The Nutrition Label That Software Always Lacked

On December 9, 2021, a security researcher posted a proof-of-concept exploit for a vulnerability in a Java library called Log4j. Within 72 hours, hundreds of millions of systems around the world were at risk. What made the next weeks genuinely chaotic wasn’t the vulnerability itself — it was that nobody knew where Log4j actually lived. … Read more