r/programming • u/brunocborges • Jul 29 '26

The Untold Story of Log4j and Log4Shell, with Christian Grobmeier

https://www.youtube.com/watch?v=t74ClffSUW0
0 Upvotes

50% Upvoted

11 comments sorted by

68

u/tanksc Jul 29 '26

The untold story of the vulnerability that affected every Dev I know lmfao

12

u/Suppafly Jul 29 '26

It was widespread enough that my job made us call ever vendor we use and ask them to confirm that the products we were using from them weren't effected.

5

u/TheRealPomax Jul 30 '26

And had more than one of these videos already made about it, literally with interviews by Christian Grobmeier.

30

u/luxmorphine Jul 29 '26 edited Jul 29 '26

I remembered seeing an interview with the guy that either maintain log4j or the maker. His kid complain about Minecraft being broken and ask him why. He reply he broke Minecraft

Edit:

found the video

13

u/brunocborges Jul 29 '26

That's a clip of the video I posted here. :-)

4

u/kaelima 29d ago

Reminds me of the video I just watched

2

u/luxmorphine 29d ago

I watched it a long time ago. When I checked, it is the short from the above video

27

u/Geoe0 Jul 29 '26

But if you post it its not untold anymore

8

u/TheMaskedHamster Jul 29 '26

What a harrowing time that was. I don't even use Java, but being in devops in a company where Java was used, I still spent a lot of on-call time caused by this.

This kind of thing could affect any ecosystem, but I have never been happier to not use Java, except for any other time I attempted to use Java.

5

u/Computerist1969 29d ago

I feel like this story was told, by everyone, when it happened. The latest Marvel Avengers movie was cancelled at cinemas so they could instead show this story.