Make a deal with Joachim Viide
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Known for
7 views
CE3 - Common Excuse & Evasion Enumeration 😁
A taxonomy of vendor dismissal patterns for legitimate vulnerability reports: https://github.com/badrap/ce3
1 views
Renamed our taxonomy of vulnerability report dismissal patterns to "CV3" (Common Vendor Excuse & Evasion Enumeration). https://github.com/badrap/cv3
Also, its top-level categories (CV3-100, CV3-200, ...) now follow the canonical canonical vulnerability disclosure lifecycle:
1 views
Deno’s FormData, URLSearchParams and Headers exhibit O(n²) behavior in .set()/.delete() when many repeated keys are present.
Example: FormData.delete("_") on ~1MB of _=&_=&_=&...
Node: ~4ms
Deno: ~74s
This could turn otherwise reasonable cleanup of untrusted request data into a potential DoS vector.
1/3
📊 Post engagement
🔥 Top post: CE3 - Common Excuse & Evasion Enumeration 😁 A taxonomy of vendor · 7 likes + reposts
📊 Activity & format
Recent posts
View on Mastodon ↗
🔥 Top post
CE3 - Common Excuse & Evasion Enumeration 😁
A taxonomy of vendor dismissal patterns for legitimate vulnerability reports: https://github.com/badrap/ce3
Renamed our taxonomy of vulnerability report dismissal patterns to "CV3" (Common Vendor Excuse & Evasion Enumeration). https://github.com/badrap/cv3
Also, its top-level categories (CV3-100, CV3-200, ...) now follow the canonical canonical …
RE: https://infosec.exchange/@jub0bs/116512350464173747
Yesterday one of my HackerOne reports bounced, because the included PoC sent the HTTP payload to a demo server running on localhost.
So the h1 analyst declared that it was "self-sabot…
Why be knowledgeable when you can be Kyeswledgeable?
Is it just me, or do LLMs really love the word "shape"? "Shape of the problem." "Shape of the solution." Program architecture and data flow? "Code shape." Bug report structure? "Issue shape."
One of those "once you see it, you can't unsee …
The recent wave of vulnerabilites, found in part with AI, has laid bare just how load-bearing ”scarcity of human attention” has been for the cybersecurity house of cards.
I reported this to Deno via GitHub’s private vulnerability reporting feature yesterday. They classified it as a performance bug rather than a vulnerability, and fixed it in https://github.com/denoland/deno/pull/33961.
3/3
For example React's server-side action payload deserializer can call FormData.delete.
2/3
Deno’s FormData, URLSearchParams and Headers exhibit O(n²) behavior in .set()/.delete() when many repeated keys are present.
Example: FormData.delete("_") on ~1MB of _=&_=&_=&...
Node: ~4ms
Deno: ~74s
This could turn otherwise reasonable c…
Cool security trick: the best way to guarantee you'll only ever get AI slop vulnerability reports is to make the reporting process so frustrating and unrewarding that only a robot has the patience for it.
Quadratic blowups are like the sun: stare at one long enough and you start seeing them everywhere. I’m very good at similes.
🐘 Community & instance
💡 Facts
🕵️ Fake follower check
Estimated- Est. 92% real, active audience · Low fake-follower risk.
- Engagement (~0.9% of followers engage each post) is around typical for Mastodon.
- Verified account.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
More like this
Find more →✉ Message Joachim Viide
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with Joachim Viide
Booking an event / appearance is a Pro feature. Upgrade to book Joachim Viide for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ Joachim Viide gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.