4 ms·
The problem with libraries is that they often contain so much functionality while you yourself might only need a single thing (and don't even realise all the st
by heipei 4y ago
The problem with libraries is that they often contain so much functionality while you yourself might only need a single thing (and don't even realise all the stuff the library is able to do). Whenever I had to patch systems due to some vulnerability my first thought was "Wait, why the hell is a <xxx> library even able to do that?"
- yen223 4y agoThe log4j2 vulnerability is probably a good example of this. How many systems running log4j2 actually uses the JNDI functionality that led to the exploit?