top | item 43701889

(no title)

Ucalegon | 10 months ago

The EU should just buy MITRE. Move it to the EU and make it a EU based project.

discuss

order

elric|10 months ago

I don't think the EU has any interest in this. They've been aware of the risk of relying on the US for software security for years, but AFAIK there have been no efforts to do anything about it. Maybe the current situation will kick some butts into gear ...

Off topic: your username is very appropriate given the situation.

ta1243|10 months ago

I thought exactly the same until

https://euvd.enisa.europa.eu/

Appeared on the front page, with © 2005-2024 by the European Union Agency for Cybersecurity.

This is just an example of US cultural defaultism.

FirmwareBurner|10 months ago

>They've been aware of the risk of relying on the US for software security for years, but AFAIK there have been no efforts to do anything about it.

Indeed. Just as Germany knew their economy is vulnerable to Russian gas and did nothing about it, even after the 2014 invasion of Crimea. Just as the west knew moving their entire manufacturing sector to one country would make them vulnerable, but choose to ignore it because it was too profitable.

I never EVER saw politicians act proactively for the good of the nation or the people, all they do is act reactively after the shit hits the fan to control public opinion and blame someone else to make sure they get re-elected, that's it.

Once you realize our rulers aren't competent at their jobs or acting in the peoples' best interest, it all makes sense. They're in it for the grift and to enrich their monopolistic friends in the private sector, to make sure line goes up in the next quarter, that's it.

Yes, I know there are good politicians out there who care and fight for their local communities, but they never make it to rule at national or international stage and actually change the rotten system because the status quo doesn't allow that.

belter|10 months ago

This should be work for the ENISA: https://www.enisa.europa.eu/

https://www.enisa.europa.eu/topics/vulnerability-disclosure

They have a tender going on tracking best practices: https://www.enisa.europa.eu/procurement/vulnerability-disclo...

So they will take 12 months to select for the tender...18 months pondering on the report...and in 3 years they make a tender out for a solution...

Xelbair|10 months ago

oh but you forgot the mandatory time before they even start considering the tender.

looking at average speed of bureaucracy in EU it will take roughly a year to set date for a meeting that will set the date for actual meeting which will decide if this will go forward or not....

(if you think i'm joking - i'm basing this on proposed EU initiative for nuclear power which started with setting a date of meeting to setup a meeting to draft an agenda)

jonnybgood|10 months ago

MITRE is a non-profit. All the EU has to do is reach out to MITRE and be willing to fund the project.

Ucalegon|10 months ago

I know that they are a 501(c)3, but they have significant revenue and intellectual property, so in order to do the lift and shift, there would need to be some money changing hands to accomplish it. Not only that, but being owned by the EU gives the ability for MITRE employees to have the option to immigrate to the EU to protect against any retaliation.

I cannot believe I am typing that second sentence, but here we are.

Cthulhu_|10 months ago

I think all the big companies that owe their ongoing business should band together and fund it. No way an organization like this should rely on just one sponsor.

dev_l1x_be|10 months ago

Non-profit means (in this case) payed by somebody who does not have anything to say about the transaction. It would be better to pay for it so that people who are interested in this subject have a say.

panny|10 months ago

This would be hilarious. That would be a good thumb in the eye to the current administration who complained long and loud about how Obama let ICANN leave US possession. Just imagine the campaign commercials in 2026,

>The POTUS transferred our cyber defenses to the EU

Ouch

rob74|10 months ago

Well, that's kind of the point? The current administration doesn't care about cyber defense, any less than it cares about protecting the environment, protecting consumers, having top-notch universities and research, foreign aid etc. etc. Actually, it takes pride in not caring about all of these things.