top | item 29510097

(no title)

ff7c11 | 4 years ago

${jndi:ldap://AWS Down}?

discuss

order

desdiv|4 years ago

For those out of the loop: this is a reference to the Log4j RCE story that's also currently on the HN frontpage.

Amazon uses a lot of Java, so the two stories might be actually connected somehow.

[0] https://news.ycombinator.com/item?id=29504755

netsec_burn|4 years ago

Spoiler: They are. AWS and Amazon both used Log4j exploitable from the homepage (/) of both sites through headers.

Source: me