Ryan Black - infosec.exchange/@digitalwoot

CISO @ Security SaaS company and know-enough-to-be-dangerous dev. (he/him)

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@Jortez82 @POTUS @realDonaldTrump This is why you vote for tenable, consistent principles and not some dumb idea of "winning" (or others losing).

Enjoy the results of your actions -- both the macro and micro environment your voting has created. lol!

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@RepClayHiggins I'd dismiss this as an angry and unprofessional tweet from a politician, but in 2025, threats by government officials that are overtly against the Constitution or the authority they are given by the people are common these days. You don't belong in office.

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

The prime mistake is believing that a degree qualifies you for anything.

Everyone with this mentality is about to be very unhappy—especially when AI has 100,000 times your education and never gets tired, sick, or wants a new job.

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@dok2001 @Cloudflare @dok2001 (and the @Cloudflare support team) really saved my bacon. There is indeed an edge case issue which will be addressed and I am back up as well. Thank you Dane and team! 🙏

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

Word of caution on @Cloudflare, there is a business logic issue where automatically assigned NS can be incorrect while the customer also cannot change them, which results in a complete outage. The domain will not verify and even Pro support for a crit is approaching 3 days.

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@dok2001 @Cloudflare Shot you a DM. I hate shooting a flare on a Sunday but given the impact and potential for others wanted to do something. I'm past expected bounce retries, for example, so I'm losing emails. If I can help further I'll watch my DM and the open ticket from Friday.

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@dok2001 @Cloudflare Absolutely -- I know this is a bug and want to help. I'll DM now.

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

Historic context is a deleted zone reinstated may have NS reissued. Then the domain will need to be reverified. This means if new NS are changed by auto-assignment the domain will be unable to be verified, while having incorrect NS, resulting in a full outage.

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@Jhaddix Many of the organizations buying these know good and well what they are receiving. Just like “I know an auditor” some of these artifacts are deliberate rubber stamping.

Anyone who has data in the custody of others, that makes all of us, deserves better.

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@GrantCarthew @DanielMiessler @RyanLaBouve C# is easily built self-contained and multi-platform. I do it all the time for small tools (and I also use Golang) https://t.co/3J7uMjtYXu

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@DanielMiessler @RyanLaBouve I second @RyanLaBouve on Go and Rust. I will add that .NET is strongly cross-platform too and C# is a great language. Some of this depends on what you're writing and the existing talent you may want to assist as well. Everyone has a favored hammer but Python is indeed a mess.

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@Bugcrowd would it be possible to add a "thick client" or similar category for Windows/Mac OS/++ applications? While not as common, certainly not as a public program, reverse engineering native apps are what I enjoy testing. There's also less competition... 😇 🙏

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@gdattacker @Jhaddix @G0LDEN_infosec @AARP Thank you 🙏

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@Jhaddix Happy new year bud

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@crazyclipsonly Quick, clear, and gratefully non-lethal consequences. This is the definition of the ideal in working as intended.

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@leifdreizler The 110 level of "FTP port 21 open to the internet" vulnerability reports... 😅

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@rainprofits Not the hero we deserve, but the hero we need. Thank you!

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@mattjay That is absolutely hilarious but also a bit depressing. Perhaps not Microsoft, I hope, but I see this all the time with smaller shops who are actually serious. Don't get me started on disguising high-level security sales as a field or vCISO either...

[Ryan Black - infosec.exchange/@digitalwoot @digitalwoot]

@caseyjohnellis Erry day