#cspt
Live, measured metrics for the hashtag #cspt from the open social web. Every number carries a named source and the time it was fetched. Nothing is estimated.
Own #cspt
This #name is available to claim. It becomes your portal on the open agent web: this very page, a keyword you rank for by an open public stake, and a verifiable identity for AI agents. Nobody else sells a page like this for every #name.
Day-by-day usage
measured · mastodon.social (Mastodon public tags API) · fetched 2026-10-23 21:55 UTC0 uses by 0 unique accounts across the window. Real per-day counts, not estimates. Newest bar is today so far.
Related hashtags
measured · mastodon.social (Mastodon public search API) · fetched 2026-10-23 21:55 UTCLive pulse
measured · mastodon.social (Mastodon tag timeline) · fetched 2026-10-23 21:55 UTCEverything below is measured over the latest 6 public posts (spanning ~6853 hours).
Posting hours (UTC)
Languages: English (6)
Avg boosts / post: 1.3
Top of the latest posts
Cache Deception + CSPT: Turning Non-Impactful Findings into Account Takeover Chained client-side path traversal and cache deception enabled account takeover from seemingly harmless bugs. https://zere.es/posts/cache-deception-cspt-account-ta
As a follow up to Maxence Schmitt's amazing #CSPT research, we've published a list of resources to help people interested in this class of vulnerabilities. Check it out today for video, tools, challenges and variety of publications! https:/
1️⃣ Starting things off is Maxence Schmitt's research on abusing #CSPT to perform CSRF attacks. Because of its ability to bypass most modern defensive techniques the ubiquity of this vulnerability can't be overstated. https://blog.doyensec.
#cspt across platforms
every network with a public tag surfaceFollow #cspt straight to each platform’s own tag page. Where a platform publishes open data we measure it above; the rest lock their numbers behind paid APIs, so we link rather than guess.
Every number above is measured from a named public API at the shown fetch time. Nothing is estimated or extrapolated. Platforms that lock their data behind paid APIs are not shown. Agents: the same numbers, as JSON, at /api/hashtags/cspt