Just submitted @OpenJDK enhancement request (#9076208) to define an allow list of CIDR addresses for creating outbound network connections. This would provide immediate mitigation for an entire class of exploits that target Java-based systems.
0
0
0
106
I recall reading that Loom favors ReentrantLock vs synchronize. Not sure if that will be the case when finalized, but worth looping back on.
@omniprof The only way ReentrantLock helps is using tryLock(), otherwise it has the same behaviour.
0
0
0
139
Slack private GitHub repo compromised bleepingcomputer.com/news/security/…
We moved to private hosting with #gitea on Kubernetes
We moved to private hosting with #gitea on Kubernetes
0
1
1
117
This is why we @giteaio thehackernews.com/2022/12/hacker…
0
0
0
72
Matt Pavlovich retweeted
Happy Kubernetes 1.25 Release Day. I’ll be cutting the release today and I couldn’t be more excited.
4
18
132
@giteaio provides everything we need to securely run our development operation.
1
1
3
Matt Pavlovich retweeted
If you still have Log4j questions, especially surrounding Apache ActiveMQ, you'll want to check out this security bulletin from HYTE. #log4j #log4shell #activemq
hyte.io/log4j/
hyte.io/log4j/
0
1
1
HYTE Technologies, Inc. latest information on Log4Shell information and impacts to HYTE MQ and Apache ActiveMQ
#log4shell #activemq #hytemq
hyte.io/cve-2021-44228/
#log4shell #activemq #hytemq
hyte.io/cve-2021-44228/
0
0
0
Matt Pavlovich retweeted
Proceed with caution when using externally hosted services promising you an easy way to find out whether you're affected by #Log4Shell. Wouldn't be surprised to see kind of "reverse honeypots" popping up, aiming at harvesting addresses of vulnerable systems. #log4jRCE
2
15
50
Ignore the custom Java Agents and the "hot fix" java classes. Set the property at startup to mitigate the security issue: -Dlog4j2.formatMsgNoLookups=true. #log4j #log4j2 #CVE-2021-44228 #log4shell
0
0
0
Matt Pavlovich retweeted
@egonwillighagen @NewsOsgi @BridgeDbProject @sonatype There are several ways. I prefer to use bnd-maven-plugin like this:
github.com/cschneider/osg…
In a multi module project you only do that on the parent and use bnd.bnd files to configure the bundles.
github.com/cschneider/osg…
In a multi module project you only do that on the parent and use bnd.bnd files to configure the bundles.
0
2
5
I enjoyed the round table with fellow @ApacheActiveMQ committers on @feathercast
youtube.com/watch?v=NroytC…
youtube.com/watch?v=NroytC…
0
2
2
This is cool. #Ubuntu
1 device has a firmware upgrade available.
Run `fwupdmgr get-upgrades` for more information.
1 device has a firmware upgrade available.
Run `fwupdmgr get-upgrades` for more information.
0
0
0
This +1000. Adding this would also drastically improve the value of static code analysis.
Everyone knows the C standard library is full of minefields and bad decisions from 40 years ago. Adopting a few hundred new functions that have been battle-tested, and making them standard for everyone should be far easier, and possibly more valuable, than language tweaks.
0
0
0