LIVE
⭐4.4M influencer listings 🏢50.9K sponsor listings 🌍68.8B combined audience reach 📊13 platforms indexed 🗺️130+ countries covered 🏷️10,000+ niches 🦋1.8M Bluesky creators 🎙️1.2M podcast creators 🟣805.6K Twitch creators 🐘158.5K Mastodon creators 🥊104.2K Kick creators ▶️83.1K YouTube creators 𝕏80K X creators 📈72.5K Pinterest creators ✈️56.1K Telegram creators 🎵35.5K TikTok creators 🎮8.3K Discord creators 🎬4.1K Rumble creators 📈2.2K Substack creators 🧵1.6K Threads creators ⭐4.4M influencer listings 🏢50.9K sponsor listings 🌍68.8B combined audience reach 📊13 platforms indexed 🗺️130+ countries covered 🏷️10,000+ niches 🦋1.8M Bluesky creators 🎙️1.2M podcast creators 🟣805.6K Twitch creators 🐘158.5K Mastodon creators 🥊104.2K Kick creators ▶️83.1K YouTube creators 𝕏80K X creators 📈72.5K Pinterest creators ✈️56.1K Telegram creators 🎵35.5K TikTok creators 🎮8.3K Discord creators 🎬4.1K Rumble creators 📈2.2K Substack creators 🧵1.6K Threads creators
Usenix WOOT Conference on Offensive Technologies :verified:

Usenix WOOT Conference on Offensive Technologies :verified:

Mastodon @wootsecurity@infosec.exchange
⚔ Compare ☆ Follow Own this channel?
🔄 Data last refreshed 16 hours ago
🤝

Make a deal with Usenix WOOT Conference on Offensive Technologies :verified:

🔒 Paid proposals held safely in escrow — released only when the work's approved.

📣Sponsored postOne disclosed post (toot) with your link and message. $12→ 🧵Sponsored threadA multi-post explainer or story — the fediverse rewards dept… $30→ 📦Product seeding / honest reviewSend me your product — I post a disclosed, honest take. Auth… $16→ 📌Pinned sponsored postA disclosed post pinned to the top of my profile for the mon… $36/mo→ 🔗Profile link (bio field)Your link in one of my profile metadata fields for the month… $18/mo→ 🔁Boost packageI boost (repost) your account's toots through the month — di… $24/mo→ 🏛️Instance / community sponsorshipSponsor the server I run — a sponsor line in the About/rules… $30/mo→ 🤝Mutual boost collabWe boost each other across instances — a value swap between … Swap→ 🎬UGC HireBranded content for your own channels & ads from $50→ 🎙️Podcast guest spotInvite Usenix WOOT Conference on Offensive Technologies :ver… $26→ 📞1:1 ConsultPaid video call — advice, coaching or Q&A $75/hr→

Every booking is a normal escrow-protected deal.

Followers
231
Account age
3 yrs
🎁 Free analysisfor Usenix WOOT Conference on Offensive Technologies :verified:
🕵️Fake Followers CheckReal-audience % & bot risk→ 📊Engagement rateBenchmarked vs. peers→ 💰What they chargeFair sponsored-post price→

Known for

PowerHooK demonstrates that confidential VMs protected by AMD's SEV technologies can still leak secrets through software-based power side channels. By exploiting transient execution to replay victim code paths, a malicious hypervisor can collect clean power traces and recover secrets, such as AES key material, even from SEV-SNP-protected Workloads. @moberhuber @isec_tugraz12 views PowerHooK demonstrates that confidential VMs protected by AMD's SEV technologies can still leak secrets through software-based power side channels. By exploiting transient execution to replay victim code paths, a malicious hypervisor can collect clean power traces and recover secrets, such as AES key material, even from SEV-SNP-protected Workloads. @moberhuber @isec_tugraz Your x86 CPU has a hidden mode that no OS can touch, no hypervisor can see, and no security tool can monitor. The security community spent 20 years asking: what could go wrong? Turns out: a lot. If you want to learn more, checkout the upcoming paper at WOOT'26 "SoK: 20 Years of Power, Privilege, and Peril in x86 System Management Mode". Preprint: https://vanbulck.net/files/woot26-smm.pdf11 views Your x86 CPU has a hidden mode that no OS can touch, no hypervisor can see, and no security tool can monitor. The security community spent 20 years asking: what could go wrong? Turns out: a lot. If you want to learn more, checkout the upcoming paper at WOOT'26 "SoK: 20 Years of Power, Privilege, and Peril in x86 System Management Mode". Preprint: https://vanbulck.net/files/woot26-smm.pdf "Protocol Prying: Systematic Vulnerability Research in the AirDrop and Android Quick Share Proximity Transfer Protocols" presents the first cross-platform security analysis of Apple AirDrop and Android Quick Share, two proximity file-transfer protocols used by over five billion devices. By reverse engineering AirDrop’s application-layer stack and building the AIRFUZZ protocol-aware fuzzer, @Micros8 views "Protocol Prying: Systematic Vulnerability Research in the AirDrop and Android Quick Share Proximity Transfer Protocols" presents the first cross-platform security analysis of Apple AirDrop and Android Quick Share, two proximity file-transfer protocols used by over five billion devices. By reverse engineering AirDrop’s application-layer stack and building the AIRFUZZ protocol-aware fuzzer, @Micros Session currently employs its own uniquely designed messaging protocol, Session Protocol V1, having migrated away from the Signal Protocol. The paper presents three practical attacks: an impersonation attack, a message timestamp forgery attack, and message dropping and replay attacks4 views Session currently employs its own uniquely designed messaging protocol, Session Protocol V1, having migrated away from the Signal Protocol. The paper presents three practical attacks: an impersonation attack, a message timestamp forgery attack, and message dropping and replay attacks

📊 Post engagement

5
Avg engagement / post
2.2%
Engagement vs followers
Dec 2022
On Mastodon since

🔥 Top post: PowerHooK demonstrates that confidential VMs protected by AMD's · 12 likes + reposts

📊 Activity & format

Posting cadence
2.8 / week
Posts several times a week.
Content mix
Mostly images
Recent: 1 text · 11 image · 0 video.
Follower / following
3.6×
Follows 64 back. A more reciprocal / networked account.

Recent posts

View on Mastodon ↗
🔥 Top post PowerHooK demonstrates that confidential VMs protected by AMD's SEV technologies can still leak secrets through software-based power side channels. By exploiting transient execution to replay victim code paths, a malicious hypervisor can collect clean power traces and recover se… ★ 12
WebRTC security in IoT remains poorly understood. RTCInspect is an open-source framework for automated analysis of RTC traffic to detect protocol and cryptographic weaknesses. Using this framework, Goeman et al. conducted a comparative sec… Finding the right EM probe location is often the tedious, expert-driven part of electromagnetic side-channel attacks. Dev Mehta et al. paper, Swarm in EM Hay, turns this into an adaptive search problem: a particle swarm follows mutual-info… Last year, DARPA’s AI Cyber Challenge (AIxCC) showed that cyber reasoning systems (CRSs) perform vulnerability discovery and patch bugs: most of the 7 open-source CRSs remain largely unusable outside their original infrastructure that no l… ★ 1 What if malware could hide in plain sight? Not by disabling your tools, but by drowning them in data. Telemetry Complexity Attacks generate overwhelming nested telemetry that crashes serializers, breaks database inserts, and freezes dashbo… ★ 2 Your x86 CPU has a hidden mode that no OS can touch, no hypervisor can see, and no security tool can monitor. The security community spent 20 years asking: what could go wrong? Turns out: a lot. If you want to learn more, checkout the upco… ★ 11 Some rooms at conference rate are again available for WOOT: https://www.usenix.org/conference/usenixsecurity26/venue-hotel-and-travel Roudot & Sabt investigate how Widevine, Google's DRM, handles decrypted media inside modern browsers and shows that its output boundary can be intercepted surprisingly easily - on both Linux and Windows - incl. major streaming platforms, n… ★ 3 Session currently employs its own uniquely designed messaging protocol, Session Protocol V1, having migrated away from the Signal Protocol. The paper presents three practical attacks: an impersonation attack, a message timestamp forgery at… ★ 4 "Protocol Prying: Systematic Vulnerability Research in the AirDrop and Android Quick Share Proximity Transfer Protocols" presents the first cross-platform security analysis of Apple AirDrop and Android Quick Share, two proximity file-trans… ★ 8 How are you solving this dilemma? ★ 1 Huber & Schink of #FraunhoferAISEC evaluate BBI-based online and offline manipulations of on-microcontroller flash memory, providing stealthy data manipulation and the ability to re-enable new µC interfaces & features. ★ 2

🐘 Community & instance

Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
On Mastodon since
Dec 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 5 views per post.
📤Posts about 2.8× per week.

🕵️ Fake follower check

Estimated
80/100
Excellent Credibility score
97%
Real Real audience
Low Fake-follower risk
High Data confidence
  • Est. 97% real, active audience · Low fake-follower risk.
  • Strong engagement (~2.2% of followers engage each post) — an active, real audience.
  • Established account (3+ years old).

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

WOOT aims to present a broad picture of offense and its contributions, bringing together researchers and practitioners in all areas of computer security. Co-located with USENIX Security '26 in Baltimore,MD on August 10–11, 2026

📸 Gallery

WebRTC security in IoT remains poorly understood. RTCInspect is an open-source framework for automated analysis of RTC traffic to detect protocol and cryptographic weaknesses. Using this framework, Goeman et al. conducted a comparative security study of 21 real-world applications, spanning 11 consumer IoT devices and 10 major web platforms. Finding the right EM probe location is often the tedious, expert-driven part of electromagnetic side-channel attacks. Dev Mehta et al. paper, Swarm in EM Hay, turns this into an adaptive search problem: a particle swarm follows mutual-information leakage maps to find useful attack locations faster than exhaustive scanning. A key byproduct is a practical MI pipeline for SCA that combines matrix-bas Last year, DARPA’s AI Cyber Challenge (AIxCC) showed that cyber reasoning systems (CRSs) perform vulnerability discovery and patch bugs: most of the 7 open-source CRSs remain largely unusable outside their original infrastructure that no longer exists. This WOOT paper presents an open, locally deployable framework with ported components from every AIxCC finalist. Project Website: https://github.c What if malware could hide in plain sight? Not by disabling your tools, but by drowning them in data. Telemetry Complexity Attacks generate overwhelming nested telemetry that crashes serializers, breaks database inserts, and freezes dashboards. 18 products tested. 7 affected. 3 CVEs assigned. To appear at WOOT next week: "Evading and crashing anti-malware solutions via data collection overloading Your x86 CPU has a hidden mode that no OS can touch, no hypervisor can see, and no security tool can monitor. The security community spent 20 years asking: what could go wrong? Turns out: a lot. If you want to learn more, checkout the upcoming paper at WOOT'26 "SoK: 20 Years of Power, Privilege, and Peril in x86 System Management Mode". Preprint: https://vanbulck.net/files/woot26-smm.pdf PowerHooK demonstrates that confidential VMs protected by AMD's SEV technologies can still leak secrets through software-based power side channels. By exploiting transient execution to replay victim code paths, a malicious hypervisor can collect clean power traces and recover secrets, such as AES key material, even from SEV-SNP-protected Workloads. @moberhuber @isec_tugraz Roudot & Sabt investigate how Widevine, Google's DRM, handles decrypted media inside modern browsers and shows that its output boundary can be intercepted surprisingly easily - on both Linux and Windows - incl. major streaming platforms, namely Netflix and Disney+. Pre-print: https://hal.science/hal-05648322v1/file/main.pdf Session currently employs its own uniquely designed messaging protocol, Session Protocol V1, having migrated away from the Signal Protocol. The paper presents three practical attacks: an impersonation attack, a message timestamp forgery attack, and message dropping and replay attacks

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

Theodore Lytras Theodore Lytras 14% London Eastfield 🇵🇸 London Eastfield 🇵🇸 14% Andrea Zio Andrea Zio 11% Syméon Syméon 11% WIRED - The Latest in Technology, Science, Culture and Business [Unofficial] WIRED - The Latest in Technology, Science, Culture and Business [Unofficial] 11% Arky 🔜 EF Arky 🔜 EF 10%

More like this

Find more →
Mastodon
Andrea Zio
Andrea Zio
@andreazio@mastodon.world
231 Followers
Mastodon
Theodore Lytras
Theodore Lytras
@theodorelytras@libretooth.gr
231 Followers
Mastodon
Syméon
Syméon
@r_a@framapiaf.org
231 Followers
Mastodon
WIRED - The Latest in Technology, Science, Culture and Business [Unofficial]
WIRED - The Latest in Technology, Science, Culture and Business [Unofficial]
@wired.com@web.brid.gy
231 Followers
Mastodon
London Eastfield 🇵🇸
London Eastfield 🇵🇸
@londoneastfield@stpauli.social
231 Followers
Mastodon
Arky 🔜 EF
Arky 🔜 EF ✓
@arky@chitter.xyz
231 Followers

✉ Message Usenix WOOT Conference on Offensive Technologies :verified:

Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.

  • ✓ Message any influencer from their listing
  • ✓ The influencer gets notified by email
  • ✓ Manage every conversation in one inbox
See Pro $9.95/mo →

Already Pro? Log in.

🎤 Event / appearance with Usenix WOOT Conference on Offensive Technologies :verified:

Booking an event / appearance is a Pro feature. Upgrade to book Usenix WOOT Conference on Offensive Technologies :verified: for an in-person or virtual appearance — payment held safely in escrow until the event is done.

  • ✓ Book them for events, livestreams, panels & more
  • ✓ Usenix WOOT Conference on Offensive Technologies :verified: gets notified by email
  • ✓ Fee held in escrow, released after the appearance
See Pro $9.95/mo →

Already Pro? Log in.

Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove