5 Effective Ways to Communicate with Infosec Community

Circle Ninja
Bug Bounty Hunting
Published in
3 min readFeb 10, 2019

--

Communication With Security Folks

Looking back at the time, I started my Infosec journey, I have come to realise my success and failures in this field.

Cyber Security being a vast area to explore, involves constant update to upcoming security methods so as to be ahead in the rat race of detecting bugs before it gets exploited.

I was very sceptical when I just started. The only big thing I considered and thought as my cup of tea was injecting payloads in all fields of the application and just hoping for a popup, to appear somehow(XSS IS GOD). Obviously I thought such finds are very easy but I lacked the technical knowledge of HOW THE POPUP CAME ?

Overtime, I learned a lot of new stuff, delved deeper and deeper to technical stuffs and gained much insights from watching and reading contents from the Infosec community. The thing I like about security folks is the absolute network one has created, be it online groups, conferences etc where like minded individuals may come together and research on amazing new finds.

Well, starting anything it is quotidian to have doubts over silly topics. And so, some of us, traverse for the ‘so-called’ PRO’s in security community hoping to find answers to our silly questions. This post discusses on how to interact with security folks online ?

1. Google is your best friend

Google is the one stop junction to satiate all our basic queries. Read everything and anything you need. Know that asking very basic questions to others via DM will make your dignity go down in other’s viewpoint and they may even ignore you completely ’cause basic doubts can be easily found via simple searches.

2. Be Respectful

“Hey what you found there?”

“Send me your payload”

“Bounty Paid?”

“Send me proof !”

Well you know better, what are conversational etiquettes ? Be respectful to others and expect them to give it back to you.

3. HI, Hello Nagging

I used to receive a number of messages with “Hi, how are you?”, Hello whatsup ?”, “Hello I have a important doubt ?”, “Are you willing to talk with me?”

It would be so better and time saving, instead of hi and hello’s , you directly asked the doubt in one go!

Ex.” Hello, I have a small doubt. When I go to this url, I find this information disclosure? Can you please suggest me some ways to go ahead. Thanks.”

4. Accept to be Ignored

It is very common that some folks will never reply to any of your queries, however you try to communicate with them.

Ensure that you don’t bust your head thinking why they never replied to your queries. Move on, jump to other opportunities and people.

5. Help Others to be Helped

Some people simply run around for tips and tricks but never come forward with anything they can give back to the community. It is never good to collect gold in a house when you know today or tomorrow, you won’t be the richest one around. So sharing is caring.

I see some folks sharing, “I earned bounty of XYZ dollars from abc program.” Well good for you brother, but how does that help others in any way? We are happy for you, but what are you going to gain by posting such things? Respect ? I don’t know!

There are a lot of folks sharing daily tips and tricks on Twitter. Here I created something to help all to ensure a one stop reading place for tips- TheBugBot

I hope this was useful. Sorry if it hurt anyone. I look forward for support from all.

--

--