Lea Kissner
@leak
Security, privacy, respect. Was the Twitter CISO until it was terrible. Now LinkedIn CISO. they/them
HEY GUESS WHAT YOU CAN ATTACH A GIANT BRIM TO YOUR BIKE HELMET AND MAKE IT INTO A GIANT HAT!
Did I mention that we've been writing a book? Fundamentally, security, privacy, trust&safety, AI safety -- all the fields aimed at dealing with dealing with how technical systems hurt people and how to avoid it -- share a foundation. We cover how to think and achieve *truly* effective practice. 1/
What *does* a hacker look like to you? I probably shouldn't admit how many black hoodies I own, should I? (Spy Museum in NYC, BTW. My kids loved it.)
I can't really walk this week for mysterious reasons* and boy is my dog happy with my inability to get into the office. * Literally I don't know why and the doctor doesn't have appointments for weeks. Please feel free to suggest good concierge doctors around Mountain View this is silly.
I have learned a valuable lesson thanks to a Little Free Library in my neighborhood: the Daily Mail and I do not agree on what makes a good novel.
Spotted in the San Jose airport TSA bins: Delve comparing themselves to the TSA. Given the accusations leveled at Delve, I'm very amused by "AI can't prevent a secondary pat-down but it can find your SOC 2 evidence"
Sir, your dog appears to have gone on strike from this form of recreation. Have you considered teaching them Twister?
Delve claims "Your CISO's cardiologist will thank you." Spoiler: they will not. www.inc.com/ben-sherry/t...
I have no idea what this person wanted when they called my spouse, but if they ask me for more wipes I also do not know what to say.
A security vendor sent me a pile of paper with many statistics where [citation needed]. For instance.... Why does automating IAM reduce the likelihood of a breach to 5%? From what? And how is that independent from, say, use of passkeys or auto-escaping templates?
The pink-ish background watercolor is a golem named Emmett (which is a pun) who has a security blanket. Also a pun. There's a very cool piece of Twitter artwork. The turtle is a gift from a coworker in the Bangalore office.
Over on the other wall is a card with messages and sketches like "this place is not a place if honor" and "the danger is still present in your time as it was in ours" from a project to figure out how to label nuclear waste. Also heavily memed. en.wikipedia.org/wiki/Long-te...
The oldest customer service complaint: the tablet of Ea-Nasir (top left) If you haven't heard of this yet, it's partially delightful for the rich trove of memes. Rich. Trove. I cannot explain how many memes over the last few decades. en.wikipedia.org/wiki/Complai...
Progress in my ongoing effort to decorate the wall behind me with something other than stacks of books. 🧵 for the fun stuff The round thing is the Incident Hat/Bad News hat. I can't remember if I've told this story here, but basically I trained several companies to be scared of a hat instead of me
@adamshostack.bsky.social says STOP DOING RISK 😆 (Math says no to a lot of things people do to try to predict risk. If math says no, I do, too) This talk is fantastic, I have so much to think about #usenix
I will admit that I find it endlessly entertaining to watch people try and fail to pick up my luggage -- this 30L backpack has all my food and accoutrements, a bunch of electronics, and personal items for 5 days. Fits under the seat in the airplane *and* provides me my workout for the week.
Pretty much any backpacking is good backpacking, but may I suggest backpacking to the beach?
It was Company Kickoff at LinkedIn this week. Pay no attention to the giant hacker lurking over my shoulder.
I absolutely love @xkcd.com's concept of the "lucky 10000" and I feel lucky both every time I get to introduce someone to something neat and when someone does the same for me. Comic at: xkcd.com/1053/
Me: ok Google, 35 minute timer, please Google: playing 35 minute timer with ambient music on YouTube Music 🎶 Me: 😫
Has this medical device company never heard of TLS/SSL? 😱 "Only use a cellular internet connection, a trusted Wi-Fi network ... or use a secure internet connection such as a VPN ... Don't use unsecured public Wi-Fi ... Those could expose the Stelo Glucose Biosensor to viruses or hacking."
... someone just sent me an unsolicited shoebox with three pieces of paper and a thin mouse pad. What a waste. 😔
So I read Character Limit... and all of those stickies in the picture are the places where I wanted to add other bonkers stories. I wasn't in the actual building for any of this (I'd just had surgery on my leg) and it was more than bonkers enough over Zoom.
I'm finally reading Character Limit. Living it once was really enough, but here we are. Send thoughts and prayers.