Log4J -- ask yourself: do I really need that library?

from blog Kevin Boone's website, | ↗ original
What can the software industry learn from the Log4J security debacle?