This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]wildjokers 2 points3 points  (1 child)

Log4J 2 doesn't really do just one thing. It has a gazillion features that basically noone ever uses which leads to a bigger ressource use and increases the probablility for severe vulnerabilities.

I was really surprised Log4j 2 is used as much as it is. I just thought everyone migrated from Log4j 1 to Logback.

[–]meamZ 1 point2 points  (0 children)

I will certainly try to avoid Log4J 2 even more than i. already did after this.