Lea Kissner
@leak.bsky.social
Security, privacy, respect. Was the Twitter CISO until it was terrible. Now LinkedIn CISO. they/them
TIL that setting LESSSECURE makes you more secure
September 15, 2025 at 9:24 PM
TIL that setting LESSSECURE makes you more secure
@adamshostack.bsky.social says STOP DOING RISK 😆
(Math says no to a lot of things people do to try to predict risk. If math says no, I do, too)
This talk is fantastic, I have so much to think about #usenix
(Math says no to a lot of things people do to try to predict risk. If math says no, I do, too)
This talk is fantastic, I have so much to think about #usenix
August 13, 2025 at 10:53 PM
@adamshostack.bsky.social says STOP DOING RISK 😆
(Math says no to a lot of things people do to try to predict risk. If math says no, I do, too)
This talk is fantastic, I have so much to think about #usenix
(Math says no to a lot of things people do to try to predict risk. If math says no, I do, too)
This talk is fantastic, I have so much to think about #usenix
I will admit that I find it endlessly entertaining to watch people try and fail to pick up my luggage -- this 30L backpack has all my food and accoutrements, a bunch of electronics, and personal items for 5 days. Fits under the seat in the airplane *and* provides me my workout for the week.
August 12, 2025 at 12:52 AM
I will admit that I find it endlessly entertaining to watch people try and fail to pick up my luggage -- this 30L backpack has all my food and accoutrements, a bunch of electronics, and personal items for 5 days. Fits under the seat in the airplane *and* provides me my workout for the week.
Pretty much any backpacking is good backpacking, but may I suggest backpacking to the beach?
August 6, 2025 at 2:40 PM
Pretty much any backpacking is good backpacking, but may I suggest backpacking to the beach?
It was Company Kickoff at LinkedIn this week. Pay no attention to the giant hacker lurking over my shoulder.
July 23, 2025 at 9:27 PM
It was Company Kickoff at LinkedIn this week. Pay no attention to the giant hacker lurking over my shoulder.
Flew all the way to LA for a (gluten free) bagel. Worth it.
May 21, 2025 at 4:10 PM
Flew all the way to LA for a (gluten free) bagel. Worth it.
I absolutely love @xkcd.com's concept of the "lucky 10000" and I feel lucky both every time I get to introduce someone to something neat and when someone does the same for me.
Comic at: xkcd.com/1053/
Comic at: xkcd.com/1053/
![Comic with two panels.
First panel: I try not to make fun of people for admitting they don't know things. Because for each thing "everyone knows" by the time they're adults, every day there are, on average, 10,000 people in the US hearing about it for the first time.
Fraction who have heard about it at birth = 0%
Fraction who have heard of it by 30 [symbol for approximately equals] 100%
US birth rate [symbol for approximately equals] 4,000,000/year
Number hearing about it for the first time [symbol for approximately equals] 10,000/day
Second panel: If I make fun of people, I train them not to tell me when they have one of those moments. And I miss out on the fun.
(Because the BlueSky app will not show me this text I'm typing it may not be perfect, sor. ..
Two stick figures taking:
First: Diet coke and mentor thing, what's that?
Second: oh man! Come on we're going to the grocery store!
First: why?
First: you're one of today's lucky 10,0000ry)
Two stick figures](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:zhbym6ooroh2uhqag4m5pkcz/bafkreiam3n7os3yliwalbrpnaryhevphqxvjmpqjkf7i46w5adlso3zzji@jpeg)
April 27, 2025 at 4:42 AM
I absolutely love @xkcd.com's concept of the "lucky 10000" and I feel lucky both every time I get to introduce someone to something neat and when someone does the same for me.
Comic at: xkcd.com/1053/
Comic at: xkcd.com/1053/
Me: ok Google, 35 minute timer, please
Google: playing 35 minute timer with ambient music on YouTube Music 🎶
Me: 😫
Google: playing 35 minute timer with ambient music on YouTube Music 🎶
Me: 😫
April 24, 2025 at 2:11 AM
Me: ok Google, 35 minute timer, please
Google: playing 35 minute timer with ambient music on YouTube Music 🎶
Me: 😫
Google: playing 35 minute timer with ambient music on YouTube Music 🎶
Me: 😫
Has this medical device company never heard of TLS/SSL? 😱
"Only use a cellular internet connection, a trusted Wi-Fi network ... or use a secure internet connection such as a VPN ... Don't use unsecured public Wi-Fi ... Those could expose the Stelo Glucose Biosensor to viruses or hacking."
"Only use a cellular internet connection, a trusted Wi-Fi network ... or use a secure internet connection such as a VPN ... Don't use unsecured public Wi-Fi ... Those could expose the Stelo Glucose Biosensor to viruses or hacking."
April 17, 2025 at 7:14 PM
Has this medical device company never heard of TLS/SSL? 😱
"Only use a cellular internet connection, a trusted Wi-Fi network ... or use a secure internet connection such as a VPN ... Don't use unsecured public Wi-Fi ... Those could expose the Stelo Glucose Biosensor to viruses or hacking."
"Only use a cellular internet connection, a trusted Wi-Fi network ... or use a secure internet connection such as a VPN ... Don't use unsecured public Wi-Fi ... Those could expose the Stelo Glucose Biosensor to viruses or hacking."
You will stay here. Residence is futile.
April 10, 2025 at 3:03 PM
You will stay here. Residence is futile.
... someone just sent me an unsolicited shoebox with three pieces of paper and a thin mouse pad. What a waste. 😔
March 27, 2025 at 6:09 PM
... someone just sent me an unsolicited shoebox with three pieces of paper and a thin mouse pad. What a waste. 😔
So I read Character Limit... and all of those stickies in the picture are the places where I wanted to add other bonkers stories. I wasn't in the actual building for any of this (I'd just had surgery on my leg) and it was more than bonkers enough over Zoom.
March 24, 2025 at 6:50 PM
So I read Character Limit... and all of those stickies in the picture are the places where I wanted to add other bonkers stories. I wasn't in the actual building for any of this (I'd just had surgery on my leg) and it was more than bonkers enough over Zoom.
I'm finally reading Character Limit. Living it once was really enough, but here we are. Send thoughts and prayers.
March 2, 2025 at 4:05 AM
I'm finally reading Character Limit. Living it once was really enough, but here we are. Send thoughts and prayers.
Windy Hill really lived up to its name; I was trying to keep the phone from being ripped out of my hand.
(I think I'm also a convert to frameless packs for backpacking. Also please take care of yourselves.)
(I think I'm also a convert to frameless packs for backpacking. Also please take care of yourselves.)
January 21, 2025 at 8:39 PM
Windy Hill really lived up to its name; I was trying to keep the phone from being ripped out of my hand.
(I think I'm also a convert to frameless packs for backpacking. Also please take care of yourselves.)
(I think I'm also a convert to frameless packs for backpacking. Also please take care of yourselves.)
I can't run but somehow Pikmin Bloom says I've maxed out walking
January 13, 2025 at 4:26 AM
I can't run but somehow Pikmin Bloom says I've maxed out walking
Smells good looks cursed
January 11, 2025 at 12:16 AM
Smells good looks cursed
... Um.... Is my mochi cake cursed?
January 10, 2025 at 11:30 PM
... Um.... Is my mochi cake cursed?
Same, bumper sticker, same.
January 1, 2025 at 5:43 PM
Same, bumper sticker, same.
Shakeup in the staff meeting
December 5, 2024 at 6:50 PM
Shakeup in the staff meeting
"Look! They have ice cream holsters!" -my kid
December 5, 2024 at 5:07 AM
"Look! They have ice cream holsters!" -my kid
I love this study. Do you know what's wildly more effective than phishing training? Preventing people from being phished. FIDO2, people.
... but you're still going to have to remind your coworkers that the CEO is not desperately texting them for iTunes gift cards
www.computer.org/csdl/proceed...
... but you're still going to have to remind your coworkers that the CEO is not desperately texting them for iTunes gift cards
www.computer.org/csdl/proceed...
November 19, 2024 at 2:09 PM
I love this study. Do you know what's wildly more effective than phishing training? Preventing people from being phished. FIDO2, people.
... but you're still going to have to remind your coworkers that the CEO is not desperately texting them for iTunes gift cards
www.computer.org/csdl/proceed...
... but you're still going to have to remind your coworkers that the CEO is not desperately texting them for iTunes gift cards
www.computer.org/csdl/proceed...
Fun fact: the Antarctic Fiber-Seeking Backhoe runs on kibble and scritches
November 15, 2024 at 3:05 PM
Fun fact: the Antarctic Fiber-Seeking Backhoe runs on kibble and scritches
Go home, Google, you're drunk
October 12, 2023 at 11:23 PM
Go home, Google, you're drunk
Hey guess what I'm speaking at PEPR this year! (I also got a sneak peek at the whole program and wow it's amazing)
In-person conference means you should be planning to get your in-person self out to Santa Clara, CA for Sept 11-12 for privacy eng awesome
https://www.usenix.org/conference/pepr23
In-person conference means you should be planning to get your in-person self out to Santa Clara, CA for Sept 11-12 for privacy eng awesome
https://www.usenix.org/conference/pepr23
June 27, 2023 at 2:43 AM
Hey guess what I'm speaking at PEPR this year! (I also got a sneak peek at the whole program and wow it's amazing)
In-person conference means you should be planning to get your in-person self out to Santa Clara, CA for Sept 11-12 for privacy eng awesome
https://www.usenix.org/conference/pepr23
In-person conference means you should be planning to get your in-person self out to Santa Clara, CA for Sept 11-12 for privacy eng awesome
https://www.usenix.org/conference/pepr23