GeistHaus
log in · sign up

Cull your dependencies

tomrenner.com

Anyone writing code professionally in December 2021 will remember the “fun” of the Log4J vulnerability. For those that weren’t - this was a critical security error that allowed attackers to run any code they wanted on your servers. The root cause was a logging library, Log4J, that is used by most projects that are writting in Java. It’s usually used to write code something like: log.info("Process completed successfully"); which will then appear in your logs, allowing you to track your application’s behaviour. Pretty innocuous stuff.

0 pages link to this URL

No pages have linked to this URL yet.