Replacing CVE

Viewed 35
The discussion centers around the inadequacies of the current Common Vulnerabilities and Exposures (CVE) system and potential solutions to improve software vulnerability reporting and accountability. One proposed solution involves creating a new professional certification for software engineers that would impose rigorous standards for vulnerability reporting. This idea raises concerns about the political challenges of implementing such a system, the possible friction it could introduce, and whether it might effectively resolve the existing issues with CVE. Comments reveal strong opinions on the necessity of accountability for software engineers and the complexities of creating a comprehensive replacement for CVE. There is skepticism about reinventing the wheel versus improving the existing system, with a desire for more significant improvements in vulnerability communication rather than merely adding layers of bureaucracy.
0 Answers