Dhruv AHUJA

Dhruv AHUJA

Mastodon @new23d@infosec.exchange
⚔ Compare ☆ Watch Own this channel?
🤝

Make a deal with Dhruv AHUJA

🔒 Paid proposals held safely in escrow — released only when the work's approved.

📣Sponsored postOne disclosed post (toot) with your link and message. $12→ 🧵Sponsored threadA multi-post explainer or story — the fediverse rewards dept… $30→ 📦Product seeding / honest reviewSend me your product — I post a disclosed, honest take. Auth… $16→ 📌Pinned sponsored postA disclosed post pinned to the top of my profile for the mon… $36/mo→ 🔗Profile link (bio field)Your link in one of my profile metadata fields for the month… $18/mo→ 🔁Boost packageI boost (repost) your account's toots through the month — di… $24/mo→ 🏛️Instance / community sponsorshipSponsor the server I run — a sponsor line in the About/rules… $30/mo→ 🤝Mutual boost collabWe boost each other across instances — a value swap between … Swap→

Every booking is a normal escrow-protected deal.

Followers
51
Account age
3 yrs

Known for

There is a computational, time and environmental cost to #PQC in TLS... Google enabled it server-side on Feb 12 and any OpenSSL v3.5+ or Go crypto/tls v1.24+ client since then is sending ~1200 bytes of additional session key data than before. This takes the TCP packet of the TLS handshake easily over the MTU (usually between 1400 and 1500 bytes). We've noticed that many-a-times IP fragmentation ha3 views There is a computational, time and environmental cost to #PQC in TLS... Google enabled it server-side on Feb 12 and any OpenSSL v3.5+ or Go crypto/tls v1.24+ client since then is sending ~1200 bytes of additional session key data than before. This takes the TCP packet of the TLS handshake easily over the MTU (usually between 1400 and 1500 bytes). We've noticed that many-a-times IP fragmentation ha Update profile on APT28/Unit 26165/Fancy Bear by on Gov·UK [1]. "Unit 26165 accessed private IP cameras near military facilities, ports, train stations and border crossings in Ukraine, Moldova and 11 NATO countries to track the movement of foreign assistance" They seem to have this X-Agent & X-Tunnel pair of malware to pull this off of "private IP" cameras. From ESET's 2016 analysis [2] of it, we 2 views Update profile on APT28/Unit 26165/Fancy Bear by on Gov·UK [1]. "Unit 26165 accessed private IP cameras near military facilities, ports, train stations and border crossings in Ukraine, Moldova and 11 NATO countries to track the movement of foreign assistance" They seem to have this X-Agent & X-Tunnel pair of malware to pull this off of "private IP" cameras. From ESET's 2016 analysis [2] of it, we

📊 Post engagement

2
Avg engagement / post
3.9%
Engagement vs followers
Nov 2022
On Mastodon since

🔥 Top post: There is a computational, time and environmental cost to #PQC in · 3 likes + reposts

📊 Activity & format

Posting cadence
1.2 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly video
Recent: 4 text · 2 image · 6 video.
Follower / following
1.4×
Follows 37 back. A more reciprocal / networked account.

Recent posts

View on Mastodon ↗
▶ 🔥 Top post There is a computational, time and environmental cost to #PQC in TLS... Google enabled it server-side on Feb 12 and any OpenSSL v3.5+ or Go crypto/tls v1.24+ client since then is sending ~1200 bytes of additional session key data than before. This takes the TCP packet of the TLS… ★ 3
"security systems architecture experts" TIL about MITRE D3FEND: Detection, Denial, and Disruption Framework Empowering Network Defense. It's updated quarterly and useful to map "defensive cybersecurity techniques" to TTPs. Nice one. https:… ★ 1 ▶ Update profile on APT28/Unit 26165/Fancy Bear by on Gov·UK [1]. "Unit 26165 accessed private IP cameras near military facilities, ports, train stations and border crossings in Ukraine, Moldova and 11 NATO countries to track the movement of… ★ 2 65% of breaches could've been prevented according to this research by Niels Provos if only Hardware second factors, Egress control and Positive execution control would've been in place. I couldn't agree more when he says, "most companies d… ▶ VPC Endpoint Bucket Policies are completely ineffectual in preventing exfiltration if the workload has access to the Internet. Just upload to the $otherCloud's storage endpoint. This is where #egress filtering at the NAT gateway layer prev… ▶ Interestingly, in #Salesforce, IP ranges security is only applied at login time at Org or User Profile/Session levels by default. Once the token is issued post login, it can be used outside of the IP ranges perimeter. Unless one ticks ✅ th… ▶ Well, OAuth didn't solve the problem did it: "The attackers pushed a code update capable of collecting OAuth tokens Klue’s customers use to connect Klue to their own systems." [1] I know there are efforts to tie OAuth tokens to specific ma… ▶ Using VPN to connect to an already TLS endpoint doubly encrypts the data in transmission. Sheer waste of resources and creating a bandwidth bottleneck for all users, IMO. If it's a "private" network range that is being routed to via the VP… #Fable system requirements: https://fablethegame.com/news/fable-faq I'm attending Infosecurity Europe 2026 👋 #Infosec2026 #CyberSafe RE: https://infosec.exchange/@ChaserSystems/116594784736742406 Supremely excited about we're building next 🚀 This is a foundational first step towards the infra needed 🏗️ AI Agents are the newest entrant to Insider Threat.

🐘 Community & instance

Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 2 views per post.
📤Posts about 1.2× per week.

🛡️ Audience credibility

80/100 Excellent
  • Est. 97% real, active audience · Low fake-follower risk.
  • Strong engagement (~3.9% of followers engage each post) — an active, real audience.
  • Established account (3+ years old).
Est. authentic audience
97%
Fake-follower risk
Low
Data confidence
High

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

Making network egress filtering effective, reliable and usable. Founder & Chief Engineer at @ChaserSystems

📸 Gallery

Update profile on APT28/Unit 26165/Fancy Bear by on Gov·UK [1]. "Unit 26165 accessed private IP cameras near military facilities, ports, train stations and border crossings in Ukraine, Moldova and 11 NATO countries to track the movement of foreign assistance" They seem to have this X-Agent & X-Tunnel pair of malware to pull this off of "private IP" cameras. From ESET's 2016 analysis [2] of it, we VPC Endpoint Bucket Policies are completely ineffectual in preventing exfiltration if the workload has access to the Internet. Just upload to the $otherCloud's storage endpoint. This is where #egress filtering at the NAT gateway layer prevents a compromise. Interestingly, in #Salesforce, IP ranges security is only applied at login time at Org or User Profile/Session levels by default. Once the token is issued post login, it can be used outside of the IP ranges perimeter. Unless one ticks ✅ the additional 'Enforce login IP ranges on every request' box. But this setting does not exist at the Org level. ref: https://help.salesforce.com/s/articleView?id= Well, OAuth didn't solve the problem did it: "The attackers pushed a code update capable of collecting OAuth tokens Klue’s customers use to connect Klue to their own systems." [1] I know there are efforts to tie OAuth tokens to specific machines, aka device bound credentials, etc. but those are very browser (Chrome only?) focused. There are also three fundamental design issues in that approach: (1 There is a computational, time and environmental cost to #PQC in TLS... Google enabled it server-side on Feb 12 and any OpenSSL v3.5+ or Go crypto/tls v1.24+ client since then is sending ~1200 bytes of additional session key data than before. This takes the TCP packet of the TLS handshake easily over the MTU (usually between 1400 and 1500 bytes). We've noticed that many-a-times IP fragmentation ha Using VPN to connect to an already TLS endpoint doubly encrypts the data in transmission. Sheer waste of resources and creating a bandwidth bottleneck for all users, IMO. If it's a "private" network range that is being routed to via the VPN, there's a case, yes. But think of the SNAT from the users' network first and then DNAT by the VPN. These allocate finite resources (ports) on both ends, and i #Fable system requirements: https://fablethegame.com/news/fable-faq I'm attending Infosecurity Europe 2026 👋 #Infosec2026 #CyberSafe

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

Cleridwen Cleridwen 18% The Global Citizen The Global Citizen 15% Chaos Fallen Chaos Fallen 15% Wisedo Wisedo 15% Bad News Nobody Bad News Nobody 14% Benjamin Benjamin 14%

More like this

Find more →
Mastodon
Cleridwen
Cleridwen ✓
@cleridwen@tech.lgbt
51 Followers
Mastodon
Bad News Nobody
Bad News Nobody
@dukeboitans@mas.to
51 Followers
Mastodon
Benjamin
Benjamin ✓
@ben@mstdn.games
51 Followers
Mastodon
The Global Citizen
The Global Citizen
@globalcitizen@mastodon.online
51 Followers
Mastodon
Chaos Fallen
Chaos Fallen
@chaosfallen@metalhead.club
51 Followers
Mastodon
Wisedo
Wisedo
@wisedo@mastodon.art
51 Followers

✉ Message Dhruv AHUJA

Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.

  • ✓ Message any influencer from their listing
  • ✓ The influencer gets notified by email
  • ✓ Manage every conversation in one inbox
See Pro $9.95/mo →

Already Pro? Log in.

🎤 Event / appearance with Dhruv AHUJA

Booking an event / appearance is a Pro feature. Upgrade to book Dhruv AHUJA for an in-person or virtual appearance — payment held safely in escrow until the event is done.

  • ✓ Book them for events, livestreams, panels & more
  • ✓ Dhruv AHUJA gets notified by email
  • ✓ Fee held in escrow, released after the appearance
See Pro $9.95/mo →

Already Pro? Log in.