throwaway_JiY4E

Re:How to Be Useless on Saturday January 15, 2022 @12:43PM (#29948417)

> sad trend recently > Who are these people who are turning communities into sad opposites of these values?

it's not about sad versus happy, but "doing" versus "being". And it's not a multiple choice test. Just you cannot ignore the other polarity.

Re:How to Be Useless on Saturday January 15, 2022 @12:40PM (#29948395)

> if you only view yourself in terms of your utility to others, you will be consumed for your usefulness.

I have seen what you say firsthand in myself over the years. Concepts about treating yourself like a business and over emphasizing your "brand" are part of this. I'm not demonizing those concepts, just they can be overdone or overemphasized.

Re:Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sheet refere... on Monday December 13, 2021 @03:31PM (#29544232)

Could it be you already are on Java 8u121? They say it:

> protects against remote code execution by defaulting "com.sun.jndi.rmi.object.trustURLCodebase" and "com.sun.jndi.cosnaming.object.trustURLCodebase" to "false".

Re:Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sheet refere... on Monday December 13, 2021 @03:28PM (#29544196)

> other variants like leaking environment variables.

I'll google/search more about these. I assume if we say RCE is a 10 for risk, then maybe others are 5 or 3?

Re:Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sheet refere... on Monday December 13, 2021 @03:15PM (#29544032)

as I understand, if we are running Java 8u121 this is not an issue... or is it?

that's what the CVE (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4422...) says:

> protects against remote code execution by defaulting "com.sun.jndi.rmi.object.trustURLCodebase" and "com.sun.jndi.cosnaming.object.trustURLCodebase" to "false".