Jan 12, 2022
Adam Baldwin (@adam_baldwin)
Amélie Koran (@webjedi)
Log4j vulnerability
https://logging.apache.org/log4j/2.x/license.html
https://www.theregister.com/2021/12/14/log4j_vulnerability_open_source_funding/
https://www.zdnet.com/article/security-firm-blumira-discovers-major-new-log4j-attack-vector/
F/OSS developer...
Dec 23, 2021
Introduction
Overview of Log4j vuln (as of 16 December 2021)
Why is it a big deal? (impact/criticality/risk)
Talk about patching vs. mitigation
why wasn’t this given the same visibility in 2009? Because it’s Oracle or Java?
Good callout is building slides to brief org leadership, detections, and other...
Dec 16, 2021
Introduction
Overview of Log4j vuln (as of 16 December 2021)
Why is it a big deal? (impact/criticality/risk)
Talk about patching vs. mitigation
why wasn’t this given the same visibility in 2009? Because it’s Oracle or Java?
Good callout is building slides to brief org leadership, detections, and other...
Dec 13, 2021
New $3 patron! 🎉Thank you John K.!
- National Domestic Violence Hotline at 1-800-799-7233, or by online chat.
- National Sexual Assault Hotline at 1-800-656-4673, or by online chat.
https://www.stalkingawareness.org/wp-content/uploads/2019/01/SPARC_StalkngFactSheet_2018_FINAL.pdf
TALKING VICTIMIZATION
An estimated...
Nov 21, 2021
https://twitter.com/Esquiring - Fred Jennings
Vulnerabilities Equity program (VEP), vuln disclosure program (VDP), and what is the a way for disclosure of 0day? (‘proper’ is different and dependent)
This show was inspired by this
Tweet thread from @k8em0 and @_MG_