---
title: "Discussion on \"Code opinion: should we blindly trust Open Source after Log4J's issues?\" | Hashnode"
description: "Discussion on \"Code opinion: should we blindly trust Open Source after Log4J's issues?\". With Log4J's vulnerability, we've all been reminded that systems are vulnerable, and OSS are not immune too. What should we do now?"
url: "https://hashnode.com/posts/code-opinion-should-we-blindly-trust-open-source-after-log4js-issues/634984458099b0024076fd36"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Code opinion: should we blindly trust Open Source after Log4J's issues?](https://code4it.hashnode.dev/code-opinion-should-we-blindly-trust-open-source-after-log4js-issues?utm_source=hashnode&utm_medium=feed)

With Log4J's vulnerability, we've all been reminded that systems are vulnerable, and OSS are not immune too. What should we do now?

Oct 14, 2022 · 5 min read · code4it.hashnode.dev  
Read the article

-   [#opensource](https://hashnode.com/tag/opensource)
-   [#security](https://hashnode.com/tag/security)
-   [#securityawareness](https://hashnode.com/tag/securityawareness)
-   [#programming](https://hashnode.com/tag/programming)
-   [#general-advice](https://hashnode.com/tag/general-advice)

## Written by

[Davide Bellone](https://hashnode.com/@davidebellone)

@davidebellone · Turin, Italy

  
[View profile](https://hashnode.com/@davidebellone)

Principal backend developer | Content Creator | Microsoft MVP

I’m a Principal Backend Developer with more than 10 years of professional experience. I’ve been working with Microsoft platforms and frameworks since 2014. I’ve worked with many tools and frameworks, such as Azure, MongoDB, Docker, and, of course, .NET and C#. I love learning new things, and I think that the best way to learn is to share: that’s why I started my journey as a content creator and conference speaker.

## Responses 2

Markdown supported · ⌘↵ to post

[Paul Oloyede](https://hashnode.com/@paulayo)

[Oct 18, 2022](https://hashnode.com/posts/code-opinion-should-we-blindly-trust-open-source-after-log4js-issues/634984458099b0024076fd36/comment/634f3800e687e493ec648e73)

Nice article @davidebellone

Thanks for sharing

[Josef Richberg](https://hashnode.com/@josefrichberg)

[Oct 17, 2022](https://hashnode.com/posts/code-opinion-should-we-blindly-trust-open-source-after-log4js-issues/634984458099b0024076fd36/comment/634d8f5d04eabc81632209fb)

I wonder about OSS. Originally it was designed to solve problems that were either too expensive to use or didn't exist. It was hailed as the way to unshackle your project from the exclusivity of corporate contracts, but I fear it has gone down the path of 'problems looking for solutions.

We as developers look to reinvent the wheel any chance we get as a way to prove our worth, sort of like a rite of passage. This comes at an immense cost. We no longer solve business problems in an efficient manner, we solve them haphazardly with various bits and bobbles.

I think OSS has seat at the table, but maybe not the table it currently takes residence at.