Lea Kissner's Avatar

Lea Kissner

@leak.bsky.social

Security, privacy, respect. Was the Twitter CISO until it was terrible. Now LinkedIn CISO. they/them

7,802 Followers  |  92 Following  |  648 Posts  |  Joined: 28.04.2023  |  2.2486

Latest posts by leak.bsky.social on Bluesky

The Letter β€” Stop Hacklore!

As a security person, I SO appreciate great bits like this open letter around bad security advice ( www.hacklore.org/letter), especially given that it's got reputable people like @leak.bsky.social signed on.

I agree that outdated advice and half-truths are just as bad as giving wrong advice.

05.12.2025 15:52 β€” πŸ‘ 10    πŸ” 6    πŸ’¬ 0    πŸ“Œ 2

Your books belong in *my* library not *your* home.

(My bookshelves protest otherwise.)

30.11.2025 16:31 β€” πŸ‘ 4    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

I didn't know you were on here! Long time no see

25.11.2025 14:37 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

I considered adding a picture of my study but the piles of books are sprouting piles of books.

And I just ordered some more books.

25.11.2025 06:35 β€” πŸ‘ 18    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

Treating the law as an inflexible programmable automata famously works well. Just ask the guy who my spouse went to grad school with who cutsied himself into prison for tax evasion.

25.11.2025 00:30 β€” πŸ‘ 3    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
Preview
a cup of coffee with a smiley face on the top of it Alt: a cup of coffee with a screaming face blown into the top of it

That is somehow worse than the fact that 100% of the tests for the Google RPC libraries back when I maintained them were bash scripts that fired up a client and server and had them send messages to each other

25.11.2025 00:24 β€” πŸ‘ 3    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

I'm guessing that things got a smidge personal

25.11.2025 00:21 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

On my next flight the airline will supply pyjamas and slippers. Somehow this is not in my top 100 list of worries about flying in the US.

24.11.2025 21:28 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

The comment thread here is the embodiment of :lolsob:

There is legitimate promise to LLM-assisted coding, but there are also legitimate risks. Like this. And no one here is malicious!

24.11.2025 21:25 β€” πŸ‘ 47    πŸ” 9    πŸ’¬ 5    πŸ“Œ 2

Is the quote "cryptography reduces everything to a key management problem" or "nobody likes it when I'm right"?

23.11.2025 02:00 β€” πŸ‘ 11    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

now everyone together quote @leak.bsky.social

22.11.2025 03:38 β€” πŸ‘ 13    πŸ” 2    πŸ’¬ 2    πŸ“Œ 0

The whole podcast is really excellent, BTW, basically someone being incredibly enthusiastically geeky about all aspects of clothing. "Enthusiastically geeky" is honestly my favorite genre of just about anything.

21.11.2025 02:40 β€” πŸ‘ 9    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
EPISODES | Articles Of Interest

The "Gear" series on the Articles of Interest podcast has convinced me that if for some reason I was in the armed forces (and I wasn't doing the obvious things for me to do) I would want to be in the quartermaster corps. The complexity in clothing alone 🀯

www.articlesofinterest.co/podcast

21.11.2025 02:40 β€” πŸ‘ 9    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

It's also entirely possible that the role someone wants and might be very well suited for doesn't exist in that company. I had someone in my team once who *loved* event planning. That simply wasn't available and I really didn't need event planning, so...

18.11.2025 16:44 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

I don't know, but my best uninformed guesses would be conflict-averse management and lack of better roles to suggest. Especially when headcount is tight, someone may not have as many open roles and *need* a particular role filled.

18.11.2025 16:44 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 2    πŸ“Œ 0

I don't have data points for most of the US, but when I moved to the Boston suburbs as a kid... well, that's where I learned racial slurs.

(And got called possibly the most illogical slur ever, which takes some doing.)

18.11.2025 02:33 β€” πŸ‘ 4    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

My gamer child informs me that "everyone" hates FaZe Rug because they make clickbait videos.

16.11.2025 15:26 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

If my emails ever get leaked, just know that I'm not sub-literate, I'm lazy.

13.11.2025 03:43 β€” πŸ‘ 34    πŸ” 1    πŸ’¬ 1    πŸ“Œ 1

Curious how much detail you were hoping for, like "it's a way of storing files in a hierarchy so we can find them again and we want it because... uh... storing things locally is useful because we like to run programs and have data"?

12.11.2025 13:51 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

Side note for people who are or are interested in being a manager *or* a senior-level individual contributor: I highly suggest Ask A Manager. People-wrangling is hard.

10.11.2025 19:27 β€” πŸ‘ 7    πŸ” 0    πŸ’¬ 2    πŸ“Œ 0

I want to help everyone, so I want to help early. But when it comes down to it, I'm responsible to everyone.

This is getting long, so I'm not including my tips for how to run a caring PIP here, but let me know if that's interesting.

/end

10.11.2025 19:25 β€” πŸ‘ 10    πŸ” 0    πŸ’¬ 2    πŸ“Œ 0

It's very easy for a manager to focus on the person on the PIP and themselves, since they're most immediately involved.

It's recognizing that a manager is responsible to the *whole* team that helped me understand just how critical performance management is.
/6

10.11.2025 19:25 β€” πŸ‘ 3    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

... but when someone persistently isn't pulling their weight, that's not fair to the rest of the team. If the person is being unpleasant or disruptive, that can be even worse. It's really hard on the team to be in the situation where someone needs to be on a PIP.
5/

10.11.2025 19:25 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

But I think it's deeply underappreciated how difficult this is for the entire team. Your teammates rely on you. When someone is having trouble, other folks often try to pick up the slack. We're all human and we do this for each other sometimes (my teammates very kindly did this for me recently β™₯️)
4/

10.11.2025 19:25 β€” πŸ‘ 4    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

This absolutely sucks. It's very stressful to be having trouble getting your work done. I would also assume that anything which would lead someone to be intensely unpleasant to their coworkers would be no fun. Being worried for your job is also stressful. Been there (for other reasons). Sucks.

3/

10.11.2025 19:25 β€” πŸ‘ 3    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

It's hard on the person going through a PIP (obviously). There are two major good reasons that folks end up on a PIP:
1. They're having trouble getting their work done effectively.

2. They are making people around them unhappy (e.g. yelling or other personal interaction issues)

2/

10.11.2025 19:25 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

A performance plan (PIP) is incredibly hard on everyone involved. The person going through it, the manager, and *the entire team*.

When I'm running one, I deeply want to help the person going through it find whatever's missing so that they do an awesome job and we can keep working together.
1/🧡

10.11.2025 19:25 β€” πŸ‘ 12    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

Up until a few weeks ago, the conversation virtually always went like this:

Them: "why are you wearing a mask?"
Me: "because I don't want to accidentally kill my mom. Plus I hear COVID is no fun."
Them: *vivid story of how terrible COVID is*

It sounds less fun than wearing a mask, y'all 🀷

09.11.2025 16:53 β€” πŸ‘ 21    πŸ” 2    πŸ’¬ 1    πŸ“Œ 0

New life goal unlocked

09.11.2025 16:40 β€” πŸ‘ 23    πŸ” 6    πŸ’¬ 1    πŸ“Œ 0

If you want public key encryption specifically, think of it like everyone has a copy of a lock. They can use it to lock something up and only you can get it out because you have the key for the lock

09.11.2025 02:22 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

@leak is following 20 prominent accounts