4 ms·

Prove secure to a corporate procurement process. Not a formal logic proof. Any use of Java will trigger additional diligence work to prove it does not use vuln

by eli 4y ago

Prove secure to a corporate procurement process. Not a formal logic proof. Any use of Java will trigger additional diligence work to prove it does not use vulnerable log4j. So in this sense almost anything else is better.

ilyt 4y ago
That's like 15 minutes of work tho
- richbell 4y ago
  Perhaps — explaining that to people in procurement and convincing them is months of work. Corporate procurement doesn't actually care about the risk in many cases, they care about having someone to blame.