this post was submitted on 16 Apr 2025
792 points (99.6% liked)
Technology
68991 readers
3679 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Good. Despite the fact that my Government is currently being run by baboons the US Government shouldn't have been the sole carrier of such a globally important program. The CVE program is central to how security companies, Qualys being an example, make absolute shedloads of money. These companies shouldn't be getting a free ride; it's only right that they contribute to maintaining the resource.
There's also the argument that no single Government should have control over something like this.
In fact, I can think of a few reasons the US gov shouldn't even be trusted to fund this. Namely the CIA/NSA possibly saying "bitch we fund you, don't report these things we exploit or no more money." Did it happen? Don't know. Does "US gov funded" immediately make me suspicious of it happening? Yes.
As it should. Frankly NO Government should have sway over the CVE program, they are all shady AF and every one them would absolutely do what you are describing if they felt it was in their interest.