Signals on Logging Off

Patching Trust

Fri, 17 Oct 2025 10:45:00 +0200

In early 2025, I joined the first cohort of the GitHub Secure Open Source Fund—a program created to help maintainers secure the software they've built. At first, it wasn't a training. It was a déjà vu.

In 2021, Log4shell broke thousands of systems worldwide. It showed me how fragile our technical foundation can be. Everything I had learned back then was brought up again in that training.

Teaching Logging

Tue, 07 Oct 2025 00:00:00 +0200

When Log4Shell shook the Java world, I didn't believe it at first. Then I realized my team would have to fix it.

It could be a classic vulnerability story: a feature we added, forgot, and someone discovered how to exploit. While I was not working directly on the issue, many people knew me from Log4j. They called and asked how to fix it. I started sharing what I knew on Twitter and tried to respond to as many questions as possible.

The Weight of Maintainership

Sun, 05 Oct 2025 00:00:00 +0200

In April 2025, Bayerischer Rundfunk, a German public broadcaster, released an episode of the "Wild Wild Web" podcast about my open-source journey.
I talked to André for two days. I never thought I could talk for so long about my own story or that the result would feel so personal.

Serving the community

Fri, 03 Oct 2025 12:38:00 +0200

In March 2025, I opened an email.
"Welcome to the Java Champions Program"

Someone must have misspelled an email address and added me by accident. Why did my heart beat faster when I saw it?

“Hello, Christian. :) We’re pleased to inform you that your Java Champion nomination has been accepted.”