Top all-time · #4165
Lesley Carhart
Personal blog · tisiphone.netsecuritycareer
Lesley Carhart's personal blog at tisiphone.net covers security and career. Since 2015, 19 different Hacker News readers have linked it 20 times, most often “Security Things to Consider When Your Apartment Goes ‘Smart’”. It is still writing: the last post was on 2026-07-21, and you can follow it by feed.
Too few sampled comments (7) to say how often HN recommends it.?
Why HN links it
HN readers link Lesley Carhart's infosec writing, including her career-starting series, her security-education posts, and a 2019 warning about landlords' smart locks replacing physical keys.
Summarised by Claude from a sample of 7 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
[Lesley Carhart, Public Universal Cyber-Pal]
Most-linked posts?
- Security Things to Consider When Your Apartment Goes ‘Smart’4 people · 4 mentions · first linked 2019-01-29
- /2015/10/12/starting-an-infosec-career-the-megamix-chapters-1-3/3 people · 3 mentions · first linked 2016-12-20
- Whose Fault Is It? (A brief discussion on misconceptions about Equifax)2 people · 2 mentions · first linked 2017-09-18
- /category/security-education/2 people · 2 mentions · first linked 2018-01-25
What Hacker News says?
Leslie Carhart, a relatively well known infosec community person posted about this: https://tisiphone.net/2019/01/28/security-things-to-consider... Turns out she was right... https://twitter.com/CharlesDardaman/status/11016265103336734...
Comment linking /2019/01/28/security-things-to-consider-when-your-apartment-goes-smart/
on “Tenants win right to physical keys over smart locks from landlords”Submitted Lesley, What Happened to the "Cybersecurity Skills Shortage"? as a story · 5 points
HN discussionAs a counterpoint for this fluff piece for Pluralsight (mentioned 29 times), I'd like to offer the following links with very good information by well respected people in the industry: - https://www.corelan.be/index.php/2015/10/13/how-to-become-a-... - https://tisiphone.net/2015/10/12/starting-an-infosec-career-... - https://danielmiessler.com/blog/build-successful-infosec-car...
Comment linking /2015/10/12/starting-an-infosec-career-the-megamix-chapters-1-3/
on “Careers in security, ethical hacking and advice on where to get started”Submitted Human Honeypots: I Make Friends (and So Should You) as a story · 4 points
HN discussionIn order of appearance of '?', here are my responses 1. Market is pretty hot and you will be get multiple choices to pick from the available offers 2. Certifications have very little to do with the job (Full Disclosure - I am currently maintaining CISSP, CCSP, GWAPT, GMOB certs ) That being said, sometimes HR/recruiter use these for filtering candidates. You can look at security+ certification to get a feel. 3. It w…
Comment linking /category/security-education/
on “Ask HN: Starting a career in security at 40?”Submitted Security Things to Consider When Your Apartment Goes ‘Smart’ as a story · 3 points
HN discussionYou have a long but very interesting road before you. Infosec is huge. Lesley “hacks4pancakes” Carhart has a great series which provides an overview of what you can choose from: https://tisiphone.net/2015/10/12/starting-an-infosec-career-... If you're serious about infosec and not just want to run tools and call it a day, I suggest covering the basics first: - programming: would be cool if you learn not only some la…
Comment linking /2015/10/12/starting-an-infosec-career-the-megamix-chapters-1-3/
on “Ask HN: How did you get started in Network Security/Penetration Testing?”Submitted Security Things to Consider When Your Apartment Goes ‘Smart’ as a story · 2 points
HN discussion1) Schneier's advice from a few years ago is still accurate: https://www.schneier.com/blog/archives/2012/07/how_to_become... 2) The Reddit NetSec FAQ has a good list of resources for beginners (and those starting to specialize): https://www.reddit.com/r/netsec/wiki/start 3) Finally, each of these popular "Getting Started in Security" guides has a slightly different, but useful, opinion on the specifics of the path t…
Comment linking /2015/10/12/starting-an-infosec-career-the-megamix-chapters-1-3/
on “Flush times for hackers in booming cyber security job market”Submitted Is Digital Privacy a Privilege of the Wealthy? as a story · 2 points
HN discussionThe advice is pretty good overall, but the excessive profanity is unprofessional and distracting. It is interesting that he values "SANS" certifications, but not the courses for them. Besides my own rambling[1] you might find these resources valuable instead: * https://tisiphone.net/category/security-education/ * https://krebsonsecurity.com/category/how-to-break-into-secur... * https://s3ctur.wordpress.com/2017/06/1…
Comment linking /category/security-education/
on “Breaking Into an Information Security Career”Submitted Ways I Screwed Up Making a Fake Identity as a story · 2 points
HN discussionHow dumb? https://tisiphone.net/2017/01/25/thwart-my-osint-efforts-whi... I suspect this is going to be a bigger problem in the future (for society in general) as more and more people have lengthly digital trails.
Comment linking /2017/01/25/thwart-my-osint-efforts-while-binging-tv/
on “Ask HN: Has anything from your past come up and cause issues for your company?”Submitted Reasonable Expectations for Cybersecurity Mentees as a story · 1 points
HN discussionSubmitted PancakesCon 2020: Quarantine Edition – tisiphone.net as a story · 1 points
HN discussionSubmitted Security Things to Consider When Your Apartment Goes ‘Smart’ as a story · 1 points
HN discussionSubmitted Whose Fault Is It? (A brief discussion on misconceptions about Equifax) as a story · 1 points
HN discussionSubmitted Whose Fault Is It? (A brief discussion on misconceptions about Equifax) as a story · 1 points
HN discussionSubmitted How do security professionals study threat actors, and why do we do it? as a story · 1 points
HN discussionSubmitted Starting an infosec career as a story · 1 points
HN discussion
