~/talk

Log4shell, Is It Apache Foundation's Fault?

on YouTube 47m
TalkinFrenchat Devoxx France 2022 · 2022-04-20..04-22· [security, open-source]

speakers

name:E. Lécharny
links:none on file
name:J.B. Onofré
links:none on file
name:H. Boutemy
links:none on file

resources

video:https://youtu.be/d_brgPexBgc
slides:none on file

summary

A retrospective on the Log4J/Log4Shell incident covering its history, technical root causes, and the fixes applied. It examines effects on internal and external projects and presents a post-mortem, including how Apache handles CVEs, weaknesses in code review and project governance, and options to prevent future incidents (funding, organization, mandatory audits), plus reactions from affected companies and governments.

AI-written summary · about

chapters (5)

  1. 0:00Log4Shell intro
  2. 10:19Log4j origins
  3. 27:37Apache security process
  4. 38:06Post-Log4Shell fixes
  5. 44:25Conclusion

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.