Re: Americans: that clueless cretin you elected just killed the CVE program :-(

On 4/18/25 15:48, Arne Vajhøj wrote:

On 4/18/2025 10:24 AM, chrisq wrote:

On 4/16/25 13:17, Simon Clubley wrote:

Read for yourself:
>
https://www.theregister.com/2025/04/16/homeland_security_funding_for_cve/

 

                                      and why do so many people think the
taxpayer should fund everything ?.

 It does not have to. I assume it has been so for historic
reasons.
 But I think this is one case where the taxpayers get a lot
of bang for the buck.
 The CVE program has a significant impact on security at
US federal system, US state and local systems, US private
companies, US citizens and same for other countries including
close US allies.
 And at a cost of approx. 50 M$ per year for running the program.
 The global cost of cybersecurity incidents are estimated
at 10 T$.
 It is a bargain.
 I am pretty sure there are many other programs with more
questionable value.
 Arne
 

If it's so cheap, let the very prosperous industry pay
for it. If a product has vulnerabilities, that's a
product defect, and the responsibility of the
manufacturer to fix it. Sorry, no excuses. Self interest
should ensure that defects will still get fixed, just
as they are now.
Apparently, the US is trillions in debt, and that can't be
ignored forever. The state needs to live within its
means, just like the people do.
Chris