Lesley Carhart

Lesley Carhart

@hacks4pancakes.com

I am eminently qualified to speak from experience about a variety of dumpster fires. ICS DFIR at Dragos, martial artist, marksman, humanist, level 14 Neutral Good rogue, USAF retired. I post *very serious* things about infosec. Thoughts my own. Enby. 🏳️‍🌈

24.6K followers1.1K following3.4K posts

People on Instagram cheering on Poland wanting a US military base, like the US didn’t ignore an entire god damn destabilising attack on Poland’s grid only a year ago.

When one of you legends runs into Cliff can you please ask him my burning question of how he feels about having his wiki talk entirely about forensics and not astronomy?

View full thread

I know how 🌶️ I would feel about it. Like when I thought would be known for cool forensics I build over serial cables, but now I’m just a nonbinary socialist immigrant terror.

When one of you legends runs into Cliff can you please ask him my burning question of how he feels about having his wiki talk entirely about forensics and not astronomy?

SANS class and CyberCon down :) Everything went pretty well. So cool to teach in Melbourne and my students were amazing. Full day Toastmasters competition in Docklands to MC tomorrow and then I get my first day off in over a month!

If you have mentorship sessions with me and I have had to adjust them or move them a bit, this is why. Doing my best to fit everyone in for free.

Lesley Carhart reposted

Lesley Carhart reposted

Fire everyone on the cybersecurity team who had anything to do with this. What are you even testing here?

shauna@goldengateblond.bsky.social

this is fucking appalling. i already knew james dolan (who owns the knicks and madison square garden) was a douche but this is next-level. www.nytimes.com/athletic/771...

Everyone has kind of laughed it off but there’s actually now an official investigation by multiple organizations into why my US election ballot hasn’t been released from US customs in a month without any explanation.

Hey friends, I'd like your thoughts on this on this, our friendly platform. Especially Australia IT pals. I took a huge demotion (years of work) to move to Australia. Happy with my decision, love my work, love it here, going for citizenship, no issues on my side. Life is worth more than money.

It's like, blatantly obvious though. I pulled most of my bios off the internet except basic LinkedIn. Do I reduce my presence so that isn't as visible academically or professionally? Or is it something I can explain contextually in the Australian community in the hell market at my level?

Lesley Carhart reposted

I was on the fence about seeing this movie, but suddenly it’s a must-add to my watch list.

Carl Quintanilla@carlquintanilla.bsky.social

(THR) - TikTok has banned the entire Musk film account, citing political content that violates its policies. .. raises concerns about Big Tech suppression that the very film seeks to expose.” @thr.com www.hollywoodreporter.com/news/politic...

Lesley Carhart reposted

Replying to @hacks4pancakes.com

As a member of your company’s cybersecurity team, discovering that an employee is working remotely from a country where they aren’t cleared to be is something that our tools make very obvious and is the kind of thing where in certain circumstances I will raise to the highest level of management

Lesley Carhart reposted

Replying to @hacks4pancakes.com

seeing this from the other side when I moved to the US it boggles the mind that people would roll the dice on this stuff

Americans and other white people with strong passports are absolutely going to drive me to a bottle of whiskey with the perpetual, "my company shouldn't complain when I work with no proper visa or authorisation from a foreign county, without asking" comments, and I'm a huge remote work advocate.

View full thread

If you can't nomad, look at something like a con that pays travel. Conference attendance is usually a business visitor activity. You can also look at a temp or permanent transfer with your company to their local, visa sponsoring unit. None of this is easy, but it will keep you from deportation.

My final note on this rant is just that, a single visa revocation or refusal for a violation is usually asked about and considered as you enter every single country after that for the rest of your life. And many countries share that information behind the scenes.

Americans and other white people with strong passports are absolutely going to drive me to a bottle of whiskey with the perpetual, "my company shouldn't complain when I work with no proper visa or authorisation from a foreign county, without asking" comments, and I'm a huge remote work advocate.

View full thread

Any please, please - privileged Americans, Australians, Europeans, British people, stop flaunting the visa system while brown people are being thrown in detention for doing less. Holy shit.

If you want to do your remote job from another country: - First, talk to the employer in case their are security, tax, or contract restrictions. - Check if the country you are interested legally allows digital nomad visas - Understand the tax and work restrictions included in that arrangement.

Americans and other white people with strong passports are absolutely going to drive me to a bottle of whiskey with the perpetual, "my company shouldn't complain when I work with no proper visa or authorisation from a foreign county, without asking" comments, and I'm a huge remote work advocate.

View full thread

When I moved to Australia, which has no digital nomad, I had to fly to New Zealand to not violate my visa if I just wanted to give an hour long online talk for America.

So I get fighting the man and return to work but bitching about not being allowed to work from Paris for six months with no discussion with your employer is just utterly bananas and your privilege is absolutely showing. Fight them on return to office and open office and every other ludicrous move.

Americans and other white people with strong passports are absolutely going to drive me to a bottle of whiskey with the perpetual, "my company shouldn't complain when I work with no proper visa or authorisation from a foreign county, without asking" comments, and I'm a huge remote work advocate.

View full thread

Note that neither class allows substantial productive work even for your employer back home. There’s a visa class for remote workers to do that in some countries and it’s a digital nomad visa. It’s often a real application, time bounded, and may have tax obigations. Not all allow it at all.

You can’t just do your remote job in a foreign country without the right visa. Several South East Asian counties are booting out Americans and Europeans for visa violations like this.

Americans and other white people with strong passports are absolutely going to drive me to a bottle of whiskey with the perpetual, "my company shouldn't complain when I work with no proper visa or authorisation from a foreign county, without asking" comments, and I'm a huge remote work advocate.

In general you need a visa or travel authorisation to go to another country. If you have a strong passport it’s often defacto or in principle on arrival for tourists, so you don’t even think about it. You might have a fairly rapid ETA on an easy app. This is privilege. Most on earth need papers.

Business Visitor is the class of visa aside that most Redditors and social commentators from America have experienced. Similar low bar for strong passports. But the activities you can do are very limited and structured. Most prohibit any actual productive work. You can go to meetings and take calls.

Lesley Carhart reposted

I left X *because* I had a large following. People told me I was the reason they were staying on there, and I didn’t want to be responsible for 100k+ people sticking around for abuse, CSAM, and Nazis. Simple as that

Adam Serwer@adamserwer.bsky.social

I left x despite having a large following bc I don’t want to make free content for the world’s wealthiest racist. It’s not worth it to me.

#Cybercon I present my paper on dealing with older commodity malware in legacy OT environments at 3:50 pm - 4:30 pm Room 212/213 - Tomorrow, 16 October, I panel on "Leveraging the Expertise of Migrants in Australian Cybersecurity" at 10:55 am - 11:35 am Melbourne Room 1

The fact that my ballot appears to have been conveniently lost or delayed by US customs despite every effort to be early and discreet is tied to why I try to avoid going to America anymore at all even as a citizen and why I don’t have services like Global Entry which could be weaponised against me.

I got put back in red team after ten years this week and damn it felt good to pop a few boxes and flex those muscles, but damn bloodhound had some drama and it's all too dramatic for me.

Lesley Carhart reposted

Very difficult to communicate two things without one getting lost: 1. Midway Blitz was unsuccessful. It did not destroy Chicago’s identity as a sanctuary, its neighborhoods, its peoples. 2. Midway Blitz was and is traumatic. It destroyed many lives and livelihoods. And the feds have not left.

Andrew Carter@andrew-carter.bsky.social

It has been about a year since the start of Operation Midway Blitz in Chicago. A story about what the raids left behind in places still on guard: www.chicagotribune.com/2026/09/13/c...

Lesley Carhart reposted

Replying to @anthonymkreis.bsky.social

It’s going to be really interesting to see an increasingly Groyperized Republican Party try to keep the peace with Silicon Valley billionaires and Hindutva extremists. JD Vance has a problem