å é±ã¯ Apache Log4j ã®èå¼±æ§åé¡ã大ããªè©±é¡ã¨ãªã£ãâ¦â¦ã¨éå»å½¢ã§æ¸ãã¦ã¯ãããªãã®ãããããªããå±æ©ã¯ã¾ã ç¶ãã¦ããã
ä»åãèå¼±æ§ã®ç ´å£åã®ã¤ããã¨ã¨ãã«ã¯ãã¼ãºã¢ãããããã®ã¯ãä»æ¥ãå¤ãã®ãã¸ãã¹ã®çå½ç·ã¨ãªã£ã¦ãããªã¼ãã³ã½ã¼ã¹ã½ããã¦ã§ã¢ã®ã¡ã³ããã³ã¹ããç¡å ±é ¬ã§ããæè¬ãããªãä»äºã«ãªã£ã¦ãããããªã¼ãã³ã½ã¼ã¹ã¯å£ãã¦ãããããããªãã®ï¼ ã¨ããåé¡ã§ããã
20年以ä¸ã¿ããªãã£ã¨åã話ãã¦ããªã¨æã£ã¦ãã¾ããããªã¼ãã³ã½ã¼ã¹ãå£ãã¦ãããå£ãã¦ããªãã®è©±ããããã«æµãã¦ããããã®æèãªãããªã¼ã½ããã¦ã§ã¢ã®æ代ãããã£ã¨å£ãã¦ããã ããããã§ãåãã¦ããã®ã¯èªç±ã ããã ãã
— Shuji Sado (ä½æ¸¡ ç§æ²») (@shujisado) December 14, 2021
ãã® Yawar Amin ã®æç« ã§ã¯ãlog4j ã®éçºè ã¯ããªãã§ãããªå¤§è¦æ¨¡ãªã»ãã¥ãªãã£åé¡ãçªãã¤ããããç¾½ç®ã«ãªã£ãã®ããè³¢ãå¤åãªã¯ãã®äººéãããªãã§ãããªä½ã®ã¡ãªããããªãä¿®ç¾ å ´ã«è¿½ãè¾¼ã¾ãã¦ãã¾ã£ãã®ããåãã¦ããã
ã¾ãæµ®ãã³ä¸ããã®ã¯ãä¸è¨ã®ä½ã®ééçå ±é ¬ããªããè©ä¾¡ããããªãï¼ãããã«æ¹å¤ã¯ãã£ãããããå«ãããã¾ã§åãã¦ãã¾ãï¼åé¡ã§ãããã©ããã¦éçºè ã¯ã¤ã³ã¿ã¼ãããå ¨ä½ããããæ給ãªã»ãã¥ãªãã£ã¨ã³ã¸ãã¢ãªã³ã°é¨éã¿ãããªæ±ããåããªãããããªãã®ãããªã¼ãã³ã½ã¼ã¹ã®ã©ã¤ã»ã³ã¹ã¯ãããªãã¨ä¿è¨¼ãã¦ãªãã®ã«ã
ããã§å¼ãåãã«åºãããã®ã¯ãClojure ã®ä½è ã¨ãã¦ç¥ããã Rich Hickey ãæ¸ãã Open Source is Not About You ã«ãããããªã¼ãã³ã½ã¼ã¹ã«ã¾ã¤ãã社ä¼çãªæ¼ãä»ãã¯ãã»ã¨ãã©æ ¹æ ãæããªãæè¿çºæããããç¥è©±ãã®ä¸ç¨®ã ã¨ãã訴ãã§ããã
Yawar Amin ã¯ãããåãããããã¹ãã©ã¤ã»ã³ã¹ã®ä¸ã§ã½ã¼ã¹ã³ã¼ããå ¬éãã以ä¸ã®ãã¨ï¼ã³ãã¥ããã£ã®ç®¡çã¨æé·ãè²¢ç®ã®åãå ¥ããåé¡ã®ä¿®æ£ãèå¼±æ§ã®é示ãªã©ãªã©ï¼ãããªãã¨ãããªãã¨ã¡ã³ããã«æããã¦ãã¾ããç¥è©±ãããç´ æ´ããããªã¼ãã³ã½ã¼ã¹ã®æ´è³ï¼great open source brainwashï¼ãã¨å¼ãã§ããã
Log4j ã®å ´åãä¾åãã¦ãã®ããã¾ãã«å¤ããå½±é¿ããã«ãããã¨ããã®ãããããããã«ãã¦ããç¥è©±ããå½ããåã®ããã«åºãä¿¡ããããåè«ãããã¨ã¯è¨±ãããªããã¾ãã§å®æãããªãããã¨ããããããã®ãç¥è©±ãã®ããããªã¼ãã³ã½ã¼ã¹ã®ã¡ã³ãããã大ä¼æ¥ã®ã¢ã¦ãã½ã¼ã·ã³ã°ãã¼ã ã«ãªã£ã¦ããã®ãç¾å®ã§ããã
ãããªãä¼æ¥ããªã¼ãã³ã½ã¼ã¹ã«è³éãæä¾ããã°ãããããããããªåç´ãªè©±ãããªãã¨ãã£ãè°è«ã«ãªãã®ã ããä½ãããã妥åç¹ããããã¯ãã 㨠Yawar Amin ã¯æ¸ãã
ãã®å ´åã¯ãæåã«åé¡ãææããï¼ä¸ççãªå¤§ä¼æ¥ã§ãããLog4j ã®èå¼±æ§ã§è¢«ãééç被害é¡ãå¤å¤§ã§ãããï¼Alibaba ã®ã¨ã³ã¸ãã¢å´ãåé¡ã®ä¿®æ£ã®è²¬ä»»ãè² ãã¹ãã§ããããªã¼ãã³ã½ã¼ã¹ã®ã¡ã³ããã¯å¤§ä¼æ¥ã®ããã«ç¡åã§åãã¹ãã§ã¯ãªããä»ã®äººéã¯ï¼æ©ãä¿®æ£ããã¨è¨ãç«ã¦ãã®ã§ã¯ãªãï¼ä¸æ©ä¸ãã£ã¦è¦å®ãããªã¼ãã³ã½ã¼ã¹ã®å©ç¨ã«ã¨ããªããªã¹ã¯ã¨è²¬ä»»ãããã¦ã³ã¹ããåãå ¥ããã¹ãã ãã¨ããã®ãå½¼ã®æè¨ã§ããã
ãªã¼ãã³ã½ã¼ã¹ã®æç¶å¯è½æ§ããã¸ãã¹ã¢ãã«ã¯ä¸çç¸ã«ã¯ãããªãã¨ãã話ã¯ã¯ã¿ã·ãæ¨å¹´æ¸ãã¦ãããããã¼ããYawar Amin ã®æè¨ã«æã人ãããã®ãäºæ³ãããã®ãç¾å®ã§ããã
ããããããã§æãåºãã¹ãã¯ãä¸ã§å¼ç¨ããä½æ¸¡ç§æ²»ãããæ¸ããèªç±ãã¨ããè¨èã®éãï¼ã¨ç ´å£æ§ï¼ãªã®ã ããã
ã¾ããªã¼ãã³ã½ã¼ã¹ã»ããã¸ã§ã¯ãã®åé¡ã®ã²ã¨ã¤ã¯ãçµããããããã¨ãé£ãããã¨ã«ããã¨ããã®ã確ãã
ãã¿å 㯠Slashdotã