CVE program faces swift end after DHS fails to renew contract

Re:CVE program faces swift end after DHS fails to renew cont... by Cthulhu_ on Wednesday April 16, 2025 @03:09AM (#43702387)

Reduce government spending; since it's not actually a government organization (as far as I can tell, I never looked into it before), other organizations can fund it. How much goes into this organization a year anyway? I'm seeing a Mitre corporation that does lots of other stuff too that has a revenue of 2.2 billion a year.

Multi-trillion-dollar companies benefit from and contribute to this system, surely they can spare 0.01% of their revenue to this bit of critical infrastruture?

[ Parent | on HN ]

Re:CVE program faces swift end after DHS fails to renew cont... by bert-ye on Wednesday April 16, 2025 @03:40AM (#43702592)

> surely they can spare 0.01% of their revenue

They would, if we made companies pay their taxes.

Yes, you can also run such a system based on donations. But I personally think that such a system is important enough to be paid for by the government. When you run on donations, there will always be conflicts of interest and the risk of running out of funds.

But yeah, Mitre being a private organization that was paid for by the government was a problem.

[ Parent | on HN ]

Re:CVE program faces swift end after DHS fails to renew cont... by terribleperson on Wednesday April 16, 2025 @04:04AM (#43702757)

Yes, I'm sure corporations funding the CVE system would go wonderfully. "It would be best if we don't see any severe CVEs for our products this quarter, if you want our funding next quarter."

[ Parent | on HN ]

Re:CVE program faces swift end after DHS fails to renew cont... by kesor on Wednesday April 16, 2025 @05:40AM (#43703362)

MITRE is a non-profit, it receives about $1.5B from the federal government, and another almost $2B from Virginia.

[ Parent | on HN ]