Sign in

Vlad-Stefan Harbuz 🌸

@vlad.website
474 followers 284 following 289 posts

Protecting the Open Source infrastructure the world depends on. vlad.website ✸ @stewardshiplab.org Executive Director ※ @opensourcepledge.com Director ※ ed.ac.uk Philosophy PhD Researcher ※ nsoc.engineering.nyu.edu Co-Lead

PostsRepliesMedia
Reposted by Vlad-Stefan Harbuz 🌸
Sovereign Tech Agency @sovereign.tech · 29/09/2026
Sovereign Tech Resilience relaunches with four new services for critical open source projects: memory safety, post-quantum encryption, supply chain security, and Cyber Resilience Act compliance. www.sovereign.tech/news/resilie... 1/
Sovereign Tech Resilience relaunches with four new services to prevent, discover, and eliminate vulnerabilities in critical digital infrastructure. Sovereign Tech Agency.Transition to memory safety: helping projects find where memory-safe languages and practices matter most, then supporting the move. Sovereign Tech Resilience logo in the upper right corner, Sovereign Tech Agency on the bottom.
3123
Reposted by Vlad-Stefan Harbuz 🌸
Socket @socket.dev · 25/09/2026
Maintainers spend countless hours keeping the open source projects we all rely on secure. Too often, that work is unpaid. Socket is proud to join @openjsf.org's new Security Stewardship Program to help fund the researchers and maintainers protecting Node.js. socket.dev/blog/openjs-...
socket.dev
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
0237
Reposted by Vlad-Stefan Harbuz 🌸
Sacha Greif @sachagreif.com · 25/09/2026
With help from the amazing @mirandaheath.website, the 2026 State of Devs survey results are now available! 2026.stateofdevs.com/en-US/ This already took a ton of work, and I feel like I've barely scratched the surface of what the dataset could teach us.
2026.stateofdevs.com
State of Devs 2026
0114
Reposted by Vlad-Stefan Harbuz 🌸
Miranda Heath @mirandaheath.website · 25/09/2026
So happy to be involved! What a rich picture of what it's like to be a dev in 2026—the good, the bad and the ugly!
074
Reposted by Vlad-Stefan Harbuz 🌸
William Gibson @greatdismal.bsky.social · 24/09/2026
Fall pleasure: Cast-iron radiator’s warmth rising through corrugated cardboard cat-throne. Makes a boy dozy.
1359731
Reposted by Vlad-Stefan Harbuz 🌸
Software Stewardship Lab @stewardshiplab.org · 23/09/2026
The Stewardship Lab has joined the @rustfoundation.org as an Associate Member! 🎉️ To support the Foundation in its mission of stewarding the Rust programming language, we're working to improve software supply chain security and developer education across the Rust ecosystem.
Software Stewardship Lab × Rust Foundation
052
Reposted by Vlad-Stefan Harbuz 🌸
Elizabeth Nolan Brown @enbrown.bsky.social · 06/08/2026
My 4-year/old just learned about the concept of infinity and is now throwing a tantrum over it. “It’s weird! I don’t like it. I just want numbers to stop!”
511103171176
Reposted by Vlad-Stefan Harbuz 🌸
Miranda Heath @mirandaheath.website · 20/09/2026
Super excited to be a speaker at @viteconf.org this year, where I'll be talking about burnout in OSS and why we should care about it 🔥 viteconf.org/tickets/t/YB...
viteconf.org
Miranda's ViteConf 2026 mission credential
Miranda is on a connect mission for ViteConf 2026. Create your own credential.
0205
Vlad-Stefan Harbuz 🌸 @vlad.website · 17/09/2026
lol
001
Reposted by Vlad-Stefan Harbuz 🌸
OpenSSF @openssf.org · 16/09/2026
AI moves fast. Critical infrastructure needs support. The OpenSSF Governing Board backs sustainable funding for public package registries: stronger security, reliable services, and continued free access for developers. We’re in. Join us: openssf.org/blog/2026/09...
Graphic titled "We’re In: Enterprise Commitment to Sustainable Package Registries" featuring the OpenSSF (Open Source Security Foundation) logo on a dark background. A grid on the right displays logos for supporting organizations: Arm, Datadog, Dell Technologies, Ericsson, GitHub, Google, IBM, Kusari, Microsoft, Red Hat, Rust Foundation, and Sonatype.
0104
Reposted by Vlad-Stefan Harbuz 🌸
Anthony Fu @antfu.me · 16/09/2026
Updates in the recent Node Modules Inspector: - Better module type detection (now it recognizes binary packages) - Colorizing the charts by module type, published age, or duplicated versions to find them easily
3886
Vlad-Stefan Harbuz 🌸 @vlad.website · 12/09/2026
live right now! watch me rank up in GeoGuessr…then get crushed in Clues by Sam
twitch.tv
vladh - Twitch
Hi! I like cats and I play GeoGuessr. — vladh streams live on Twitch! Check out their videos, sign up to chat, and join their community.
010
Vlad-Stefan Harbuz 🌸 @vlad.website · 03/09/2026
McDonald's needs to activate Windows
A McDonald's order machine showing the "Activate Windows" message
060
Vlad-Stefan Harbuz 🌸 @vlad.website · 31/08/2026
The critical infrastructure we use every day, like healthcare and transportation, depends on the security of our software supply chains. To protect this infrastructure, we're launching a new lab at NYU that will train the next generation of Open Source security experts.
engineering.nyu.edu
NYU Tandon Launches Initiative to Close a Critical Gap in Open Source Security and Train the Students Who Will Fill It | NYU Tandon School of Engineering
0101
Reposted by Vlad-Stefan Harbuz 🌸
daniel:// stenberg:// @bagder.mastodon.social.ap.brid.gy · 30/08/2026
Pokopia black screen cant login #inbox
Pokopia black screen cant login

Hello Daniel?
 
Please help, pokopia isnt logging in? I spend a lot of hours
on it, so pls help? It seems to be an issue after bubbly
basin.
 
I hope you can help or can get help for all players with
this problem.
 
With kind regards,
 
[redacted]
1121
Reposted by Vlad-Stefan Harbuz 🌸
FOSDEM @fosdem.org · 30/08/2026
fosdem.org
FOSDEM 2027 will take place on 30 & 31 January 2027 — FOSDEM 2027
FOSDEM 2027 will take place on Saturday 30 and Sunday 31 January 2027, at the ULB Solbosch campus in Brussels, Belgium.
05624
Reposted by Vlad-Stefan Harbuz 🌸
SustainOSS @sustainoss.bsky.social · 21/08/2026
Daniel (@danielroe.dev) and Matias (@patak.cat) of npmx (npmx.dev) join host Richard (@richlitt.bsky.social) explores community, governance, inclusion, burnout, and sustainability beyond nonstop productivity. Listen at 🎙️ podcast.sustainoss.org/293
13612
Reposted by Vlad-Stefan Harbuz 🌸
Dr. Dawn Foster @geekygirldawn.bsky.social · 20/08/2026
I’m proud of what we accomplished with the CHAOSS Practitioner Guides. I’ve written posts about individual guides, but I wanted to talk about how they fit together. This post focuses on building healthy and sustainable projects and is the first in a 4 part series. fastwonderblog.com/2026/08/20/p...
fastwonderblog.com
Part 1: Building Healthy and Sustainable Projects Using CHAOSS Practitioner Guides | Fast Wonder
053
Vlad-Stefan Harbuz 🌸 @vlad.website · 19/08/2026
Did you know that a bunch of software packages we all depend on are hidden from dependency trees? I spoke about this at EuroPython 2026 😊️
youtu.be
Binary Dependencies: Identifying the Hidden Packages We All Depend On - Vlad-Stefan Harbuz
YouTube video by EuroPython Conference
0135
Reposted by Vlad-Stefan Harbuz 🌸
Miranda Heath @mirandaheath.website · 14/08/2026
Such an important and multifaceted topic, thanks for the exploring this, was really nice to chat with you about it! Big recommend for anyone feeling a bit off the more they use AI to code!
0176
Reposted by Vlad-Stefan Harbuz 🌸
Scott Tolinski @tolin.ski · 14/08/2026
This is the most important video I've ever made. In this, I explore the negative and positive mental health effects of AI coding, with data and expert commentary. www.youtube.com/watch?v=iPUn...
youtube.com
The True Cost of AI Coding
YouTube video by Syntax
1116142
Vlad-Stefan Harbuz 🌸 @vlad.website · 12/08/2026
It's 2026 and I can play pretty much any Steam game on Linux without worrying about it. I've wished for this forever. I'm so grateful to everyone who did the tremendous amount of work to make this happen.
1528
Reposted by Vlad-Stefan Harbuz 🌸
Ramin Nasibov @nasibov.me · 12/08/2026
If you missed the solar eclipse, this is what it looked like:
94142993814
Reposted by Vlad-Stefan Harbuz 🌸
Dr. Dawn Foster @geekygirldawn.bsky.social · 11/08/2026
I'm available for consulting engagements starting in Nov. I can help you get more value out of your open source efforts by aligning your contributions with your strategies. I also work on understanding funding impact, improving OSS project governance, and custom research projects. fastwonder.com
fastwonder.com
Consulting by Dawn Foster
Leverage Dr. Dawn Foster’s decades of experience working in open source to help your organization make the most out of their open source engagements.
085
Reposted by Vlad-Stefan Harbuz 🌸
Freya Holmér @freya.bsky.social · 09/08/2026
look at them
Mumin looking coolStrudel looking cool
518611
Vlad-Stefan Harbuz 🌸 @vlad.website · 09/08/2026
I slightly spooked this fox mum while she was playing with her two cubs.
A fox looking attentively at the viewer.
1292
Vlad-Stefan Harbuz 🌸 @vlad.website · 07/08/2026
We launched the Software Stewardship Lab today, a non-profit applied research lab dedicated to Open Source sustainability. ❤️🎉
1264
Reposted by Vlad-Stefan Harbuz 🌸
SustainOSS @sustainoss.bsky.social · 07/08/2026
Join us for the launch of the Software Stewardship Lab (stewardshiplab.org)! @vlad.website is on the podcast with hosts @richlitt.bsky.social, @abbycabs.dev & @erioldoesdesign.bsky.social to talk about promoting research for OSS maintainers and sustainers. Listen at 🎙️ podcast.sustainoss.org/292.
bsky.app
0127
Reposted by Vlad-Stefan Harbuz 🌸
Open Source Pledge ⇌ @opensourcepledge.com · 05/08/2026
this is how it's done 👇👏 do you know a company that should join next? put them in the replies!
041
Vlad-Stefan Harbuz 🌸 @vlad.website · 04/08/2026
Applied for @hackmd.io's free plan for non-profits, they came back with a request for us to do a bunch of free labour for them. No thanks :/
HackMD offers a free 12-month Prime Team subscription for up to 20 team members, provided you agree to the following terms.
 
Please reply to this email and agree to the sponsorship terms below:
 1. You agree to provide, upon request, and authorize HackMD to use your case studies, testimonials, trademarks, logos, and other materials necessary for HackMD's marketing purposes.
 2. You agree to be HackMD's marketing partner and help propagate its marketing message, product updates, and hiring information upon request.
 3. You agree to indemnify HackMD and its officers against any liabilities arising out of your usage of HackMD's service. HackMD does not endorse your content hosted on HackMD through this sponsorship.
 4. You agree to participate upon request in HackMD's surveys, questionnaires, user tests, or user interviews for HackMD to improve its product offerings.
 5. HackMD can cancel this sponsorship anytime at its discretion with seven days' notice.
 
If you agree to the above terms and want to activate your sponsorship. According to our non-profit sponsorship program, all teams applying for sponsorship need to complete the following steps:
 
Create and publish two public articles:
 • One public note introducing your team.
 • One public note sharing knowledge in your field of expertise.
150
Vlad-Stefan Harbuz 🌸 @vlad.website · 01/08/2026
AI agents are allowing companies to surpass limited liability protections and erase liability altogether. “It wasn't me that hacked my competitor, it was an AI agent, it has a mind of its own.” It's a technologically augmented Shaggy defence: “it wasn't me”. Hopefully legislation can catch up.
0100
Reposted by Vlad-Stefan Harbuz 🌸
Open Source Pledge ⇌ @opensourcepledge.com · 31/07/2026
Package managers support our world's infrastructure, but those who build them have more work on their plate then ever. Companies who rely on this work for their revenue should give something back. It's in these companies' interest to keep this tech sustainable.
1104
Vlad-Stefan Harbuz 🌸 @vlad.website · 30/07/2026
why pancakes in my github
A screenshot of github.com. The menu icon is a pancake emoji.
1130
Reposted by Vlad-Stefan Harbuz 🌸
Software Stewardship Lab @stewardshiplab.org · 30/07/2026
Sounds like a great job opportunity for security-minded folks ✨
042
Vlad-Stefan Harbuz 🌸 @vlad.website · 25/07/2026
new website layout 🎉
vlad.website
Vlad's Website
Hi, I'm Vlad. I work on protecting the Open Source infrastructure the world depends on.
1160
Reposted by Vlad-Stefan Harbuz 🌸
Software Stewardship Lab @stewardshiplab.org · 23/07/2026
Excellent research from @andrewnez.bsky.social 👏
071
Reposted by Vlad-Stefan Harbuz 🌸
Dr. Dawn Foster @geekygirldawn.bsky.social · 23/07/2026
Loving the shares from the back catalog of #FOSSBack! This talk about recruiting contributors from 2023 is particularly relevant today with so many maintainers overworked and burning out. Related: this lovely report on maintainer burnout from @mirandaheath.website stewardshiplab.org/reports/burn...
stewardshiplab.org
Burnout in Open Source: A Structural Problem We Can Fix Together ✸ Software Stewardship Lab
Burnout is affecting the entire Open Source ecosystem. Here's what we could do to make things better.
193
Reposted by Vlad-Stefan Harbuz 🌸
Open Source Pledge ⇌ @opensourcepledge.com · 22/07/2026
secret discord server, please ignore…unless you are interested in open source funding 👀 discord.gg/Ay5abGkaxX
discord.gg
Join the Open Source Pledge Discord Server!
Open Source software powers the world, but who supports the maintainers? We do. | 8 members
0275
Vlad-Stefan Harbuz 🌸 @vlad.website · 18/07/2026
"If you were one of the primary decision makers [responsible for the fraying of democracy and the dystopian technology business model], unless you want to accept that you are the villain, you have to have some kind of a mental process for excusing yourself from the results."
youtu.be
"But it happened."
YouTube video by Molly Rocket
160
Reposted by Vlad-Stefan Harbuz 🌸
Catbus @catbus.phd · 07/08/2025
you have been visited by the Skylight Napping Fox and will have good fortune for the rest of the week 🤗
photo of a fox sleeping on a Skylight
843011022
Vlad-Stefan Harbuz 🌸 @vlad.website · 16/07/2026
I hope interested folks can attend my @europython.eu talk today, happening in S2 at 16:00. I'll be talking about binary dependencies, why they are so hard to detect, and why this poses a problem for our global tech infrastructure.
081
Vlad-Stefan Harbuz 🌸 @vlad.website · 15/07/2026
Anwesha Das @europython.eu
A loop: "I wake up -> there's a next supply chain attack -> I wake up…"
010
Vlad-Stefan Harbuz 🌸 @vlad.website · 15/07/2026
I'm at @europython.eu in Kraków, here to talk about binary dependencies, the @stewardshiplab.org and the @opensourcepledge.com. Come say hi!
Vlad holding his badge, with EuroPython attendees in the background
0212
Reposted by Vlad-Stefan Harbuz 🌸
sami 🔵 @hellosami.bsky.social · 09/07/2026
I made a website that lets you cut out old magazines from the internet archive (or any PDFs you own) and make collage art out of them: ✂️ clipart.studio
401515503
Vlad-Stefan Harbuz 🌸 @vlad.website · 10/07/2026
I've had multiple people say some sentence or another in a post I wrote sounds LLM-written. I never use LLMs. Not sure what to do! Add a disclaimer? Ignore it? Feels weird.
300
Reposted by Vlad-Stefan Harbuz 🌸
Ky @ky.fyi · 09/07/2026
and we wonder why people are burning out
One recent study on AI "efficiency" out of Stanford found that the introduction of a flood of rushed and factually-incorrect AI slop into workflows actually results in human beings having to work harder than ever:

“When coworkers receive workslop, they are often required to take on the burden of decoding the content, inferring missed or false context. A cascade of effortful and complex decision-making processes may follow, including rework and uncomfortable exchanges with colleagues.”

As the Harvard Business Review notes, this hyperscaled introduction of pseudo-efficiency workslop results not just in new conflict and a bunch of wasted time for people, but a sort of broader "knowledge decay" that introduces the potential for organizational downward spirals:

“Errors compound and pile up. Trust in information erodes. People spend more time verifying facts or risk costly and dangerous mistakes. Eventually, people start to lose trust in the processes that they rely on to do their jobs.”
2447
Reposted by Vlad-Stefan Harbuz 🌸
Shannon Vallor @shannonvallor.bsky.social · 09/07/2026
I don’t know how to explain to my American family and friends that this is now the man entrusted with the UK’s political salvation from fascism. For clarity, I am referring to the man on the left with a bin for a face, not the incoming prime minister on the right.
58022
Vlad-Stefan Harbuz 🌸 @vlad.website · 08/07/2026
@43081j.com what a legend
1111
Reposted by Vlad-Stefan Harbuz 🌸
Joe Lanman @joelanman.com · 06/07/2026
realtime train map of UK www.map.signalbox.io
map.signalbox.io
Signalbox - Live Train Map
Signalbox's live real-time map of Great Britain's rail network.
062
Vlad-Stefan Harbuz 🌸 @vlad.website · 03/07/2026
@eurosky.social folks, would you consider a @mu.social feature allowing users to quickly switch between accounts? I regularly use 3 accounts, and switching currently involves 3 clicks using the settings menu — a bit clunky. elk.zone has this switcher at the bottom of the sidebar.
A screenshot of elk.zone showing three avatars at the bottom of the sidebar, which can be clicked to switch to each respective account.
2120