{"id":10112,"date":"2021-12-23T10:38:44","date_gmt":"2021-12-23T10:38:44","guid":{"rendered":"https:\/\/www.barnsten.com\/?p=10112"},"modified":"2021-12-23T10:38:44","modified_gmt":"2021-12-23T10:38:44","slug":"impact-de-log4j-sur-le-developpement-de-logiciels-avec-delphi-et-cbuilder","status":"publish","type":"post","link":"https:\/\/www.barnsten.com\/fr\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\/","title":{"rendered":"Impact de Log4j sur le d\u00e9veloppement de Software avec Delphi et C++Builder"},"content":{"rendered":"
par Marco Cant\u00f9<\/h6>\n

R\u00e9flexions sur les probl\u00e8mes de s\u00e9curit\u00e9 de Log4j, ce qu'ils impliquent pour la communaut\u00e9 des d\u00e9veloppeurs en g\u00e9n\u00e9ral, et l'effet sp\u00e9cifique sur les d\u00e9veloppeurs RAD Studio.<\/p>\n

\n
\n

\u00c0 moins que vous ne viviez sur une \u00eele isol\u00e9e sans connexion Internet, vous avez certainement entendu parler de la\u00a0Probl\u00e8mes li\u00e9s \u00e0 Log4j<\/a>\u00a0qui a affect\u00e9 un grand nombre d'applications et de services internet au cours des dix derniers jours. La d\u00e9couverte fortuite de ce bogue critique dans le contexte des messages de la console Minecraft (la saisie d'un message sur le client du jeu Minecraft pourrait permettre \u00e0 quelqu'un d'ex\u00e9cuter du code sur un serveur Minecraft) en raison de l'utilisation d'une biblioth\u00e8que de journalisation Java extr\u00eamement populaire\u00a0appel\u00e9 Log4j<\/a>En raison de ce probl\u00e8me, toutes les soci\u00e9t\u00e9s informatiques et toutes les entreprises utilisant des applications logicielles ont d\u00fb v\u00e9rifier si le probl\u00e8me affectait les logiciels, les services h\u00e9berg\u00e9s, les sites web internes et tout autre sc\u00e9nario d'utilisation de l'entreprise.<\/p>\n

La liste des applications logicielles concern\u00e9es (il y a\u00a0un ici<\/a>par exemple) est assez impressionnant, car m\u00eame s'il a perdu un peu de sa popularit\u00e9 et de sa force marketing, Java est et reste l'un des langages les plus populaires au monde, et la JVM l'un des environnements d'ex\u00e9cution les plus populaires.<\/p>\n

RAD Studio Code natif et pas de d\u00e9pendance Java<\/strong><\/h3>\n

Qu'est-ce que cela signifie pour le Embarcadero en g\u00e9n\u00e9ral et le RAD Studio en particulier ? Directement, pas grand-chose. Software construit en Delphi ou C++Builder n'utilise pas ou ne d\u00e9pend pas de Java (\u00e0 l'exception des applications Android) et n'utilise donc pas Log4j. Plus g\u00e9n\u00e9ralement, Delphi et C++Builder cr\u00e9ent des applications compil\u00e9es nativement, qui sont moins sujettes aux probl\u00e8mes d'environnement d'ex\u00e9cution (je fais ici r\u00e9f\u00e9rence aux environnements d'ex\u00e9cution Java, .NET ou JavaScript). Cependant, dans ce cas, le probl\u00e8me ne concernait pas l'environnement d'ex\u00e9cution, mais une biblioth\u00e8que populaire, et les d\u00e9veloppeurs RAD Studio utilisent des composants compl\u00e9mentaires et des biblioth\u00e8ques tierces, comme le fait toute autre communaut\u00e9 de d\u00e9veloppeurs.<\/p>\n

Permettez-moi de clarifier encore une fois : Un serveur ou un service web construit en Delphi ou C++Builder (ou C++ en g\u00e9n\u00e9ral) n'est pas concern\u00e9 par le probl\u00e8me Log4j. Il en va de m\u00eame, bien s\u00fbr, pour les applications web construites en ASP.NET, Python ou PHP. Le probl\u00e8me est sp\u00e9cifique aux logiciels \u00e9crits en Java - et il y a beaucoup de logiciels Java, comme indiqu\u00e9 ci-dessus.<\/p>\n

Pour en revenir \u00e0 Delphi et C++Builder, le fait de disposer d'un code compil\u00e9 contribue \u00e0 la s\u00e9curit\u00e9, mais n'est pas suffisant. Il est \u00e9galement important de ne choisir que des biblioth\u00e8ques et des composants auxquels vous pouvez faire enti\u00e8rement confiance (en exigeant au minimum que le code source soit inclus). En outre, il est \u00e9galement important pour un d\u00e9veloppeur d'\u00e9crire du code en mettant l'accent sur la s\u00e9curit\u00e9. Comme nous l'avons mentionn\u00e9 la semaine derni\u00e8re,\u00a0codage par copier-coller<\/a>\u00a0(bien qu'il ne soit pas directement responsable du probl\u00e8me Log4j) est un style de codage \u00e0 l'oppos\u00e9 de l'\u00e9criture d'applications s\u00e9curis\u00e9es.<\/p>\n

Contribuer \u00e0 l'Open Source<\/strong><\/h3>\n

Il y a \u00e9galement un autre probl\u00e8me cl\u00e9 que les probl\u00e8mes de Log4j ont mis en \u00e9vidence : il y a des projets de plusieurs millions de dollars g\u00e9r\u00e9s par de grandes entreprises qui s'appuient sur des projets open-source sans financement, g\u00e9r\u00e9s par des d\u00e9veloppeurs pendant leur temps libre (en dehors de leur travail r\u00e9gulier). L'id\u00e9e qu'il est possible d'utiliser des logiciels libres pour r\u00e9duire les co\u00fbts sans consacrer du temps, des ressources ou de l'argent aux projets sur lesquels on s'appuie est en train de devenir un \u00e9norme probl\u00e8me dans l'industrie.<\/p>\n

Cela vaut \u00e9galement pour l'\u00e9cosyst\u00e8me Delphi et C++Builder : Embarcadero a commenc\u00e9 \u00e0 financer et \u00e0 faire des dons \u00e0 quelques biblioth\u00e8ques open source, mais nous devrions faire plus. Nous encourageons \u00e9galement toutes les applications professionnelles qui exploitent de mani\u00e8re significative les biblioth\u00e8ques et outils Delphi \u00e0 source ouverte \u00e0 y contribuer, y compris par le biais d'\u00e9valuations de s\u00e9curit\u00e9 !<\/p>\n

Combien de projets open-source utilisez-vous pour vos applications professional et quand avez-vous fait un don \u00e0 l'un d'entre eux pour la derni\u00e8re fois ?<\/p>\n

La s\u00e9curit\u00e9 a de multiples facettes<\/strong><\/h3>\n

La s\u00e9curit\u00e9 est un continuum qui n\u00e9cessite de multiples angles d'approche et chacun des \u00e9l\u00e9ments ci-dessous peut s'av\u00e9rer utile :<\/p>\n

    \n
  • Applications compil\u00e9es nativement<\/li>\n
  • Pas de d\u00e9pendance \u00e0 l'\u00e9gard d'un environnement d'ex\u00e9cution<\/li>\n
  • Utilisation de biblioth\u00e8ques et de composants tiers approuv\u00e9s et fiables<\/li>\n
  • S'engager \u00e0 contribuer aux projets open-source que vous exploitez<\/li>\n
  • Accent mis sur la s\u00e9curit\u00e9 lors de l'\u00e9criture du code (pas de codage par copier-coller)<\/li>\n
  • Outil de v\u00e9rification du code source d'une application<\/li>\n
  • Stockage s\u00e9curis\u00e9 du code source (pour \u00e9viter l'injection de code source)<\/li>\n
  • Environnement de construction s\u00e9curis\u00e9 (pour \u00e9viter l'injection de code binaire)<\/li>\n
  • Signature de l'ex\u00e9cutable de l'application<\/li>\n<\/ul>\n

    Bien qu'elle ne soit pas exhaustive et qu'elle privil\u00e9gie le code compil\u00e9 (nous pensons vraiment que c'est important), nous esp\u00e9rons que cette liste et la r\u00e9action g\u00e9n\u00e9rale \u00e0 l'incident Log4j vous aideront, vous et votre organisation, \u00e0 repenser la s\u00e9curit\u00e9 et \u00e0 valoriser le r\u00f4le des d\u00e9veloppeurs, qui sont la pierre angulaire de tout sc\u00e9nario de d\u00e9veloppement s\u00e9curis\u00e9.<\/p>\n

    Bon codage avec votre RAD Studio sans Log4j \ud83d\ude09<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

    par Marco Cant\u00f9 R\u00e9flexions sur les probl\u00e8mes de s\u00e9curit\u00e9 de Log4j, ce qu'ils impliquent pour la communaut\u00e9 des d\u00e9veloppeurs en g\u00e9n\u00e9ral, et l'effet sp\u00e9cifique sur RAD...<\/p>","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[130],"tags":[],"class_list":["post-10112","post","type-post","status-publish","format-standard","hentry","category-products"],"acf":[],"yoast_head":"\nImpact of Log4j on Software Development with Delphi and C++Builder - Barnsten.com<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.barnsten.com\/fr\/impact-de-log4j-sur-le-developpement-de-logiciels-avec-delphi-et-cbuilder\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Impact of Log4j on Software Development with Delphi and C++Builder - Barnsten.com\" \/>\n<meta property=\"og:description\" content=\"by Marco Cant\u00f9 Thoughts on the security issues of Log4j, what they imply for the developer community in general, and the specific effect on RAD...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.barnsten.com\/fr\/impact-de-log4j-sur-le-developpement-de-logiciels-avec-delphi-et-cbuilder\/\" \/>\n<meta property=\"og:site_name\" content=\"Barnsten.com\" \/>\n<meta property=\"article:published_time\" content=\"2021-12-23T10:38:44+00:00\" \/>\n<meta name=\"author\" content=\"Margreet van Muyden\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Margreet van Muyden\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\\\/\"},\"author\":{\"name\":\"Margreet van Muyden\",\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/nl\\\/#\\\/schema\\\/person\\\/7b5b9f84835f241d5ed9c9b0425cc414\"},\"headline\":\"Impact of Log4j on Software Development with Delphi and C++Builder\",\"datePublished\":\"2021-12-23T10:38:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\\\/\"},\"wordCount\":771,\"publisher\":{\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/nl\\\/#organization\"},\"articleSection\":[\"Products\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\\\/\",\"url\":\"https:\\\/\\\/www.barnsten.com\\\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\\\/\",\"name\":\"Impact of Log4j on Software Development with Delphi and C++Builder - Barnsten.com\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/nl\\\/#website\"},\"datePublished\":\"2021-12-23T10:38:44+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.barnsten.com\\\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.barnsten.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Impact of Log4j on Software Development with Delphi and C++Builder\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/nl\\\/#website\",\"url\":\"https:\\\/\\\/www.barnsten.com\\\/nl\\\/\",\"name\":\"Barnsten.com\",\"description\":\"Development Software & Database tools\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/nl\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.barnsten.com\\\/nl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/nl\\\/#organization\",\"name\":\"Barnsten B.V.\",\"url\":\"https:\\\/\\\/www.barnsten.com\\\/nl\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.barnsten.com\\\/wp-content\\\/uploads\\\/2019\\\/04\\\/Barnsten-logo-oranje@3x.png\",\"contentUrl\":\"https:\\\/\\\/www.barnsten.com\\\/wp-content\\\/uploads\\\/2019\\\/04\\\/Barnsten-logo-oranje@3x.png\",\"width\":406,\"height\":150,\"caption\":\"Barnsten B.V.\"},\"image\":{\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.barnsten.com\\\/nl\\\/#\\\/schema\\\/person\\\/7b5b9f84835f241d5ed9c9b0425cc414\",\"name\":\"Margreet van Muyden\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b6cb2b1994a759ceea85e5bcb172de4dc431649686257679ce7eb46fb4bde80d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b6cb2b1994a759ceea85e5bcb172de4dc431649686257679ce7eb46fb4bde80d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b6cb2b1994a759ceea85e5bcb172de4dc431649686257679ce7eb46fb4bde80d?s=96&d=mm&r=g\",\"caption\":\"Margreet van Muyden\"},\"url\":\"https:\\\/\\\/www.barnsten.com\\\/fr\\\/author\\\/margreet\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Impact de Log4j sur le d\u00e9veloppement de Software avec Delphi et C++Builder - Barnsten.com","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.barnsten.com\/fr\/impact-de-log4j-sur-le-developpement-de-logiciels-avec-delphi-et-cbuilder\/","og_locale":"fr_FR","og_type":"article","og_title":"Impact of Log4j on Software Development with Delphi and C++Builder - Barnsten.com","og_description":"by Marco Cant\u00f9 Thoughts on the security issues of Log4j, what they imply for the developer community in general, and the specific effect on RAD...","og_url":"https:\/\/www.barnsten.com\/fr\/impact-de-log4j-sur-le-developpement-de-logiciels-avec-delphi-et-cbuilder\/","og_site_name":"Barnsten.com","article_published_time":"2021-12-23T10:38:44+00:00","author":"Margreet van Muyden","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"Margreet van Muyden","Dur\u00e9e de lecture estim\u00e9e":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.barnsten.com\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\/#article","isPartOf":{"@id":"https:\/\/www.barnsten.com\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\/"},"author":{"name":"Margreet van Muyden","@id":"https:\/\/www.barnsten.com\/nl\/#\/schema\/person\/7b5b9f84835f241d5ed9c9b0425cc414"},"headline":"Impact of Log4j on Software Development with Delphi and C++Builder","datePublished":"2021-12-23T10:38:44+00:00","mainEntityOfPage":{"@id":"https:\/\/www.barnsten.com\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\/"},"wordCount":771,"publisher":{"@id":"https:\/\/www.barnsten.com\/nl\/#organization"},"articleSection":["Products"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/www.barnsten.com\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\/","url":"https:\/\/www.barnsten.com\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\/","name":"Impact de Log4j sur le d\u00e9veloppement de Software avec Delphi et C++Builder - Barnsten.com","isPartOf":{"@id":"https:\/\/www.barnsten.com\/nl\/#website"},"datePublished":"2021-12-23T10:38:44+00:00","breadcrumb":{"@id":"https:\/\/www.barnsten.com\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.barnsten.com\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.barnsten.com\/impact-of-log4j-on-software-development-with-delphi-and-cbuilder\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.barnsten.com\/"},{"@type":"ListItem","position":2,"name":"Impact of Log4j on Software Development with Delphi and C++Builder"}]},{"@type":"WebSite","@id":"https:\/\/www.barnsten.com\/nl\/#website","url":"https:\/\/www.barnsten.com\/nl\/","name":"Barnsten.com","description":"Logiciels de d\u00e9veloppement et outils de base de donn\u00e9es","publisher":{"@id":"https:\/\/www.barnsten.com\/nl\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.barnsten.com\/nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/www.barnsten.com\/nl\/#organization","name":"Barnsten B.V.","url":"https:\/\/www.barnsten.com\/nl\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.barnsten.com\/nl\/#\/schema\/logo\/image\/","url":"https:\/\/www.barnsten.com\/wp-content\/uploads\/2019\/04\/Barnsten-logo-oranje@3x.png","contentUrl":"https:\/\/www.barnsten.com\/wp-content\/uploads\/2019\/04\/Barnsten-logo-oranje@3x.png","width":406,"height":150,"caption":"Barnsten B.V."},"image":{"@id":"https:\/\/www.barnsten.com\/nl\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.barnsten.com\/nl\/#\/schema\/person\/7b5b9f84835f241d5ed9c9b0425cc414","name":"Margreet van Muyden","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/b6cb2b1994a759ceea85e5bcb172de4dc431649686257679ce7eb46fb4bde80d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/b6cb2b1994a759ceea85e5bcb172de4dc431649686257679ce7eb46fb4bde80d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b6cb2b1994a759ceea85e5bcb172de4dc431649686257679ce7eb46fb4bde80d?s=96&d=mm&r=g","caption":"Margreet van Muyden"},"url":"https:\/\/www.barnsten.com\/fr\/author\/margreet\/"}]}},"_links":{"self":[{"href":"https:\/\/www.barnsten.com\/fr\/wp-json\/wp\/v2\/posts\/10112","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.barnsten.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.barnsten.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.barnsten.com\/fr\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.barnsten.com\/fr\/wp-json\/wp\/v2\/comments?post=10112"}],"version-history":[{"count":0,"href":"https:\/\/www.barnsten.com\/fr\/wp-json\/wp\/v2\/posts\/10112\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.barnsten.com\/fr\/wp-json\/wp\/v2\/media?parent=10112"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.barnsten.com\/fr\/wp-json\/wp\/v2\/categories?post=10112"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.barnsten.com\/fr\/wp-json\/wp\/v2\/tags?post=10112"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}