Hacker News Reader

I can't figure out why the hue and cry wasn't raised until the very last minute. Did they not know a month ago that they were running out of time? Is it standard practice for the government not to say they're going to extend the contract until the day beforehand or something?

View on HN

I was at VulnCon last week, and an NIST representative said that there were no plans to cut CVE funding.

Right now, yes. You can pretty easily have a scenario where you’re talking to the agency you’re working with and they’re saying “we want to renew this, but we don’t know if they’ll give us the money in the end”.

So you’ll get a bunch of “hopefully this week” up until it expires.

Reply on news.ycombinator.com