@hacks4pancakes@infosec.exchange

Lesley Carhart

@hacks4pancakes@infosec.exchange · 3d ago

Boosted by

Trending Bot @trending@homestead.social

Um, can anyone please help me with a contact at VirusTotal to unblock a school IP?

7

1

37

1

Lesley Carhart

@hacks4pancakes@infosec.exchange · 6d ago

Replying to @benno@eigenmagic.net

@benno@eigenmagic.net that’s gonna screw me up forever

8

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · 6d ago

Nobody warns you how tremendously disconcerting going back to an American restaurant is after living anywhere else long term.

them walking off with your credit card & no tap to pay
the huge portions and sodium
the weird attentiveness for tips
being IDed over 30
flags everywhere

315

40

113

1

Lesley Carhart

@hacks4pancakes@infosec.exchange · 6d ago

Replying to @hacks4pancakes@infosec.exchange

Water has more problems because of its infrastructure and municipal funding. But to adversaries who may actually comprehend the horror of not having sewage systems long term and the health impacts, it’s a prime, increasingly vulnerable target. We’ve worried about water for a very long time.

74

1

16

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · 6d ago

Replying to @hacks4pancakes@infosec.exchange

So I think for the average citizen and even politician when we think about attacks against critical infrastructure, our brains rapidly go to the one thing we can conceptualise - the grid failing. And that has driven investment and regulation.

54

1

7

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · 6d ago

Replying to @hacks4pancakes@infosec.exchange

Most of us growing up in relative privilege have not lived at home without potable (or any) running water for more than a few hours or a day. Even less so with failed sewage. If we’re very remote and off grid, we even have redundancies.

67

1

11

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · 6d ago

I’ve been talking to a lot of journalists about the US Midwest water hacking and I get asked a lot why we hear so little about cyber threats against water and sewage when it’s what scares us as practitioners the most. I think it’s psychological. >>>

113

5

80

3

Lesley Carhart

@hacks4pancakes@infosec.exchange · 6d ago

Replying to @hacks4pancakes@infosec.exchange

In Australia and America (and similar countries with solid infrastructure) we only typically see one utility fail long term outside of major natural disasters. That’s electric power. We can imagine that short term. We have a plan to get a flashlight out. We have generators.

47

1

6

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Aug 02, 2026

Replying to @SarraceniaWilds@sunny.garden

@SarraceniaWilds@sunny.garden @ellie@ellieayla.net they unscrew

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Aug 02, 2026

Replying to @jpm@aus.social

@jpm@aus.social but that’s why it has the grippy end

5

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Aug 02, 2026

Since we are doing eating and Australia this is how you eat fast food sushi in Australia - one of the cheapest quick bites you can get anywhere.

151

25

64

1

Lesley Carhart

@hacks4pancakes@infosec.exchange · Aug 01, 2026

Replying to @hacks4pancakes@infosec.exchange

I thought everyone knew this but .... Neurodivergent story time! In the era of French aristocracy, American culture was just starting to get posh. And Americans (colonists then citizens) at the time decided great high class table manners meant copying high French fashion. So they adopted this weird "zig zag" method of eating where we only eat with the fork in our right hands facing up like you'd scoop food, but also only use the knife in our right hands. So every time you cut something you set the fork down and switch hands, then switch back. We can't eat with a fork in our left hand (if we were raised with strict table manners that don't care about handedness). America did that big revolution and our big freedom thing and never switched back. The rest of the world moved on to knife in the right hand, fork in the left turned downward whilst cutting stuff. You can always tell an American while eating by how we use the knife and fork. It's how they caught spies in WWII. Turns out it is incredibly hard to relearn XD

32

5

14

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Aug 01, 2026

Replying to @hacks4pancakes@infosec.exchange

This is legitimately not a joke. I feel so stupid and clumsy. I'm not sure I will ever get it down even though I try every single time I go out to dinner. And I was raised with strict table manners and can eat with chopsticks perfectly, too.

12

1

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Aug 01, 2026

Emigrating has generally been a very, very complicated and difficult task, but by far the hardest aspect has been relearning how to use a knife and fork. It's way harder than accents or driving on the other side of the road.

12

2

5

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 31, 2026

Boosted by

Trending Bot @trending@homestead.social

I hate this. https://www.reddit.com/r/ITCareerQuestions/comments/1vbsrpf/comment/p0w8t1z/?context=3

468

69

319

9

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 30, 2026

Replying to @hacks4pancakes@infosec.exchange

The “kind regards” I can’t This is the most Australian shit ever

54

0

3

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 30, 2026

Even the man stubbornly fights the man in Australia This is the KFC reaction to a postal worker getting fired after an unauthorised KFC break (other stuff too, but everyone likes a good tale)

208

10

109

1

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 27, 2026

They had better have chosen ACDC for the Australian emergency alert tone

0

3

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

Replying to @grumpydad@infosec.exchange

@grumpydad@infosec.exchange I guess. I saw the birdcage and but I’m a cheerleader around 200 times

1

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

I’m in Singapore, and somehow I accidentally booked myself a tiny Disney princess hotel room that I can barely move around in without bonking my shins. It is tremendously goofy and fun but I have also been on 70 hours of flights so I’m very tired

62

3

14

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

Replying to @lilstevie@infosec.exchange

@lilstevie@infosec.exchange I also want a jousting stick and I would absolutely buy one on marketplace

0

1

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

Replying to @grumpydad@infosec.exchange

@grumpydad@infosec.exchange never saw it even on the lgbt streams or networks. I’m sure it existed but I never ran into it anywhere.

2

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

Replying to @hacks4pancakes@infosec.exchange

I can’t think of a relatively mainstream dark comedy of the era that was that fair and kind to a trans character (who -spoilers!!!- ends up with a nice straight boyfriend).

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

Priscilla, Queen of the Desert and The Castle are both absolutely iconic movies for millennials and Gen X, and I can’t believe I never saw them in America. I mean, Hugo Weaving giving a thoughtful performance on 90s LGBT struggles, in drag, with dialogue on trans life at the time. (Cis actor aside.)

0

6

1

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

Replying to @hacks4pancakes@infosec.exchange

I get so much AI spam related to jobs, and it’s so obvious because AI cannot articulate what my job is at all. “I am so impressed with your work in critical infrastructure intelligence forensics testing” ??? I even get AI headhunted by AI companies who also have no idea what I do. It doesn’t say a lot about the capability of their AI.

26

2

7

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

Replying to @hacks4pancakes@infosec.exchange

Just being a ticket desk volunteer for a few hours and being personable at a local BSides goes so much further than 500 Claude spam messages to strangers on LinkedIn…

0

3

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

Replying to @wollman@mastodon.social

@wollman@mastodon.social @Kugg@infosec.exchange I see a lot of “installer is dead and left no documentation”

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

People don’t get that how far a bit of courtesy and effort goes in job hunts. I have gifted conference passes, party invites, given referrals, certification vouchers, and internships to mentees who showed up and cared. I’ve also permanently blocklisted people who low effort AI spammed, or no showed.

0

2

1

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

Replying to @Kugg@infosec.exchange

@Kugg@infosec.exchange cost to upgrade both purely financial and logistical and downtime / safety related. It’s very very expensive to do an upgrade certified safe and authorised by the OEM, if they are even in business anymore. You wait until you have millions of extra dollars. Controls are architectural defence in depth and monitoring

6

1

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

Replying to @loke@functional.cafe

@loke@functional.cafe I just wanted a daily work bag

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

Replying to @wendynather@infosec.exchange

@wendynather@infosec.exchange it seems durable but that’s about it

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 22, 2026

I bought a Fjallraven backpack because they were so highly recommended, and I’m sorry, I don’t understand the point and I have massive regrets. Someone needs to sell me the bag I purchased, because it’s not padded well and has no luggage strap or extra security pockets. Why do people buy these?

0

7

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 21, 2026

Replying to @Retreival9096@hachyderm.io

@Retreival9096@hachyderm.io hospitals, etc too. It’s a way bigger mess than people realise

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 21, 2026

I’ll be debuting a new paper tomorrow at #OTCEP withJan Hoff. It’s about how to detect and more relevantly, remediate large scale commodity malware infections in legacy Windows environments that are unfortunately extremely common in critical infrastructure. https://dragos.brightspotcdn.com/26/7e/547e75c5410ba8e2aec7525fae46/dragos-2026-otcep-ir-whitepaper.pdf

9

2

5

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 20, 2026

Replying to @gwenthefops@transfem.social

@gwenthefops@transfem.social I agree. Events and companies based there are slower to move events, sadly.

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 20, 2026

Replying to @hacks4pancakes@infosec.exchange

@praetor@mstdn.social and I absolutely know there are good people and people who at least let others live and let live in all those red states.

7

2

1

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 20, 2026

Replying to @praetor@mstdn.social

@praetor@mstdn.social this study is based on legal and employment statistics and convictions, not just public sentiment.

12

1

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 20, 2026

Replying to @hacks4pancakes@infosec.exchange

Someone on BlueSky rightly commented, “Queer rights are just a canary for every other human right there”

351

5

144

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 20, 2026

Replying to @amanda@social.spejset.org

@amanda@social.spejset.org also a genuine consideration especially if they shut down ports.

10

1

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 20, 2026

Replying to @hacks4pancakes@infosec.exchange

Someone should drop major cybersecurity and tech conferences on this tbh.

91

5

14

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 20, 2026

Having an in person international or national event in America? Are you weighing factors like lodging and transport? Cool stuff to do? Here’s a map to consider if any of your attendees may possibly, even remotely be LGBTQIA. And you care about them.

593

64

625

10

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 17, 2026

American exceptionalism is a hell of a drug and psychosis. Try being an immigrant American living somewhere with social medical and telling people it’s actually good and less expensive. The bots and naysayers come screaming out of the woodwork to try to make excuses for why it’s actchully terrible.

337

28

164

1

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 16, 2026

Replying to @Infosecben@ioc.exchange

@Infosecben@ioc.exchange pretty much all the big EDR vendors support exactly to SP2 and that’s the great divide, alas

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 15, 2026

I talked to Decipher about my upcoming academic paper on legacy malware response in critical infrastructure https://cybersecpods.com/podcasts/decipher-security-podcast/industrial-cybersecurity-and-malware-archaeology-with-lesley-carhart/

15

1

19

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 08, 2026

Replying to @badsamurai@infosec.exchange

@badsamurai@infosec.exchange I wholeheartedly agree. I went to the ends of the earth to buy a dumb tv.

13

3

1

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 08, 2026

Replying to @hacks4pancakes@infosec.exchange

It’s a really bad sign for capitalism when consumer society is like, f this, I want to buy things from 2015.

424

20

142

1

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 08, 2026

It’s fascinating to live in a time where the majority of global consumers are just fed up and hate everything new on the market. Hate removal of physical media Hate forced AI Hate video surveillance in cars and homes Hate micro transactions Hate digital subscriptions What a time to be alive!

961

53

650

7

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 08, 2026

Replying to @hacks4pancakes@infosec.exchange

Oooh, it was NTP! Spicy!

0

4

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jul 07, 2026

I’m going to be pretty surprised honestly if Telstra being totally down for four hours isn’t DNS.

6

2

0

Lesley Carhart

@hacks4pancakes@infosec.exchange · Jun 21, 2026

Boosted by

Trending Bot @trending@homestead.social

The most benign but still absolutely terrible part of Palantir surveilling every move we make in global groceries is someone actually does know and permanently record when I eat nothing but paneer tikka masala instant meals for 10 days straight

201

20

66

1

Lesley Carhart

Posts

Remote instance

Media