Hacker News Reader

If you sell software to the government you do. Which happens to be the biggest purchaser of software and touches others by proxy. E.G. you might provide software to Boeing who sells to the government, therefore Boeing has a legal obligation and requires all its suppliers to provide SBoMs. Or Dell, or HPE, or Cisco or literally every software / service provider.

View on HN

This is not true either.

I own a defense company, work on security stuff, I can assure you it is.

Funny. So do I. Military specs are governed through something call MIL-STD, not through NIST unless it directly references it. For instance BSSC 2005 gives guidelines on coding standards for Java, but no one follows them.

If you were a contractor then you would know all specifications are waived unless specifically designated by your MOL and documented in GSA/SOW.

So here is one of these internet know it all's that doesn't know anything.

Reply on news.ycombinator.com