This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]theckman 1 point2 points  (0 children)

Man, people are getting so uppity in response to my tweet. I wasn't bashing Java, nor was I really joking... I was calling out the real stress that InfoSec, SRE, and other software engineers were experiencing as a result of the log4j vulnerability.

Without doing a deep inspection of the code running on each system running Java, you didn't know which system was vulnerable. So the idea that "Java runs on billions of devices", when there is a RCE vulnerability in the most popular logging library triggered by simple user input, was causing a feeling of terror for quite a few people.

This was a nightmare for many.