@Yuxx 不行不行，厨艺不行

昨天和以前的同事聊了聊，情况也不太乐观。他们公司内部发的岗位胜任标准是 35 岁以下。超过 35 岁的现在只能苟着。每个季度考核打分，不合格扣 20%工资，两次直接走人。
聊完更慌了

正在使用 kotlin 开发新的后端项目。使用感受写着比 java 爽太多

1

没有对比就没有伤害，还有 6 天

还有 6 天的投来羡慕的眼神

java 早多少年都说要被淘汰了，这都多少年了还建在呢。变成没有必要说死守那门开发语言。编程最后都是拼的变成思想。开发语言只不过是实现你的逻辑而已

放空

北京 2 挂了

https://logging.apache.org/log4j/2.x/

News
CVE-2021-44228
The Log4j team has been made aware of a security vulnerability, CVE-2021-44228, that has been addressed in Log4j 2.15.0.

Log4j’s JNDI support has not restricted what names could be resolved. Some protocols are unsafe or can allow remote code execution. Log4j now limits the protocols by default to only java, ldap, and ldaps and limits the ldap protocols to only accessing Java primitive objects by default served on the local host.

One vector that allowed exposure to this vulnerability was Log4j’s allowance of Lookups to appear in log messages. As of Log4j 2.15.0 this feature is now disabled by default. While an option has been provided to enable Lookups in this fashion, users are strongly discouraged from enabling it.

社区版啊，完全够用。

@BeijingBaby license 满一年有终身当前版本能使用过的

@chengyiqun 系统 win10 oracle jdk 1.8