Shai Almog
3,091 viewsDetect, Track, Verify Security Issues & 0-Days
Learn about major milestones in app security: finding the issue, evaluating a breach, proving it, and validating the fix!
Category
Security
Shai Almog
3,091 views
Nicolas Frankel
2,791 viewsTreat Security as a Risk
Security is the poster child of a Non-Functional Requirement: most people don't care until the proverbial matter hits the rotary propeller.
Jadon Ortlepp
3,588 viewsThe State of Java in 2022
While more than 26 years old, Java is still one of the top three most popular programming languages. Find out how to find out why and how!
Nicolas Frankel
3,726 viewsYou're Running Untrusted Code!
I'm afraid the deprecation of the Security Manager just added several lines to that risk, all linked to running untrusted code.
Karsten Silz
3,187 viewsLog4Shell Shows The Need for "Trustworthy Java"
I think the Java community handled this crisis poorly and needs to do much better next time. What do you think?
Brian Vermeer
6,380 viewsJava Logging: What To Log & What Not To Log?
A pragmatic guide to Java logging—what should we log, what shouldn’t we log, and how to implement Java logging properly.
Roy van Rijn
3,667 viewsLog4Shell / Leak4J
Over the last couple of days (and nights) I’ve been studying the new (extremely dangerous) vulnerability in log4j2 called Log4Shell.
Erik Costlow
11,213 viewsLog4j2 Isn’t Killing Java
Java developers typically choose from several logging systems or facades. Many of these logging frameworks have grown to work together.
Brian Vermeer
6,514 viewsLog4Shell: Critical Log4j RCE Vulnerabilty -- Update to Version 2.15.0
On Dec.10, 2021, a new, critical Log4j vulnerability was disclosed: Log4Shell. All current versions of log4j2 up to 2.14.1 are vulnerable.
Geertjan Wielenga
4,204 viewsApache Log4j CVE-2021-44228
Everything foojay collected on Log4Shell (CVE-2021-44228): the RCE itself, the LDAP attack vectors on recent JDKs, how to find out what …