Share this page!

Lesley Carhart Profile picture
Twitter logo
17 Jul, 4 tweets, 1 min read
I love @SouthwestAir *tons*, but flying into O’Hare instead of Midway is an awful experience. One baggage carousel for all flights in the crowded international arrivals, and not even anywhere to get a bottle of water while waiting after McDonalds closes. Midway is so much nicer…
Terminal 5 rideshare pickup is free for all chaos, too 😢😑
I don’t get people who bash Midway. It’s a really nice and manageable airport since the refurb. Great food, too.
Anyway, if you’re contemplating SWA to or through Chicago I really recommend sticking to Midway unless your event is right next to O’Hare or you need to change carriers.

• • •

Missing some Tweet in this thread? You can try to force a refresh
　

Keep Current with Lesley Carhart

Lesley Carhart Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @hacks4pancakes

Lesley Carhart Profile picture
12 Jul
Sometimes instead of blogging I feel like making a big old Twitter thread, so let's talk about Cobalt Strike for people only vaguely familiar (or misinformed) with the concept. Maybe I'll blog it later.
Cobalt Strike is an adversary enumeration tool used to train teams how to do incident response and threat hunting. It was made by a genius I genuinely like and will not disparage, Raphael Mudge. The first time I met him he flew across the floor air-guitaring in his dress clothes.
A lot of you are familiar with the easy-button hacking tool, Metasploit. Well, he made this shnazzy GUI for Metasploit called Armitage.

But, he realized it was still tough for a lot of defenders to get highly skilled Red Teams to train them. Or sommat, I'm not in his head...
Read 23 tweets
Lesley Carhart Profile picture
3 Jul
We all kept telling them it was escalating and just going to get worse…
But no… every time one cybercrime group posts a mea culpa, or a few people get indicted or arrested, the pundits are like
Read 11 tweets
Lesley Carhart Profile picture
11 May
One of the most talented young martial artists I’ve ever worked with burnt out and suddenly quit after a decade today. I’m reeling.

I don’t know if any teens at all read my account at all but like... if there are a bunch of adults really invested in mentoring you it’s... (1/x)
... totally okay to say you’re like, overwhelmed, need a break, you need to switch learning styles or speed, or just that you need more support.

Please don’t just give up and vanish because you don’t think you can meet our expectations, or because you think you messed up.
This goes for like your hobbies, infosec, hacking, whatever. Like, people who mentor can be self-centered jerks, but most of us really just want you to succeed - even if your measure of success changes over time! We are emotionally invested in you.
Read 4 tweets
Lesley Carhart Profile picture
10 May
I don’t think people appreciate how effectively Darkside has been ramping up operations mostly under the radar for the last year. This was a very big “oops”. They were doing a really good job of decimating businesses, including infrastructure - and everyone has been really quiet.
I mean like read between the lines
Read 9 tweets
Lesley Carhart Profile picture
5 May
Oh: “we don’t call threat hunting ‘threat hunting’ here when we do it, though”

I don’t care
You still have to do it if you want to catch stuff your automated detection misses
Your people had better know what to search for in reality when they need any education or references
WTF
Stop making ridiculous job titles and renaming common Cybersecurity terms just because it internal politics? All it hurts is your current and future analysts?
Every Cybersecurity monitoring organization today with any bandwidth available after detection automation and response not *performed by a hamster* should be doing the proactive task which is, in fact, called threat hunting.
Read 4 tweets
Lesley Carhart Profile picture
26 Apr
Today in, “wow, we’re failing as a profession”, a 60-reply-long joke thread on my neighborhood forum in 2021 about how ‘obviously everyone has to reuse passwords because they’re just too hard to remember as one gets older’.
Actually biting my fingers to not be “that nerd” on a funny ha ha joke.

Until the AOL-using retired gardeners in my town feel comfy using password managers and/or FIDO keys, we’re still lacking in usability and awareness.
Meanwhile we’re like, “just use a password manager, except you have to open it separately on iPhone if you use that plus a PC, and you can use a FIDO key on some sites, but don’t lose it, and you need a different authenticator app for home and work, but don’t use SMS.”
Read 5 tweets

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!

Like this author's thread?

Get emails when @hacks4pancakes has new unrolls!

Check out other threads from @hacks4pancakes!

Read all threads by @hacks4pancakes

:(