sash Add us as a preferred source on Google

Mastodon @sash@hachyderm.io

⚔ Compare ☆ Follow Own this channel?

🔄 Data last refreshed 1 month ago

🤝

Make a deal with sash

🔒 Paid proposals held safely in escrow — released only when the work's approved.

Followers

814

Account age

3 yrs

🎁 Free analysisfor sash

🕵️Fake Followers CheckReal-audience % & bot risk→ 📊Engagement rateBenchmarked vs. peers→ 💰What they chargeFair sponsored-post price→

Known for

1.5K views Are you still only using two factor authentication? I'm way ahead of you with my 7 factor authentication 🔐

Rooting OpenWRT from the parking lot: I discovered an XSS in the OpenWRT SSID scan page, that can be chained to remote root access 👾
Write-up and demo: https://mxsasha.eu/posts/openwrt-ssid-xss-to-root/
CVE-2026-32721, fixed in 24.10.6 / 25.12.1

274 views Rooting OpenWRT from the parking lot: I discovered an XSS in the OpenWRT SSID scan page, that can be chained to remote root access 👾 Write-up and demo: https://mxsasha.eu/posts/openwrt-ssid-xss-to-root/ CVE-2026-32721, fixed in 24.10.6 / 25.12.1

I found a chain of vulnerabilities in systems at RIPE NCC, operator of one of five global RPKI trust anchors. A single click on an ordinary-looking link was enough to disconnect a network from the internet.
My entry points were debugging fields in DNS and crafted TLS certificates. From there, I escalated to the RPKI Dashboard, which controls which networks are authorised to announce your IP addres

222 views I found a chain of vulnerabilities in systems at RIPE NCC, operator of one of five global RPKI trust anchors. A single click on an ordinary-looking link was enough to disconnect a network from the internet. My entry points were debugging fields in DNS and crafted TLS certificates. From there, I escalated to the RPKI Dashboard, which controls which networks are authorised to announce your IP addres

Just over 4 years after publishing the first draft, NRTMv4 has been approved by the IESG! This was my first ever IETF draft. This new protocol dramatically improves Internet Routing Registry security and reliability.
All that remains now is the RFC Editor process. Four authors went through 11 versions, 25 reviewers/implementers, dozens of comments, and 5 interoperable implementations. Catch my tal

49 views Just over 4 years after publishing the first draft, NRTMv4 has been approved by the IESG! This was my first ever IETF draft. This new protocol dramatically improves Internet Routing Registry security and reliability. All that remains now is the RFC Editor process. Four authors went through 11 versions, 25 reviewers/implementers, dozens of comments, and 5 interoperable implementations. Catch my tal

📊 Post engagement

📊 Activity & format

Posting cadence

0.15 / week

A lower-frequency account — each post lands with more weight.

Content mix

Mostly text

Recent: 7 text · 4 image · 1 video.

Follower / following

2.1×

Follows 390 back. A more reciprocal / networked account.

Recent posts

View on Mastodon ↗

🔥 Top post Are you still only using two factor authentication? I'm way ahead of you with my 7 factor authentication 🔐 ★ 1.5K

I found that crafted #MeshCore node names could compromise #HomeAssistant instances running meshcore-card, with an XSS leading to remote root access on the HA host. An attacker could then access anything controlled or visible through Home… ★ 392 A RIPE Atlas probe could have been enough to hijack a RIPE NCC user's next login, giving full access to the member portal, including the RPKI dashboard and the RIPE Database. I discovered a session fixation vulnerability in RIPE NCC's sing… ★ 57 RIPE NCC made session tokens for the entire member portal available to over 1000 third parties, by design. Full access to the RPKI dashboard, the RIPE Database, and everything else. RIPE NCC had placed strangers under the same domain as th… ★ 254 My disclosure process with RIPE NCC took 14 months, 26 messages, and included two incorrect fixes for the same vulnerability. I wrote about the process, with thoughts on what better would look like for RIPE NCC and others: https://mxsasha.… ★ 43

I found a chain of vulnerabilities in systems at RIPE NCC, operator of one of five global RPKI trust anchors. A single click on an ordinary-looking link was enough to disconnect a network from the internet. My entry points were debugging f… ★ 222

Just over 4 years after publishing the first draft, NRTMv4 has been approved by the IESG! This was my first ever IETF draft. This new protocol dramatically improves Internet Routing Registry security and reliability. All that remains now i… ★ 49

I have been working on a set of vulnerabilities for 14(!) months, but the end is in sight! Just sent the draft blogs to the vendor for review, got € 3200 in bug bounties, and in two weeks I should be able to publish my attack chain on crit… ★ 9 RE: https://hachyderm.io/@koire/116343090946400221 FIDO2 tokens (like yubikey) are great, but you either want more than one or a good process around recovery codes. Making logins more complicated will lower the risk of account compromise, … ★ 2 RE: https://hachyderm.io/@sash/116335729974133606 Thank you, people of mastodon and reddit ✨I was already aware this is not actually 7-factor auth technically ✨ Also it's a bad idea mainly for other reasons: one glitch in this usb hub coul… ★ 12

▶ Rooting OpenWRT from the parking lot: I discovered an XSS in the OpenWRT SSID scan page, that can be chained to remote root access 👾 Write-up and demo: https://mxsasha.eu/posts/openwrt-ssid-xss-to-root/ CVE-2026-32721, fixed in 24.10.6 / 2… ★ 274 Django people, what do we use these days for simple decent looking web interfaces, with limited effort? Some forms, a text page, a few tables, etc. Is it still Bootstrap? Is it Tailwind with some additional things (seems very bare on its o… ★ 4

🐘 Community & instance

Home server

hachyderm.io

A tech & engineering server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.

On Mastodon since

Feb 2023

An established account with real history on the platform.

💡 Facts

🗓️Joined Mastodon in 2023 — 3 years ago.

👁️Averages 231 views per post.

📤Posts about 0.2× per week.

🕵️ Fake follower check

Estimated

80/100

Excellent Credibility score

97%

Real Real audience

Low Fake-follower risk

High Data confidence

Est. 97% real, active audience · Low fake-follower risk.
Strong engagement (~0.3× of followers engage each post) — an active, real audience.
Established account (3+ years old).

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

Writing Python & more 🐍 • internet infrastructure & standards • community organiser • aspiring rustacean 🦀 • Write the Docs • IRRD & BGP • 🏳️‍🌈🏳️‍⚧️ • she/they

📸 Gallery

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

Eva Chanda 17%

bjb :devuannew: :emacs: 17%

raven (she/it) :neodog_verified: :gentoo: :cascadia: 14%

Petricore 14%

SuzyShearer 10%

Dźwiedziu 10%

More like this

Find more →

Mastodon ＋

raven (she/it) :neodog_verified: :gentoo: :cascadia: ✓

@sparklepanic@infosec.exchange

814 Followers

Mastodon ＋

SuzyShearer ✓

@suzyshearer@mastodon.au

bjb :devuannew: :emacs:

@dzwiedziu@mastodon.social

814 Followers

Frequently asked questions

How much does sash charge for a sponsorship?

sash hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.

How do I contact sash for a brand deal or collaboration?

Send a paid deal or collab request right here on SocialDB — we notify sash, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.

How many followers does sash have?

sash has 814 followers on Mastodon.

Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove

sash Add us as a preferred source on Google

Make a deal with sash

Known for

📊 Post engagement

📊 Activity & format

Recent posts

🐘 Community & instance

💡 Facts

🕵️ Fake follower check

About

📸 Gallery

🔀 Audience overlap

More like this

Frequently asked questions

✉ Message sash

🎤 Event / appearance with sash