For average/home users Someone on twitter asked two questions that I thought might be valuable for this article, paraphrasing: Can someone explain the Log4j vulnerability in non-IT terms, and is there any mitigation my level as average mere mortal? 1) A log component can ask external systems questions. The