't even read the full headlines any more.
- devrandoom 1y agoIt's sad to see the US being dismantled from within.
- loloquwowndueo 1y ago[flagged]
- lenerdenator 1y agoFor most sane people, yes.
- FirmwareBurner 1y ago[flagged]
- lenerdenator 1y agoMore of a dismantling-in-place, but still a dismantling.
- FirmwareBurner 1y agoWhere are the arguments for that?
- lenerdenator 1y agoThe idea is to greatly reduce the size of the administrative state and take what used to be functions of government and make them either go away entirely or privatize them. Whether this is a good idea or not is not what I'm getting at, but yeah, it's a major dismantling of institutions that touch the everyday lives of Americans (and the world).
- daveguy 1y agoAgreed. This is very clearly laid out in Project 2025, which is guiding this administration's policies.
- devrandoom 1y agoCurrently 42% done https://www.project2025.observer/ https://www.project2025.observer/
- peterhadlaw 1y ago100% agreed. The best part is nobody ever could provide an explanation for when the beast of bureaucracy would stop being fed. It is just a given that it must grow and grow and grow. Whether you voted for it or not. And don't you dare question it because questioning it is Fascism (from people who have never seen the actual results of real Fascism).
- Duwensatzaj 1y agoI’m very torn. Obviously USAID, NSF and academia in general do valuable things. But when organizations get hijacked and used as a slush fund to fund naked ideological activities and organizations barely related to the original purpose, I’m not surprised when the eventual response is to just hack and slash. I wish it was done more thoughtfully and carefully, but that doesn’t appear to be a choice. Just a choice of funding hostile NGOs and academics who endorse discrimination in education, employment, health care and even law nowadays or the current mess. It all sucks and I don’t have any solutions other than focusing on my career and family.
- stavros 1y agoI'm out of the loop, can you give some context as to what you're talking about? What were they funding?
- asacrowflies 1y ago[flagged]
- HideousKojima 1y agohttps://en.m.wikipedia.org/wiki/Students_for_Fair_Admissions_v._Harvard https://en.m.wikipedia.org/wiki/Students_for_Fair_Admissions... Educational institutions that have been banned from practicing racial discrimination in admissions (such as all public universities in California since the 90's) have insisted on continuing to find other ways to covertly racially discriminate in admissions. It's clear from their actions that racial discrimination in admissions is a fundamental value for these institutions, and they should not receive any taxpayer funding until they stop such disgusting and bigoted behavior. Stop carrying water for them. https://www.npr.org/2023/06/30/1185226895/heres-what-happened-when-affirmative-action-ended-at-california-public-colleges https://www.npr.org/2023/06/30/1185226895/heres-what-happene...
- wvenable 1y ago> But when organizations get hijacked I haven't seen any reasonable evidence on this. I'm not saying that evidence doesn't exist, it's just everything that I've heard so far as been debunked. The current administration has been shown to lie and exaggerate over and over to justify these actions so I don't know why anyone would assume they're telling the truth about this.
- gadders 1y ago"Register readers — especially those tasked with vulnerability management — will recall that the US government's funding for the CVE program was set to expire in April until the US Cybersecurity and Infrastructure Security Agency, aka CISA, swooped in at the 11th hour and renewed the contract with MITRE to operate the initiative." https://en.wikipedia.org/wiki/Washington_Monument_syndrome https://en.wikipedia.org/wiki/Washington_Monument_syndrome
- j_walter 1y ago>>>and quietly rolled out a limited-access beta version last month during a period of uncertainty surrounding the United States' Common Vulnerabilities and Exposures (CVE) program. You mean the 24 hour period where people freaked out and assumed things that weren't true? The renewal came down to the wire just like most do during negotiations...MITRE tossed the news out there to stir up concerns but it was all just sensationalized. A "funding lapse" is not the same as "contract not renewed yet"...
- lesuorac 1y ago"This comes after the Feds decided not to renew their long-standing contract with nonprofit research hub MITRE to operate the CVE database." [1] Doesn't seem like an untrue assumption. Feds decided not to renew the contract, people got upset, and later the feds decided to renew the contract the night it would expire [1]. This is like saying Y2K is a nothingburger because people updated the code to handle more than 2 digit years. It's because of the people getting upset that triggered a preventative measure preventing the problem. It's just the superman movie [2], if the kid just listened to clark kent then superman would've never been necessary. [1]: https://www.theregister.com/2025/04/16/cve_program_funding_save/ https://www.theregister.com/2025/04/16/cve_program_funding_s... [2]: https://youtu.be/-ikd_hRnVR4?t=69 https://youtu.be/-ikd_hRnVR4?t=69
- j_walter 1y agoReview Peter Allor's comments...struggles on who pays and who should be the long term controller of this program was what led to the push right up to the last minute. As usual in government if you don't push hard enough nothing will change...and I still see nothing from CISA regarding their views on what happened...all we see is conjecture from MITRE and joy because they got their $$$.
- tptacek 1y agoThis is a weird headline, because CISA did in fact end up funding NVD. I wish people cared less about this particular issue, though, because we'd do fine with a non-government-sponsored CVE.
- daveguy 1y agoWell it certainly did falter (but not cease) due to incompetent leadership and guidance. We are seeing it throughout the government because the primary goal of this administration is to dismantle so that it can be reformed for their benefit. It's more of a "break fast and move things" approach.
- stogot 1y agoNothing broke beyond perception. It’s still operating roughly as before right?
- DrillShopper 1y agoYes, but who in industry is going to expect it to be there in the future given what the current administration is doing?
- tptacek 1y agoMITRE could just take the existing database and pass a hat around to industry and keep the current program going.
- DrillShopper 1y agoI will defer to your expertise in that regard, but the company I work for definitely wouldn't pony up in that scenario.
- tptacek 1y agoThey won't need to. Microsoft or Google could fund it with pocket change. Much bigger projects than the NVD are open and funded by industry.
- davidw 1y agoIf European leaders were quick on their feet and smart, they would be dialing up the "brain-draining" of the US to 11.
- t-writescode 1y agoWhat would that look like? I imagine most Europeans don’t want to recreate the United Stated and its personality in their countries, for example. And many countries already have relatively easy visa processes for skilled workers, which would be what these scientists, developers, etc are.
- davidw 1y agoImporting a bunch of scientists wouldn't 'recreate the US'. A decent number of the scientists are probably not originally from the US anyway. It'd involve spending money to sponsor research and clear a path for people to come over. Make it really easy.
- Asraelite 1y agoFast-tracked citizenship.
- t-writescode 1y agoWhat does citizenship actually buy you? If you're bringing these US Citizens into your country to get their skills, you want them working in jobs where they'll use their skills; or, you want them creating a startup where they can use those skills. Requiring a job or getting an approved startup idea are both viable routes in the vast majority of countries in the EU, to my knowledge. And, if memory serves, most people can get citizenship in those aforementioned countries in 5-6 years if they play correctly; and, many countries allow the US equivalent of a green card in a couple. It's already pretty easy to move to Europe for knowledge workers.
- davidw 1y agoYeah I don't think actual citizenship is in the 'critical path'. You just need to make it really easy for people to move over and not be in a precarious legal situation.