Live data from Hacker News

Log4jmemes.com: for those of us that need a laugh

log4jmemes.com

81–90 of 115 posts

Re: Log4jmemes.com: for those of us that need a laugh

#81
post #4

On a serious note, I think it's a good time to remember to donate some $ to open source, especially the Apache foundation for their incredible work over the years!

Biggest mistake EVER. The Apache Foundation DOES NOT redistribute any money to actual contributors. All money donated to Apache gets spend on their own infrastructure and salaries, etc.

> own infrastructure and salaries

Don't they contribute for the development? Or for what is that salary.

Re: Log4jmemes.com: for those of us that need a laugh

#82
post #8

Somewhat with shame in the back of my mind, memes like these always tend to help me get the bigger picture of something faster than a long article.

Too bad the Internet hijacked the term meme: https://www.wired.co.uk/article/richard-dawkins-memes

Re: Log4jmemes.com: for those of us that need a laugh

#83
post #47

I spent this weekend removing Elasticsearch usage in our project. Just earlier I saw that our API wasn't responding, and was wondering how the hell someone with log4j got to us. Turns our AWS West 2 was down. If it weren't for the fear of DDOS attacks, I'd put every webservice in a physical server in a basement somewhere and be done with it. I've been fighting this whole year to simplify and reduce the number of depe…

I'd put every webservice in a physical server in a basement somewhere and be done with it. One of the benefits of working in healthcare is that if it's not on-premesis, it's a non-starter for many organizations. My company's paranoia of cloud services has paid off several times in terms of security in the last few years, even if the cost in dollars was higher. At this very moment, a vendor is going through a ransomwa…

> Still, startups have to learn that if you're serious about being in enterprise, having a locally hosted option opens doors. Very lucrative doors.

Can you explain why that is?

I do agree with your point, having been exposed to running openstack on a custom infrastructure for my job has really taught me how much $ you can save if you do things yourself over say aws and that once I picked up the basics of compute, volumes, networking and security. My understanding increased.

I sometimes would find it difficult to keep up with all the aws lingo but doing everything myself has been a really good lesson in keeping things small and lean.

Re: Log4jmemes.com: for those of us that need a laugh

#85
post #64

I'm missing one: The number of customers confusing Apache Log4j with Apache Web Server Is Too Damn High!

We have a client that would like to know if we might have installed log4j by accident. It’s really hard to explain to people with limited technical knowledge what a library is, or that if Java isn’t running, then neither is log4j. Their entire stack is written in Perl and it’s the only software running, except, yup, Apache (httpd). They are very confused.

Re: Log4jmemes.com: for those of us that need a laugh

#86
post #7

The one about using print/console.log/whatever lol. I've always done this, never have I used a library for this, because: - running manually? >myapp.log 2>&1 - using systemd? use journalctl - using docker/kubernetes? capture automatically the stdout/stderr of your containers and pipe them through logstash or something Real question: why would an application need to know where its logs go? This is not in the business…

> Example: Python's default logging module. That's actually a log4j derivative, and imho quite bad.

Not quite. Rather, its design was influenced by log4j, among others:

https://www.python.org/dev/peps/pep-0282/#influences

Re: Log4jmemes.com: for those of us that need a laugh

#87
post #4

On a serious note, I think it's a good time to remember to donate some $ to open source, especially the Apache foundation for their incredible work over the years!

Remember that the Apache Foundation is the same foundation that insist on saying that open office is a nice piece of software and LibreOffice doesn't exist. While ignoring the fact that continuing to promote abondonware (open office) to school and other public institution is criminal.

Re: Log4jmemes.com: for those of us that need a laugh

#88
post #7

The one about using print/console.log/whatever lol. I've always done this, never have I used a library for this, because: - running manually? >myapp.log 2>&1 - using systemd? use journalctl - using docker/kubernetes? capture automatically the stdout/stderr of your containers and pipe them through logstash or something Real question: why would an application need to know where its logs go? This is not in the business…

For me the biggest nuisance is keeping multi-line logs together.

Just output JSON! Most log systems will happily consume JSON, and you can easily run it through `jq -r` if you want to read it in your terminal/vi/emacs or use grep.

    $ ./myapp &>myapp.log
    # Get error messages mentioning "foobar"
    $ jq -c 'select(.severity=="error")' | grep "foobar" | jq -r '.message'

Re: Log4jmemes.com: for those of us that need a laugh

#89

Earlier quoted context omitted.

I'd put every webservice in a physical server in a basement somewhere and be done with it. One of the benefits of working in healthcare is that if it's not on-premesis, it's a non-starter for many organizations. My company's paranoia of cloud services has paid off several times in terms of security in the last few years, even if the cost in dollars was higher. At this very moment, a vendor is going through a ransomwa…

> Still, startups have to learn that if you're serious about being in enterprise, having a locally hosted option opens doors. Very lucrative doors. Can you explain why that is? I do agree with your point, having been exposed to running openstack on a custom infrastructure for my job has really taught me how much $ you can save if you do things yourself over say aws and that once I picked up the basics of compute, vol…

Usually has to do with security requirements, often dictated by the industry they're in. Health care and military contracting are both huge, and are both areas that large companies tend to end up serving even if they didn't set out to do that, with the result that lots of enterprises need to be able to satisfy a variety of security check-lists, most of which are easier to deal with if a service is self-hosted. This can include things like "must guarantee no traffic containing X goes over an insecure network" or "must guarantee no data ever transits or is stored in [LIST OF COUNTRIES]". These directives can be in conflict for different orgs, too, so it's not something you can just fix one time in your hosted version and appeal to everyone.

Re: Log4jmemes.com: for those of us that need a laugh

#90

Earlier quoted context omitted.

But what TYPE of happy are you?

If you walk as if you’re happy, talk as if you’re happy, and quack like a happy person, then you are happy. This is the Way.

Unless you're happy in a slightly different way than expected. Oh and we aren't going to bother documenting what we mean by happy, and it may be different for different functions, and we may change it at any time as a side effect of normal code maintenance.
Post reply on HN