🤝
Make a deal with Maxim Suhanov
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
91
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🎁 Free analysisfor Maxim Suhanov
Known for
2 views
Unfortunately, this paper from 2017 is still relevant.
https://github.com/MotherOfAllVoids/bachelor_thesis/blob/master/text/flaw.pdf
1. BestCrypt Volume Encryption (BCVE) allows watermarking attacks.
2. BCVE allows plaintext injection attacks.
3. BCVE allows forced decryption of some sectors.
It doesn't matter that AES-XTS is used, the vulnerability is in the function wrapping encryption/decryptio
2 views
According to Microsoft (MSRC), attacks involving symlinks stored on removable drives or in file system images (like VHDX) are not vulnerabilities.
If an unprivileged user manages to quickly replace a regular file in such a location with a symlink to another file (can point anywhere, even into the C:\Windows directory), this is okay.
This means that attackers can defeat existing symlink mitigations
📊 Post engagement
4
Avg engagement / post
4.4%
Engagement vs followers
Dec 2022
On Mastodon since
🔥 Top post: CrashXTS (CVE-2025-21210): a practical randomization attack agai · 13 likes + reposts
📊 Activity & format
Posting cadence
0.15 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly text
Recent: 9 text · 3 image · 0 video.
Follower / following
4.3×
Follows 21 back. A more reciprocal / networked account.
Recent posts
View on Mastodon ↗
In 2022, Microsoft decided to propagate Mark-of-the-Web into mounted containers. Here is how they did that and why third-party code (like WinRAR) still fails to correctly propagate the Zone.Identifier ADS. https://dfir.ru/2026/06/29/mark-o…
Most FDE vendors/projects don't consider vectors requiring repeated physical access as a vulnerability.
But there is another side to this: an HDD/SSD firmware backdoor (or a network attacker injecting arbitrary data into a disk image boote…
CVE-2024-13745 in EDK II (likely, "WONTFIX"): "what you measure is not what you use".
The story about firmware measuring bytes different from ones being used. It affects PCR[5], so the severity is low (nobody cares about PCR[5] by default)…
NotCVE-2026-0002: if you run two NetScalers in the high availability (HA/HA-INC) deployment, no SSH host key checks are performed between them, even when you followed every advice listed here: https://docs.netscaler.com/en-us/netscaler-adc…
My story of recovering cleared RDP logs from a completely unrelated EVTX file: https://dfir.ru/2026/01/26/windows-event-logs-were-cleared-but-resurrected-in-another-file/ #DFIR
My long post about wide-block & AEAD modes in full-disk encryption: it cover threat models, vulnerabilities, and edge cases.
Key points:
- It's common for FDE implementations to fail outside of the encryption layer.
- Wide-block modes don'…
Unfortunately, this paper from 2017 is still relevant.
https://github.com/MotherOfAllVoids/bachelor_thesis/blob/master/text/flaw.pdf
1. BestCrypt Volume Encryption (BCVE) allows watermarking attacks.
2. BCVE allows plaintext injection atta…
My blog post and a PoC disk image are here: https://dfir.ru/2025/02/23/symlink-attacks-without-code-execution/
According to Microsoft (MSRC), attacks involving symlinks stored on removable drives or in file system images (like VHDX) are not vulnerabilities.
If an unprivileged user manages to quickly replace a regular file in such a location with a …
It seems that GRUB developers decided to disable many file system drivers (JFS, NTFS, UDF, etc.) when the Secure Boot lockdown is on.
https://git.savannah.gnu.org/cgit/grub.git/commit/grub-core/fs?id=c4bc55da28543d2522a939ba4ee0acde45f2fa74
Five vulnerabilities in AMI file system drivers (NTFS, exFAT): https://dfir.ru/2024/12/09/multiple-vulnerabilities-in-ami-file-system-drivers/
The vendor was fixing one of them for more than two years!
Most FDE vendors/projects don't consider vectors requiring repeated physical access as a vulnerability.
But there is another side to this: an HDD/SSD firmware backdoor (or a network attacker injecting arbitrary data into a disk image boote…
CVE-2024-13745 in EDK II (likely, "WONTFIX"): "what you measure is not what you use".
The story about firmware measuring bytes different from ones being used. It affects PCR[5], so the severity is low (nobody cares about PCR[5] by default)…
NotCVE-2026-0002: if you run two NetScalers in the high availability (HA/HA-INC) deployment, no SSH host key checks are performed between them, even when you followed every advice listed here: https://docs.netscaler.com/en-us/netscaler-adc…
My story of recovering cleared RDP logs from a completely unrelated EVTX file: https://dfir.ru/2026/01/26/windows-event-logs-were-cleared-but-resurrected-in-another-file/ #DFIR
My long post about wide-block & AEAD modes in full-disk encryption: it cover threat models, vulnerabilities, and edge cases.
Key points:
- It's common for FDE implementations to fail outside of the encryption layer.
- Wide-block modes don'…
Unfortunately, this paper from 2017 is still relevant.
https://github.com/MotherOfAllVoids/bachelor_thesis/blob/master/text/flaw.pdf
1. BestCrypt Volume Encryption (BCVE) allows watermarking attacks.
2. BCVE allows plaintext injection atta…
My blog post and a PoC disk image are here: https://dfir.ru/2025/02/23/symlink-attacks-without-code-execution/
According to Microsoft (MSRC), attacks involving symlinks stored on removable drives or in file system images (like VHDX) are not vulnerabilities.
If an unprivileged user manages to quickly replace a regular file in such a location with a …
It seems that GRUB developers decided to disable many file system drivers (JFS, NTFS, UDF, etc.) when the Secure Boot lockdown is on.
https://git.savannah.gnu.org/cgit/grub.git/commit/grub-core/fs?id=c4bc55da28543d2522a939ba4ee0acde45f2fa74
Five vulnerabilities in AMI file system drivers (NTFS, exFAT): https://dfir.ru/2024/12/09/multiple-vulnerabilities-in-ami-file-system-drivers/
The vendor was fixing one of them for more than two years!
🐘 Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
On Mastodon since
Dec 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.
💡 Facts
🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 4 views per post.
📤Posts about 0.2× per week.
🕵️ Fake follower check
Estimated80/100
Excellent
Credibility score
97%
Real
Real audience
Low
Fake-follower risk
High
Data confidence
- Est. 97% real, active audience · Low fake-follower risk.
- Strong engagement (~4.4% of followers engage each post) — an active, real audience.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
Computer forensics, computer forensics tool validation, etc.
https://dfir.ru
https://github.com/msuhanov/
🕊
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
xcanehan
18%
Nine Oh Real
15%
Ben :conga_parrot:
15%
Efstathios Iosifidis, DVM
15%
Dont do this at home
13%
Ben
12%
More like this
Find more →
Mastodon
＋
Nine Oh Real
@mythlfrythtyg@mastodon.social
91
Followers
Mastodon
＋
Ben :conga_parrot:
@benlovesboba@mstdn.io
91
Followers
Mastodon
＋
xcanehan
@xcanehan@fosstodon.org
91
Followers
Mastodon
＋
Efstathios Iosifidis, DVM
@iosifidis@fosstodon.org
91
Followers
Mastodon
＋
Ben ✓
@benfuddled@hachyderm.io
91
Followers
Mastodon
＋
Dont do this at home
@dontdothisathome@chaos.social
91
Followers
Frequently asked questions
How much does Maxim Suhanov charge for a sponsorship?
Maxim Suhanov hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.
How do I contact Maxim Suhanov for a brand deal or collaboration?
Send a paid deal or collab request right here on SocialDB — we notify Maxim Suhanov, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.
How many followers does Maxim Suhanov have?
Maxim Suhanov has 91 followers on Mastodon.
✉ Message Maxim Suhanov
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with Maxim Suhanov
Booking an event / appearance is a Pro feature. Upgrade to book Maxim Suhanov for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ Maxim Suhanov gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove