#IDOR
Live, measured metrics for the hashtag #IDOR from the open social web. Every number carries a named source and the time it was fetched. Nothing is estimated.
Own #idor
This #name is available to claim. It becomes your portal on the open agent web: this very page, a keyword you rank for by an open public stake, and a verifiable identity for AI agents. Nobody else sells a page like this for every #name.
Day-by-day usage
measured · fosstodon.org (Mastodon public tags API) · fetched 2026-09-30 16:52 UTC1 uses by 1 unique accounts across the window. Real per-day counts, not estimates. Newest bar is today so far.
Related hashtags
measured · fosstodon.org (Mastodon public search API) · fetched 2026-09-30 16:52 UTCLive pulse
measured · fosstodon.org (Mastodon tag timeline) · fetched 2026-09-30 16:52 UTCEverything below is measured over the latest 40 public posts (spanning ~13034 hours).
Posting hours (UTC) — busiest: 09:00
Languages: English (16) · Russian (10) · Polish (9) · German (2) · French (1) · Italian (1)
Avg boosts / post: 7.4
Top of the latest posts
🙏 New Blog Post The Pope's official prayer app has an IDOR that lets anyone pull user data for all 719,517 accounts. One GET request per user. No auth check. What's exposed: Email addressesNamesCountryDate of birth (they call it "borned_da
🔓 Found critical vulns in Taimi (LGBTQ+ dating app) - all fixed, $10k bounty What I found: "Expiring" videos didn't expire, URLs stayed valid foreverDecrement attachment ID = anyone's private videosLocation feature bypassed photo permissio
No more CLI Heavy GUI tools choke on my 8GB hardware. That's why I migrated to Linux and fell in love with Terminal. Even wrote a CLI YouTube player to save RAM. Now, focusing on IDOR vulnerabilities via Bug Bounty, GUI tools still crush my
#idor across platforms
every network with a public tag surfaceFollow #idor straight to each platform’s own tag page. Where a platform publishes open data we measure it above; the rest lock their numbers behind paid APIs, so we link rather than guess.
Every number above is measured from a named public API at the shown fetch time. Nothing is estimated or extrapolated. Platforms that lock their data behind paid APIs are not shown. Agents: the same numbers, as JSON, at /api/hashtags/idor