4 ms·
As a cybersecurity person, what do you do about log4j? 1. Try to identify if you are vulnerable 2. Inform people in your company 3. Contact vendors of vulner
by bluedino 5y ago
As a cybersecurity person, what do you do about log4j?
1. Try to identify if you are vulnerable
2. Inform people in your company
3. Contact vendors of vulnerable products and ask for a patch
4. Have sysadmins install said patch
Cybersecurity people don't do anything. You're not patching. You're not finding the new flaws. You're reactively trying to solve problems when they make the news.
- deleted 5y ago[deleted]
- ziddoap 5y agoThis reductionist logic can be applied to anything (i.e. is meaningless). This is actually a bit of a fun exercise! What do programmers even do? 1. Client tells them what they want solved. 2. Stack overflow has code examples for these problems. 3. IDE tells you what will compile, what wont, even highlights stuff for you (programmer just copy/pastes). 4. Compiler makes the program, and warns you if it doesn't work. If it doesn't work, go back to step 2. Programmers don't do anything. See how dumb that sounds when you skip over a bunch of the minutiae? Or when only looking at a single event? Or generalize to the point of nothingness?