top | item 43701381

(no title)

the_doctah | 10 months ago

Why is the government responsible for CVEs again?

discuss

Every now and then the government decides to fund things. Public schools, roads, police, firemen, GPS, NOAA, cybersecurity, government cheese, etc.

sschueller|10 months ago

"the government" aka "We the people". It is in all our interest. This is like asking why the government is responsible for roads.

dingaling|10 months ago

> This is like asking why the government is responsible for roads.

Thought experiment:

If roads were built by private companies, could a Government justify the expense maintaining a database of all the potholes?

jowea|10 months ago

National (technological) security?

airhangerf15|10 months ago

It's not. The CVE board members include representatives from CrowdStrike, Microsoft, Github Security, LP3, F5, Panasonic, NIST.

Everyone crying about "Oh no! This government institution is going away! Private companies would never do this! They would use it for financial gain!"

Um.... It's already run entirely by private entities via government money. It's the literal definition of a "Public Private Partnership." You know, that way the US government get away with doing a lot of shady stuff via non-government contracts who are totally not state actors /s.