Because vulnerability management has nothing to do with national security, right?

  • sugar_in_your_tea@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    100
    ·
    3 days ago

    Updated to add at 1700 UTC, April 16

    In an 11th-hour reprieve, the US government last night agreed to continue funding the CVE program.

    Not sure how much more whiplash I can take…

    • ameancow@lemmy.world
      link
      fedilink
      English
      arrow-up
      70
      arrow-down
      2
      ·
      3 days ago

      They want us to all tune out. This is all by design so we don’t know what’s real or not anymore, then they can get away with even more and nobody will care.

      This is what they’ve been doing for years and years, this is just more of the same.

      • tehn00bi@lemmy.world
        link
        fedilink
        English
        arrow-up
        21
        arrow-down
        2
        ·
        3 days ago

        I’m not sure about “they” the US government, but it’s absolutely a Russian/ Authoritarian state playbook.

        • ameancow@lemmy.world
          link
          fedilink
          English
          arrow-up
          13
          arrow-down
          3
          ·
          edit-2
          2 days ago

          Oh absolutely 100% this has had foreign involvement, the KGB handbook (literally) describes how to plant chaotic agents into a democratic nation’s population to boost both sides of every social debate or argument. The digital age made this the easiest tactic in the world and every nation that’s been “annexed” by Russia experienced this sowing of absolute weaponized bullshit and hate.

          edit: several tankies follow me around downvoting my every comment and throwing tankie memes at me because they seeth when someone says that Russia did a bad thing. It’s quite charming, they can’t do much else because they’re blocked.

      • MrScottyTay@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        4
        ·
        2 days ago

        I think a lot of it is too get and propogate misinformation because some people won’t hear about the 180s and still talk about as if they happened

    • Stamau123@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      3 days ago

      someone told them what the acronym really meant, musta thought it was an EV credit or something

  • Kbobabob@lemmy.world
    link
    fedilink
    English
    arrow-up
    170
    ·
    edit-2
    3 days ago

    CVE program – the centralized Common Vulnerabilities and Exposures database of product security flaws

    Just in case

    Edit: I’m glad I wasn’t the only one that didn’t know. When the headline reads like everyone should know I felt a little dumb for a second.

      • chaosCruiser@futurology.today
        link
        fedilink
        English
        arrow-up
        2
        ·
        22 hours ago

        Cannelloni-Vermicelli Exploration program? You know, to find out what happens if you mix both on the same plate? Will the Italians assassinate you before you can take the first bite? Will the pasta annihilate as soon as they touch? Will it be delicious? Who knows, and now we will never know.

        • dalekcaan@lemm.ee
          link
          fedilink
          English
          arrow-up
          13
          ·
          edit-2
          3 days ago

          Spaghetti walling - I think this is another way of saying “throwing things at the wall and seeing what sticks”, my guess from the old wives tale that you can test the doneness of spaghetti by seeing if it sticks when thrown at a wall.

          Backronym - an acronym that was made by first deciding what the finished acronym should be, then working backwards to decide what it should stand for. Usually used by NASA nerds to make cool sounding projects or by politicians to make evil shit sound friendly and benign.

        • HeyThisIsntTheYMCA@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          3 days ago

          One of my favorite authors is PG Wodehouse and if I ever inadvertently phrase something like him I consider it a good day. He has 9 gazillion novels, 2 plots, and all of them are worth reading because of the way he can turn a phrase.

    • Arcka@midwest.social
      link
      fedilink
      English
      arrow-up
      3
      ·
      3 days ago

      Yep, one of those things the IT department takes care of and most other people just need to know to keep their devices updated.

  • Australis13@fedia.io
    link
    fedilink
    arrow-up
    299
    arrow-down
    1
    ·
    4 days ago

    One can only conclude that either this is the latest step in a deliberate effort to sabotage the functioning of the US (and by extension much of the west), or just another monumentally stupid idea brought to life by their limitless incompetence.

    • ☂️-@lemmy.ml
      link
      fedilink
      English
      arrow-up
      44
      arrow-down
      2
      ·
      3 days ago

      us capitalism has nowhere else to expand. its eating itself now.

        • ☂️-@lemmy.ml
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          1
          ·
          edit-2
          3 days ago

          yup, europe seems to be on that path too. i don’t think they passed the point of no return, though.

    • Zwuzelmaus@feddit.org
      link
      fedilink
      English
      arrow-up
      22
      ·
      4 days ago

      this is the latest step in a deliberate effort to sabotage the functioning of the US

      You got that right.

    • altkey@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      13
      ·
      4 days ago

      I’m half-sure Trump put price tags on everything in the WH and every time you see a stupid thing in US foreign policy (local is guided by P25), you may hear Donald’s OF donation bell ring.

    • adarza@lemmy.ca
      link
      fedilink
      English
      arrow-up
      10
      ·
      4 days ago

      mitre also has some prime real estate adjacent to mclean metro at tysons east. probably enough for a golf course/country club if you razed everything and took the adjacent park lands.

    • Ulrich@feddit.org
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      1
      ·
      3 days ago

      I have maintained for a long time that it’s pure incompetence. If they had some sort of goal they would all be in on it together but it doesn’t seem like at any time anyone in 47s cabinet actually knows what he’s doing.

  • OCATMBBL@lemmy.world
    link
    fedilink
    English
    arrow-up
    61
    arrow-down
    2
    ·
    3 days ago

    We as a society need to start defining our damn acronyms. Stop assuming everyone knows what every acronym is, because they do not.

  • anomnom@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    85
    arrow-down
    3
    ·
    3 days ago

    It’s not Uncle Sam, or the USA shutting this down. It’s the Republican Administration. They’ve been empowered by the Republican led Congress to shut down anything it doesn’t like, understand, or benefit from.

  • JigglySackles@lemmy.world
    link
    fedilink
    English
    arrow-up
    79
    arrow-down
    5
    ·
    3 days ago

    REPUBLICANS. Not some nebulous “uncle sam”. Republicans are turning off funding. They deserve 100% of the blame because they are 100% the cause.

    • EarthShipTechIntern@lemm.ee
      link
      fedilink
      English
      arrow-up
      6
      ·
      3 days ago

      Repugnicunts own the white house & house because Democraps in power didn’t do their jobs the last four years. Russian influence in elections? Obvious, yet not abated by NSA. Misinformation by Fox & Facebook, X? Also obvious. Also not abated (let’s go after TikTok!).

      Blatant treason? No problem, we’ll let him take presidency after we DON’T CHECK THE VOTING IRREGULARITIES in VOTES COLLECTED BY THE LARGEST CONTRIBUTER TO TRUMP’S CAMPAIGN.

      DNC is a shit-heap.

      AOC & Sanders are lovely exceptions.

    • SoftestSapphic@lemmy.world
      link
      fedilink
      English
      arrow-up
      12
      arrow-down
      6
      ·
      3 days ago

      Democrats could have blocked this.

      This fact is worth aknowledging as we see more and more of these horrible laws pass.

      • JigglySackles@lemmy.world
        link
        fedilink
        English
        arrow-up
        8
        arrow-down
        1
        ·
        3 days ago

        They certainly are complicit and not putting up nearly enough resistance. Republicans are still the cause, and democrats are refusing to do anything effectual to stop it. I’d love to eject them all, but my point is that this isn’t “uncle sam”, it’s republicans. And it wouldn’t have happened if the Republicans hadn’t started it.

        • SoftestSapphic@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          ·
          edit-2
          3 days ago

          Everyone with eyes can see the Republicans are completely corrupt and primarily responsible.

          Standing by and watching fascism happen while you occupy the influential positions of power that can do something about it is just as bad, because that is only helping the Republicans by blocking resistance.

          Democrats need to stand the fuck up or quit so someone with fucking balls can take their job

        • SoftestSapphic@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          3 days ago

          Changing agreed upon congressional spending requires a law.

          By not forcing an arrest or even fighting the executive order congress is legitimizing and approving the order.

          • turmacar@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            3 days ago

            This is/was letting a contract expire. It’s not something that was brought up to the level of congress. Up until the last few years of supreme court decisions agencies were founded with broad powers in their domains, including discontinuing sub-programs.

            That’s how it’ supposed to work. None of this has been brought to a vote, which would give Democrats the opportunity to oppose it. For “some reason” congressional Republicans are continuing their prior strategy while being a majority and having the leadership of just, not doing things.

        • SoftestSapphic@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          1
          ·
          edit-2
          3 days ago

          Congress controls congressional spending.

          The Democrats should say this is tyrannical and tell the truth to the people that we are at war and we need to remove the Russian assets from power.

          I know you will keep making excuses for them to keep their power while doing nothing to help tho.

  • nightm4re@feddit.org
    link
    fedilink
    English
    arrow-up
    10
    ·
    2 days ago

    My European friends here: do whatever you can to make EUVD a viable alternative. It’s a vulnerability database led by the European Union Agency for Cybersecurity enisa. Since their website is relatively new, you can help by providing feedback though this survey. Yes, the CVE funding has been continued for another year. But a sustainable approach to vulnerability management cannot be dependent on a single government-owned / funded entity any longer! I wish the board members all the best in transferring CVE to a new umbrella organization, but now is a great time to also consider global alternatives.

  • PlantPowerPhysicist@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    67
    ·
    3 days ago

    The EU needs to start planning now (well, really, needed to start planning in 2016) to replace every critical system that relies in any way on the US government.

    If you think of money invested vs. return on government programs like this, the benefit is incredible. That it’s being discontinued is obvious proof that the US is run by the agents of its own destruction and cannot be relied upon in any way: not as a supplier of military equipment, or information technology, or economic codependency.

    • Basic Glitch@lemm.ee
      link
      fedilink
      English
      arrow-up
      16
      ·
      3 days ago

      They’re doing so much of this shit quietly, but when you start to put each piece together it should be frightening to anyone that doesn’t believe Russia is our BFF.

      In late Feb, just after the whole Zelenskyy White House visit, Hegseth issued an order to Cyber Command to halt all planning against Russia including cybersecurity offensive strategies.

      He gave the order to Commander Timothy Haugh, who is also head of the National Security Agency. Haugh told the outgoing director of operations, and cyber command begun putting together an official document of why this is a very bad idea.

      I missed this completely until yesterday, but it turns out that Haugh and his NSA deputy were both suddenly ousted from their positions less than 2 weeks ago.

      No reason was given they were just told “your services are no longer required.” Apparently Laura Loomer requested Trump have them removed and made some vague accusations against them bc they had been installed under Biden.

      I admit I hadn’t heard of CVE program before today. Since we are BFFs now and Russia is “totally not a threat” to the U.S., I guess it’s supposed to be ok because friends share everything. But wouldn’t this also make us incredibly more vulnerable to China and any other country?

      • samus12345@lemm.ee
        link
        fedilink
        English
        arrow-up
        3
        ·
        3 days ago

        wouldn’t this also make us incredibly more vulnerable to China and any other country?

        Yes, which is why Putin told Trump to do it.

        • Basic Glitch@lemm.ee
          link
          fedilink
          English
          arrow-up
          2
          ·
          edit-2
          3 days ago

          I’m just wondering how Trump squares an explanation for this with the fact that we’re in a technology war with China. Why would we make ourselves more vulnerable to them?

          I guess to clarify, it seems easier for Trump to make the argument to his base that everything he does to make us more vulnerable to Russia shouldn’t really be a big deal bc he has so much respect and trust for Putin.

          Most people (myself included) don’t really know about this program, but if cutting funding makes us more vulnerable to China and other bad actors, it seems like a point more Americans should be made aware of.

          • samus12345@lemm.ee
            link
            fedilink
            English
            arrow-up
            2
            ·
            3 days ago

            I think it’s because he’s a bigoted moron as well and believes that anything the government spends money on that doesn’t either directly enrich the oligarchs or suppress non-white cis males is bad.

  • TonyTonyChopper@mander.xyz
    link
    fedilink
    English
    arrow-up
    52
    arrow-down
    1
    ·
    3 days ago

    Right before Windows 10 loses security updates too, what a coincidence. Wonder what the Russians are working on…

  • sp3ctr4l@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    113
    ·
    4 days ago

    On the bright side, at least our upcoming American cyberpunk dystopia is now more likely to feature a greater prevelance of lone wolf, broke, two bit hackers as a semi-viable lifestyle/‘career path’…

    • barsoap@lemm.ee
      link
      fedilink
      English
      arrow-up
      10
      ·
      3 days ago

      It shouldn’t surpris too much given Mike Pondsmith’s general record of clairvoyance that NetWatch is a European Corp.

      And, no, “Vos videmus” totally isn’t a creepy motto. Based out of London, one could almost think that it’s the London CCTV system turned sentient AI.

      • sp3ctr4l@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        7
        ·
        edit-2
        3 days ago

        All that has to happen for a ‘Blackwall’ analagous scenario is enough undersea cables get cut/sabotaged.

        Then you’re looking at a much more localized internet, where actually having a reliable or high bandwidth connection to a very far away place requires you to either have an insane jerry rigged solution, or a lot of money to pay for an increasing valuable, still existing intercontinental line.

        Of course, we very much could also end up with a more intentionally constructed type of widespread firewalling as well… they already exist.

        China’s great firewall, tons of other countries that have internet and/or social media killswitches…

        … And we are already seeing massive bandwidth from corpo AI scrapers trying to harvest data to train their AIs leading to people making new ways to detect, block, and or trap them in infinite loops, to save their own servers from going down.

      • sp3ctr4l@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        7
        arrow-down
        2
        ·
        3 days ago

        … As soon as you find documents from the founding fathers addressing best practices and policies regarding cybersecurity, let me know.

  • Rose@slrpnk.net
    link
    fedilink
    English
    arrow-up
    38
    ·
    3 days ago

    I was, like, w-what CVE program. I don’t know of any “CVE” programs that could be shut down, so I don’t know what that abbreviation refers to.

    Unless…

    …oh no. Fuck. The actual CVE program? And they’re just gonna- Shit.

    What.

    How.

    I don’t know how many times I’ve said “America is fucked” when reading the news lately, and I should stop doing that, because that fact has now been so well established that there’s no need to elaborate.