Log4j vulnerability: what should boards be asking? | Hacker News Reader