Originally it was the other assumption that was challenged, because experience shows that being too big is one of the major reasons for a lot of problems with legacy software. Replacing too few systems (1) with too many (100+) might not be the best solution, of course.
2
Stefan Tilkov retweeted
I know everyone has already posted this, but offensive security is seriously impressive these days. I’m sure your waf regexps are gonna save you though…. googleprojectzero.blogspot.c…
2
4
10
Stefan Tilkov retweeted
My kids just asked why there was a Minecraft update with no features and what a “Log4J” was, and I have been preparing my whole life for this.
I had to start at the beginning with C format strings. I should be able to get to Java and jar files by midnight.
104
1,944
130
12,417
Stefan Tilkov retweeted
Wie läuft so eine #iSAQB Advanced Level Prüfung eigentlich ab? Das erfahrt ihr morgen ab 12.15 Uhr im #INNOQTechnologyLunch. Schaltet ein, denn @Teapot4181 @ichaos1985 @ewolff @GerritBeine beantworten all eure Fragen 👉 meetup.com/de-DE/INNOQ-Techn…
6
6
Stefan Tilkov retweeted
(2/3) I recommend reading this post from #elasticsearch (thanks to @dobermai for pointing me to it) spinscale.de/posts/2020-04-0… and consider how deeply modularized (in terms of dependencies) our software is. There is so much we pull in with a simple statement in gradle/Maven.
1
5
13
It’s still fascinating how something that was at least acceptable enough initially, and worth maintaining compatibility for since forever, is now such an obviously bad idea. Hindsight is genius, as usual, but still …
4
1
1
53
Stefan Tilkov retweeted
You mean the behavior as clearly documented since Java 1.0 (1996)?
And with an alternative, java.net.URI, since Java 1.4 (2001)?
6
4
39
Stefan Tilkov retweeted
If you're surprised about the log4j vulnerability, just wait until you hear what happens when you put a java.net.URL into a hashtable
25
294
114
1,564
Stefan Tilkov retweeted
“Herr Neumann, der Kampf gegen Scammer war auch 2021 Ihr Fokus. Was ist die größte Gefahr?
Crypto-Scams?”
“Software-Buden, die öffentliche Gelder abziehen.”
18
115
5
1,392
Stefan Tilkov retweeted
„Wenn ich in eine Gruppe reinkomme und da sitzen 10 Kerle, die so aussehen wie ich. Das irritiert mich einfach total.“ @nordderby und @stilkov unterhalten sich über das Thema #Diversity. Wo steht INNOQ da eigentlich? Und wo wollen wir hin? Hört rein 👉 innoq.com/de/podcast/098-div…
2
4
Stefan Tilkov retweeted
Wolltet ihr die Familien-WhatsApp-Gruppe schon immer mal als gedrucktes Buch haben? Wir auch nicht – und fanden die Idee so absurd, dass wir uns @zapptales genauer anschauen mussten und ein Datenleck mit knapp 70.000 Betroffenen gefunden haben: zerforschung.org/posts/zappt…
7
112
16
288
Stefan Tilkov retweeted
I've written a simple (i.e. standalone, no dependencies) Java program which patches JndiLookup.lookup() to return a fixed string and not parse its arguments. This should fix CVE-2021-44228 (i.e. RCE in Log4j) without restarting your JVM process. #Log4J
github.com/simonis/Log4jPatc…
14
307
33
1,079
Ich habe einen E-POST-Brief mit einer Mahnung über einen Betrag von 0,09€ bekommen, den mein ehemaliger Gasversorger demnächst eintreiben möchte. Bin fast versucht, das aus Spaß laufen zu lassen.
5
40