4 ms·
Then again, if Log4j wasn't open source, the NSA could still run said tool while most of these bugs would go completely unfound.
by xvector 5y ago
Then again, if Log4j wasn't open source, the NSA could still run said tool while most of these bugs would go completely unfound.
- mschuster91 5y agoThe current bug was either found or first exploited by Minecraft trolls, to bring down servers and clients via chat. If you want to find issues in a code library, embed it somewhere in the hot code paths of a game or DRM system to maximize the number of eyeballs looking at every single instruction.
- stjohnswarts 5y agoHonestly there's an excellent chance they already discovered it and are using it right now, or at least up til the past week or so.