Reposts from 15 December 2021

I was today years old that I learned when you hash a URL in Java it does a DNS lookup to get the IP address associated with the hostname as part of the hash function.

Post details

If you're surprised about the log4j vulnerability, just wait until you hear what happens when you put a java.net.URL into a hashtable

Pete Hunt 🚁 (@floydophone)Sat, 11 Dec 2021 21:05 GMT

Nicholas Weaver (@ncweaver)Mon, 13 Dec 2021 17:58 GMT