Uncle Sam abruptly turns off funding for CVE program. Yes, that one.

px_eliezer_

US government funding for the world’s CVE program – the centralized Common Vulnerabilities and Exposures database of product security flaws – ends Wednesday.

The 25-year-old CVE program plays a huge role in vulnerability management. It is responsible overseeing the assignment and organizing of unique CVE ID numbers, such as CVE-2014-0160 and CVE-2017-5754, for specific vulnerabilities, in this case OpenSSL’s Heartbleed and Intel’s Meltdown, so that when referring to particular flaws and patches, everyone is agreed on exactly what we’re all talking about…..

Not-for-profit outfit MITRE has a contract with the US Department of Homeland Security to operate the CVE program, and on Tuesday the group confirmed this arrangement has not been renewed. This comes as the Trump administration scours around the federal government for costs to trim.

MORE HERE:
https://www.theregister.com/2025/04/16/homeland_security_funding_for_cve/

COMMENT:
This truly is shit—but maybe the big companies such as Microsoft (and others) who both CAUSE the problems and BENEFIT from the solutions, should pay for it.

egeezer

px_eliezer_ aybe the big companies such as Microsoft (and others) who both CAUSE the problems and BENEFIT from the solutions, should pay for it.

This is a reasonable solution if done through an orderly and efficient transition where there is no break in continuity or quality of service to private and public stakeholders. However, that’s not what is happening. “Project management” is not in the lexicon of those who are making this decision.

px_eliezer_

egeezer “Project management” is not in the lexicon of those who are making this decision.

This is true, sad to say.

Donoreo

px_eliezer_ This truly is shit—but maybe the big companies such as Microsoft (and others) who both CAUSE the problems and BENEFIT from the solutions, should pay for it.

I suspect that is what the government wants.

urbanriot

px_eliezer_ i’m a little confused, I read this morning that they extended the funding… ?

Somewhat-Reticent

Here.

urbanriot

Somewhat-Reticent

Great link. So, lots of people having a meltdown over a non-event.

Looks like the funding is not turned off.

px_eliezer_

urbanriot So, lots of people having a meltdown over a non-event.

Looks like the funding is not turned off.

The funding WAS to expire today.

So at the very last second, sanity prevailed, and it was extended for 11 months (wow, couldn’t have been 12 months?)

I’m sure that in your own business, you try to plan carefully, avoid needless chaos, and not do things at the last minute.

Sparkchaser

px_eliezer_ The funding WAS to expire today.

So at the very last second, sanity prevailed, and it was extended for 11 months (wow, couldn’t have been 12 months?)

I don’t understand why some people think this daily juggling of “well everything” is good. Is this anyway to run a business or government.

If I pulled this crap in my last company, I’d be out the door very quickly.

mmmdonuts

urbanriot
Yep, I thought I heard the wahmbulance going by.

egeezer

px_eliezer_

px_eliezer_ So at the very last second, sanity prevailed, and it was extended for 11 months

This is the “Ready, FIRE!!, aim” management strategy:
Do something stupid.
Discover from others how stupid the action is.
Backtrack while claiming how smart you are.

I once contracted with a company whose CIO ran the organization like that. We would be in the middle of something when he would barge into the department screaming "MEETING!! MY OFFICE!! NOW!!. He would then demand immediate changes on some crap he’d read someplace (maybe an airline magazine? lol) When that went south, another “MEETING!! MY OFFICE!! NOW!!” to kill the previous edict while claiming he had never approved the changes. The guy made the pointy haired guy in Dilbert look brilliant.

Oh yeah - the company went bankrupt. I ended up with the job of considating their server loads onto the receivers’ system so they could sell or return the other systems.

px_eliezer_

egeezer I once contracted with a company whose CIO ran the organization like that.

You should see where that guy is now, out of curiosity.

All sorts of interesting possibilities.

px_eliezer_

Sparkchaser I don’t understand why some people think this daily juggling of “well everything” is good. Is this anyway to run a business or government.

Agree.

I don’t understand the 3000 Donuts guy either, sad.

egeezer

px_eliezer_ You should see where that guy is now, out of curiosity.

All sorts of interesting possibilities.

I occasionally looked him up, he never got another CIO slot, had a few IT related sales and middle mgt. gigs. I saw his obit a few years ago.

Kathy_9

Closing this discussion as it has run it’s course and is starting to veer off topic.

HFB1217

CVE program gets its funding back
The Topic is now A moot point it is in fact that it does not apply to the current situation any longer.
So Termination of Topic