Ray Duran

InfoSec, Bug Bounty, Beer, Amateur carpentry. All views are my own and do not represent my employer.

[Ray Duran @RayDuranSec]

@paxwhitmore @MpoortSec Hope you and your family are doing well @bilcorry !

[Alex Rice @senorarroz]

My #COVID19 testing story.

March 7th: 103 fever, aches, elevated heart rate. I grab a mask, and head to Urgent Care.

Negative for flu, strep, and a few other tests.

Dr starts calling for covid-19 screening. After multiple phone calls she's increasingly annoyed. (Thread)

[Katee Sackhoff @kateesackhoff]

Ok...while I understand taking precautions; toilet paper?! Seriously!? If you get quarantined you’ll be at home...Where you most undoubtedly have a shower, with water, and towels to dry. Just jump in a clean your butt 🤷🏼‍♀️🤯

[Pax Whitmore @paxwhitmore]

I'll be joining @Hacker0x01 to talk vuln management, coordinated disclosure, and all things #bugbounty at #RSAC2020!
https://t.co/XyQJSNJMaw

[Pax Whitmore @paxwhitmore]

🎶Toss a coin to the hackers, the bugs are a-plenty 🎶

[Ray Duran @RayDuranSec]

Thinking beyond your QA career? try security testing by Assaf Lowenstein https://t.co/QpOHqDR7H8

[5pm Incident @5pmIncident]

Company: Wanna put toys in this box so we look charitable?
Me: no thanks
Company: The winning dept gets cupcakes and ribbons

[Rachel Tobac @RachelTobac]

The mid pentest break through.

[James Kettle @albinowax]

I know DoS attacks are deeply unsexy, and I'm still somewhat in shock that I ever wrote an entire post about them. The core aim of this post is to illustrate how in the right circumstances they can be fun, high-impact and profitable https://t.co/az3gKjW7lX

[Pax Whitmore @paxwhitmore]

Thank you for the opportunity and great questions! I'm around all day for CVSS and Nicolas Cage discussion.

[Sheril Kirshenbaum, PhD @Sheril_]

Me: I’m excited to head to DC next week!

Him: Will your husband be okay w the kids?

Me: Yep. He’s their dad.

(No one asks my husband this question when he travels. Ever. 🤔)

[Joel Margolis (teknogeek) @0xteknogeek]

I have just released the SSRF-testing sheriff that was used during H1-4420 2019! Huge thanks to @fransrosen for the original inspiration and request :)

Feel free to send in any suggestions and contributions you might have! https://t.co/ZgXS2LeCt4

[Ray Duran @RayDuranSec]

PayPal Celebrates Its First Anniversary on HackerOne https://t.co/xulCAEF1XK

[Ray Duran @RayDuranSec]

Fantastic SSRF presentation!! @NahamSec You give so much back to the community. #GlobalAppsec

[NPR @NPR]

One cybersecurity expert was asked how much the security for U.S. voting systems has improved since 2016.

He cut off the question.

"Oh, we have done nothing," he said, echoing a sentiment of many experts at @defcon.
https://t.co/wNCGxdO0vQ

[James Kettle @albinowax]

F5 has just published a security advisory about HTTP Desync Attacks on BIG-IP https://t.co/HRVDdx19gD

[Alton Brown @altonbrown]

For those who might be interested: the first trailer for #goodeatsthereturn

[JS0N Haddix @Jhaddix]

The infosec sticker archive / "awesome stickers" repo - https://t.co/oQRMJuNpcA by @securingdev 👍💪