wampus

joined 1 month ago
[–] wampus@lemmy.ca 1 points 1 week ago (1 children)

Sure, though that's part of the problem that the States is whining about. US taxes paid for the service, which lots of other nations/foreign companies used.

Things like Libraries require taxes to operate. You'd likely be annoyed if you were struggling, and then found out your gov was using your taxes to pay for a bunch of foreign countries to have libraries. And then you find out that those foreigners are able to use those libraries to make good money, which they don't use to support their libraries, cause the States is already covering it. So you're paying taxes, and struggling to do so, so that EU companies can reap profits and live comfy.

And yes, charge a fee. That's basically what I've said, no? That there's a value add, and that there are 'professionals'/companies using it who aren't paying for that value add. So something like a fee for frequent pulls against the vuln feeds, to replace whatever funding the US gov was giving, would make sense to me. though I suppose this has now been kicked down the road till next year.

[–] wampus@lemmy.ca 0 points 1 week ago (4 children)

Yeah, but that's sort of the point I was making.... it was a data repository used by "thousands and thousands" of security professionals and organizations. So people who were generating revenue off of the service. I mean, they're professionals, not hobbyists / home users.

I'm not an American, but in terms of everything running like a company/for profit, I'd say that its best if things are sustainable / able to self-maintain. If the US cutting funding means this program can't survive, that's an issue. If it has value to a larger community, the larger community should be able to fund its operation. There's clearly a cost to maintaining the program, and there are clearly people who haven't contributed to paying that cost.

In terms of going back to whatever, the foundation involved is likely to sort out alternative funding, though potentially with decreased functionality (it sounds like they had agreements to pay for secondary vulnerability report reviews, which will likely need to get scaled back). Maybe they'll need to add in a fee for frequent feed pulls, or something similar. I wouldn't say it's completely toast or anythin just yet.

[–] wampus@lemmy.ca 29 points 1 week ago (8 children)

I'm honestly not totally sure what to think about this one, though I recognise that it's a big shift/likely a negative overall result.

Reason I'm humming and hawing, is that there are lots of expensive cybersecurity type 'things' that rely on the CVE system, without explicitly paying in to that system / supporting it directly, from what I recall / have seen. Take someone like Tenable security, who sell vulnerability scanners that extensively use/integrate with the CVE/NVD databases.... companies pay Tenable huge amounts of money for those products. Has Tenable been paying anything into the 'shared' public resource pool? How about all those 'audit' companies, who charge like 10-30k per audit for doing 'vulnerability / penetration tests'.

IT Security has been an expensive/profitable area for a long time, while also relying on generally public/shared resources to facilitate a lot of the work. Maybe an 'industry' funded consortium is the more appropriate way to go.

[–] wampus@lemmy.ca 8 points 1 month ago

Very difficult, as most traded goods pass through US boundaries via train/truck.

More "regular" trade agreements between individual states is generally more likely going forward I imagine, but the sort of integrated supply chains that we've all benefited from in North America for like.... decades and decades... is pretty well toast.

Eg. the US wants to build their own cars, in country. This means Canada and Mexico will likely also need to build their own cars, in country. Mexico has a bit more of an opportunity to build up integrated supply chains with countries in south america, though they tend to be a bit less stable -- the proximity is a win. It'd be really cool to see if they did though -- not sure what sorts of free trade agreements are around in the south, honestly.

Canada is busy trying to shore up agreements/trade with areas like asia and europe, as those are 'sorta' the same distance/calculus as shipping things via sea to mexico / south america.

It'd also be interesting if the waning of the US hegemony results in more western countries trading with traditionally 'blockaded' countries. Cuba has long been a Canadian vacation spot, but trade with Cuba has been limited due to US pressure. Given the current state of things, I don't see why Canada wouldn't increase trade there. And given the state of Cuba currently, it could be really beneficial for both country's people.

[–] wampus@lemmy.ca 3 points 1 month ago

Thanks, appreciated.

[–] wampus@lemmy.ca 7 points 1 month ago (2 children)

Silly question perhaps, but I haven't tripped across it on the site for Revolt -- is there a relatively straight forward server version for self-hosting, or is it just that the source is on github and you can compile it in theory if you feel like goin through that process... ?

[–] wampus@lemmy.ca 10 points 1 month ago (2 children)

That was the brits. People always say it was Canada, but it wasn't. The guys in charge of that raid were in Canada for less then a year, and died later on in the same year they burned the WH - the leaders had spent most of their time on campaigns in EU / northern africa. The troops were all trained in the uk. Canada wasn't even a 'country' for decades after that event -- there's no way we had our own trained army/generals involved. Hell, the (great?) granddaughter of one of the two generals who did it, is Olivia Wilde -- from her scottish roots (Cockburn). So not even the guys kids/descendants were Canadian -- they became US people in Hollywood.

Lotta Canadians like to take credit for it though, but realistically it wasn't us.

[–] wampus@lemmy.ca 243 points 1 month ago (10 children)

It's starting to seem like Canada should issue a travel advisory against going to the USA.

In some ways I hope it doesn't come to that. In others .... I mean, I'd win a friendly bet if it happened, so there's that.