News for hackers. Stuff that matters.

A comment on Ask HN: How would French police locate suspects by tapping their devices?. Parent comment

Re:Ask HN: How would French police locate suspects by tappin... by dylan604 on Saturday November 04, 2023 @02:17PM (#38143696)
And? I don't know the CVE process, so I'm honestly asking while you're not actually answering. Who controls the release of CVEs? Sure, individuals can report something as a vuln, but does the report automatically create a CVE? Or do the reports get verified and then "promoted" to CVE? If the latter, then there's absolutely a part in the process that can be subverted
[ Parent | on HN ]
Re:Ask HN: How would French police locate suspects by tappin... by wepple on Saturday November 04, 2023 @02:51PM (#38143990)
CVEs have absolutely nothing to do with finding out whether our devices are backdoored.

CVEs come out of Mitre, but lots of countries have equivalent systems or tracking codes. Further, large companies are pre-allocated blocks of CVEs to use.

But it’s irrelevant. The original position was that if govt are putting obvious remote access into devices, why has nobody ever seen and blogged or tweeted about it?

[ Parent | on HN ]