On: As US vuln-tracking falters, EU enters with its own security bug database

[DrillShopper]

Yes, but who in industry is going to expect it to be there in the future given what the current administration is doing?

[tptacek → DrillShopper]

MITRE could just take the existing database and pass a hat around to industry and keep the current program going.

[DrillShopper → tptacek]

I will defer to your expertise in that regard, but the company I work for definitely wouldn't pony up in that scenario.

[tptacek → DrillShopper]

They won't need to. Microsoft or Google could fund it with pocket change. Much bigger projects than the NVD are open and funded by industry.