Michal Špaček✓ Add us as a preferred source on Google
🔄 Data last refreshed 24 days ago
🤝
Make a deal with Michal Špaček
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
281
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🎁 Free analysisfor Michal Špaček
📊 Post engagement
Recent posts · likes + reposts
Dec 18latest
5
Avg engagement / post
2–7
Typical post (engagement)
1.8%
Engagement vs followers
55/100
Consistent reach
Aug 2023
On Mastodon since
Half of recent posts land between 2 and 7 likes + reposts (median 3) — a dependable floor a sponsored post can count on.
🔥 Top post: Detailed report from DigiCert (thanks!) about "a limited number · 16 likes + reposts
📊 Activity & format
Posting cadence
0.35 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly text
Recent: 11 text · 1 image · 0 video.
Follower / following
5.1×
Follows 55 back. A strong ratio — an audience that follows them, not a follow-for-follow network.
Recent posts
View on Mastodon ↗
I just learned there's a .CYOU top-level domain. I fully expected it to be a typo of a .CZ domain (because Czech and English keyboards have swapped Y and Z, and even I personally sometimes type .CY instead of .CZ), but no, not a typo, a re…
I just learned there's a .CYOU top-level domain. I fully expected it to be a typo of a .CZ domain (because Czech and English keyboards have swapped Y and Z, and even I personally sometimes type .CY instead of .CZ), but no, not a typo, a re…
After many JS-related supply chain attacks, there's a new PHP one! "The attacker replaced many or all release tags in four laravel-lang/ repositories with malicious lookalikes that point to their own commits which contained malware." https…
The Axios supply chain attack post mortem notes show how it was done: via a fake cloned company on a fake Teams call. The two comments I find the most interesting, but the whole thing is nicely written: https://github.com/axios/axios/issue…
Here's your (ir)regular reminder that HTTPS certificates without the CN (Common Name) field are completely valid. For example the 6-day certificates from Let's Encrypt do not have a CN as per the "shortlived" profile https://letsencrypt.or…
I always find entering personal details into a company website to tell them to stop processing the very same data a bit absurd.
This business data enrichment company is processing my personal phone number. They told me to fill out this for…
One of my favorite XSS tricks when you can add only attributes (when < and > are removed from the input) is to add onfocus=alert(1) and autofocus: <input value="" onfocus="..." autofocus="">.
To not create a "focus loop", I often add this.…
Naming is hard, so that's why my @phpstan extension called "Disallowed **Calls**" now supports disallowing **properties** 😅 Also a Friday the 13th release 👻 (at least in my timezone). https://github.com/spaze/phpstan-disallowed-calls/relea…
When issuing a HTTPS certificate, the CA needs to make sure you own the domain, and one of the many methods is via email where they'll email you a link. This method will be discouraged in March 2026 and disabled in March 2028.
See https://…
Instead of `cat`, I use `bat`, "a cat(1) clone with wings." https://github.com/sharkdp/bat
It supports syntax highlighting, line numbers, git, invisible chars etc. I even have it aliased to `cat`.
But if you'd like to concat multiple files…
Best news I've discovered today is that ripgrep is also available for Windows and you can install it with winget (winget install ripgrep). ripgrep is like the grep utility in Linux, but a bit faster, it also accepts grep's params https://g…
The Axios supply chain attack post mortem notes show how it was done: via a fake cloned company on a fake Teams call. The two comments I find the most interesting, but the whole thing is nicely written: https://github.com/axios/axios/issue…
Here's your (ir)regular reminder that HTTPS certificates without the CN (Common Name) field are completely valid. For example the 6-day certificates from Let's Encrypt do not have a CN as per the "shortlived" profile https://letsencrypt.or…
I always find entering personal details into a company website to tell them to stop processing the very same data a bit absurd.
This business data enrichment company is processing my personal phone number. They told me to fill out this for…
One of my favorite XSS tricks when you can add only attributes (when < and > are removed from the input) is to add onfocus=alert(1) and autofocus: <input value="" onfocus="..." autofocus="">.
To not create a "focus loop", I often add this.…
Naming is hard, so that's why my @phpstan extension called "Disallowed **Calls**" now supports disallowing **properties** 😅 Also a Friday the 13th release 👻 (at least in my timezone). https://github.com/spaze/phpstan-disallowed-calls/relea…
When issuing a HTTPS certificate, the CA needs to make sure you own the domain, and one of the many methods is via email where they'll email you a link. This method will be discouraged in March 2026 and disabled in March 2028.
See https://…
Instead of `cat`, I use `bat`, "a cat(1) clone with wings." https://github.com/sharkdp/bat
It supports syntax highlighting, line numbers, git, invisible chars etc. I even have it aliased to `cat`.
But if you'd like to concat multiple files…
Best news I've discovered today is that ripgrep is also available for Windows and you can install it with winget (winget install ripgrep). ripgrep is like the grep utility in Linux, but a bit faster, it also accepts grep's params https://g…
🐘 Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Aug 2023
An established account with real history on the platform.
💡 Facts
🗓️Joined Mastodon in 2023 — 3 years ago.
👁️Averages 5 views per post.
📤Posts about 0.4× per week.
🕵️ Fake follower check
Estimated75/100
Good
Credibility score
92%
Real
Real audience
Low
Fake-follower risk
High
Data confidence
- Est. 92% real, active audience · Low fake-follower risk.
- Engagement (~1.8% of followers engage each post) is around typical for Mastodon.
- Verified account.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
In your web, securing your app. Hacker, web developer, speaker, engineer. Security Shoptet, ex-Report URI. I believe HTTPS stands for How To Transfer Private Sh*.
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
Donate A Mask
17%
Rich Rogers (orklord)
15%
Industriebotaniker
14%
Giles
13%
Piratito
12%
Blithe
10%
More like this
Find more →
Mastodon
＋
Industriebotaniker ✓
@paul030@social.coop
281
Followers
Mastodon
＋
Rich Rogers (orklord)
@orklord@dice.camp
281
Followers
Mastodon
＋
Donate A Mask
@donatemask@zeroes.ca
281
Followers
Mastodon
＋
Piratito
@piratito@mastodonapp.uk
281
Followers
Mastodon
＋
Blithe
@blithe@mastodon.online
281
Followers
Mastodon
＋
Giles ✓
@gilesdring@mastodon.me.uk
281
Followers
Frequently asked questions
How much does Michal Špaček charge for a sponsorship?
Michal Špaček hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.
How do I contact Michal Špaček for a brand deal or collaboration?
Send a paid deal or collab request right here on SocialDB — we notify Michal Špaček, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.
How many followers does Michal Špaček have?
Michal Špaček has 281 followers on Mastodon.
✉ Message Michal Špaček
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with Michal Špaček
Booking an event / appearance is a Pro feature. Upgrade to book Michal Špaček for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ Michal Špaček gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove