Java Security: Log4J, the SecurityManager, and Funding
summary
Shows live exploit code for the Log4j vulnerability and demonstrates which defense measures succeeded or failed in stopping those exploits; analyzes how different response groups coordinated effective patching and what common practices they used. Reviews open-source funding approaches—donations, subscriptions, and bug bounties—and discusses why those models can make it difficult to fund maintenance and security work.
AI-written summary · about
related talks
59mLog4j: Break Me Completely
40mWhat Log4j taught me
33mLog4J, SpringShell and all that Jazz (or why bad things can happen to good software)
17mLog4j - A Placement Student's Baptism by Fire
30mSecure Open Source Practices
07mLog4j Hygiene
02h 38mJava application security the hard way - a workshop for the serious developer
58mWhat the log4j incident taught us about Secure by Design