Log4jShell vulnerability

1. Kasperky article
2. https://www.lunasec.io/docs/blog/log4j-zero-day-update-on-cve-2021-45046/ with the following "news":If you have previously used LOG4J_FORMAT_MSG_NO_LOOKUPS to mitigate the log4shell vulnerability, in certain conditions this will not be sufficient to protect your code from RCE. Refer to our mitigation guide for additional steps you can take to remediate the impact of Log4Shell
3. Apache group released two fix in short delay, after  the second fix was found vulnerable to other attacks, a third fix (2.17.0) was released.

In questo articolo del 2012, si legge che Reddit avrebbe un database da due tabelle.

As a mid-life greabeard that started my career on Z/OS / MVS writing JCL and running COBOL and SAS jobs, I like JavaScript. It doesn't have the obtuseness of C, the ultra-strict type-checking of Pascal, the verbosity of COBOL, class chaos of Java, the mind-bending notation of PostScript, nor the escapee from the loony bin mentality of SQL

Modern computer are very very very fast. C/64 was about 1Mhz and you can hangs it just throwing a 10.000 cycle in interpreted BASIC v2 language.

Test driven development is a beast to tame. I like TDD but in the past it was quite difficult to achive, at least in a pure-consultant approach with a "turn key" framework behind.

After years, I decided to try a FreeBSD fresh install, to revive a old MacBookPro: the results was great and impressive, also if you think the hardware is over 15 years old. I want to share with you my success.