Imagine being in the middle of fixing a global security crisis, only to find out your own son's Minecraft game is broken... by your code. In this powerful clip, Log4j maintainer Christian Grobmeier shares the unforgettable moment the Log4Shell vulnerability hit home. #Log4j #Log4Shell #Minecraft Stay up-to-date on all things GitHub by connecting with us: YouTube: https://gh.io/subgithub Blog: https://github.blog X: https://twitter.com/github LinkedIn: https://linkedin.com/company/github Insider newsletter: https://resources.github.com/newsletter/ Instagram: https://www.instagram.com/github TikTok: https://www.tiktok.com/@github About GitHub It’s where over 100 million developers create, share, and ship the best code possible. It’s a place for anyone, from anywhere, to build anything—it’s where the world builds software. https://github.com
ADVERTISEMENT
well at least you still only had 1 problem
The log4j vulnerability really did just completely prove that one meme where the tech stack of the entire world is shown to be held up by a single, thanklessly maintained project by a small group.
Thats actually crazy. Funny in retrospect, but had to have been wild experiencing that in real time.
Goes to work, has to stop to fix his son's game, fixes son's game by going back to work.
These GitHub shorts are not getting the love and attention they deserve in this world 😂
"That was my first feeling, and I apologized for that." Wonderful emotional intelligence.
for those who arent aware, there was a massive security flaw in a library of files used in the java programming language (which minecraft and MANY other things use). a malicious person with knowledge of this flaw could gain access to execute any code they wanted in a variety of ways, but in the case of minecraft specifically, it could be used to gain access to systems which host servers, or game clients, and capture information, or implant malware. Every service which used log4j had to be fixed, and to this day, some goobers out there still run open searches for outdated minecraft servers running this old code to attempt to hack users by scanning every IP address.
The fact that literal trillion dollar corporations and countless billion dollars companies are relying on free code that’s being maintained solely because of people’s own will just proves how unstable the internet really is
"you won't believe it... I'm fixing it at my job"
His sons world must have felt so huge and so small at the same time... Top tier Dad moment🥶
So... this was a certified "well, well, well if it isn't the consequences of my actions" moment
Was there for the log4j and it was fixed promptly. The big work was for the developers to upgrade the dependencies and then upgrade the apps
Knew this was log4j the second they both had technical problems in java code.
How cool is that having a dad working on a problem that is related to your day to day life
Unappreciated hero ❤
He still kinda has the good hearted attitude to his software and the impact it has..
he seems like such a sweet dad
When the bug was reported, I had an internship at a company that uses Java. What's scary is that the senior developers hadn't even heard of it, they only looked because I told them about it. Insane. Had I been mean, I could have exploited it. Well, at least they are going to need to generate SBOMs now, so hopefully that will make things better.
That's actually really surreal.
What a fantastic father. Took responsibility not once but TWICE. Could have justified a security leak as his career being important enough to lose his temper over and could have blamed the minecraft issue on anyone else to his son who wouldn't know any better. 🎉