badkeys✓ Add us as a preferred source on Google
🔄 Data last refreshed 1 month ago
🤝
Make a deal with badkeys
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
770
Account age
2 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🎁 Free analysisfor badkeys
📊 Post engagement
Recent posts · likes + reposts
Jun 21latest
167
Avg engagement / post
13–39
Typical post (engagement)
21.7%
Engagement vs followers
0/100
Spiky reach
Jul 2024
On Mastodon since
Half of recent posts land between 13 and 39 likes + reposts (median 19) — reach is spiky, driven by the occasional post that pops.
🔥 Top post: I reported an insecure DKIM key to Deutsche Telekom / T-Systems. · 1.5K likes + reposts
📊 Activity & format
Posting cadence
0.19 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly text
Recent: 11 text · 1 image · 0 video.
Follower / following
14×
Follows 56 back. A strong ratio — an audience that follows them, not a follow-for-follow network.
Recent posts
View on Mastodon ↗
I've recently scanned DKIM keys for vulnerabilities, more extensively than previous scans. DKIM keys with the Debian OpenSSL bug are still very common. So are too-short RSA keys (quite a few 512 and even 384 bit keys, and *many* 768 bit, w…
In these times of a looming quantum cryptopocalypse, I guess every cryptographic tool has to support post-quantum cryptography eventually, and badkeys is, of course, no different.
With the latest release 0.0.19, badkeys can detect ML-KEM/M…
During #39c3 Nadia Heninger introduced me to Keegan Ryan, and we talked about things that could go wrong in RSA, and how to detect keys with suspicious patterns created by defect RNGs. At some point, Keegan said: "You could check the Hammi…
"What do you think about the latest news about quantum computing breakthroughs and post-quantum cryptography?" - "Well, I still have some research about RSA vulnerabilities to publish, I need to get it done before RSA is obsolete."
(Yes, t…
There's a software called "BrowserStack local", which, apparently, contains a valid certificate for bs-local[dot]com including a private key. If you leak a private key like that, and if the CA (which, in this case is Godaddy) is informed a…
Chinese security company 360 recently leaked a private key for a wildcard web certificate for *.myclaw.360.cn. The key was shipped as part of their 360 Claw software (apparently some AI frontend).
The certificate has now been revoked. I ch…
In the recently released badkeys v0.0.17, a new check for an RSA vulnerability has been added: RSA keys with small private d values, also known as Wiener's attack: https://badkeys.info/docs/smalld.html
RSA keys have a public exponent e and…
Is anyone aware of an OCR tool that is reliable enough for non-text content like base64 that it can decode something like this?
(Context is something that was just posted on the dev-security-policy list and I currently can't judge the seve…
Video recording of my @nullcon presentation about badkeys, insecure keys in DKIM, DNSSSEC, OpenID Connect, and more now online: https://www.youtube.com/watch?v=Xr09jWCHfqI
Tomorrow at @nullcon I will give a presentation about badkeys at 2pm https://nullcon.net/berlin-2025/schedule#daytwo-schedule/
Key serialization formats can be - uh - the source of "interesting" issues. It appears the whole internet technically uses DKIM the wrong way, but it's more or less the fault of the standard.
DKIM uses public keys in DNS, usually RSA, but …
Is anyone aware of an OCR tool that is reliable enough for non-text content like base64 that it can decode something like this?
(Context is something that was just posted on the dev-security-policy list and I currently can't judge the seve…
Video recording of my @nullcon presentation about badkeys, insecure keys in DKIM, DNSSSEC, OpenID Connect, and more now online: https://www.youtube.com/watch?v=Xr09jWCHfqI
Tomorrow at @nullcon I will give a presentation about badkeys at 2pm https://nullcon.net/berlin-2025/schedule#daytwo-schedule/
Key serialization formats can be - uh - the source of "interesting" issues. It appears the whole internet technically uses DKIM the wrong way, but it's more or less the fault of the standard.
DKIM uses public keys in DNS, usually RSA, but …
🐘 Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Jul 2024
An established account with real history on the platform.
💡 Facts
🗓️Joined Mastodon in 2024 — 2 years ago.
👁️Averages 167 views per post.
📤Posts about 0.2× per week.
🕵️ Fake follower check
Estimated84/100
Excellent
Credibility score
95%
Real
Real audience
Low
Fake-follower risk
High
Data confidence
- Est. 95% real, active audience · Low fake-follower risk.
- Strong engagement (~0.2× of followers engage each post) — an active, real audience.
- Verified account.
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
badkeys is an open-source tool and web service to identify compromised cryptographic keys.
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
Emanuele
16%
Oswald Prucker :veri_trek2:
16%
Marquito
14%
Acro
13%
Ian Jago
12%
Mariusz Felisiak
10%
More like this
Find more →
Mastodon
＋
Mariusz Felisiak ✓
@felixxm@fosstodon.org
770
Followers
Mastodon
＋
Emanuele ✓
@emanuelegori@mastodon.uno
770
Followers
Mastodon
＋
Acro ✓
@acrocatabro@mastodon.gamedev.place
770
Followers
Mastodon
＋
Oswald Prucker :veri_trek2: ✓
@prucker@d-64.social
770
Followers
Mastodon
＋
Marquito
@marquito@cliff.social
770
Followers
Mastodon
＋
Ian Jago
@ianjago@mastodon.art
770
Followers
Frequently asked questions
How much does badkeys charge for a sponsorship?
badkeys hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.
How do I contact badkeys for a brand deal or collaboration?
Send a paid deal or collab request right here on SocialDB — we notify badkeys, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.
How many followers does badkeys have?
badkeys has 770 followers on Mastodon.
✉ Message badkeys
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with badkeys
Booking an event / appearance is a Pro feature. Upgrade to book badkeys for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ badkeys gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove