3 ms·
I'm not a cybersecurity expert, but i follow security news as i'm often working alongside secops teams. When i read here about Log4J, is was a real "Holy shit
by orwin 4y ago
I'm not a cybersecurity expert, but i follow security news as i'm often working alongside secops teams.
When i read here about Log4J, is was a real "Holy shit moment". It was so easy to use, it could've been a nebula exercise.
I contacted my PO asap, we found out that we had no inventory of what our VM were and what java versions were installed (worked at a bank btw). We then contacted the secops team, who just found out, and triggered all alarms. It was all hands on deck time. Quite a fun two weeks tbh.
- dylan604 4y agoWhy would your parole officer be concerned about some java vuln? Not familiar with the term PO in the way you are actually using it. What management level does that represent?
- asplake 4y agoProduct Owner (from Scrum)? Likely an org where dev teams must get permission from product people, who own the backlog. Less objectionably it might be the leader of a technical product.
- dylan604 4y agothanks. i guess it's just another of those buzzword bingo terms.
- orwin 4y agoIt means "product Owner". Basically someone who know the inside of the applications you're presenting, understand the tech debt and your release cycles, and discuss with the users about new features and potential issues. It's basically the same managment level as the tech lead/lead dev. I understand this sound like scrum/agile gibberish, but honestly this was like having a technical manager/salesman who could also help you debug stuff, probably the most usefull post of "agile at scale"