The Untold Story of Log4j and Log4Shell | Christian Grobmeier | GitHub скачать в хорошем качестве

The Untold Story of Log4j and Log4Shell | Christian Grobmeier | GitHub

In late 2021, the Log4Shell vulnerability sent shockwaves through the global tech community. For the first time, we're sharing the untold, inside story from the perspective of Christian Grobmeier, a maintainer of the Log4j project. Hear about the immense pressure, the race for a fix, and the crucial lessons learned from one of the most severe security incidents in history. GitHub Blog Post - The untold story of Log4Shell: https://github.blog/open-source/insid... GitHub Secure Open Source Fund: https://resources.github.com/github-s... #Log4Shell #Log4j #GitHub — CHAPTERS — 00:00 - Introduction: a global crisis before Christmas 01:03 - Meet the maintainer: Christian Grobmeier 01:50 - What is Log4j and why is it everywhere? 03:56 - The day the internet broke: discovering Log4Shell 06:07 - How a single string caused the vulnerability 08:53 - The Minecraft moment: a personal connection 09:45 - The pressure of being a maintainer 11:22 - A CVSS score of 10/10 13:49 - The technical danger for developers 15:18 - The race to release a patch 17:30 - Losing the community's trust 19:02 - A call from the White House 20:09 - Is funding a silver bullet? 23:54 - The patching paradox 24:48 - What is an SBOM? 26:04 - Three crucial lessons for software 27:17 - GitHub Secure Open Source Fund 28:18 - Developers are the first line of defense 29:01 - How AI impacts security 31:14 - The only cure against ignorance 32:13 - A final message to the open source community Stay up-to-date on all things GitHub by subscribing and following us at: YouTube: http://bit.ly/subgithub Blog: https://github.blog X:   / github   LinkedIn:   / github   Instagram:   / github   TikTok:   / github   Facebook:   / github   About GitHub: It’s where over 100 million developers create, share, and ship the best code possible. It’s a place for anyone, from anywhere, to build anything—it’s where the world builds software. https://github.com