🤝
Make a deal with Nick Frichette
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
876
Account age
4 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🧰 Free analysis for Nick Frichette
Known for
3 views
@fwdcloudsec has been incredibly inspiring. So many talented researchers, so much great work, and the energy here made me want to go chase down some AWS ideas I've been sitting on.
Love this community.
2 views
Looks like the latest version of Codex has a required review/trust system for hooks. This is a great way to protect developers as threat actors have started to abuse hooks more and more.
2 views
Bummer, it looks like Anthropic removed the ability to DoS their models with the magic string. This was a fun technique that had some security ramifications where you could kill an inference session. It was fun while it lasted!
📊 Post engagement
3
Avg engagement / post
0.3%
Engagement vs followers
Dec 2021
On Mastodon since
🔥 Top post: Hotel Wi-Fi broke my Tailscale peer relay, so I wrote up how I t · 6 likes + reposts
📊 Activity & format
Posting cadence
0.58 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly text
Recent: 8 text · 4 image · 0 video.
Follower / following
2.6×
Follows 342 back. A more reciprocal / networked account.
Recent posts
View on Mastodon ↗
Malicious hooks and skills get most of the attention when we talk about attacks against coding agents.
Attackers have other options. In this article, we cover two ways a trusted project can execute code before the first prompt.
https://sec…
It’s amazing to think there was a time when I considered some vulnerability classes too tedious to manually validate, test, and report. Now I can encode the workflow as a skill, run it against a dataset of endpoints I've gathered, and get …
@fwdcloudsec has been incredibly inspiring. So many talented researchers, so much great work, and the energy here made me want to go chase down some AWS ideas I've been sitting on.
Love this community.
Looks like the latest version of Codex has a required review/trust system for hooks. This is a great way to protect developers as threat actors have started to abuse hooks more and more.
Malicious skills are evolving, and attackers are finding ways to execute them before model-level defenses even activate.
In the first post of our new series, I’ll show you how dynamic context in coding agents can introduce new supply chain…
It’s been a long time since a research target called to me this loudly.
https://claude.com/blog/claude-platform-on-aws
If you’re worried about coding agent security and are only focused on malicious skills, you’re missing like 80% of the total attack surface.
Context: https://hackingthe.cloud/ai-llm/exploitation/claude_magic_string_denial_of_service/
Bummer, it looks like Anthropic removed the ability to DoS their models with the magic string. This was a fun technique that had some security ramifications where you could kill an inference session. It was fun while it lasted!
New on Hacking the Cloud! Raajhesh Kannaa Chidambaram covers Daniel Grzelak's research on how AWS error messages can reveal publicly exposed resources, without needing access! This article covers how to use them for enumeration and detecti…
Researchers have been warning about this for years.
Compromise a developer laptop → steal tokens → pivot to cloud.
In many orgs that path ends with AWS admin in minutes. If you’re on an internal security team, you need to map the attack pa…
It’s amazing to think there was a time when I considered some vulnerability classes too tedious to manually validate, test, and report. Now I can encode the workflow as a skill, run it against a dataset of endpoints I've gathered, and get …
@fwdcloudsec has been incredibly inspiring. So many talented researchers, so much great work, and the energy here made me want to go chase down some AWS ideas I've been sitting on.
Love this community.
Looks like the latest version of Codex has a required review/trust system for hooks. This is a great way to protect developers as threat actors have started to abuse hooks more and more.
Malicious skills are evolving, and attackers are finding ways to execute them before model-level defenses even activate.
In the first post of our new series, I’ll show you how dynamic context in coding agents can introduce new supply chain…
It’s been a long time since a research target called to me this loudly.
https://claude.com/blog/claude-platform-on-aws
If you’re worried about coding agent security and are only focused on malicious skills, you’re missing like 80% of the total attack surface.
Context: https://hackingthe.cloud/ai-llm/exploitation/claude_magic_string_denial_of_service/
Bummer, it looks like Anthropic removed the ability to DoS their models with the magic string. This was a fun technique that had some security ramifications where you could kill an inference session. It was fun while it lasted!
New on Hacking the Cloud! Raajhesh Kannaa Chidambaram covers Daniel Grzelak's research on how AWS error messages can reveal publicly exposed resources, without needing access! This article covers how to use them for enumeration and detecti…
Researchers have been warning about this for years.
Compromise a developer laptop → steal tokens → pivot to cloud.
In many orgs that path ends with AWS admin in minutes. If you’re on an internal security team, you need to map the attack pa…
🐘 Community & instance
Home server
fosstodon.org
A open-source software server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Dec 2021
An established account with real history on the platform.
💡 Facts
🗓️Joined Mastodon in 2021 — 4 years ago.
👁️Averages 3 views per post.
📤Posts about 0.6× per week.
🕵️ Fake follower check
Estimated75/100
Good
Credibility score
92%
Real
Real audience
Low
Fake-follower risk
High
Data confidence
- Est. 92% real, active audience · Low fake-follower risk.
- Engagement (~0.3% of followers engage each post) is around typical for Mastodon.
- Verified account.
- Established account (4+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
Staff Security Researcher @Datadog || Former Penetration Tester/Team Lead || OSCP, OSWE, GXPN, GPEN, AWS Security || he/him || Hacks AWS || Posts are my own, not my employer's
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
Ret
18%
pam lach (she/her)
17%
Das Metal Kitty :mas:
16%
half/byte
14%
🌻Nenya🌻
14%
Dr Helen Wilson
11%
More like this
Find more →
Mastodon
pam lach (she/her)
@pam@hcommons.social
876
Followers
Mastodon
Das Metal Kitty :mas: ✓
@kitty@mastoart.social
876
Followers
Mastodon
half/byte ✓
@halfbyte@ruby.social
876
Followers
Mastodon
Ret ✓
@ret@furry.engineer
876
Followers
Mastodon
🌻Nenya🌻
@srtanenya@tkz.one
877
Followers
Mastodon
Dr Helen Wilson
@nellythewillow@mastodon.social
875
Followers
✉ Message Nick Frichette
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with Nick Frichette
Booking an event / appearance is a Pro feature. Upgrade to book Nick Frichette for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ Nick Frichette gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove