# Mining the Logs

URL: /show/coder-radio/444/
> The broader software problem the Log4Shell vulnerability reveals, and the story of how Chris lit his Coder robe on fire... While wearing it.

- Show: [Coder Radio](/show/coder-radio/)
- Episode: 444
- Date: 2021-12-15
- Hosts: chris, michael
- Duration: 00:40:50
- Audio: https://aphid.fireside.fm/d/1437767933/b44de5fa-47c1-4e94-bf9e-c72f8d1c8f5d/8c5f3501-f4ea-408c-b053-d5e7e9b1e373.mp3
- YouTube: https://youtu.be/hnEpiJmt4og



Sponsors:
- [Linode](/sponsors/linode.com-cr/index.md): Receive a $100 60-day credit towards your new account.
- [Network Membership Holiday Discount](/sponsors/jupiter.party-cr/index.md): Support the entire network, and get access to every member's special feed for every show on the network. Sign-up before the end of the year and save $2/m for a year!




### Episode Links

  * [Apple Silicon Guide](https://github.com/mikeroyal/Apple-Silicon-Guide "Apple Silicon Guide") — A guide covering Apple Silicon including the applications, libraries and tools that will make you a better and more efficient with your Apple Silicon powered device.
  * [notes.jupiterbroadcasting.com](https://notes.jupiterbroadcasting.com/ "notes.jupiterbroadcasting.com") — This site is a searchable archive of the show notes for the all Jupiter Broadcasting shows. Home to the best shows on Linux, Open Source, Security, Privacy, Community, Development, and News.
  * [How does Jupiter Broadcasting's notes site work?](https://theorangeone.net/posts/jb-notes/ "How does Jupiter Broadcasting's notes site work?") — It was a normal (for 2021) Sunday evening back in July, I was minding my own business, obviously doing something super cool, when I spotted a message from a certain badger-y fellow in the Self Hosted show’s Discord
  * [Hackers start pushing malware in worldwide Log4Shell attacks](https://www.bleepingcomputer.com/news/security/hackers-start-pushing-malware-in-worldwide-log4shell-attacks/ "Hackers start pushing malware in worldwide Log4Shell attacks") — When the Log4j application parses these logs and encounters the string, the bug will force the server to make a callback, or request, to the URL listed in the JNDI string. Threat actors can then use that URL to pass Base64-encoded commands or Java classes to execute on the vulnerable device. 
  * [Microsoft quietly told Apple it was willing to turn big Xbox-exclusive games into iPhone apps](https://www.theverge.com/2021/12/9/22826297/microsoft-xbox-xcloud-streaming-exclusives-iphone-ipad-gamepas "Microsoft quietly told Apple it was willing to turn big Xbox-exclusive games into iPhone apps") — In reality, Microsoft was willing to play along with many of Apple’s demands — and it even offered to bring triple-A, Xbox-exclusive games to iPhone to help sweeten the deal. 
  * [What’s in Apple’s iOS 15.2, iPadOS 15.2? Nude-Image Detection](https://www.bloomberg.com/news/newsletters/2021-12-12/what-s-in-apple-s-ios-15-2-ipados-15-2-nude-image-detection-legacy-contacts-kx3m3nmb "What’s in Apple’s iOS 15.2, iPadOS 15.2? Nude-Image Detection") — In order for the feature to work, parents need to enable it on a family-sharing account. 
  * [Linux Action News 219: Log4Shell Coverage](https://linuxactionnews.com/219 "Linux Action News 219: Log4Shell Coverage") — The Log4Shell vulnerability is making waves this week; we'll explain why and break down how it works.