this post was submitted on 16 Apr 2025
366 points (100.0% liked)

Technology

69947 readers
2137 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
top 14 comments
sorted by: hot top controversial new old
[–] [email protected] 34 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

The world really needs to work on decoupling their dependency on the US especially for something this vital. This should already have been a UN funded and run program at a minimum.

[–] [email protected] 4 points 3 weeks ago

The UN has too many programs to handle and a limited budget

[–] [email protected] 18 points 3 weeks ago

It’s the fascists playbook but the fucker can’t read properly.

[–] [email protected] 5 points 3 weeks ago (3 children)

can they put cve on a blockchain? or some publicly auditable distributed database?

its worrisome that all it takes is a funding cut to shut it down.

[–] [email protected] 18 points 3 weeks ago

And a blockchain helps to solve which part of the problem? Some were working on mirroring all data to a git repository. In theory, that allows for easy access on all the data, versioning (with commits) and - through forks and merge requests - collaboration and distribution. Also git is a distributed repository that clones the whole history to your local drive.

https://github.com/MITRE-Cyber-Security-CVE-Database/mitre-cve-database

But with the announcement of the cve foundation, I don't know whether they will really import all the data in this git repository.

[–] [email protected] 6 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

...and what is gonna keep it up if it goes to the blockchain? Air? Do you think they won't need funding on the blockchain? Lol

[–] [email protected] 1 points 3 weeks ago (1 children)
[–] [email protected] 2 points 3 weeks ago (1 children)
[–] [email protected] 1 points 3 weeks ago (1 children)

what, that I do not think that?

what are you trying to argue?

[–] [email protected] 2 points 3 weeks ago (1 children)

Your response read as "No, they wouldn't need funding" lmao

[–] [email protected] 1 points 3 weeks ago (1 children)

oh no.

You asked me "Do you think they won’t need funding on the blockchain?" No, I don't think that.

I do think they need funding.

[–] [email protected] 1 points 3 weeks ago (1 children)

How is the blockchain gonna solve that then? If anything it will make it more difficult since even more people don't know how blockchains work than people who don't know how regular web works.

[–] [email protected] 1 points 3 weeks ago

I do not think blockchain would solve any funding issues. Its more so about the information and it's validity in a decentralized network. I realize blockchain is almost exclusively associated with cryptocoins, but it seems like there should be other use cases for the technology. It would be cool to have a centralized ledger of CVEs where the information is agreed upon by partners; be it various vendors, governments, and institutions.

I am definitely not a blockchain expert, or even a novice. I'm probably closer to the people that don't know how the regular web works. With the rise of de-centralized/federated social media an communications, I'd think people would be interested in a similar framework for something like the CVE database. I'm not say blockchain is the answer for this issue either, it was just an idea. An idea that people are not big fans of apparently, and that's fine. I think a different commenter mentioned using git, so there's another idea.

Regardless of the method, I see de-centralization as a benefit and hopefully other do as well.