Notices by Lesley Carhart :unverified: (hacks4pancakes@infosec.exchange)

I have always been kind. It does not mean I have to be nice. Not right now. And certainly not to people causing intense harm.

I would kindly ask people to stop asking me to be more polite to nazis and nazi enablers. I would really appreciate that. I am on my last thread and hanging on by claws, and trying to save my friends while doing it.

The few properly recognized women and black scientists are quickly having their biographies wiped from US records and institutions. Please maintain a record of them. https://www.space.com/the-universe/earth/scientists-alarmed-as-rubin-observatory-changes-biography-of-astronomer-vera-rubin-amid-trumps-push-to-end-dei-efforts

When Florida can report and arrest trans people for just going to the bathroom, and they can now also forcibly detransition people in prison by refusing their meds and shaving their heads, and the industry is still ✨⭐️conference at Epcot✨⭐️!

I drew you a picture of Chicago for New Years. It’s not very good, but my mental health is a little better. I hope you find healthy outlets for mental health this year, too.

Y'all... I am on this expat American in Australia forum and there is this thread of stuff people desperately want their families to bring to Christmas and I am deceased - the comment section is mostly:

- Ranch Seasoning
- Pumpkin Pie Seasoning
- OTC meds that are clearly available under other names in Australia, like Guaifenesin and Bacitracin
- American Ketchup and A1 sauce
- Hershey's Candy

Is this really, really who we are? Really?

I do understand the girl scout cookies. That one is fair.

This is so damn good.

Just a warning, I am immediately blocking, and sometimes server blocking on, "stop posting about politics if you're a insert profession here" takes. Technology is politics. Education is politics. Security is politics. The people who work in these fields, and more, are intimately impacted by politics. Some peoples' lives, families, and livelihoods are in danger. It's all politics, stop content and tone policing if you're one of the few people who's currently insanely fortunate to be relatively unimpacted. It's asinine.

Anyway, stop making it everyone else’s problem to fix but yours. Your group or event is probably not diverse because it’s being made financially or logistically inaccessible, your members are making crappy assumptions about newcomers, being pretentious, or hitting on people, or you’re bad at informing other people you exist and are approachable. That usually sums it up.

(Saying this because I can’t say it to my dad, bless him. I kinda went off on how frustrated I am with astronomy groups in the area which are mostly made up of pushy, wealthy, older white guys. He asked me why I don’t join a board of one and fix it. It’s not like I already work two jobs, coach, mentor, am a toastmasters officer, speak professionally around the world, volunteer in the infosec space…)

I beg you not to be that conference / hobby group / profession that reaches out to underrepresented people and essentially blames them for not doing more free and emotional labor to make your thing more diverse.

If it’s not diverse, please look at why it’s not appealing or drawing people in, before asking the same people who constantly are asked to fix diversity through stomaching harassment and unpaid work to fix it for you.

Annual reminder that while many #cybersecurity professionals are also deeply invested and interested in privacy, sometimes the two align and sometimes they’re opposed to one another in practicality. Always be conscious of when you’re sacrificing your (and more importantly other peoples’) privacy for the sake of security, and be very careful and measured about those decisions. Lost privacy rarely comes back. Not in business, and not in society at large.

I’m worried about LastPass’ incident, but I’m equally worried about password managers of renown at all that have not recently disclosed any (data or code base) cybersecurity incidents. Any password manager is a huge, juicy target…

I’m also worried about all y’all going “lololol pEoPle UsE LasTPaSs” when getting just one person on a reputable password manager they’ll actually understand how to use is a massive, uphill battle.