jeff 👨💻@programming.dev to Programming@programming.devEnglish · 1 year agoWhat are some examples of xkcd 2347?xkcd.comexternal-linkmessage-square97fedilinkarrow-up1198arrow-down12file-text
arrow-up1196arrow-down1external-linkWhat are some examples of xkcd 2347?xkcd.comjeff 👨💻@programming.dev to Programming@programming.devEnglish · 1 year agomessage-square97fedilinkfile-text
minus-squaresillypuddy@mander.xyzlinkfedilinkEnglisharrow-up8·1 year agohttps://theconversation.com/what-is-log4j-a-cybersecurity-expert-explains-the-latest-internet-vulnerability-how-bad-it-is-and-whats-at-stake-173896
minus-squareJackbyDev@programming.devlinkfedilinkEnglisharrow-up6·1 year agoBasically it involved parsing JNDI stuff which involved grabbing remote code (but that was a niche feature of JNDI in the Dev’s defense). Basically, you may think it is just something like variable substitution but can involve much crazier stuff
What was it?
https://theconversation.com/what-is-log4j-a-cybersecurity-expert-explains-the-latest-internet-vulnerability-how-bad-it-is-and-whats-at-stake-173896
Basically it involved parsing JNDI stuff which involved grabbing remote code (but that was a niche feature of JNDI in the Dev’s defense). Basically, you may think it is just something like variable substitution but can involve much crazier stuff
this is cool