Hacker News new | past | comments | ask | show | jobs | submit login
Ask HN: Did you get a strange warning from Google GCP about Log4j?
2 points by exabrial on Dec 22, 2021 | hide | past | favorite
We woke up to a very strange email from Google:

> Dear Customer, We have indications that your project XYZ (id: xyzxyzxyz) might have been compromised by the Apache “Log4j 2” vulnerability

These servers do not run Java. I checked they don't have a JVM installed. Some of them do handle encrypted LDAP requests. I replied to Google and ask for clarification on their cryptic email but did not get a response.

Anyone else get these, more important, any idea what "detection" Google is using?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: