Hacker News Reader

> It was to the advantage of the US and allies to coordinate and lead in tracking and fixing such errors.

From what I understand of the article, none of these allies were funding it.

> Multiple countries, companies, and individuals contributed finding and fixing bugs.

Clearly that itself isn't enough. Someone has to pay for maintaining this service. It appears that no one other than USA spent money in funding it.

View on HN

Why would other companies pay for it if they had never been asked?

Why would it be shut down without asking for others to fund it, if it's some sort of burden on the US?

Programs like this pay for themselves many times over. There are only two reasons for cutting this: absolute idiocy, or active sabotage of the US.

Almost every other western country does fund their own databases, CVE was just significant because its the one central source of truth. its like a standard. Instead of having to coordinate with dozens of different registries every time you publish a vulnerability you just communicate with one instead.

Researchers also don't directly talk with MITRE they go through one of the intermediaries that assigns the number.

Reply on news.ycombinator.com