5 ms·
Good satire. Code can be art too. Everyone here is taking this way too seriously.
by madmod 5y ago
Good satire. Code can be art too. Everyone here is taking this way too seriously.
- dimgl 5y agoYeah I thought this was pretty funny. I AM trying to understand why people are so mad though.
- csande17 5y agoEnterprise Java developers are scared to face the underlying human and cultural factors that led to such a massively boneheaded security vulnerability being possible.
- pas 5y agoAhaha. Unfortunately they are not. As in they don't care enough to fear or face it.
- pjmlp 5y agoEnterprise Java developers are ex-CORBA/DCOM/Smalltalk/Common Lisp developers actually, now busy building scalable Kubernetes clusters with Go to process CSV files with proper failover mechanisms.
- dimgl 5y agoLOL this one got an audible chuckle out of me
- mrighele 5y agoReal Enterprise Java developer are probably still using log4j 1.x so are unaffected by the bug.
- lordfoom 5y agocan confirm :D
- laurent92 5y agoLet’s inventory other such jokes. Google Annotation Gallery, annotations for things which shouldn’t have been coded: https://code.google.com/archive/p/gag/ https://code.google.com/archive/p/gag/ VanillaJS, the most used JS library with famous users such as Google, Apache and even the NASA itself. http://vanilla-js.com/ http://vanilla-js.com/ FizzBuzzEnterpriseEdition, the correct Java implementation of the interview question: https://github.com/EnterpriseQualityCoding/FizzBuzzEnterpriseEdition https://github.com/EnterpriseQualityCoding/FizzBuzzEnterpris...
- maccolgan 5y agoFizzBuzzEnterpriseEdition and its issues are fucking gold.
- chakkepolja 5y agoAlso hello-world.rs
- CraigJPerry 5y agohttps://github.com/mTvare6/hello-world.rs https://github.com/mTvare6/hello-world.rs
- christophilus 5y agoThe quotes are excellent. As are the rockets everywhere. “Because it’s typically typed, rust() catches errors at compile time. [...] Also, it compiles code down to machine learning, allowing for extra efficiency.”
- star-trek-fleet 5y agoYou mean the the reaction to jndi logging RCE for log4j has been way too seriously? What's the basis of this assessment? Logging library fetching remote code and inject to local application runtime. Seems a pretty bad idea for any people with decent amount of programming experience, right? Or I missed something.
- csande17 5y agoPeople are mad that someone created a Go library mocking the (obviously terrible) log4j behavior. How dare you make fun of the hardworking log4j developers, or the programming community that accepted their outrageously overcomplicated library without question? They're trying their best!
- crest 5y agoI'm sure the log4j developers have just as much potential as the code they're sort of maintaining. If you let them into your codebase you get federated remote code updates for free.
- Ygg2 5y agoHonestly, I'm a bit miffed. It's a damned if you do, damned if you don't scenario for OSS. Don't add feature X that other log library might add or has added, your lib is bad. Add a feature X that other log library has, now you support it for the lifetime of universe. Oh and RCE might happen. It all starts with little changes. Allow us to show colors in console... Allow us more formatting options... We need to display remotely added class... We need JNDI access...