4 ms·
The comments show that nobody can prove a reliable attack vector of DOS in 2.16
by hoffs 5y ago
The comments show that nobody can prove a reliable attack vector of DOS in 2.16
- heisenbit 5y agoThe risk for a denial of service by a malicious programmer are much lower than the DOS risk posed by a distracted programmer. Looking at the typical attack surface in an enterprise app a distracted programer can stumble on to trigger a DOS the risk of stumbling on the log4j recursion by accident is minuscule.