Bryan D. Payne

Security leader who merges classic security thinking with modern, large-scale, cloud service deployments. Now at @[email protected].

[Bryan D. Payne @bdpsecurity]

I'll be attending #Enigma2022 this week and would love to connect with people in person or via the conference Slack. I'm also hiring for the security team at @BetterUp and happy to discuss our open roles!

[Bryan D. Payne @bdpsecurity]

Thanks @guypod for a great conversation! I hope everyone else enjoys it too!

[AI Security Engineers @aiseceng]

On ep. 109 of #TheSecureDev, we dive into the inspiration behind @Netflix's security program with the man who helped build it – @bdpsecurity.

Learn about his role as Engineering Director and strategy for managing product security teams on a large scale.🎧 https://t.co/phpLRQOPgd

[Bryan D. Payne @bdpsecurity]

@moyix @tklengyel Love it! It’s great to know that code is still working well!

[Be A King @BerniceKing]

As you honor my father today, please remember and honor my mother, as well.

She was the architect of the King Legacy and founder of @TheKingCenter, which she founded two months after Daddy was assassinated.

Without #CorettaScottKing, there would be no #MLKDay. #MLK

[Be A King @BerniceKing]

“The white liberal must see that the Negro needs not only love but also justice. It is not enough to say, “We love Negroes, we have many Negro friends.” They must demand justice for Negroes.

Love that does not satisfy justice is no love at all.”

Rev. Dr. Martin Luther King, Jr.

[Bryan D. Payne @bdpsecurity]

@royalhansen @philvenables I love this advice. It reminds me of the “player mindset” from https://t.co/7eYWPiWRD3

[Daniel Zappala @Daniel_Zappala]

@enigmaconf is a model of how to follow safety guidelines. Other conferences take note!

[BSidesSF @BSidesSF]

Tickets! Come and get your tickets! Registration is open for #BSidesSF 2022! Buy your ticket now at https://t.co/ERWhT2g9Qp, and we’ll see you in February.

[Bryan D. Payne @bdpsecurity]

@frgx @boblord Yes, there is the CDN use case. But here I'm really talking about remote workstations for latency sensitive tasks. More like https://t.co/1p2pZw2yCf

[Bryan D. Payne @bdpsecurity]

@boblord @frgx Latency is the best argument I’ve heard. It usually doesn’t matter, but for some interactive apps you need latency that is lower than what is physically possible using the nearest cloud data center.

[Bryan D. Payne @bdpsecurity]

@JosiahDykstra Netflix did an analysis of when they tended to run the most incidents (so, related, but not exactly what you are asking). Everyone thought it would be Friday, but it wasn’t! I believe @swathijoshi was involved in this analysis.

[Bryan D. Payne @bdpsecurity]

To all of the people working tirelessly to patch #log4j this weekend, thanks and best of luck! And remember to take care of yourself along the way!

[Bryan D. Payne @bdpsecurity]

My son and his friends are holding a bake sale to benefit #TeamSeas! You can help clean the oceans too by donating today at https://t.co/RF9K29MnFZ! Thanks!!

[Lea Kissner @LeaKissner]

It's nearly 2022, and you know what that means: @enigmaconf is coming! The program is 🔥, so plan now to attend Feb 1-3. (Details in thread)

How 🔥, you may ask? Very 🔥. A whole 🧵 full and more...
https://t.co/3acEKTU0Z7

[Bryan D. Payne @bdpsecurity]

I really appreciate this writeup. Understanding and solving for these kinds of problems is how we move the field forward. In this case, it's perhaps yet another signal that we need to move forward to memory safe languages.

[Tavis Ormandy @taviso]

This is a major memory corruption flaw in NSS, almost any use of NSS is affected. The Mozilla advisory is here https://t.co/AL8suyLQFF

[Bryan D. Payne @bdpsecurity]

This is a wild insider threat story. It reminds me a bit of Robert Hanssen (insider covering their own tracks). https://t.co/5YvbsrLzjE

[Bryan D. Payne @bdpsecurity]

@issackelly Looks great! Nice work!

[Bryan D. Payne @bdpsecurity]

Happy Thanksgiving to all who celebrate! May your pies be delicious!

[Simon J. Bell @SimonByte]

I wanted a way to monitor trending CVEs on Twitter

So I built https://t.co/YiHEgCQ2y9

- data comes from Twitter + NIST NVD APIs
- back-end: Python, Flask, PostgreSQL, and Redis
- front-end: React + Bootstrap

It's a quick MVP, but let me know your thoughts and feedback...

[Bryan D. Payne @bdpsecurity]

It’s a honeypot! https://t.co/vupOKkKl5p