Josse-posten

Day 26: the 82nd Airborne moves forward as the energy shock spreads to Asia.

Boots Forward

The US is deploying 2,000 paratroopers from the 82nd Airborne Division to the Middle East—headquarters-level movement last seen for Iraq 2003. Combined with Saudi basing access, ground-capable forces now exceed 5,000. The deployment accompanies a 15-point diplomatic plan demanding Iran dismantle its nuclear program, abandon proxies, and reopen Hormuz in exchange for sanctions relief. Iran’s military mocked the “negotiations,” asking if Washington is “negotiating with yourselves.”

BlackRock CEO Larry Fink warned that oil at $150 would trigger a global recession. The Philippines has declared a national energy emergency. India is deploying police at petrol stations. The Global South is bearing the brunt.

US military positioning around Iran—the 82nd Airborne headquarters deployment creates a dual-track strategy of diplomatic off-ramp backed by credible ground threat.

948 Drones

Russia launched nearly 1,000 drones and missiles against Ukraine over 24 hours—the largest strike series of the war. The prolonged attack marks a tactical shift: sustained pressure to probe air defense vulnerabilities rather than a single concentrated wave. Ukrainian forces intercepted roughly 80% of incoming projectiles but couldn’t stop all seven ballistic missiles targeting Zaporizhia and Poltava. Strikes damaged civilian infrastructure across 11 oblasts and hit the Bernardine Monastery in Lviv—a UNESCO World Heritage site.

Aftermath of Russian strike on Lviv’s historic center—the Bernardine Monastery damaged by the overnight barrage.

TypeScript 6.0

Microsoft shipped TypeScript 6.0: Temporal API support, #/ subpath imports, Map/WeakMap upsert methods, RegExp.escape(). The DOM library now includes iterables by default. New --stableTypeOrdering flag prepares for parallel type-checking in TS 7.0. Defaults updated: strict: true, module: esnext, target: es2025.

Also today: Wine 11 brings kernel-level NT synchronization to Linux gaming. Video.js v10 reboots after PE gutted it—now 88% smaller. LiteLLM compromised by credential-stealing malware on PyPI (versions 1.82.7–1.82.8 yanked). Claude Code gains Auto Mode for longer autonomous sessions. OpenAI shuts down Sora amid deepfake concerns.

Markets

Indicator Value Δ
Oil +3.6%
S&P 500 −0.3%
Gold +0.0%
EUR/USD 1.0843
USD/NOK 10.82
BTC $70,823

Oil +3.6%—Hormuz tensions persist; BlackRock CEO warns $150 would trigger recession

World

Iran War & Global Energy Crisis

Russia-Ukraine

Europe & Politics

Americas

Tech & Business

Other Notable

cd ~/repos/ratatosk && claude --resume c1594c0d-4682-49c1-bd6f-7f904fb61048

Ukraine

Russia launched nearly 1,000 drones and missiles against Ukraine over 24 hours on March 23–24—the largest strike series of the war. The prolonged attack (extending from evening through the following evening) marks a tactical shift aimed at probing air defense vulnerabilities through sustained pressure. Ukrainian forces intercepted roughly 80% of incoming projectiles but could not stop all seven ballistic missiles targeting Zaporizhia and Poltava oblasts. Strikes damaged civilian infrastructure across 11 oblasts, killed at least four civilians, and hit a UNESCO World Heritage site—the Bernardine Monastery in central Lviv. Ukraine disrupted the strike package by destroying a Bastion-M launcher with two Zirkon hypersonic missiles in Crimea before it could fire.

Bastion-M coastal missile system deployment in occupied Crimea before Ukrainian strike destroyed the launcher.

Ground fighting continues with no major shifts. Ukrainian forces made limited advances near Zakitne (east of Slovyansk), likely liberated Minkivka (northeast of Kostyantynivka), and cleared Russian positions in Prymorske (western Zaporizhia). Russian forces maintain pressure across all axes but suffer heavy attrition—over 6,000 casualties in four days according to Kyiv, with 90% losses reported in one Pokrovsk-direction assault. Russia launched 16 Rassvet satellites as a nascent Starlink alternative, though analysts doubt production capacity.

cd ~/repos/ratatosk && claude --resume bcba610c-1d95-4740-81e3-99187837ceeb

Investigations

Side-by-side comparison of bomb remnants from Tiné, Chad with fragments from Kassala Airport and Coral Marina Hotel attacks in Sudan.

cd ~/repos/ratatosk && claude --resume f4013081-2148-4e3f-a85f-bd4b887afffe

Tech

Major Releases

Windows apps running on Ubuntu through Wine 11.

Security

LiteLLM Compromised by Credential Stealer | HN | Lobsters — Versions 1.82.7 and 1.82.8 on PyPI contained malware harvesting SSH keys, cloud credentials, env files, and K8s configs. Attack vector: compromised Trivy dependency in CI exposed CircleCI credentials including PyPI publish tokens. A bug in the malware caused a fork bomb that revealed the compromise. Yanked from PyPI.

AI & ML Tooling

Programming Languages & Compilers

Linux & Systems

VitruvianOS 0.3.0 desktop—a new Linux distro reviving BeOS design philosophy.

Developer Tools

Hardware

Analysis & Essays

cd ~/repos/ratatosk && claude --resume 566a1b80-1d11-428d-a0d9-1007ea15db8f

AI

Indirect Prompt Injection in Claude Code | r/ClaudeAI — Lasso Security documents four injection techniques targeting Claude Code when running with skipped permissions. Malicious instructions can be hidden in repos, web pages, or MCP responses. They released Claude-Hooks, an open-source runtime detector that intercepts tool outputs and warns on 50+ suspicious patterns.

Agent Flow VS Code extension showing Claude Code agent orchestration as an interactive node graph.

cd ~/repos/ratatosk && claude --resume 7830f163-417d-4141-81b2-5cd6476cc4ba
cd ~/repos/ratatosk && claude --resume c4604ada-d8d2-4ba7-9039-7f3e143c93f3