Thu.Apr 14, 2022

article thumbnail

The anatomy of the Spring4Shell vulnerability and how to prevent its effects—and those of similar vulnerabilities

Dynatrace

Dynatrace news. Spring4Shell is a critical vulnerability in the Spring Framework , which emerged in late March 2022. Because 60% of developers use Spring for their Java applications , many applications are potentially affected. With a critical CVSS rating of 9.8 , Spring4Shell leaves affected systems vulnerable to remote code execution (RCE). To illustrate why Spring4Shell is such a critical vulnerability, it helps to understand how Spring works.

Java 224
article thumbnail

Netflix End of Series 1

Brendan Gregg

A large and unexpected opportunity has come my way outside of Netflix that I've decided to try. Netflix has been the best job of my career so far, and I'll miss my colleagues and the culture. offer letter logo (2014). flame graphs (2014). eBPF tools (2014-2019). PMC analysis (2017). my pandemic-abandoned desk (2020); office wall. I joined Netflix in 2014, a company at the forefront of cloud computing with an attractive [work culture].

Java 145
article thumbnail

Netflix End of Series 1

Brendan Gregg

A large and unexpected opportunity has come my way outside of Netflix that I've decided to try. Netflix has been the best job of my career so far, and I'll miss my colleagues and the culture. offer letter logo (2014) flame graphs (2014) eBPF tools (2014-2019) PMC analysis (2017) my pandemic-abandoned desk (2020); office wall I joined Netflix in 2014, a company at the forefront of cloud computing with an attractive work culture.

Java 52