this post was submitted on 16 Apr 2025
366 points (100.0% liked)
Technology
71761 readers
4041 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
can they put cve on a blockchain? or some publicly auditable distributed database?
its worrisome that all it takes is a funding cut to shut it down.
And a blockchain helps to solve which part of the problem? Some were working on mirroring all data to a git repository. In theory, that allows for easy access on all the data, versioning (with commits) and - through forks and merge requests - collaboration and distribution. Also git is a distributed repository that clones the whole history to your local drive.
https://github.com/MITRE-Cyber-Security-CVE-Database/mitre-cve-database
But with the announcement of the cve foundation, I don't know whether they will really import all the data in this git repository.
No
what, that I do not think that?
what are you trying to argue?
oh no.
You asked me "Do you think they won’t need funding on the blockchain?" No, I don't think that.
I do think they need funding.
I do not think blockchain would solve any funding issues. Its more so about the information and it's validity in a decentralized network. I realize blockchain is almost exclusively associated with cryptocoins, but it seems like there should be other use cases for the technology. It would be cool to have a centralized ledger of CVEs where the information is agreed upon by partners; be it various vendors, governments, and institutions.
I am definitely not a blockchain expert, or even a novice. I'm probably closer to the people that don't know how the regular web works. With the rise of de-centralized/federated social media an communications, I'd think people would be interested in a similar framework for something like the CVE database. I'm not say blockchain is the answer for this issue either, it was just an idea. An idea that people are not big fans of apparently, and that's fine. I think a different commenter mentioned using git, so there's another idea.
Regardless of the method, I see de-centralization as a benefit and hopefully other do as well.