Andrey Petrov

Andrey Petrov

@shazow.net

A doodler and computerer. I like permissive/permissionless open source, smart contracts, p2p systems, room-scale VR, and NixOS. 🇨🇦 Also on: https://shazow.net https://github.com/shazow https://farcaster.id/shazow.eth

892 followers408 following484 posts

Vibecoding is not the future, it is a commoditization of the past. The future of software engineering is building robust bug-free software, in a world where the cost of each bug is dramatically higher than before. The "lean Ethereum" megaproject is an example of what this looks like.

How open source projects leak the top of the funnel: Anyone who worked at a tech company with a license policy (any company that builds software) has muscle memory to look for a few popular licenses. 1. Click project link 2. Glance at license 3. Not a license you use all the time? Close link

"How hard is it to get an exemption for a different license?" This is the wrong question to ask. When is it worth digging up the relevant corporate policy document, reading it, emailing legal, waiting 2 weeks, arguing, etc? Not for a random link. The project never gets a chance to get that far.

If you're optimizing for adoption, I advise a simple algorithm: Pick the most popular permissive license in your ecosystem. It has to be popular for this reason, because everyone is already comfortable with using it. I wrote more about this here: shazow.net/posts/permis...

shazow.netPermissive vs Copyleft Open SourceThe premise of copyleft licenses is attractive: Create more open source! With permissive licenses, someone can take the code and make proprietary modifications to it and sell it to other people withou...

The only useful distinction between slop or not is whether we're committing to maintain the thing. If it's disposable and going to rot in a few weeks, then it's slop (whether written by meat or otherwise). If it's reviewed and someone commits to owning it, then it's fine. bsky.app/profile/shaz...

Andrey Petrov@shazow.net

PSA for the open source maintainers in the house: Big undesirable drive-by haphazard PRs are not new. Maybe AI is making them more common, but IMO the correct way to handle them rests on whether we're willing to maintain this code or not, regardless if it's written by vibes or meat. Eg from 2018:

Andrey Petrov reposted

did:cow: Another idea to billionaire-proof ATProto IDs, also "art of using a blockchain without using a blockchain". Blockchain-managed wrapper ID, no tx to create, points to a did:plc/did:web but you can move it if something goes wrong. Got carried away and made a resolver and front-end cow.watch

cow.watchdid:cow
Edmund Edgar@goat.navy

Wrote up an idea to improve the DID:PLC system to protect us from the inevitable corporate enshittification phase when the centralized server stops serving mirrors for a bit then starts screwing us over. It's kind of "art of using a blockchain without using a blockchain" github.com/edmundedgar/...

🛜 wifitui v0.11.0 is released! Do you dream of managing your wifi in a terminal? Now is your time. Made for Linux, but has experimental macOS support! Please open an issue if it can be improved. :) It even has a non-interactive mode for your beloved scripts/molts. github.com/shazow/wifit...

If you're curious why a prediction market might not pay out conditions of death: It's to avoid the creation of assassination markets.

There's only a few ways to deal with attacks on permissionless networks: 1. Increase the cost to the attacker 2. Reduce the cost to the defender 3. Reduce the value to the attacker

Andrey Petrov reposted

Today, @bsky.app + @atprotocol.dev devs can plug into XMTP to give users what they've been asking for: quantum-encrypted, secure group chats that scale to millions. With our XMTPID identity model, it's finally here. 1/5

I see people debating whether an AI agent will ever "try to escape a container" but that is the wrong concern. The agent will be tricked into installing a malware dependency designed to escape the container. Even with CVEs patched many months ago, at scale, enough people will be impacted.

Annual urllib3 report is out! Illia is taking over as lead maintainer, facilitated our first professional security audit, and we continue to raise funding for work on HTTP/2. Gentle reminder to ask your employer to help fund urllib3 work if you rely on Python. :) volochii.dev/blog/urllib3...

volochii.devurllib3 entered the "Billion-a-Month" club in 2025Welcome to the 2025 annual report for urllib3. I’m Illia, and this is my first time writing this update for the second most downloaded Python package. Long-time readers will recognize these reports fr...

Blindly accepting PRs without the prompt is like blindly implementing features users ask for without understanding their underlying needs. Users usually ask for less pain and more pleasure. It's the maintainer's job to dig deeper, read between the lines, and find the cause/utility behind the ask.

Armin Ronacher@mitsuhiko.at

Weekend thoughts on Gas Town, Beads, slop AI browsers, and AI-generated PRs flooding overwhelmed maintainers. I don't think we're ready for our new powers we're wielding. lucumr.pocoo.org/2026/1/18/ag...

❌ Social Network ❌ Social Media ✔️ Social Venue it's time we change our vocabulary, our words have become encumbered with business models when we really want to talk about a place that we visit for the people--a social venue.

Andrey Petrov reposted

are there any ongoing discussions around adopting did:ethr (or a new smart contract-based DID primitive) as a decentralized alternative to did:plc? seems like a great fit

hmm, wifitui got added to homebrew, but darwin/macOS backend support is an entirely vibecoded slop demo i made for my apple friends to be able to see what i'm working on, it barely works. would love for someone with a macOS device to help maintain the darwin backend... 👉👈 github.com/shazow/wifit...

github.comwifitui/wifi/darwin/darwin.go at main · shazow/wifituiFast featureful friendly wifi terminal UI. 🛜✨. Contribute to shazow/wifitui development by creating an account on GitHub.

imagine if open source had the equivalent of app store reviews? what a nightmare that would be, i'd be so worried of a tsunami of review bombers rn

PSA for the open source maintainers in the house: Big undesirable drive-by haphazard PRs are not new. Maybe AI is making them more common, but IMO the correct way to handle them rests on whether we're willing to maintain this code or not, regardless if it's written by vibes or meat. Eg from 2018:

is there a vaguely standard lexicon for making chat rooms on atproto? a small part of me wants to make ssh-chat 2.0 but with atproto as a federating backend

Today's attempt at definitions: Federated is where power structures can accumulate on a single provider and disadvantage others. Decentralized is where the power structure is democratized/collectively owned and can't be concentrated to disadvantage others.

Andrey Petrov reposted

+1000 hope this gets more attention, subcommunities is the way forward, one global feed (even with varying moderation and timeline algorithms) can't replace everything.

I’m fully on board with your subcommunites (aka sub-reddits) pitch; imo feeds are the way to get there. Feeds are a great precursor to subs, like a low stakes test run, much like how many newsletter giants started as a weekly links digest. It SHOULD be possible to moderate a feed and post *to* it.

Andrey Petrov reposted

I'd just like to interject for a moment. What you're referring to as Nix, is in fact, NixOS, or as I've recently taken to calling it, Nix plus OS. Nix is not an operating system unto itself, but rather another component of a fully functioning operating system made useful by the kernel, systemd, …

keep/delete? wrote it as a joke, but not sure how i feel about it. seems more honest than just acknowledging usage of ai in a codebase, but it all seems very silly.

arewedecentralizedyet.online is a great reminder that the word "decentralization" is useless without talking about what kinds of power participants have over each other. I wrote a post about this, analyzing very specific failure modes and what kinds of powers open social protocols have:

Andrey Petrov@shazow.net

How can open social protocols fail us? I put together an analysis comparing several specific failure modes between Farcaster, Bluesky, and Mastodon. Please let me know if any of the protocol descriptions could be presented more fairly! shazow.net/posts/open-s...

Andrey Petrov reposted

Anyone out there with a YT channel with over 100K subscribers in a tech niche? I'm working on the @microconf.com YouTube strategy (www.youtube.com/@microconf) and would love to have someone to run quick questions on strategy by. Consultant recommendations welcome too!

youtube.comMicroConfWelcome to MicroConf - Where Independent SaaS Founders Launch, Meet, Learn, and Grow! MicroConf is the world’s most trusted community for bootstrapped SaaS founders. MicroConf is a community of SaaS...