Peter Stöckli✓

Mastodon @ulldma@infosec.exchange

⚔ Compare ☆ Watch Own this channel?

🤝

Make a deal with Peter Stöckli

🔒 Paid proposals held safely in escrow — released only when the work's approved.

Followers

293

Account age

3 yrs

Known for

New Book
(gegen Windmühlen kämpfen 😉)

3 views New Book (gegen Windmühlen kämpfen 😉)

Check out how my colleague Man Yue Mo and I used LLMs to triage CodeQL results. The GitHub Security Lab Taskflow Agent and the prompts we used are open source and ready to be used!
https://github.blog/security/ai-supported-vulnerability-triage-with-the-github-security-lab-taskflow-agent/

2 views Check out how my colleague Man Yue Mo and I used LLMs to triage CodeQL results. The GitHub Security Lab Taskflow Agent and the prompts we used are open source and ready to be used! https://github.blog/security/ai-supported-vulnerability-triage-with-the-github-security-lab-taskflow-agent/

Die SBB-Anzeigetafeln scheinen von der Arbeitsspeicherknappheit betroffen zu sein. 😁

1 views Die SBB-Anzeigetafeln scheinen von der Arbeitsspeicherknappheit betroffen zu sein. 😁

📊 Post engagement

3

Avg engagement / post

1%

Engagement vs followers

Nov 2022

On Mastodon since

🔥 Top post: I don't know who needs to hear this: if you're thinking about au · 12 likes + reposts

📊 Activity & format

Posting cadence

0.17 / week

A lower-frequency account — each post lands with more weight.

Content mix

Mostly text

Recent: 9 text · 3 image · 0 video.

Recent posts

View on Mastodon ↗

🔥 Top post I don't know who needs to hear this: if you're thinking about automating a trivial task for the third time: just do it now! It doesn't need to be something complicated, often a shell script is enough. $1 refers to the first argument passed to the shell script. (noted so I don't … ★ 12

Die SBB-Anzeigetafeln scheinen von der Arbeitsspeicherknappheit betroffen zu sein. 😁 ★ 1 [PATCH] killswitch: add per-function short-circuit mitigation primitive https://lwn.net/ml/all/20260507070547.2268452-1-sashal@kernel.org/ ★ 1 If you want to learn more about our open-source Taskflow Agent, have a look at this blog post where the different stages of an audit run are explained: https://github.blog/security/how-to-scan-for-vulnerabilities-with-github-security-labs-… This is not even the first Signal issue Jaro found with the help of our Taskflow Agent: have a look at our advisories page to see the other ones: https://securitylab.github.com/advisories/ Also noted on Signal’s Security Acknowledgments pa… ★ 1 My colleague @jaras recently found that a an Android app with zero permissions could exfiltrate all decrypted Signal attachments (affecting the Android APKs downloaded directly from signal.org). Look at the attack scenario our GitHub Secur… ★ 1

Check out how my colleague Man Yue Mo and I used LLMs to triage CodeQL results. The GitHub Security Lab Taskflow Agent and the prompts we used are open source and ready to be used! https://github.blog/security/ai-supported-vulnerability-tr… ★ 2 Einstein said: “Insanity is doing the same thing over and over again and expecting different results.” It looks like Einstein never used LLMs. ★ 3 /cc @never_released The product brief for the new Snapdragon X2 Elite doesn't contain an Arm architecture version, it only says "ARM64-Compatible". I know Qualcomm has been doing this for a time, but it's a bit disheartening for those of us waiting for Arm fe…

New Book (gegen Windmühlen kämpfen 😉) ★ 3 Note: the payloads displayed in the video have been faked to avoid disclosing details of how to implement a working exploit. The details of how to implement a working exploit have not been released yet. More info at: https://github.blog/se… ★ 2

🐘 Community & instance

Home server

infosec.exchange

A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.

✅ Link-verified

Verified link

Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.

On Mastodon since

Nov 2022

Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.

👁️Averages 3 views per post.

📤Posts about 0.2× per week.

🛡️ Audience credibility

76/100 Good

Est. 85% real, active audience · Low fake-follower risk.
Content engagement (~1.0% of followers) is around typical for Mastodon.
Verified account.
Established account (3+ years old).

Est. authentic audience

85%

Fake-follower risk

Low

Heuristic estimate from view-through, engagement vs size and recent growth — a screening signal, not a guarantee.

About

Security Researcher and Software Engineer @GitHubSecurityLab

📸 Gallery

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

Scott Sweeny 14%

Millernþór 13%

Simon :uss_enterprise: :prami: 12%

More like this

Scott Sweeny ✓

@ssweeny@fosstodon.org

@zedlopez@wandering.shop

@jenbee@sfba.social

@hinn_retti@mstdn.social

@tbeseda@indieweb.social

Simon :uss_enterprise: :prami: ✓

@simondh@social.lol