🤝
Make a deal with Hovav Shacham
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
396
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🧰 Free analysis for Hovav Shacham
📊 Post engagement
6
Avg engagement / post
1.5%
Engagement vs followers
Nov 2022
On Mastodon since
🔥 Top post: Recent advances in browser security, a thread! 🧵 TL;DR: Mohabi ( · 31 likes + reposts
📊 Activity & format
Posting cadence
8.3 / week
Toots daily — consistently active for a campaign window.
Content mix
Mostly text
Recent: 11 text · 1 image · 0 video.
Follower / following
1.1×
Follows 349 back. A more reciprocal / networked account.
Recent posts
View on Mastodon ↗
Forthcoming (and available from pre-order) from Auckland University Press: Front Row Seat: How Science Can (and Can’t) Shape Public Decision-Making, by Juliet A. Gerrard.
https://aucklanduniversitypress.co.nz/front-row-seat/
Mohabi represents a heroic engineering effort by Abhishek, Anand, Zach, Anthony, and Taehyun. Its development spans the entire ESR 115 release lifecycle. The paper evaluates Mohabi on amd64, but we also have an instantiation for aarch64 …
Is it feasible to sandbox a production JavaScript runtime with SFI? How high would the runtime overhead be?
The answers are yes!, and about 25% in Speedometer and JetStream, as we show with Mohabi¹—short for “monkey habitat,” a pleasant b…
[Sidebar: Firefox already uses SFI to sandbox six third-party libraries in the renderer process, thanks to RLBox!¹ The list of RLBoxed libraries has not grown in years, though, and Android might now be catching up.²] (7/x)
__
¹ Shravan Na…
Sound in-process isolation of the JavaScript runtime requires software-based fault isolation (SFI).¹ All code that makes up the JavaScript runtime, and all code output by the JIT at runtime, must be instrumented with extra checks that con…
If formal verification is a no-go, the next best approach is containment: Introducing a trust boundary between the JavaScript runtime (including its JIT program outputs) and the rest of the renderer process. Now an attacker who exploits a…
Arguably, the right way to secure JavaScript engines is to deploy formal verification and prove that JIT outputs are safe. For example, Icarus¹ showed that it was possible to specify semantics for Firefox’s polymorphic inline cache byteco…
One way vendors have responded is to allow at-risk users to disable (some) JIT tiers and reduce attack surface. Examples include Apple’s Lockdown Mode, Android’s Advanced Protection Mode, and Microsoft Edge’s Enhanced Security Mode. This…
JavaScript runtimes are the most dangerous attack surface on client devices. JavaScript JITs, in particular, are machines for turning logic bugs (in the compiler) into memory safety bugs (in the compiled program output), a problem that re…
Derek Lowe:The Trump administration hates academic science funding, full stop. They hate where that money goes, and they hate who it goes to. They want to keep all that money for themselves, to hand out to favored cronies who can help them…
This work contains an exposition of the seven foremost unsolved problems in the domain of isogeny-based cryptography, obtained by asking eleven experts in isogeny-based cryptography what they considered to be the most important unsolved pr…
Is it feasible to sandbox a production JavaScript runtime with SFI? How high would the runtime overhead be?
The answers are yes!, and about 25% in Speedometer and JetStream, as we show with Mohabi¹—short for “monkey habitat,” a pleasant b…
[Sidebar: Firefox already uses SFI to sandbox six third-party libraries in the renderer process, thanks to RLBox!¹ The list of RLBoxed libraries has not grown in years, though, and Android might now be catching up.²] (7/x)
__
¹ Shravan Na…
Sound in-process isolation of the JavaScript runtime requires software-based fault isolation (SFI).¹ All code that makes up the JavaScript runtime, and all code output by the JIT at runtime, must be instrumented with extra checks that con…
If formal verification is a no-go, the next best approach is containment: Introducing a trust boundary between the JavaScript runtime (including its JIT program outputs) and the rest of the renderer process. Now an attacker who exploits a…
Arguably, the right way to secure JavaScript engines is to deploy formal verification and prove that JIT outputs are safe. For example, Icarus¹ showed that it was possible to specify semantics for Firefox’s polymorphic inline cache byteco…
One way vendors have responded is to allow at-risk users to disable (some) JIT tiers and reduce attack surface. Examples include Apple’s Lockdown Mode, Android’s Advanced Protection Mode, and Microsoft Edge’s Enhanced Security Mode. This…
JavaScript runtimes are the most dangerous attack surface on client devices. JavaScript JITs, in particular, are machines for turning logic bugs (in the compiler) into memory safety bugs (in the compiled program output), a problem that re…
Derek Lowe:The Trump administration hates academic science funding, full stop. They hate where that money goes, and they hate who it goes to. They want to keep all that money for themselves, to hand out to favored cronies who can help them…
This work contains an exposition of the seven foremost unsolved problems in the domain of isogeny-based cryptography, obtained by asking eleven experts in isogeny-based cryptography what they considered to be the most important unsolved pr…
🐘 Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.
💡 Facts
🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 6 views per post.
📤Posts about 8.3× per week.
🕵️ Fake follower check
Estimated89/100
Excellent
Credibility score
99%
Real
Real audience
Low
Fake-follower risk
High
Data confidence
- Est. 99% real, active audience · Low fake-follower risk.
- Strong engagement (~1.5% of followers engage each post) — an active, real audience.
- Verified account.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
Security, privacy, and tech policy at UCSD.
“[U]niquely among all government employees, lie[s] outside the scope of [the government speech] doctrine; […] stand[s] alone on a First Amendment pedestal, free to say what [he] please[s], no matter what [his] government employers, including even the State Legislature, think about it.”
Profile photo: Nox the tiercel peregrine, Cal Falcons class of '24, photographed by Billy Thein (California Raptor Center).
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
栄屯
18%
Graylog
14%
Transformationen des Populären
13%
Mike Sperber
10%
Foosty Puddin 🏴
10%
Fillip Port
10%
More like this
Find more →
Mastodon
Graylog
@graylog@infosec.exchange
396
Followers
Mastodon
Mike Sperber
@sperbsen@discuss.systems
396
Followers
Mastodon
Foosty Puddin 🏴
@djl@universeodon.com
396
Followers
Mastodon
栄屯
@eidon@raru.re
396
Followers
Mastodon
Fillip Port
@crisprflydesign@fediscience.org
396
Followers
Mastodon
Transformationen des Populären ✓
@sfb1472@wisskomm.social
396
Followers
✉ Message Hovav Shacham
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with Hovav Shacham
Booking an event / appearance is a Pro feature. Upgrade to book Hovav Shacham for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ Hovav Shacham gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove