131
What are some examples of xkcd 2347? (xkcd.com)
submitted 3 years ago by to c/programming@programming.dev
93 comments fedilink hide all child comments
 

I've heard people mention curl and imagemagick. Any others that you know about?

you are viewing a single comment's thread
view the rest of the comments
[–] 17 points 3 years ago (2 children)

The neat thing about the log4j thing was even a cursory explanation of the vulnerability made anyone with a passing familiarity with security say, "Why the fuck would that even be a feature?!"

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 6 points 3 years ago (3 children)

    What was it?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 5 points 3 years ago

    Basically it involved parsing JNDI stuff which involved grabbing remote code (but that was a niche feature of JNDI in the Dev's defense). Basically, you may think it is just something like variable substitution but can involve much crazier stuff

  • permalink
  • fedilink
  • source
  • parent