5 ms·
Site author here. Thanks for helping to get the word out - every bit may help someone. While I consider my page to provide useful color, and I validate and sum
by royce 5y ago
Site author here. Thanks for helping to get the word out - every bit may help someone.
While I consider my page to provide useful color, and I validate and summarize and cache info updates locally to add value ... it won't scale for long. It's really a stopgap - to buy defenders time until better efforts emerge.
A few efforts likely to become higher leverage than mine, because they can be driven by pull requests:
* https://github.com/NCSC-NL/log4shell https://github.com/NCSC-NL/log4shell - already quite comprehensive
* Whatever CISA may spin up - https://github.com/cisagov/log4j-affected-db https://github.com/cisagov/log4j-affected-db
* Kevin Beaumont (@GossiTheDog) - turns out he worked with CISA on this
That being said, I'll keep working on mine as long as it still provides value; updates/corrections welcome.