Lisi Hocke
@lisihocke.bsky.social
security engineer, holistic tester, quality enabler, agile experimenter, sociotechnical symmathecist, team glue. volleyball player, game lover, story escapist. she/her.
https://www.lisihocke.com
https://mastodon.social/@lisihocke
https://linktr.ee
https://www.lisihocke.com
https://mastodon.social/@lisihocke
https://linktr.ee
Pinned
BSides Munich 2025 - On First Times
A blog about learning, agile product development and software testing.
www.lisihocke.com
my third #BSidesMunich came with lots of first times to celebrate | A Tester's Journey: BSides Munich 2025 - On First Times www.lisihocke.com/2025/11/bsid... #BSidesMunich2025 #BSides
Reposted by Lisi Hocke
People kept claiming AI will enable malware to automatically rewrite itself to avoid antivirus detections. So to make a point l spend 30 minutes building this joke application. It rewrites itself ever 0.5 second, except without using AI. Every variant simply just outputs "Hello World".
November 16, 2025 at 7:45 PM
People kept claiming AI will enable malware to automatically rewrite itself to avoid antivirus detections. So to make a point l spend 30 minutes building this joke application. It rewrites itself ever 0.5 second, except without using AI. Every variant simply just outputs "Hello World".
Reposted by Lisi Hocke
I have a friend who prefers to stay anonymous who gives this amazing talk in non US (but allied) countries about how long their internet will -really- function if they lose all comms with American data centers and it’s… phew. It’s a thing.
November 18, 2025 at 2:29 PM
I have a friend who prefers to stay anonymous who gives this amazing talk in non US (but allied) countries about how long their internet will -really- function if they lose all comms with American data centers and it’s… phew. It’s a thing.
Reposted by Lisi Hocke
I was talking with a friend of mine today about that outlook one needs to have in order to deeply change systems. It's a squishy sort of emotion that we can't name or label cleanly, but she inspired me to write down my best attempt at describing it. What do you think?
hazelweakly.me/blog/to-be-a...
hazelweakly.me/blog/to-be-a...
To Be a Leader of Systems | Hazel Weakly
Picture with me, if you will, the absurdity of finding yourself swimming in the middle of the ocean. First think about the ocean and how deep and infinitely...
hazelweakly.me
November 18, 2025 at 5:40 PM
I was talking with a friend of mine today about that outlook one needs to have in order to deeply change systems. It's a squishy sort of emotion that we can't name or label cleanly, but she inspired me to write down my best attempt at describing it. What do you think?
hazelweakly.me/blog/to-be-a...
hazelweakly.me/blog/to-be-a...
Reposted by Lisi Hocke
It always makes me chuckle how occasionally you'll run into beginners who say stuff like "real hackers use Linux". Real hackers aren't constrained by operating system choice. In fact, half the fun is running into that weird edge case where you end up having to code your own OS for some niche task.
November 20, 2025 at 5:48 PM
It always makes me chuckle how occasionally you'll run into beginners who say stuff like "real hackers use Linux". Real hackers aren't constrained by operating system choice. In fact, half the fun is running into that weird edge case where you end up having to code your own OS for some niche task.
Reposted by Lisi Hocke
Women and older career switchers are generally not even exposed to red team as an option of interest that they’d be good at using socialized skills, which is kinda crazy when the most ignored people in society who can pretty much walk in anywhere are older women. Instead we portray it like esports.
November 22, 2025 at 5:17 AM
Women and older career switchers are generally not even exposed to red team as an option of interest that they’d be good at using socialized skills, which is kinda crazy when the most ignored people in society who can pretty much walk in anywhere are older women. Instead we portray it like esports.
Reposted by Lisi Hocke
Cybersecurity isn’t ready for the conversation about how bad sexism and ageism are in the whole pen test / red team community, or how influencer culture and the saturated market are enabling it to get worse. www.linkedin.com/pulse/tryhac...
TryHackMe's Advent of Cyber 2025: Zero Women Creators - A Critical Look at Representation in Cybersecurity Education
THE PROBLEM 18 creators. Zero women.
www.linkedin.com
November 22, 2025 at 4:33 AM
Cybersecurity isn’t ready for the conversation about how bad sexism and ageism are in the whole pen test / red team community, or how influencer culture and the saturated market are enabling it to get worse. www.linkedin.com/pulse/tryhac...
On my way to #AgileTD for the final conference and community celebration of the year. 🤩 Can't wait to meet folks and learn together. Especially looking forward to our security testing deep dive track! 🛡️ 1/2
November 22, 2025 at 3:50 PM
On my way to #AgileTD for the final conference and community celebration of the year. 🤩 Can't wait to meet folks and learn together. Especially looking forward to our security testing deep dive track! 🛡️ 1/2
my third #BSidesMunich came with lots of first times to celebrate | A Tester's Journey: BSides Munich 2025 - On First Times www.lisihocke.com/2025/11/bsid... #BSidesMunich2025 #BSides
BSides Munich 2025 - On First Times
A blog about learning, agile product development and software testing.
www.lisihocke.com
November 22, 2025 at 3:01 PM
my third #BSidesMunich came with lots of first times to celebrate | A Tester's Journey: BSides Munich 2025 - On First Times www.lisihocke.com/2025/11/bsid... #BSidesMunich2025 #BSides
This week was super busy, but it started out really nice with attending #BSidesMunich together with a bunch of my colleagues. Fully enjoyed my time there, seeing folks from last editions and also #osco25 again, learning together. Many thanks to the organizers for giving us this space!
November 21, 2025 at 10:40 PM
This week was super busy, but it started out really nice with attending #BSidesMunich together with a bunch of my colleagues. Fully enjoyed my time there, seeing folks from last editions and also #osco25 again, learning together. Many thanks to the organizers for giving us this space!
What an amazing conference day of #BSidesMunich2025! Great talks, even greater people to exchange knowledge with. 💡 This day came with another #AchievementUnlocked: I had the honor of being the session chair for two talks today - a great experience. 😊 Thanks everyone for making this event awesome! ✨
November 17, 2025 at 4:42 PM
What an amazing conference day of #BSidesMunich2025! Great talks, even greater people to exchange knowledge with. 💡 This day came with another #AchievementUnlocked: I had the honor of being the session chair for two talks today - a great experience. 😊 Thanks everyone for making this event awesome! ✨
Reposted by Lisi Hocke
Today and tomorrow I'm attending one of the largest software testing conferences in Germany. In the past it was very "white middle aged men in suits" which is thankfully changing.
Still I decided to bring my whole self to mix things up - in conference colors no less 😁
#testing #conference #qstag2025
Still I decided to bring my whole self to mix things up - in conference colors no less 😁
#testing #conference #qstag2025
November 12, 2025 at 3:26 PM
Today and tomorrow I'm attending one of the largest software testing conferences in Germany. In the past it was very "white middle aged men in suits" which is thankfully changing.
Still I decided to bring my whole self to mix things up - in conference colors no less 😁
#testing #conference #qstag2025
Still I decided to bring my whole self to mix things up - in conference colors no less 😁
#testing #conference #qstag2025
Reposted by Lisi Hocke
I don't have a proper picture of the outfit yet but I have an action shot of me giving my talk on "exploratory ensemble testing" today with my usual "my values" slide.
This is a rather conservative conference so I'm glad that I got to do all of this. Let's see if I'll allowed to be back 😁
This is a rather conservative conference so I'm glad that I got to do all of this. Let's see if I'll allowed to be back 😁
November 13, 2025 at 2:24 PM
I don't have a proper picture of the outfit yet but I have an action shot of me giving my talk on "exploratory ensemble testing" today with my usual "my values" slide.
This is a rather conservative conference so I'm glad that I got to do all of this. Let's see if I'll allowed to be back 😁
This is a rather conservative conference so I'm glad that I got to do all of this. Let's see if I'll allowed to be back 😁
Reposted by Lisi Hocke
Whew. Listen. You talk to a lot of young people today and the whole conversation is basically them asking “where is the fix?” It’s not that they don’t work hard. They’re actually working very hard to find ways to exploit the system.
November 13, 2025 at 5:00 PM
Whew. Listen. You talk to a lot of young people today and the whole conversation is basically them asking “where is the fix?” It’s not that they don’t work hard. They’re actually working very hard to find ways to exploit the system.
Reposted by Lisi Hocke
Hear hear
The most common things engineering leaders think will make dev teams go faster actually have the opposite effect.
codemanship.wordpress.com/2025/11/13/t...
codemanship.wordpress.com/2025/11/13/t...
The Seven Deadly Sins of “Go Faster”
Things that will make your dev team take longer to deliver worse software:1. Adding more people to the team2. Making them work longer hours3. Cutting down on work that “slows them down”…
codemanship.wordpress.com
November 13, 2025 at 8:55 PM
Hear hear
Reposted by Lisi Hocke
Black Mirror but make it fashion.
November 14, 2025 at 6:15 PM
Black Mirror but make it fashion.
Reposted by Lisi Hocke
Blogged: We do not all have the same job
About how limited and limiting the lowest common denominator is in a group of testers.
smallsheds.garden/blog/2025/we...
About how limited and limiting the lowest common denominator is in a group of testers.
smallsheds.garden/blog/2025/we...
We do not all have the same job
you keep using that word...
smallsheds.garden
November 16, 2025 at 2:04 PM
Blogged: We do not all have the same job
About how limited and limiting the lowest common denominator is in a group of testers.
smallsheds.garden/blog/2025/we...
About how limited and limiting the lowest common denominator is in a group of testers.
smallsheds.garden/blog/2025/we...
Gave my first workshop at a security conference. #AchievementUnlocked 💪🏻😎🎉 It was such a pleasure offering "Secure Development Lifecycle Applied - How to Make Things a Bit More Secure than Yesterday Every Day" at #BSidesMunich2025! Loved seeing this engaged audience enjoy the hands-on exercises. 😊
November 15, 2025 at 5:28 PM
Gave my first workshop at a security conference. #AchievementUnlocked 💪🏻😎🎉 It was such a pleasure offering "Secure Development Lifecycle Applied - How to Make Things a Bit More Secure than Yesterday Every Day" at #BSidesMunich2025! Loved seeing this engaged audience enjoy the hands-on exercises. 😊
New personal record: gave 7 presentations within 2 days, in 2 languages, on the same topic: asking our team leads across engineering for their support on our upcoming security champion pilot program. Received great feedback and they're willing to help with this initiative. 💪🏻😊🎉
November 14, 2025 at 11:30 PM
New personal record: gave 7 presentations within 2 days, in 2 languages, on the same topic: asking our team leads across engineering for their support on our upcoming security champion pilot program. Received great feedback and they're willing to help with this initiative. 💪🏻😊🎉
Reposted by Lisi Hocke
This blog post isn't about software testing, but about surviving in this demanding world. It's a long post, but definitely worth reading if you also feel like there are never enough hours in a day.
insights gained from my personal #CalmAndSteady challenge | A Tester's Journey: Attempting to Stay Calm and Steady - Concluding Remarks www.lisihocke.com/2025/11/atte...
Attempting to Stay Calm and Steady - Concluding Remarks
A blog about learning, agile product development and software testing.
www.lisihocke.com
November 12, 2025 at 7:44 AM
This blog post isn't about software testing, but about surviving in this demanding world. It's a long post, but definitely worth reading if you also feel like there are never enough hours in a day.
Reposted by Lisi Hocke
Just introduced a new category of reverse engineering labs: Multistage. Multistage labs simulate full malware attack chains based on real-world malware campaigns. These labs are designed to familiarize malware analysts with reversing complex infection chains, rather than just standalone malware.
Multistage - Reverse Engineering Labs
Real world malware infections often happen in stages. Each step of the infection chain is responsible for initializing the next. For these challenges, you'll have to analyze your way through more…
malwaretech.com
November 9, 2025 at 10:35 PM
Just introduced a new category of reverse engineering labs: Multistage. Multistage labs simulate full malware attack chains based on real-world malware campaigns. These labs are designed to familiarize malware analysts with reversing complex infection chains, rather than just standalone malware.
Reposted by Lisi Hocke
So the US recently forced the Dutch to remove a memorial to America's own Black soldiers that died liberating the Netherlands from the nazis? On brand.
Towards the end of WW2, the French were shocked when the US refused to let its own Black soldiers join the celebration the liberation of Paris.
Towards the end of WW2, the French were shocked when the US refused to let its own Black soldiers join the celebration the liberation of Paris.
November 11, 2025 at 10:59 AM
So the US recently forced the Dutch to remove a memorial to America's own Black soldiers that died liberating the Netherlands from the nazis? On brand.
Towards the end of WW2, the French were shocked when the US refused to let its own Black soldiers join the celebration the liberation of Paris.
Towards the end of WW2, the French were shocked when the US refused to let its own Black soldiers join the celebration the liberation of Paris.
Reposted by Lisi Hocke
If you want to have a gathering for women, call it a gathering for women. If you want to have a gathering for women & non-binary people, call it a gathering for women & non-binary people. If you want to make non-binary people sad, call it the Women’s Community Gathering and put us in the fine print
November 11, 2025 at 5:58 AM
If you want to have a gathering for women, call it a gathering for women. If you want to have a gathering for women & non-binary people, call it a gathering for women & non-binary people. If you want to make non-binary people sad, call it the Women’s Community Gathering and put us in the fine print
insights gained from my personal #CalmAndSteady challenge | A Tester's Journey: Attempting to Stay Calm and Steady - Concluding Remarks www.lisihocke.com/2025/11/atte...
Attempting to Stay Calm and Steady - Concluding Remarks
A blog about learning, agile product development and software testing.
www.lisihocke.com
November 11, 2025 at 7:03 PM
insights gained from my personal #CalmAndSteady challenge | A Tester's Journey: Attempting to Stay Calm and Steady - Concluding Remarks www.lisihocke.com/2025/11/atte...
Reposted by Lisi Hocke
As a software architect, psychology is one of my super powers for this reason. We live in a world where the people building some of the most influential tools of thought are the very same people who refuse to acknowledge the difficulty of the problem or hold the human mind in sufficient reverence
As a psychologist, it's a really, really, really interesting and maddening set of problems here. Software development really exposes for me how we think about people's minds, even though it's an industry that likes to pretend it isn't thinking about people's minds at all.
But it really is.
But it really is.
November 9, 2025 at 6:39 PM
As a software architect, psychology is one of my super powers for this reason. We live in a world where the people building some of the most influential tools of thought are the very same people who refuse to acknowledge the difficulty of the problem or hold the human mind in sufficient reverence
Reposted by Lisi Hocke
