• Activity
  • Votes
  • Comments
  • New
  • All activity
    1. MITRE support for the Common Vulnerabilities and Exposures (CVE) program will expire tomorrow

      A letter to CVE board members posted to bluesky a few hours ago reveals that MITRE funding for the Common Vulnerabilities and Exposures (CVE) program is about to expire. Haven't found any good...

      A letter to CVE board members posted to bluesky a few hours ago reveals that MITRE funding for the Common Vulnerabilities and Exposures (CVE) program is about to expire. Haven't found any good articles that cover this news story yet, but it's spreading like wildfire over on bluesky.

      Of course this doesn't mean that the CVE program will immediately cease to exist, but at the moment MITRE funding is absolutely essential for its longterm survival.

      In a nutshell CVEs are a way to centrally organize, rate, and track software vulnerabilities. Basically any publicly known vulnerability out there can be referred to via their CVE number. The system is an essential tool for organizations worldwide to keep track of and manage vulnerabilities and implement appropriate defensive measures. Its collapse would be devestating for the security of information systems worldwide.

      How can one guy in a position of power destroy so much in such a short amount of time..? I hope the EU will get their shit together and fund independent alternatives for all of these systems being butchered at the moment...

      Edit/Update 21:10 UTC:
      It appears Journalist David DiMolfetta confirmed the legitimacy of the letter with a source a bit over an hour ago and published a corresponding article on nextgov 28 minutes ago.

      Edit/Update 21:25 UTC:
      Brian Krebs also talked to MITRE to confirm this news. On infosec.exchange he writes:

      I reached out to MITRE, and they confirmed it is for real. Here is the contract, which is through the Department of Homeland Security, and has been renewed annually on the 16th or 17th of April.
      MITRE's CVE database is likely going offline tomorrow. They have told me that for now, historical CVE records will be available at GitHub, https://github.com/CVEProject

      Edit/Update 21:37 UTC:
      Abovementioned post has been supplemented by Brian Krebs 5 Minutes ago with this comment:

      Hearing a bit more on this. Apparently it's up to the CVE board to decide what to do, but for now no new CVEs will be added after tomorrow. the CVE website will still be up.

      22 votes
    2. What programming/technical projects have you been working on?

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's...

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's interesting about it? Are you having trouble with anything?

      11 votes
    3. What programming/technical projects have you been working on?

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's...

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's interesting about it? Are you having trouble with anything?

      7 votes
    4. What programming/technical projects have you been working on?

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's...

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's interesting about it? Are you having trouble with anything?

      15 votes
    5. How can I prevent my work computers turning my home into an oven?

      [Edit] Details on the plan as it stands are here, potentially using one of these heat pumps. Looking for advice before the weather starts to warm up! I'm running multiple GPUs for dev work in my...

      [Edit] Details on the plan as it stands are here, potentially using one of these heat pumps.


      Looking for advice before the weather starts to warm up! I'm running multiple GPUs for dev work in my small home office, and it's pretty much equivalent to having a fan heater running all day. Right now that's actually a bonus, but it really won't be in a couple of months.

      The big heat generating components are all water cooled - partly just to fit them in a sensible amount of space, and partly because I figured I'd end up with exactly this problem and being able to physically pipe the heat elsewhere (ideally outside) would probably be necessary. The bit I'm trying to figure out now is how to actually make that happen...

      Ideas so far:

      • Stick an air duct on the back of the radiator and hang the duct out of the window: straightforward but messy, may be counterproductive depending how hot it is outside and how well I can rig up some kind of baffle between the open window and the duct.

      • Put the whole radiator outside and drill a couple of small holes in the wall for the pipes: this was my first thought, but PC radiators and fans definitely aren't rated for outdoor use, and I'm not sure where to start looking for something that would be designed for that while still being suitable to hook up to the computer waterblocks. I'm also concerned about condensation on the electronics if the coolant gets below indoor ambient temperature overnight.

      • Set up some kind of actual exterior radiator (or heat pump?) outside, and use a heat exchanger between that and the PC cooling loop: seems more like the "proper" way to be doing this, but it's well outside my area of expertise and feels like there would be a lot of potentially expensive stumbling blocks. Also still has the condensation problem, I think.

      • Just crank up the air conditioning: I'm not actually sure if the unit I've got has enough capacity, and it definitely seems wasteful to heat up the air and then use more energy cooling it again rather than dumping the heat directly outside, but maybe I'm wrong there!

      I'm in a kind of awkward middle ground: I'm running enough hardware that this is getting to be an issue beyond what you'd get with normal end user setups, and I'm willing to put some money into fixing it (it's affecting my job and my home, after all!), but I'm self employed and nowhere close to the industrial or datacenter scale that tends to come up when searching for solutions.

      Has anyone dealt with this themselves, or come across small office/homelab scale solutions that might work?

      20 votes
    6. What programming/technical projects have you been working on?

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's...

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's interesting about it? Are you having trouble with anything?

      13 votes
    7. What programming/technical projects have you been working on?

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's...

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's interesting about it? Are you having trouble with anything?

      14 votes
    8. How hard would it be to learn to code a Discord bot?

      I've got a notion to put some of my extra energy into learning to code. I'm familiar with EXTREME basics - I did some coding in BASIC and Python when I was younger ("Hello world" type stuff, and...

      I've got a notion to put some of my extra energy into learning to code. I'm familiar with EXTREME basics - I did some coding in BASIC and Python when I was younger ("Hello world" type stuff, and some futzing around with my Ti calculators programming capabilities) and while I had a pretty good knack for it I never developed it further.

      I'd like to use this as a chance to create something useful for me - a discord bot for my server. We have a handful of bots doing a few odds and ends, and I'd like to try and work something out to consolidate things. That's getting a bit ahead of myself though - initial scope would be simple: have the bot do a simple task like counting +rep points, or something silly like telling a joke.

      I don't really have any idea of where to start - what resources I need, what language to use, or really anything about how this all works. Any assistance at all would be welcome!


      To be clear - I want to learn to code, and specifically I want to learn in a way where it is immediately applicable and useful in a context I care about.

      20 votes