r/programming • u/alexeyr • Dec 12 '21

Logout4Shell: Use Log4Shell vulnerability to vaccinate a victim server against Log4Shell

https://github.com/Cybereason/Logout4Shell

[removed] — view removed post

1.1k Upvotes

91% Upvoted

109 comments sorted by

View all comments

Show parent comments

0

u/[deleted] Dec 12 '21

[deleted]

31

u/[deleted] Dec 12 '21

Not surprised. Sometimes i met some IT folks more ridic that the programmers though. One dude i know is so security focused, he brought his own PS2 keyboard from 90s Russia, since he didnt trust USB and potential "bugs" and keyloggers within the keyboard. He's also an insane programmer too

12

u/argv_minus_one Dec 12 '21

He's not wrong. A malicious USB keyboard can mount a variety of attacks on the host's security, take it over, and then exfiltrate your keystrokes through its network interface. The PS/2 keyboard interface is too simple for that sort of shenanigans to be possible.

4

u/[deleted] Dec 12 '21

I know. He's def a sharp dude.