Lesley Carhart, Discover and Read the Best of Twitter Threads by @hacks4pancakes

Lesley Carhart

hacks4pancakes

I don’t think people appreciate how effectively Darkside has been ramping up operations mostly under the radar for the last year. This was a very big “oops”. They were doing

Asexual Enby story time because you keep asking for more representation: “Is this a fad?”I can only speak for myself, but as an adolescent I was so skeeved by turning

If you accuse people who give a crap about others who don't look, date, or pray like them of "virtue signaling", maybe you don't know enough people, and maybe you

Maybe your users aren't the weakest link in security.Maybe you're the weakest link in enabling your users to do their mission securely. Anyway a bunch of us exploded about Danny

SOC alert triage analysts, learn to threat hunt...https://twitter.com/bindureddy/status/1313890927685955585 A lot of people up in my DMs upset about this because they think I’m overselling ML. I’m really cynical about ML.

My friend complained to me today about how all we talk about now is depressing stuff. Look. Here's the deal.Anyone with any sense has had most of the expected nice

It would be great if everyone in infosec could get a little better at recognizing patterns of abuse and stalking, so 30 of us didn’t have to keep shouting about

There has been a problem recently with Twitter accounts popping up claiming to be young women starting in infosec. They ask for advice and social connections, but after investigation, their

I think the most numbing part of the last year is that I’ve kept making really unpleasant predictions, and very smart authority figures I respect continually reassured me I was

I find the hysteria over TikTok from people who use Facebook services and/or Uber horrifying, to be honest. What is your threat model where it’s not okay for China to

Here’s a scary thing about dealing with the Chinese or Russian gov as a state adversary:If you talk to any one of us who has spent our career dealing with

This is like me getting called into a massive cybersecurity incident where the DC has been pwned, the adversary has multiple footholds and C2 channels, telling the business to contain