Joshua Poddoku

16 Sept

Every thread about AI and open source ends in blame. AI-generated PRs nobody reads. AI slop shipped as code. Maintainers get the burnout either way. I think it's shared responsibility. Both sides have to understand each other for the human part to survive.

22h

Tech is finally healing. Building software is shifting back to pure FOSS, giving me 90s vibes. The era of corporate "Open Source" harvesters extracting value for pure greed is ending.

There is a toxic trend of corporations weaponizing open source to crowdsource their R&D.

They pressure developers into providing free engineering under the guise of "building social proof." When the software breaks? They blame "low-quality public contributions." It’s corporate exploitation dressed up as community.

Recent security attacks make us realize the importance of community governance, locally-run infrastructure, and hardware.

Who's going off-grid?

Governance used to sound like corporate jargon. Now projects and contributors need it. A pull request alone no longer shows real involvement. Projects need people. People need projects structured well enough for their contributions to matter. What have you seen work?

Projects need contributors who bring: - Context - Ownership - Thoughtful review Contributors need: - Clear expectations - Support - A path in - Room to learn and grow Both lists are now non-negotiable to keep standards.

www.joshuapoddoku.com/notes/2026-1...

joshuapoddoku.comTwo types of opportunity | Notes | Joshua PoddokuIn life, some opportunities emerge naturally to solve a meaningful problem, and the journey rewards you more than the outcome. The motivation isn't transactional: it isn't about reaching X…

clansurf.comOpen questions · Clansurf docsThe things we haven't worked out yet. If one of them interests you, this is where you can help.

Volunteer researchers wanted! Clansurf explores how local technology, DAOs, LoRa/mesh networks, and shared resources can strengthen communities. Remote, local, or hybrid; no degree required. Currently unpaid. Learn more: clansurf.com/docs/research/ Apply: research@clansurf.com

Protect your human agency at all costs. We need to take care of AI stewardship (now SI), as we need to govern it as a resource rather than a tool.

Joshua Poddoku reposted

Tuta

@tuta.com

🚨RSA can get broken faster than expected - cryptographers are calling for quantum-resistant encryption. Brilliant write-up of a very technical topic by @dangoodin.bsky.social: arstechnica.com/security/202... PQC migration is even more urgent. ➡️ Check how Tuta protects you: tuta.com/encryption

I’d like to connect with grant programs, investors or VCs on how they evaluate applications based on their AI policy. Great questions to start with, if you haven’t asked them yet, what LLMs did you use, for what intent, what were the prompts, and how did that help you articulate.

Ever heard of "technological solutionism"? It’s the fallacy that every complex human problem has a technical fix. When we prioritize the "how" of the technology over the "why" of the user's pain, we stop solving real problems and start building toys. We need solutions that serve the community.

Kudos to Tuta for advocating for privacy! This commitment helps the international community stand up for digital rights and privacy. I've personally DeGoogled most of my life -- highly recommend making the switch. #Privacy #DigitalRights #DeGoogle #Tuta

Tuta@tuta.com

🚨🇪🇺 The #ChatControl trilogue starts on Tuesday & the EU Council is trying to pressure Parliament into giving up its opposition. We must stop them once again! 💪🏼 Because no matter the framing, the truth remains the same: There's no backdoor for the good guys only! ➡️ fightchatcontrol.eu

clansurf.comClansurf: a framework for resilient offline local economiesYour street already has what you need. Clansurf makes it findable, offline, with nodes run by the people who live there.

Your street already has milk, eggs, a tailor and a carpenter. You shouldn't need an app, a server abroad or a gatekeeper to find them. Clansurf is a community framework on radios the neighbourhood owns. It keeps working when the internet doesn't. www.clansurf.com

We were trained to accept everything that was ever invented for the sake of ease. We don't need everything on cloud.

github.comGitHub - HeliBorg/HeliBoard: Customizable and privacy-conscious open-source keyboardCustomizable and privacy-conscious open-source keyboard - HeliBorg/HeliBoard

Did you know your phone’s keyboard app may have internet access and could potentially send what you type to a server? Consider HeliBoard: an open-source, privacy-focused, accessible keyboard for Android. github.com/heliborg/hel...

In August 2026, 86% of the Earth's surface was warmer than its 1991–2020 average for the month. In a stable climate you'd expect about half. Interactive globe, month by month, from NOAA data, made with @observablehq.com observablehq.com/@joshua-podd...

arcanechat.meArcaneChatPrivate chats for the family

21 Sept

Another great emerging Open Source project!

ArcaneChat@arcanechat.me

for chatting consider switching to #ArcaneChat see https://arcanechat.me

20 Sept

Open Source is real when the person who starts a project sparks a ripple of innovation among its contributors. A new contributor should do better than the last. That’s how you measure whether a project can thrive.

20 Sept

Sharing truly open-source options for hosting your repos/community, and the governance behind each: forgejo.org nonprofit gogs.io community / maintainer-led gitea.com company-backed w/ TOC All three run on a few hundred MB of RAM.

20 Sept

Switching to european open source alternatives as much as i can. I've been using @tuta.com for a while now. What else should i consider?

18 Sept

Every repo or link you share can end up in someone's AI. Put the rules where it reads first: AGENTS.md in the repo, llms.txt on the site. Disclose, test, credit, and a person owns the change. It won't stop anyone set on ignoring it. www.joshuapoddoku.com/community-si...

joshuapoddoku.comCommunity Signals | Joshua PoddokuAn automated read on how people on Bluesky and Hacker News are talking about AI-written code, from public posts matching a fixed set of phrases.

18 Sept

2,547 posts on AI-written code. 59% wary. The doubt is quality, not AI. “Vibe coding” is 63% of the conversation. Via Community Signals by @joshuapoddoku.com www.joshuapoddoku.com/community-si...

Joshua Poddoku reposted

Gene Conroy-Jones

@foursignalsdev.bsky.social

16 Sept

OpenCodeReview, Alibaba’s internal AI code review CLI tool, is now open source. After 2 years and millions of defects caught, it uses deterministic rules + an LLM agent to read Git diffs, beating Claude Code in precision while consuming…

foursignals.dev[GitHub Trending] alibaba/open-code-reviewFour Signals — The Wire

joshuapoddoku.comCommunity Signals | Joshua PoddokuAn automated read on how people on Bluesky and Hacker News are talking about AI-written code, from public posts matching a fixed set of phrases.

17 Sept

2,273 posts on AI-written code. 59% wary. The doubt is quality, not AI. Hacker News sounds more open to AI: 27% against 12%. Via Community Signals by @joshuapoddoku.com www.joshuapoddoku.com/community-si...

Joshua Poddoku reposted

hsbt

@hsbt.org

16 Sept

Since Jan 1, I've received 200+ vulnerability reports and reviewed every one. Most looked AI-generated, and some days different people reported the exact same issue. I assigned just four CVEs. Over 98% were AI slop or unverified. This is the daily reality of OSS.

I built this framework to keep human-AI collaboration healthy. Five areas keep a project alive: - Brain: your thinking, the one thing you bring - Community: contributor experience - Content: the DevRel work - Code: good first issues, docs - Governance: what AI touches, what stays human

15 Sept

what matters the most is your "community" Not the one you built the "corporate way" who come in, get the help, and exit. We need more of natural communities if want to build a thriving OSS tech business.

15 Sept

It's simple to understand why community comes first before code Code is the vehicle but community is the driver. The driver's health and wellbeing comes first before everything existed. Code can fail. But community won't if it is built with right principles and intent.

joshuapoddoku.comCommunity Signals | Joshua PoddokuAn automated read on how people on Bluesky and Hacker News are talking about AI-written code, from public posts matching a fixed set of phrases.

15 Sept

60% of 1,951 posts about AI-written code sound wary of AI. Mood: Pushback, 19/100. 15 September, 2026 Via Community Signals by @joshuapoddoku.com www.joshuapoddoku.com/community-si...

joshuapoddoku.comCommunity Signals | Joshua PoddokuAn automated read on how people on Bluesky and Hacker News are talking about AI-written code, from public posts matching a fixed set of phrases.

This is proudly powered by @astro.build and will be sharing real-time updates on the state of AI-written code.

Joshua Poddoku@joshuapoddoku.com

59% of 1,799 posts about AI-written code sound wary of AI. Mood: Pushback, 19/100. Community Signals by @joshuapoddoku.com www.joshuapoddoku.com/community-si...

joshuapoddoku.comCommunity Signals | Joshua PoddokuAn automated read on how people on Bluesky and Hacker News are talking about AI-written code, from public posts matching a fixed set of phrases.

59% of 1,799 posts about AI-written code sound wary of AI. Mood: Pushback, 19/100. Community Signals by @joshuapoddoku.com www.joshuapoddoku.com/community-si...

1/ How do Open Source projects stay open when AI pull requests take hours to review? Since Sep 4 I've been tracking 1,700+ posts on AI-generated code. These are the problems that keep coming up 🧵

2/ • Low-effort AI PRs eating maintainer review time • Projects closing the door, like libvips and Forgejo • Unclear copyright on AI-written code • Vibe coding and careful AI-assisted work treated as the same thing

joshuapoddoku.comCommunity Signals | Joshua PoddokuAn automated read on how people on Bluesky and Hacker News are talking about AI-written code, from public posts matching a fixed set of phrases.

My notes are on Community Signals, to help maintainers and project owners see where contributors are heading, rather than ranking people. I'd be grateful for your thoughts. Thank you for reading. www.joshuapoddoku.com/community-si...

zenodo.orgThe Shop That Closes at Five: Community Infrastructure Run by Agents for Human EfficacyThe Shop That Closes at Five addresses the discovery bottleneck in hyper-local commerce by introducing Clansurf, an offline-first infrastructure and governance framework for neighborhood economies. Sm...

You can also view the working paper on zenodo: zenodo.org/records/2275...

Joshua Poddoku@joshuapoddoku.com

Just published a working paper: The Shop That Closes at Five. It details Clansurf project that studies small, community-governed nodes connecting local value providers and patrons without internet, apps, middleman fees, or platform tax. Read it here: www.clansurf.com

clansurf.comThe shop that closes at fiveLocal providers are invisible to the people nearby. A working paper on Clansurf: offline, community-governed nodes that help neighbours find each other.

Joshua Poddoku reposted

AI Founders ONLINE

@aifoundersczech.bsky.social

aiguild.blueDesign Systems Are Now Interfaces AI Agents Read — Most Aren't Built For That - AI Guild BlueAI coding agents don't read your design system as a constraint — they approximate it from whatever they can see, and the gap compounds silently. The fix is structural: turn tokens and components into a contract the agent builds through, not around.

43% of developers can't tell AI-generated code from their own. GitLab's 2026 report names it as the industry's biggest AI-coding blind spot. From AI Guild Blue: why a better prompt won't fix it.

12 Sept

Who’s the biggest asset you need to protect during unexpected times? Your company (business + team) Your product or R&D Your people (community, users)

13 Sept

I'd say if you're a longterm thinker, then the answer should be "Community". Community can give birth to new beginnings, get people built on trust and even hire them in the future. This keeps things happening naturally and healthy for businesses. Businesses can fail historically.

clansurf.comThe shop that closes at fiveLocal providers are invisible to the people nearby. A working paper on Clansurf: offline, community-governed nodes that help neighbours find each other.

12 Sept

joshuapoddoku.comCommunity Signals | Joshua PoddokuAn automated read on how Open Source contributors and users are talking about AI and LLM-written code, tracked across Hacker News and Bluesky.

1/5 I have been following how Open Source talks about AI-written code, across @bsky.app and Hacker News. The numbers are on my site and update twice a day. This week: 2,214 posts. 36% negative, 41% positive, 23% neutral. joshuapoddoku.com/community-signals

4/5 It is automated, it cannot read sarcasm, and it is not a survey. Read it as a direction. Every quote links to the original post. I send a short note on what it shows every two weeks. You can sign up on the page.

5/5 The data comes from public APIs: @atproto.com and Hacker News search API by Algolia. Tone is scored with VADER and AFINN, and the site runs on Astro. All Open Source, no paid APIs.

joshuapoddoku.comCommunity Signals | Joshua PoddokuAn automated read on how Open Source contributors and users are talking about AI and LLM-written code, tracked across Hacker News and Bluesky.

2/5 Here on Bluesky, 63% of posts react to AI code without getting into it. On Hacker News, 60% are hands-on: building, debugging, reviewing. HN also reads more positive, 55% against 39% here.