Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Log4Shell update: second Log4j vulnerability published. Parent comment
Note the classes aren't at fault or doing anything wrong (even though you could imagine other mitigations they could use), they are just conveniently there to use if you have a vulnerability that lets you de-serialize untrusted data.
There are no comments on this comment yet.
Note the classes aren't at fault or doing anything wrong (even though you could imagine other mitigations they could use), they are just conveniently there to use if you have a vulnerability that lets you de-serialize untrusted data.