CVE program faces swift end after DHS fails to renew contract

Re:CVE program faces swift end after DHS fails to renew cont... by rco8786 on Wednesday April 16, 2025 @08:51AM (#43704837)

> why is it the government's job to do this

This is like, exactly the sort of thing that the public sector should be doing. There's no profit incentive for this to happen in the private sector.

I don't disagree with your overall sentiment re: unsustainable debt. But the answer must be reform and taking hard looks at the military budget, not just randomly cutting programs that you disagree with politically.

More like the Clinton approach.

[ Parent | on HN ]

Re:CVE program faces swift end after DHS fails to renew cont... by mike_hearn on Wednesday April 16, 2025 @09:18AM (#43705134)

But, why is there no profit incentive to do this when for-profit companies are already doing so?

https://github.com/advisories

Note that many of these entries start with GHSA not CVE.

Agree that the military budget should face large cuts too, unless I guess a major war breaks out.

[ Parent | on HN ]

Re:CVE program faces swift end after DHS fails to renew cont... by rco8786 on Wednesday April 16, 2025 @11:22AM (#43706624)

They are doing it, but there's no profit incentive. Github is a bit of a special case because of their commitment to OSS and the broader engineering community, but the moment a downturn occurs and MS takes a harder look at P&Ls, you better believe that's on the chopping block.

The public sector is exactly where you need things that are important to society but don't make money.

[ Parent | on HN ]

Re:CVE program faces swift end after DHS fails to renew cont... by mike_hearn on Wednesday April 16, 2025 @03:25PM (#43709343)

There's a profit incentive: GitHub sells its services. The free stuff is an advert.

At any rate, even if they give it away for altruistic reasons, Microsoft is a sustainable going concern that brings in more than it spends. It can afford charity. The US government isn't and can't.

[ Parent | on HN ]