Episode 302 - Log4j is a mess

<p><a href="https://twitter.com/joshbressers" rel= "nofollow">Josh</a> and <a href= "https://twitter.com/kurtseifried" rel= "nofollow">Kurt</a> talk about the same topic everyone is talking about, Log4j. This episode was recorded on the Wednesday after the first Log4j issue. We point out all the gaps and difficulties for the defenders. The situation has gotten worse since then.</p> <p>Good luck to everyone dealign with this thing</p> <h2>Show Notes</h2> <ul> <li><a href= "https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1002xxx/GSD-2021-1002352.json"> Log4j GSD entry</a></li> <li><a href= "https://hypixel.net/threads/psa-there-is-a-fatal-remote-code-execution-exploit-in-minecraft-and-its-by-typing-in-chat.4703238/" rel="nofollow">Minecraft server discussion</a></li> <li><a href= "https://github.com/apache/logging-log4j2/pull/608">Log4j GitHub issue 608</a></li> </ul>