Will Dormann

Mastodon @wdormann@infosec.exchange

⚔ Compare ☆ Watch Own this channel?

🔄 Data last refreshed 9 hours ago

🤝

Make a deal with Will Dormann

🔒 Paid proposals held safely in escrow — released only when the work's approved.

Followers

4.6K

Account age

3 yrs

🧰 Free analysis for Will Dormann

🕵️ Fake follower check 📊 Engagement rate 💰 What they charge

Known for

Claude:Once a chat has been shared, anyone with the link can view the chat snapshot.Not Claude:
When you generate a link, we share the link with search engines, so basically the whole world has the link.
https://www.google.com/search?q=site%3Aclaude.ai%2Fpublic%2Fartifacts
Edit Apparently Anthropic warns you that your chat may show up in search engine results after you generate a link to share it.

27 views Claude:Once a chat has been shared, anyone with the link can view the chat snapshot.Not Claude: When you generate a link, we share the link with search engines, so basically the whole world has the link. https://www.google.com/search?q=site%3Aclaude.ai%2Fpublic%2Fartifacts Edit Apparently Anthropic warns you that your chat may show up in search engine results after you generate a link to share it.

Fun fact:
If you go to report a vulnerability to MSRC that is a missed-fix or a variant of something that Microsoft has already released an update for, you must provide the existing VULN- identifier. Just a CVE isn't enough, for reasons I cannot fathom. (If you tell Microsoft a CVE ID, they themselves can easily see which VULN- ID is associated with it.)
Meaning, only the person who reports a vu

25 views Fun fact: If you go to report a vulnerability to MSRC that is a missed-fix or a variant of something that Microsoft has already released an update for, you must provide the existing VULN- identifier. Just a CVE isn't enough, for reasons I cannot fathom. (If you tell Microsoft a CVE ID, they themselves can easily see which VULN- ID is associated with it.) Meaning, only the person who reports a vu

15 views Related:

Apparently on Monday, Apple killed fG!'s bug
With any macOS system that has Screen Sharing enabled, it's reported that the vulnerability can allow for remote code execution as root.
Apple lists no CVE with such a description.
The only remote one is CVE-2026-43777 which is:A remote attacker may be able to cause a denial of serviceThe navi_the_clown PoC appears to only retrieve files from the target

10 views Apparently on Monday, Apple killed fG!'s bug With any macOS system that has Screen Sharing enabled, it's reported that the vulnerability can allow for remote code execution as root. Apple lists no CVE with such a description. The only remote one is CVE-2026-43777 which is:A remote attacker may be able to cause a denial of serviceThe navi_the_clown PoC appears to only retrieve files from the target

📊 Post engagement

Avg engagement / post

0.5%

Engagement vs followers

Oct 2022

On Mastodon since

🔥 Top post: Today's accomplishment: Code execution as NT AUTHORITY\SYSTEM, t · 58 likes + reposts

📊 Activity & format

Posting cadence

12.5 / week

Toots daily — consistently active for a campaign window.

Content mix

Mostly images

Recent: 5 text · 7 image · 0 video.

Follower / following

7.8×

Follows 595 back. A strong ratio — an audience that follows them, not a follow-for-follow network.

Recent posts

View on Mastodon ↗

🔥 Top post Today's accomplishment: Code execution as NT AUTHORITY\SYSTEM, triggered by playing a music file on Windows. Local environment configuration by a non-admin user required, so this definitely isn't RCE. Just LPE. If MSRC requires me to provide a video of the exploit, that'll forc… ★ 58

OK, despite the fact that Google is still unaware of the blog post, @vunix pointed out that the referenced blog post is here And confirms that the CVE is: CVE-2026-43760An app may be able to access user-sensitive dataAnd also mentions that… ★ 5 Actual cryptographer Matthew Green wrote some words about this: https://blog.cryptographyengineering.com/2026/07/29/some-notes-about-anthropics-new-results/This result initially sounds more exciting, since most people hear “attack on AES” … ★ 49

Concern #1: There apparently aren't enough dogs for WeRateDogs to not have to recycle material. Concern #2: Ronnie clearly did something to raise his score from 12 to 13. 🤔 ★ 5

Apparently on Monday, Apple killed fG!'s bug With any macOS system that has Screen Sharing enabled, it's reported that the vulnerability can allow for remote code execution as root. Apple lists no CVE with such a description. The only remo… ★ 10 Anthropic isn't even trying to hide the fact that they only know how to speak spin, with the sole intention of getting investors.The second identifies a new way to attack round-reduced AES, the most widely used symmetric cipher.A not-caref… ★ 41

Related: ★ 15

Lots of vul collisions in the world of AI-driven vul discovery. Chart taken from a terrible place, so no attribution. ★ 8 iOS 26.6 is out, with fixes for 91 CVEs. ★ 15

Claude:Once a chat has been shared, anyone with the link can view the chat snapshot.Not Claude: When you generate a link, we share the link with search engines, so basically the whole world has the link. https://www.google.com/search?q=sit… ★ 27 MSRC is starting well with their "piss off the reporter" strategy. I reported in full detail a two-vulnerability exploit chain, since on their own either vulnerability is somewhat shrug-worthy. I got a request that I submit a separate rep… ★ 23

Fun fact: If you go to report a vulnerability to MSRC that is a missed-fix or a variant of something that Microsoft has already released an update for, you must provide the existing VULN- identifier. Just a CVE isn't enough, for reasons I… ★ 25

🐘 Community & instance

Home server

infosec.exchange

A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.

On Mastodon since

Oct 2022

Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.

👁️Averages 23 views per post.

📤Posts about 12.5× per week.

🕵️ Fake follower check

Estimated

66/100

Good Credibility score

89%

Real Real audience

Low Fake-follower risk

High Data confidence

Est. 89% real, active audience · Low fake-follower risk.
Engagement (~0.5% of followers engage each post) is around typical for Mastodon.
Established account (3+ years old).

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

I play with vulnerabilities and exploits. I used to be https://twitter.com/wdormann but Twitter has become unbearable, so here I am.

📸 Gallery

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

Chris Were ⁂🐧🌱☕ 17%

NSFVoyager2 17%

Batangpandok 16%

Valerie Aurora 🇺🇦 🇪🇺🇳🇱 13%

Helga van Leur ☀️ 11%

Verkehrsclub Deutschland 11%

More like this

Find more →

Mastodon

Batangpandok

@batangpandok@mastodon.social

4.6K Followers

Mastodon

Helga van Leur ☀️

@helgavanleur@mastodon.green

4.6K Followers

Mastodon

Verkehrsclub Deutschland ✓

@chriswere@toot.wales

4.6K Followers

Mastodon

NSFVoyager2

@nsfvoyager2@techhub.social

4.6K Followers

Mastodon

Valerie Aurora 🇺🇦 🇪🇺🇳🇱 ✓

@vaurora@mstdn.social

4.6K Followers

Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove

Will Dormann

Make a deal with Will Dormann

Known for

📊 Post engagement

📊 Activity & format

Recent posts

🐘 Community & instance

💡 Facts

🕵️ Fake follower check

About

📸 Gallery

🔀 Audience overlap

More like this

✉ Message Will Dormann

🎤 Event / appearance with Will Dormann