AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Using a Logging Library on a Washing Machine?
Doris: This is a great vulnerability of just injecting random shit in your application by using one of the most pervasive, most ubiquitous logging libraries out there. It's worth at least skimming for 15 minutes, even if you don't think you have java somewhere. All it takes is a specially crafted little text and something that will eventually lead to a logging system somewhere that just happens to be running something java. And then, boom, you see lalaly. So anyway, the des is bad, internet fire kind of a problem. Cloud flare are actually automatically blocking some of these attacks for us because theywereaready seeing em in the wild before anyone even knew that it existed.