{"id":12327,"date":"2023-07-24T07:00:00","date_gmt":"2023-07-24T15:00:00","guid":{"rendered":"https:\/\/formtek.com\/blog\/?p=12327"},"modified":"2022-09-19T17:39:17","modified_gmt":"2022-09-20T01:39:17","slug":"open-source-the-reputational-hit-by-the-log4j-flaw","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/open-source-the-reputational-hit-by-the-log4j-flaw\/","title":{"rendered":"Open Source: The Reputational Hit by the Log4J Flaw"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Users were skeptical and slow to accept.  Commercial vendors were scornful. Those were the early days of Open Source when many businesses were hesitant to adopt Open Source software. It took a while, maybe twenty years. But adoption of Open Source software ultimately boomed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A <a href=\"https:\/\/www.pwc.de\/en\/digitale-transformation\/open-source-software-study-2021-recent-trends-and-developments.html\" data-type=\"URL\" data-id=\"https:\/\/www.pwc.de\/en\/digitale-transformation\/open-source-software-study-2021-recent-trends-and-developments.html\">whitepaper by PwC <\/a>in 2022 estimated that 87 percent of large companies used Open Source software. Other similar surveys have tried to estimate the number too of the percentage of businesses using open source, with results ranging within the 60-90 percentiles.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.redhat.com\/en\/about\/company\/leadership\/paul-cormier\" data-type=\"URL\" data-id=\"https:\/\/www.redhat.com\/en\/about\/company\/leadership\/paul-cormier\">Paul Cormier<\/a>, president and CEO of Red Hat, <a href=\"https:\/\/www.theregister.com\/2022\/03\/02\/red_hat_open_source\/\" data-type=\"URL\" data-id=\"https:\/\/www.theregister.com\/2022\/03\/02\/red_hat_open_source\/\">said that<\/a> &#8220;while the open source development model may have started in the playground of developers, hackers and visionaries decades ago, we\u2019ve moved far past that. It\u2019s now a mainstream part of commercial software development and the engine for consistent innovation \u2013 from the server room to public clouds to the edge and beyond.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But then in December 2021, the Log4J vulnerability was reported. The problem had security teams around the world scrambling. <a href=\"https:\/\/en.wikipedia.org\/wiki\/Log4Shell#:~:text=The%20vulnerability%20had%20existed%20unnoticed,team%20on%2024%20November%202021.\" data-type=\"URL\" data-id=\"https:\/\/en.wikipedia.org\/wiki\/Log4Shell#:~:text=The%20vulnerability%20had%20existed%20unnoticed,team%20on%2024%20November%202021.\">Actually the vulnerability was first introduced<\/a> in the Log4J in 2013. It took nearly eight years to be discovered. Cyber experts called the exploit &#8220;the single biggest, most critical vulnerability ever&#8221;.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.sans.org\/profiles\/mike-parkin\/\" data-type=\"URL\" data-id=\"https:\/\/www.sans.org\/profiles\/mike-parkin\/\">Mike Parkin<\/a>, engineer at Vulcan Cyber, <a href=\"https:\/\/securityboulevard.com\/2022\/02\/open-source-a-persistent-risk-log4j-vulnerabilities-will-linger\/\" data-type=\"URL\" data-id=\"https:\/\/securityboulevard.com\/2022\/02\/open-source-a-persistent-risk-log4j-vulnerabilities-will-linger\/\">said that<\/a> &#8220;views on open source code swing back and forth depending on many factors, and they continue to do so. Historically, open source software has offered better security and more transparency, but a major vulnerability like Log4j can tarnish that reputation.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And it seems to have been a blemish for Open Source. <a href=\"https:\/\/www.anaconda.com\/state-of-data-science-report-2022\" data-type=\"URL\" data-id=\"https:\/\/www.anaconda.com\/state-of-data-science-report-2022\">A survey by Anaconda<\/a> found that 40 percent of IT professionals interviewed said that since the Log4J exploit was announced that they had scaled back on their use of open source software.  Additionally, 31 percent of respondents said that vulnerabilities are the biggest challenge to the open source community.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It&#8217;s likely that this will be a temporary setback for open source, but for many it has been a wake up call.<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fopen-source-the-reputational-hit-by-the-log4j-flaw%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Users were skeptical and slow to accept. Commercial vendors were scornful. Those were the early days of Open Source when many businesses were hesitant to adopt Open Source software. It took a while, maybe twenty years. But adoption of Open<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/open-source-the-reputational-hit-by-the-log4j-flaw\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[24],"tags":[],"class_list":["post-12327","post","type-post","status-publish","format-standard","hentry","category-open-source"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/12327","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=12327"}],"version-history":[{"count":1,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/12327\/revisions"}],"predecessor-version":[{"id":12328,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/12327\/revisions\/12328"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=12327"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=12327"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=12327"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}