Hacker News Reader

Comment by saulpw | Hacker News Reader

Okay, so what's your proposal (or any proposal) to fix this funding disaster? As a technical person I don't know how to affect the political process, and am thus disinclined to participate meaningfully. People with political ability and/or power have bigger problems to deal with right now, and also seem unable to affect the current political process. So what options do we have but to try our best, even if those ways are ultimately doomed?

View on HN

https://euvd.enisa.europa.eu/

This one is funded by the EU and accepts direct submissions. It’s probably the best replacement: state-backed, long-running, and reliable.

My understanding of CVE is superficial at best. I thought it was just an acronym publicly identifying vulnerabilities; I didn't realise there was a political structure behind it all.

While the article presents good food for thought, certification isn't a practical solution to the problem at hand. This database seems like a reasonable alternative.

It is “just” that, but: How are numbers assigned? How can others find details? Who determines when these details are public? (note: full CVE details can be used to exploit critical software) If they’re not always public, who gets to see them? And who handles that dissemination? Who takes care of duplicates?

Lots of work does go into this, even if it’s “just” an identifier.

Moving to more stable financial markets, away from the United States, would be a start.

>As a technical person I don't know how to affect the political process

Vote.

This is a vapid answer, like "write your senator". Of course I do, every chance I get. It doesn't seem to have meaningfully affected our political process.

It isn't. I'll expand on it. Tell your wife, your cousin, your bartender why you voted. Tell them how this CVE system is critical, and why they should care about voting for people that truly understand this. If you vote and influence others to vote, you're solving the problem fully and directly.

Voting is all but useless in deep-(any color) states though, that's the problem. I mean... yes, it's the decent thing to do, but in the end it's wasted effort in the American political system.

That's only true if you think "vote" means "vote once every 4 years, for the President".

Even if the only political action you ever do is informed voting, if you're voting in every election, knowing as much as you can about the candidates, then you have a real chance of starting to move the needle.

Reply on news.ycombinator.com