Episode 303 - Log4j Christmas Spectacular!

<p><a href="https://twitter.com/joshbressers" rel= "nofollow">Josh</a> and <a href= "https://twitter.com/kurtseifried" rel= "nofollow">Kurt</a> start the show with the reading of a security themed Christmas poem. We then discuss some of the new happenings around Log4j. The basic theme is that even if we were over-investing in Log4j, it probably wouldn't have caught this. There are still a lot of things to unpack with this event, I'm sure we'll be talking about it well into the future.</p> <p><span style="font-size: 18pt;"><strong><span style= "text-decoration: underline;">Log before Christmas</span> poem</strong></span></p> <p>'Twas the night before Christmas, when all through the stack<br /> Not a scanner was scanning, not even a rack,</p> <p>The SBOMs were uploaded to the portal with care,<br /> In hopes that next year would be boring and bare</p> <p>The interns were nestled all snug at their beds;<br /> While visions of dashboards danced in their heads;</p> <p>The CISO in their 'kerchief, and I in my cap,<br /> Had just slept our laptops for a long winter's nap,</p> <p>When all of a sudden the pager went ack ack<br /> I sprang to my laptop with worries of attack</p> <p>Away to the browser I flew like a flash,<br /> Tore open the window and cleared out the cache</p> <p>The red of the dashboard the glow of the screen<br /> Gave a lustre of disaster my eyes rarely seen</p> <p>When what to my wondering eyes did we appear,<br /> But a new advisory and eight vulnerabilities to fear,</p> <p>Like a little old hacker all ready to play,<br /> I knew in a moment it must be Log4j</p> <p>More rapid than gigabit its coursers they came,<br /> And it whistled, and shouted, and called them by name:</p> <p>"Now, Log4Shell! now CVE! now ASF and NVD!<br /> On, CISA! on, LunaSec! on, GossiTheDog!</p> <p>To the top of the HackerNews! to the top of the wall!<br /> Now hack away! hack away! hack away all!"</p> <p>Like the bits that before the wild CDN fly by<br /> When they meet with a firewall, they mount to the sky;</p> <p>So up to