Opens profile photo
Follow
Ray [REDACTED]
@RayRedacted
•
@DarknetDiaries
Assoc Producer • Fortune 100 VP • Cybersecurity Researcher •
@HackersHealth
advocate •
@DianaInitiative
evangelist & supporter He/him
Professional Services[REDACTED]redact.link/historyBorn January 1Joined November 2008
1,134 Following
46K Followers

Ray [REDACTED]’s Tweets

Pinned Tweet
Ray [REDACTED]
@RayRedacted
The best advice I can give you is this: You have Ring 3 friends, Ring 2's, Ring 1's, and, (if you are lucky!) a handful of Ring 0 friends. When an R1 or R0 tells you that you should delete a tweet, delete it immediately. You promoted that friend to R0 for a reason
20
74
513
Ray [REDACTED]
@RayRedacted
Tanya is awesome!!!! Definitely going to register for this!
Quote Tweet
GRIMM
@grimmcyber
·
#GRIMMCon 0x7 is excited to announce that our Opening Keynote Speaker will be Tanya Janca (@shehackspurple) on May 18! More details & registration info is coming soon; stay tuned!!
Image
1
8
Ray [REDACTED]
@RayRedacted
I would like to sincerely apologize to the Infosec community for attempting to coin the term “Cyber No-Fly zone” during tonight’s Ukraine firetalk. I have been disciplined.
21
16
178
Show this thread

Topics to follow

Sign up to get Tweets about the Topics you follow in your Home timeline.

Carousel

Ray [REDACTED]
@RayRedacted
During this event I will be matching any donations of $13 or $133 until I run out of money. This is a good cause so go crazy.
Quote Tweet
Bryson 🦄 #firetalk at ShmooCon
@brysonbort
·
We're hosting a private charity event on Thursday for @wckitchen in UKR with specially crafted cocktails (alcoholic and not) and faire by me, @allanfriedman @Kurt_theTurk @KeenanSkelly. We're raffling a ticket @shmoocon (thx @TypeMRT)! #StandWithUkraine eventbrite.com/e/a-curious-ad
1
6
10
Ray [REDACTED]
@RayRedacted
This is the most informative and concise thread you are going to read about Okta. Check it out:
Quote Tweet
Jake Williams
@MalwareJake
·
Let's decompose the comms from Okta about its compromise from the perspective of an incident responder and someone who has worked numerous incidents with third parties involved. First, let's acknowledge that Okta itself is a victim. 1/ okta.com/au/blog/2022/0
Show this thread
1
13
61
Ray [REDACTED]
@RayRedacted
That feeling when you are on your way to shmoocon and you accidentally stumble into the admin page on the airplane Wi-Fi systems.
Image
34
10
197
Ray [REDACTED]
@RayRedacted
It is absolutely disgusting how one party is suppressing black and brown votes, restricting reproductive rights, and espousing and encouraging hatred & discrimination against our transgender siblings, parents, & children. Pick a side. Get involved. And above all, vote.
5
18
79
Show this thread
Ray [REDACTED]
@RayRedacted
(CW: CSAM related discussion) How does this video make you feel? The is not a rhetorical question; I actually want to know what you think.
Embedded video
7:30
2M views
From
CSPAN
16
3
14
Ray [REDACTED]
@RayRedacted
Infosec pop quiz, question 78: Without looking it up, what is
@CPetersen_CS
referring to here?
Quote Tweet
Chris
@CPetersen_CS
·
Replying to @RayRedacted
That probably shaped my ideas about computer languages and compilers more than any CS class ever did. I'm not sure I can picture teaching some of those concepts any other way (but I'm old and get off my lawn you meddlesome kids!)... #parenthetical
3
1
2
Show this thread
Ray [REDACTED]
@RayRedacted
Last year a bunch of ppl who follow me claimed they still knaw how to diagram sentences the way we did in Middle School. OK, here's your chance to prove it to win either a T-shirt or twenty bucks worth of crypto then. 🤪
Quote Tweet
Sean Phillips
@Jacksons_Dad
·
Replying to @RayRedacted
The horse he rode in on has heard about what happens to horses that get rode in on, and would like to make clear that he just happened to get rode in on and wants no part of this.
6
5
Show this thread
Ray [REDACTED]
@RayRedacted
Am I the only person who wants to inquire about the horse’s anonymity being protected with the eye redaction in this thread
Image
Quote Tweet
z3dster
@z3dster
·
Image
Let's talk about Build the Wall, this racist and the horse he road in on instagram.com/p/BzIzGTHgc8I/
Show this thread
15
4
50
Ray [REDACTED]
@RayRedacted
I admit it’s been a few years since I took Constitutional Law, but I am 99% sure that the Dred Scott decision predated the concept of Substantive Due Process by years, Senator Cronyn. Also, the Supreme Court’s same sex marriage ruling did not rely on SDP regardless.
1
1
20
Show this thread
Ray [REDACTED]
@RayRedacted
A tweet from a CEO should be more specific than “the screenshots shared online”since this might be misinterpreted at a later date.
Quote Tweet
Todd McKinnon
@toddmckinnon
·
We believe the screenshots shared online are connected to this January event. Based on our investigation to date, there is no evidence of ongoing malicious activity beyond the activity detected in January. (2 of 2)
Show this thread
1
10
Ray [REDACTED]
@RayRedacted
Pop quiz question 77. (Yes, there are really 76 other questions; scroll up to see them all) In the tweet below,
@kgrubyhill
argues that using Knowledge-Based Authentication is not a best practice for MFA. Why is using KBA inherently risky?
Quote Tweet
KGruby 🇺🇦
@kgrubyhill
·
Authenticating users via security questions has always been a horrible idea. Now the FTC agrees! Goodbye “What's your mother's maiden name?” security questions. twitter.com/benrossen/stat…
3
2
10
Show this thread
Ray [REDACTED] Retweeted
KGruby 🇺🇦
@kgrubyhill
Authenticating users via security questions has always been a horrible idea. Now the FTC agrees! Goodbye “What's your mother's maiden name?” security questions.
Quote Tweet
Ben Rossen
@benrossen
·
FTC announced a new data security settlement today, one of the first under Khan's admin. The order has a couple new provisions that FTC watchers will want to look at closely. ftc.gov/news-events/ne
Show this thread
3
27
86
Ray [REDACTED] Retweeted
Ray [REDACTED]
@RayRedacted
It may be tempting to give and/or seek admin or root on every box; after all, we are conditioned to think of "access" as correlated with success, wealth, or even intelligence. But it is in your best interest to only have keys to the rooms you need. /2
Quote Tweet
Ray [REDACTED]
@RayRedacted
·
"Zero Trust" means that you should not trust even your future self. Don't give yourself access to PII or PHI data unless you actually need that access. And even then, place limits on it.
Show this thread
3
7
48
Show this thread
Ray [REDACTED]
@RayRedacted
It may be tempting to give and/or seek admin or root on every box; after all, we are conditioned to think of "access" as correlated with success, wealth, or even intelligence. But it is in your best interest to only have keys to the rooms you need. /2
Quote Tweet
Ray [REDACTED]
@RayRedacted
·
"Zero Trust" means that you should not trust even your future self. Don't give yourself access to PII or PHI data unless you actually need that access. And even then, place limits on it.
Show this thread
3
7
48
Show this thread
Ray [REDACTED]
@RayRedacted
"Zero Trust" means that you should not trust even your future self. Don't give yourself access to PII or PHI data unless you actually need that access. And even then, place limits on it.
20
57
408
Show this thread