Remote

Katie Moussouris (she/her)🥜👋🏼

@k8em0@infosec.exchange

Personal social media, use specific contact info below! ✌🏼💗🌺  CEO @LutaSecurity@infosec.exchange Founder @payequitynow MIT &Harvard visiting scholar, @NewAmCyber & @MasonNatSec Fellow. Hacker.  #BugBounty #VulnerabilityDisclosure expert   👩🏻‍💻👩🏻‍💻👩🏻‍💻 Hire us or refer a customer: info@Lutasecurity.com 💰Earn ca$h for referrals that lead to new customers:
https://LutaSecurity.com/referralbounty 💵  👩🏻‍💻 Apply for a job with us: https://LutaSecurity.com/careers Questions and resume submission: Careers@Lutasecurity.com 🌺🌺🌺 ✨✨✨ ✨Media/public speaking: press@Lutasecurity.com✨ 🎤🎤🎤  😻😻😻 😻Cat/vacation/thirst traps/food pics:  https://Instagram.com/kmoussouris 💃🏻 💃🏻💃🏻 I’ve been a molecular biologist, bioinformatics engineer, UNIX sysadmin, Linux developer, professional penetration tester, security code reviewer, and now founder of a successful bootstrapped cyber company. I’m far older than I look & therefore have no time for nonsense. 🚨🚨Mansplain to me at your peril.🚨🚨  Peace, love, and healthy boundaries to you all ✌🏼💖🌺

0 Followers

0 Following

16 Posts

Joined November 11, 2022

Equality:

https://Payequitynowfoundation.org

Work - Let Me Pay You:

https://LutaSecurity.com/referralbounty

Kobayashi Maru:

https://ManglonaLab.org

Instgram Cats & Thirst Traps:

https://www.instagram.com/kmoussouris/

Posts

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Apr 12, 2023

Replying to @jaydotno@infosec.exchange

@jaydotno@infosec.exchange I included the picture Credit and license - it’s not a picture I took.

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Apr 12, 2023

Ah yes, another high profile bug bounty forcing non-disclosure — even for fixed bugs.
🤦🏻‍♀️
It’s the bugs they won’t fix that will put users at risk.
All orgs need a vulnerability disclosure program that doesn’t ban Disclosure.
But what do I know.
I just coauthored the standard
#GPT

“But it’s a bug bounty & they are paying so it’s fair to ask for non disclosure”
That’s fine if everything submitted is paid work, like a penetration test.
Oh, only paying selectively & only the first of any duplicates?
That’s labor abuse & the worst gig economy deal out there.

“But pen tests don’t get you all the eyeballs”

Neither do bug bounties - you get a random number of eyeballs willing to sign NDAs.

If orgs actually care about security, they cast as wide a net s as possible to get the best researchers - especially those who won’t sign NDAs.

“This is better than no bug bounty”

No, it isn’t.

It breeds a false sense of security for users & the org itself, while actively excluding the highest skilled researchers who will never sign an NDA for speculative pay or who want to see the bugs FIXED as their motivation.

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Apr 12, 2023

Today I cried with joy & gratitude that I’m alive when I saw the Olympic mountains.

So much better than the tears I’ve been crying lately.

Find your tears of joy among all the tears of sorrow.

Cookies need both salt & sugar to come out right🍪
Pic cred:

https://commons.wikimedia.org/wiki/File:The_Brothers_from_West_Seattle.jpg

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Apr 10, 2023

Just got good news.

The kind that makes you cackle.

Such great news!!

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Apr 07, 2023

@prasket@mastodon.seattlematrix.org
My go to oatmeal — the pouch is a measuring cup! 🥣 😋

(Elvis scooter gang tattoo not included)

mastodon.seattlematrix.org

prasket (@prasket@seattlematrix.org) - Mastodon offered by SeattleMatrix.org

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Apr 07, 2023

Conversations I truly cherish, memories of hackerish things mixed with the fact that we’re all getting old & have to watch our health. 💞

- Remember when you were in Vegas in a scooter gang dressed as Elvis during Defcon?

- I’m eating oatmeal every day to lower my cholesterol.

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Apr 06, 2023

@craig@risk.social hi Craig! Please drop us a line at info@Lutasecurity.com so we can find time to chat

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Apr 06, 2023

Ready to start a fun partnership with a strong, capable, mature…

…cyber insurance company.

Who has a contact at one that understands:

✅vulnerability disclosure or bug bounties can be useful indicators of security

BUT

🛠️there’s wild competency variance behind the curtain

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Apr 04, 2023

I’ve never refinanced a mortgage before & I got a weird question from the underwriter

asking why I paid myself more 1 year versus the year before.

I said I don’t understand the question but as the sole owner of my company

I can pay myself whatever I want.

#bootstrap #founder

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Mar 31, 2023

Early #caturday with this furry little guy who knows I’m sick & is doing his best to help me out.
#catsofmastodon

infosec.exchange

Infosec Exchange

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Mar 30, 2023

So much of my adult growth is in determining of all the endeavors I want to do, all the people I want to be close to, which of these I must let go because they aren’t good for me & only want to use me.

Feeling these growing pains in my bones today.

I miss hacking for a living.

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Mar 27, 2023

Guard your time with your life because it is the same thing.

Claiming you “need” to work all the time is just giving up your life in exchange for money.

Are you being compensated adequately for all that life sacrifice?

If you have the privilege in job choice, take it & live 🖖🏼

111

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Mar 26, 2023

What would you do with your life if everyone had enough and would always have enough?

I would make music & art & scientific discoveries to cure chronic diseases.

Until then, I’m working on everyone having enough.

145

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Feb 06, 2023

Replying to @clarity3747@ioc.exchange

@clarity3747 not at this time. Our customers are requiring US only. Check this out though, you may be able to earn referral bounties: https://infosec.exchange/@k8em0/109819641584842041

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Feb 06, 2023

Check out this new job from @lutasecurity

- remote US
- contract to FTE
- FTE medical benefits & 4 day work week
- lead a team running some of the biggest #bugbounty programs in the world
- email careers@Lutasecurity.com with questions or to apply

https://www.linkedin.com/jobs/view/3464944861/

Katie Moussouris (she/her)🥜👋🏼 @k8em0@infosec.exchange · Dec 09, 2022

New #Security Conversations #podcast where @ryanaraine@infosec.exchange interviews me about bug bounties, and I remind folks that we’re paying out REFERRAL BOUNTIES for email introductions that lead us to new contracts - up to $100,000.
https://securityconversations.com/episode/katie-moussouris-on-where-bug-bounties-went-wrong/

Remote instance

infosec.exchange

Open on original server