melanie ensign (she/her)

I 💜 #infosec and #privacy teams! Their work is critical, but often undervalued & misunderstood. I built Discernible (npub1v26…52tq) to teach them how to influence business decisions.  Certified rescue #scuba diver keeping everyone safe & calm under pressure, communicating risk, & winning support without FUD.
 ☠️ Retired DEF CON Press Department Lead   4X rescue cat mom 😻  Pronouns: she/her #CEO #founder #Mexico #Miami

Website: DiscernibleInc.com
Subscribe to my weekly IR comms drills!: DiscernibleInc.com/experience
Scuba Diving Photos: https://link.medium.com/IXTiyehtEvb

Public Key

npub1tw2rqlegslgr7ltjc7nnvqd8cml6m6m9drplz6u7826ms6hlvlzq6tvs2v

NIP-05 Address

[email protected]

Profile Code

nprofile1qqs9h9ps0u5g05pl04ev0fekqxnudladadjk3sl3dw0r4ddcdtlk03qpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsm4sayr

Publishing to

nostr.mom

relay.damus.io

nos.lol

Author Public Key

npub1tw2rqlegslgr7ltjc7nnvqd8cml6m6m9drplz6u7826ms6hlvlzq6tvs2v

Show more details

Published at

2026-09-21T13:23:51Z

Kind type

0 Metadata

Event JSON

{ "id": "53cfacbf2c7fbdee4a8b01744076c887753eee73e72703653aa6cbac10708d8d", "pubkey": "5b94307f2887d03f7d72c7a73601a7c6ffadeb6568c3f16b9e3ab5b86aff67c4", "created_at": 1789997031, "kind": 0, "tags": [ [ "t", "infosec" ], [ "t", "privacy" ], [ "t", "ceo" ], [ "t", "mexico" ], [ "t", "founder" ], [ "t", "scuba" ], [ "t", "miami" ], [ "proxy", "https://defcon.social/users/Wednesday", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://defcon.social/users/Wednesday", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"melanie ensign (she/her)\",\"about\":\"I 💜 #infosec and #privacy teams! Their work is critical, but often undervalued \u0026 misunderstood. I built nostr:npub1v26g03qasl4g5v4452krkrytanw4z3auaphah023nld8p7u03esqgx52tq to teach them how to influence business decisions.\u2029\u2029Certified rescue #scuba diver keeping everyone safe \u0026 calm under pressure, communicating risk, \u0026 winning support without FUD.\\n\u2029☠️ Retired DEF CON Press Department Lead \u2028\u20284X rescue cat mom 😻\u2029\u2029Pronouns: she/her\u2029#CEO #founder #Mexico #Miami\\n\\nWebsite: DiscernibleInc.com\\nSubscribe to my weekly IR comms drills!: DiscernibleInc.com/experience\\nScuba Diving Photos: https://link.medium.com/IXTiyehtEvb\\n\",\"website\":\"https://defcon.social/@Wednesday\",\"picture\":\"https://files.defcon.social/dcsocial-s3/accounts/avatars/109/350/337/793/591/161/original/0a0a48e14e0cc7f4.jpeg\",\"banner\":\"https://files.defcon.social/dcsocial-s3/accounts/headers/109/350/337/793/591/161/original/78b102a90045a2c5.jpeg\",\"nip05\":\"[email protected]\"}", "sig": "00b89ae201db846d5eceb647446e8bc19ef884ce521e0647873068824d4aee49cc449a526c35a63b7a3f52994dcb06f5f4ad8971cd7c4408da34fde719e1ce74" }

Last Notes

2026-08-07 11:00:53 GMT

My “to-read” stack of books is down to 10!
What’s the best book you’ve read so far this year?

2026-08-06 18:53:51 GMT

- reply

really like this post. 😎

2026-03-31 17:23:09 GMT

AI Can't Do A Lot of Things. But It Can Do the Emotional Labor We're Never Paid For.
I run a communications consultancy, teaching security professionals how to say hard things clearly.
What I didn't sign up for was the auxiliary work — the invisible tax of regulating my own tone so that men who don't like what I said can still hear it. The internal negotiation before hitting send is exhausting, worrying whether I'm being too direct, he'll feel attacked, or I should soften my opening. Not because the content was wrong, but because the delivery might trigger a reaction that would cost me more time than the original message.
I was always doing this work. Every professional woman I know was always doing this work. We just did it manually — in our heads draining a little more bandwidth each time. I convinced myself it was thoughtfulness. It was unpaid labor with no opt-out.
I've started using AI in situations where I know the dynamic is fragile so that I'm not wasting time and absorbing the cost of someone else's ego. I write the version I actually want to send, then ask for help flagging anything that could be read as punishing. I'm not outsourcing the strategy for how I communicate, but I am outsourcing the audit.
Now I have more time to spend on clients who are actually paying me to think.

2026-03-07 16:57:20 GMT

RE: https://infosec.exchange/@Em0nM4stodon/116166325277366731
🔥 Free Privacy Activist Toolbox for people already doing advocacy work and for anyone who wants to start.
privacyguides.org/en/activism/toolbox/
#note1prq…kp4g

2026-01-09 12:20:29 GMT

- reply

back in hell where they belong 😎

2025-12-09 19:34:41 GMT

Whenever you’re not in the dominant group (as we often find ourselves as security & privacy professionals), it’s helpful to pay attention to how the dominant group (AKA the business) defines the language & power system we need to learn in order to be effective communicators in their world. Once you understand the rules, you can use them to influence the dominant group. https://infosec.exchange/@Discernible/115690850614385474

2025-07-10 04:22:12 GMT

- reply

also, addiction is desensitizing.

2025-05-26 11:44:22 GMT

- reply

!!!

2025-05-21 10:57:58 GMT

We made a truly unique drill for subscribers this week — practicing how to anticipate & effectively communicate to business leaders the impact of accumulating tech debt on the company’s ability to respond to security incidents.
When working with clients, I often ask them to describe what they wish their company could say in response to any incident — then we make a plan for turning those things into reality so that they can confidently and proudly tell the truth.
Subscribe to join!
https://infosec.exchange/@Discernible/114545443729765672

2025-04-27 01:30:33 GMT

- reply

https://files.defcon.social/dcsocial-s3/media_attachments/files/114/407/337/457/959/625/original/07fbfc871412ba1f.jpeg

2025-04-27 01:30:08 GMT

What cowardly men.
https://www.washingtonpost.com/immigration/2025/04/26/us-citizen-children-deported-ice/?

2025-04-09 16:45:05 GMT

It’s not uncommon for technical team’s to lose out on different perspectives if they haven’t created the right environment or equipped team members with the communication skills to participate in healthy conflict.
A lot of people are afraid of conflict because they don’t know what to do when they encounter it — and that reminds me a lot of sharks. 🦈 But both things are critical to the health of their ecosystems. https://infosec.exchange/@Discernible/114308689555710180

2025-04-04 14:16:26 GMT

TRAVEL UPDATE: Don’t come to Mexico without proof of a return flight.
Local passport agents are (understandably) on the alert for Americans leaving the US with no return plan.

2025-03-13 18:05:57 GMT

- reply

I still prefer the guy who didn’t take away my reproductive rights.

2025-02-19 22:17:02 GMT

Executive orders are not laws of the land that all citizens have to follow. They’re directives for the employees in 1 branch of federal government.
If Trump wants new laws, make him use the process laid out in our constitution.
Don’t comply in advance.

2025-01-26 16:37:42 GMT

When Sam Altman says his technology requires “a new social contract,” what he means is that he’s about to exploit a ton of people & doesn’t want them to have any recourse.

2024-12-01 12:06:26 GMT

The 2024 Economist Word of the Year:
“kakistocracy” - Government by the least qualified or most unprincipled citizens.
https://www.economist.com/culture/2024/11/29/the-economists-word-of-the-year-for-2024

2024-11-19 14:18:00 GMT

This is going to piss off all the right people. 😘
“Taken together, our results suggest that anti-phishing training programs, in their current and commonly deployed forms, are unlikely to offer significant practical value in reducing phishing risks.”
https://www.computer.org/csdl/proceedings-article/sp/2025/223600a076/21B7RjYyG9q

2024-11-11 01:27:34 GMT

This is fucked up, Suunto. I have years of diving data in this app, which I now can’t access without giving up the privacy of my health & location data. This is coerced consent & it’s bullshit.
I will be replacing my dive computer immediately & will never recommend a Suunto product again.
#scuba #privacy
https://files.defcon.social/dcsocial-s3/media_attachments/files/113/461/719/423/543/556/original/b323fa0a2f45aae0.jpeg
https://files.defcon.social/dcsocial-s3/media_attachments/files/113/461/719/883/071/948/original/7100a8c6f5eaee48.jpeg

2024-10-09 19:19:01 GMT

I stumbled upon a helpful resource for CISOs navigating board communications for the first time. While I'm not a big fan of most NCSC content, this particular piece offers valuable insight to help set expectations if you're new to these kinds of interactions.
In my coaching sessions on board and executive communications with CISOs, I often draw on research by Dr. Anthony Vance at Virginia Tech.
Here are some top recommendations:
🔬 "What do we need to know about the Chief Information Security Officer? A literature review and research agenda": https://www.sciencedirect.com/science/article/abs/pii/S0167404824003687
🔬 "Taking a Seat at the Table: The Quest for CISO Legitimacy": https://aisel.aisnet.org/icis2022/security/security/14/
🔬"The Security Team at the Top: The Board of Directors": https://www.usenix.org/conference/enigma2022/presentation/vance
For those interested in further exploration, check out the resource on board-level cyber discussions for clear communication: https://www.ncsc.gov.uk/guidance/board-level-cyber-discussions-communicating-clearly
#SecurityCommunications

2024-08-11 04:53:36 GMT

- reply

when I retired from leading the DC press team last year, I told attendees at closing ceremonies that despite having worked for AT&T, Facebook, & Uber, DC was by far my most difficult PR role. This kind of poor judgment from everyone involved shows why.

2024-08-10 18:57:19 GMT

- reply

Here’s the official explanation from DEF CON:
https://www.reddit.com/r/Defcon/comments/1ep00ln/def_cons_response_to_the_badge_controversy/