Author | Lightnews

Reposted by Christian Grobmeier

Stefano Cordio @scordio.github.io · 2d

"Nobody stops in to check on you. They check on the project. There’s also nobody standing up and saying, ‘hey, thank you for the good work you’re doing to remediate this issue.’"

The harsh truth: maintainers give their spare time, yet positive feedback is rare.

Appreciate who is behind the code. 💛

Christian Grobmeier @grobmeier.de · 2d

I never imagined GitHub would ask me to speak about #Log4Shell.
But it happened.

@github.com asked me to share the story as I lived it, for the benefit of users of #opensource. How could I say no?

I hope it helps build a more secure future.
No more Log4Shell.

#java

GitHub @github.com · 2d

The internet was on fire. 🔥
One small library affecting billions of systems.
Log4Shell was the biggest security vulnerability of all time.

Now, Log4J maintainer, Christian Grobmeier tells us what it felt like inside the flames 👉 github.blog/open-source/...

4 10

Reposted by Christian Grobmeier

Marc Philipp @marcphilipp.de · 2d

As a fellow maintainer of an open source project, this is an intense and somewhat scary read. Thanks to @grobmeier.de for being so open to talk about what he experienced and @github.com for initiating their Secure Open Source Fund!

github.blog/open-source/...

Inside the breach that broke the internet: The untold story of Log4Shell

Log4Shell proved that open source security isn't guaranteed and isn’t just a code problem.

github.blog

5 8

Christian Grobmeier @grobmeier.de · 2d

Thank you! It means a lot to hear this

1

Christian Grobmeier @grobmeier.de · 2d

I never imagined GitHub would ask me to speak about #Log4Shell.
But it happened.

@github.com asked me to share the story as I lived it, for the benefit of users of #opensource. How could I say no?

I hope it helps build a more secure future.
No more Log4Shell.

#java

GitHub @github.com · 2d

The internet was on fire. 🔥
One small library affecting billions of systems.
Log4Shell was the biggest security vulnerability of all time.

Now, Log4J maintainer, Christian Grobmeier tells us what it felt like inside the flames 👉 github.blog/open-source/...

1 7 26

Christian Grobmeier @grobmeier.de · 3d

OK, so enough hiatus. I'm back.
It's Monday, early morning. Today, something will change.
Will keep you posted.

3

Christian Grobmeier @grobmeier.de · Sep 19

You are officially on my awesome list now :) Thank you!

1

Christian Grobmeier @grobmeier.de · Sep 18

I dreamed of writing a "#Java Logging" book after #Log4shell hit.

Today I’m proud to share:
@manning.com just launched it in MEAP.

Hard to describe what that means—a circle closes.

Until Oct 2: 50% off:
hubs.la/Q03Jv97v0

#log4j #java #logback #slf4j

Java Logging - Christian Grobmeier

Logging is a must-know skill for Java developers. Logging is the art of making things visible—and when your codebase crashes at 5PM Friday you’ll want all the data you can get about your application!...

hubs.la

1 6 10