Josse-posten

The ceasefire is 48 hours old and already fracturing — Israel killed 254 in Lebanon while Iran and the US accuse each other of bad faith, Trump floats leaving NATO, and Ukraine’s drone forces now kill faster than Russia can recruit.

The Ceasefire Nobody Agreed To

Iran accuses the US of violating the deal framework. The US says Lebanon was never included. Israel launched its deadliest day of strikes on Lebanon since the war began — 254 killed across Beirut, the south, and the Bekaa Valley. Lebanon declared a national day of mourning. The Red Cross called the strikes “outrageous.” Hezbollah fired rockets at northern Israel overnight. France, Spain, and Turkey condemned the attacks; Italy summoned the Israeli ambassador after Israeli forces fired at UN positions. Meanwhile, the Strait of Hormuz remains effectively blocked — BBC Verify shows only a handful of vessels have crossed since the truce. Iran warned it could tighten restrictions further. NPR’s analysis: Trump’s stated war goals — ending Iran’s nuclear program, destroying its military, regime change — remain unmet. Madagascar has declared a state of emergency over fuel shortages.

BBC (Lebanon strikes) · Al Jazeera · NPR · The Guardian · BBC (Hormuz)

Trump Floats NATO Exit

Trump lashed out at NATO allies for refusing to join the Iran war, saying the alliance “wasn’t there when we needed them.” The White House confirmed he would discuss withdrawal with Secretary General Rutte, who described their meeting as “very frank.” Trump renewed his interest in Greenland, calling it a “poorly run piece of ice.” A new poll found citizens across multiple EU countries now view the United States as a greater threat than China. For Norway — a NATO member bordering Russia — the scenario is existential. Congress passed legislation in 2023 blocking unilateral presidential withdrawal, but the signal alone reshapes European defense planning. (More in World)

Al Jazeera · BBC · NRK · Politico EU

Drones Outpace Russian Recruitment

Ukraine’s Unmanned Systems Forces have killed or wounded more Russian personnel than Russia has mobilized for four consecutive months. In March, drone units executed over 11,000 combat missions daily — a 50% increase from February. Separately, Ukraine disabled the Slavyanin, Russia’s last railway ferry in the Kerch Strait, severing a critical supply line to Crimea. And a 60-day drone operation demolished a bridge in occupied Kherson using 1.5 tonnes of explosives delivered by UK-made Malloy T-150 drones — the first known bridge fully destroyed by drone operations. (Full coverage in Ukraine)

Ukrainska Pravda · RBC Ukraine · Ukrainska Pravda

Markets

Indicator Value Change
S&P 500 +2.5%
Gold +0.6%
Oil −9.8%
EUR/USD 1.0843
USD/NOK 10.82
VIX 21.4
BTC $70,986
  • Oil −9.8% — ceasefire pricing overrides Hormuz fears, despite Iran warning of further restrictions
  • S&P +2.5% — broad risk-on rally, though deal framework already fraying
  • VIX drops to 21.4 — markets pricing fragile optimism

A boy runs past a damaged building after an Israeli strike in Tyre, Lebanon — Israel’s deadliest day of strikes killed at least 254.

World

Vance backs Orbán in Budapest; Hungary’s secret Russia pact exposed

JD Vance visited Budapest to publicly support Viktor Orbán ahead of Sunday’s election, accusing the EU of “foreign interference” while himself campaigning for the incumbent. Germany rebuked Vance for hypocrisy. Days earlier, Politico revealed a 12-point cooperation agreement signed by Hungary’s Foreign Minister Szijjártó and Russian officials in Moscow, covering energy, trade, healthcare, and education. VSquare published details showing Szijjártó coordinated with Russia to block Ukraine’s EU membership path. A separate report revealed Hungary offered to share intelligence with Iran after the 2024 Hezbollah pager attack. Orbán responded that he sees nothing wrong with being “Putin’s mouse.”

Politico (Germany) · United24 (Russia pact) · Ynet (Iran intel) · BBC (Orbán profile)

Zelenskyy: US ignoring evidence Russia is helping Iran

Zelenskyy stated that the US is ignoring Ukrainian intelligence showing Russia is actively assisting Iran, attributing the blind spot to Trump’s trust in Putin. The accusation highlights the deepening overlap between the Ukraine and Iran conflicts, and comes as the Kremlin’s SVR pushed a baseless claim about EU nuclear weapons development — ISW assesses this as a coordinated information operation to fracture US-EU ties.

The Guardian · ISW

Israeli opposition: Netanyahu achieved the ‘worst result’

Yair Lapid accused Netanyahu of “selling lies” to the US about what the war would achieve — a ceasefire that leaves Iran’s nuclear and military capabilities largely intact while Israel’s Lebanon operations face growing international condemnation. Trump threatened 50% tariffs on any country supplying Iran with weapons and said the US military will remain in the region until a “real agreement” is honored, warning the US is ready for its “next conquest.”

Al Jazeera (tariffs) · CNBC

Bill Gates to testify in Epstein probe

Bill Gates will appear before the House Oversight Committee in June as part of the congressional Epstein investigation. Former AG Pam Bondi’s testimony has been postponed. Separately, UK ambassador Lord Mandelson was revealed to have tried to get Epstein’s “goddaughter” access to 10 Downing Street.

NPR · Al Jazeera (Mandelson)

Polymarket insider trading: 50 new accounts bet on ceasefire hours before announcement

At least 50 newly created Polymarket accounts placed large bets on a US-Iran ceasefire hours before Trump’s announcement, collectively netting ~$611,000. One account created that morning bet ~$72,000 at 8.8 cents and cashed out for $200,000. The pattern mirrors suspicious bets before the capture of Venezuelan president Maduro in January. Congress has introduced bipartisan legislation to expand insider trading laws to cover prediction markets.

The Guardian · HN

Also today

  • Australia’s most decorated soldier Ben Roberts-Smith to stand trial for war crimes — BBC · The Guardian
  • Greece bans social media for under-15s, effective January 2027 — BBC
  • Germany suspends unenforced military travel rule for men under 45 — BBC
  • LA teenager loses eye to federal agent’s “less-lethal” projectile at protest — The Guardian
  • Chile’s far-right reverses memorial plan at Pinochet-era torture site — The Guardian
  • North Korea tests cluster-bomb warhead missiles — NPR
  • FBI arrests Fort Bragg employee over classified leak to journalist — The Guardian
  • OpenAI acquires tech talk show to shape AI narrative — NPR
  • Børge Brende removed from Bilderberg board before Washington meeting — DN
  • Spain’s twin corruption trials cast shadow over main parties ahead of elections — The Guardian

Putin and Orbán during a signing ceremony — Hungary’s secret cooperation pact was exposed days before the election.

Ukraine

Last Crimea railway ferry disabled

Ukrainian GUR special operations struck and disabled the Slavyanin, Russia’s last operational railway ferry in the Kerch Strait, on the night of April 5–6. The ferry transported fuel, weapons, ammunition, and military equipment to occupied Crimea. The same night, Kavkaz port in Krasnodar Krai was also hit. Combined with ongoing strikes against Crimean oil depots at Feodosia and Hvardiiske, and the earlier disabling of the Kerch Bridge for heavy cargo, Russia’s logistics into Crimea are under severe and compounding pressure.

Kyiv Independent · RBC Ukraine

Drone forces outpace Russian recruitment for four straight months

Commander-in-Chief Syrskyi reported that Ukraine’s Unmanned Systems Forces have killed or wounded more Russian personnel than Russia has mobilized every month since December 2025. In March, drone units executed over 11,000 combat missions daily, striking 150,000+ verified targets — a 50% increase from February. Ukraine now holds a 1.3:1 drone superiority on the frontline, with 32% of Ukrainian drones being EW-resistant fiber-optic models versus 24% for Russia. Russian casualties reached 316 per square kilometer of advance in Donetsk in Q1 — nearly triple the 2025 average.

Ukrainska Pravda · United24

First-ever fully drone-led bridge demolition

Ukraine’s 426th Unmanned Systems Regiment destroyed the Konkivskyi Bridge in occupied Kherson Oblast in a 60-day operation: 30 missions delivering 1.5 tonnes of explosives via UK-made Malloy T-150 drones. Engineers identified structural weak points after Russian forces inadvertently posted internal photographs online. A final missile strike completed the collapse.

Ukrainska Pravda

Deep strikes: Krasnodar substation hit, Lukoil refinery halted

Overnight April 8–9, a large-scale drone attack struck Krasnodar Krai near the Krymsk air base, setting fire to a 110kV electrical substation at an oil pipeline facility. Reuters confirmed that Ukraine’s April 5 strikes on the Lukoil refinery in Kstovo fully halted operations. Strikes also hit occupied Luhansk targets including an equipment depot and ammunition depot.

Ukrainska Pravda · Reuters

Japan sends engineers to Ukraine’s frontline for $2,500 interceptor drones

Japanese company Terra Drone is sending engineers directly to Ukraine’s frontline to test interceptor drones in combat, collaborating with Ukrainian firm Amazing Drones. The resulting $2,500 drone is designed to neutralize enemy aerial threats.

Euromaidan Press

Rosatom hack leaks 300GB exposing accelerated Iran nuclear deliveries

The CyberLegion hacking group breached Rosatom and leaked over 300 gigabytes of internal documents, including technical specifications for equipment destined for Iran’s Bushehr nuclear plant showing accelerated deliveries. The leak also contains production planning for nuclear projects in Belarus, China, and India.

Real Narrative News

Also today

  • 21,000+ ground robot missions in Q1 — Ukraine substituting uncrewed vehicles for soldiers in supply, evacuation, and frontline operations — Business Insider
  • FP-9 air-launched ballistic missile in development with 800km+ ground range — Interesting Engineering
  • Putin admits Russia can’t produce enough military uniforms domestically — United24
  • Cameroon military contractors confirmed killed fighting for Russia — BBC
  • 10-petabyte breach of Chinese supercomputer includes classified defense documents — CNN

The Slavyanin railway ferry burning after Ukraine’s strike — Russia’s last operational ferry link to Crimea.

Strike moment during the 60-day drone demolition of the Konkivskyi Bridge in occupied Kherson Oblast.

Norway

Kjernekraftutvalget sier nei — minst 20 år unna

The government’s nuclear power committee delivered a unanimous verdict: nuclear power in Norway is too expensive, takes too long, and the country lacks competence. The earliest realistic timeline is mid-2040s. The committee recommends going big if it happens at all — small modular reactors alone won’t be cost-effective. SV called it vindication for wind investment. Ola Borten Moe dismissed it: “vi er ikke dummere enn kineserne.” DN’s editorial called it “a dose of realism.” Across Europe, the trend is moving toward more nuclear.

NRK · DN · TU.no · Aftenposten

Fiskebåter mot raketter: Andøya-konflikten eskalerer

A fishing boat forced the abort of Isar Aerospace’s Spectrum 2 rocket launch from Andøya — Europe’s only operational spaceport. The rocket’s fuel overheated during the delay, scrapping the attempt. Authorities have now imposed an enforceable maritime exclusion zone with fines up to 9,000 kroner, replacing advisory warnings. Local fishers protest that the restrictions hit during peak skrei season. The rocket company notes 15 authorized annual launches total only ~15 hours of restricted access. Næringsminister has called a meeting with the fishing sector for April 13.

NRK · NRK

F-16-flyene til Ukraina står fortsatt i Belgia

The six F-16s Norway pledged to Ukraine 2.5 years ago remain at a workshop in Belgium and have never been put into service. Defence chief Eirik Kristoffersen acknowledged the aircraft were not airworthy when donated. Defence Minister Gram avoided saying they had been “delivered,” stating the jets are “in Belgium awaiting maintenance.”

NRK · NRK · TU.no

Rødgrønt oppvaskmøte etter dieselbråk

The five red-green parties met Thursday to hash out their differences after Senterpartiet broke the budget agreement before Easter by securing a majority for fuel tax cuts. Støre says he’s not worried the coalition majority will collapse, but called the break “unacceptable.” Finance Minister Stoltenberg promised all fuel tax cuts will be implemented by May 1, while questioning whether the changes comply with EU rules. The diesel-petrol price gap has never been wider.

NRK · NRK

Norske skip avventer — Hormuzstredet fortsatt usikkert

Iran has published safe navigation charts and the first ships have passed through Hormuz, but several Oslo Børs-listed shipping companies are keeping vessels in the Persian Gulf until security is confirmed. The Norwegian Shipowners’ Association says they “will not resume transit until there is real security.” Oslo Børs opened up 0.8% Thursday, partially recovering from Wednesday’s sell-off that wiped 164 billion kroner from three oil stocks alone.

DN · NRK · E24

Telenor faces massive Myanmar lawsuit

NRK has published an investigation into a major lawsuit against Telenor related to the military coup in Myanmar. When soldiers raided a home, they detained children aged two and nine. The lawsuit could involve billions of kroner.

NRK

Politiets IT-systemer slått ut av strømtest

A failed backup power test at a police datacenter took down IT systems across Norway for about 30 minutes Wednesday. Border control at Oslo Airport halted, causing hour-long queues. A criminal trial was disrupted when the prosecutor lost access to case files. Several banks also experienced issues.

Digi.no · NRK

Ingen dømt for kjønnslemlestelse — 30 år med ubrukt lov

Despite carrying up to 15 years’ imprisonment, Norway has never secured a single FGM conviction since the law was introduced in 1995. Over 70 cases have been reported since 2005. An estimated 17,300 girls and women in Norway may have undergone FGM before arrival. Cases collapse due to evidentiary challenges — FGM often occurs abroad, medical evidence is hard to date, and victims fear consequences of reporting. France has secured over 100 convictions; Norway has zero.

NRK

Jotta vil slette ti år med familiedata

Norwegian cloud storage company Jotta wants to delete a customer’s entire archive — over ten years of family photos and videos — after a hash value triggered a match on their systems. The company calls the situation “extremely uncomfortable.” The case raises questions about automated content scanning and false positives.

Digi.no

Also today

  • Boligpriser opp 0,4% i mars — tvangssalg øker i Oslo — NRK · Aftenposten
  • Rekord hyttesalg i Østfold — 136 millioner kroner — NRK
  • Boreal bestiller 20 elektriske hydrofoilferger — TU.no
  • Sørloth scorer — Atlético slår Barcelona i Champions League — Aftenposten
  • Viktor Hovland viser frem kjæresten Tuva før The Masters — NRK
  • 40 astronauter i Norge for å inspirere unge — NRK
  • Avinor planlegger stor ombygging av Oslo Lufthavn — NRK
  • Kvinne overfalt på joggetur i Lillestrøm — mann siktet for voldtektsforsøk — NRK
  • Bombe kastet i hage i Fredrikstad — fem personer tiltalt — NRK
  • Otovo-gründer Andreas Thorsheim forlater selskapet — DN
  • Elkem-sjef går av, foreslått som ny styreleder — DN
  • Sopra Steria-konsulent tiltalt for skjult kamera på toalett — Digi.no
  • KS: Lærere kan bli pålagt å jobbe i sommerferien — VG
  • Moskeskoler forvandlet — «vaksine mot ekstremisme» — NRK
  • Mímir Kristjánsson-saken henlagt — NRK
  • Aktor ber om 14 års forvaring for 17-åring — NRK
  • NRK beklager Silje Marie Redergård-saken — NRK
  • Finanstilsynet: Deloitte brøt revisorloven — DN
  • Cannabis-grenser utfordres — Normal Norge mener de straffer uten påvirkning — Normal Norge
  • Bergensbanen gjenåpnet — samme vogner brukt begge dager — NRK
  • Rekordtidlig vår i Nord-Norge — like langt som Sørlandet — NRK

Rekordtidlig vår: uteservering i Nord-Norge i april — varmeste mars noensinne.

Brannskader i vognene på Bergensbanen — «her har det vært store krefter.»

Tech

Critical Nix privilege escalation — update immediately (CVE-2026-39860)

A privilege escalation in the Nix daemon allows any user with build access (everyone by default) to achieve arbitrary file writes as root. During fixed-output derivation output registration, symlinks are followed and leaked file descriptors enable the escalation. Affects all Nix versions since 2.21 on sandboxed Linux multi-user installations — the default on NixOS. macOS and Lix are unaffected. Fixed in Nix 2.28.6 through 2.34.5.

NixOS Discourse · Determinate Systems · r/NixOS

Flatpak sandbox escape: any app gets full host access

CVE-2026-34078 affects all Flatpak versions before 1.16.4. Through symlink manipulation in the portal system, any Flatpak app can create symlinks pointing to arbitrary host paths. When Flatpak resolves and mounts these, the sandbox is completely bypassed — unrestricted read, write, and execute on the host.

GitHub Advisory · Lobsters

Aphyr: ML promises to be profoundly weird

Kyle Kingsbury argues that LLMs’ “jagged frontier” of competence — solving multivariable calculus while failing simple word problems — isn’t a temporary growing pain but a structural property. When unpredictably unreliable systems get deployed across society, the result is disorienting in ways we haven’t fully reckoned with. The weirdness comes from the inconsistency itself.

aphyr.com · HN

PostgreSQL performance halved on Linux 7.0 kernel

A kernel change restricting preemption modes to Full and Lazy breaks PostgreSQL’s spinlock-heavy buffer management, dropping throughput to ~50% on modern CPUs like AWS Graviton4. The fix requires PostgreSQL to adopt RSEQ (Restartable Sequences). Workaround: enabling huge pages eliminates the regression entirely.

Phoronix · Lobsters

Veracrypt blocked by Microsoft revoking driver signing

Microsoft abruptly terminated the Veracrypt maintainer’s signing account with no explanation, blocking all Windows releases. System encryption is most affected. After media coverage, Microsoft VP Scott Hanselman reached out. The issue may be part of a larger policy change also affecting WireGuard.

SourceForge · HN

Chiasmus: neurosymbolic MCP server for code analysis

An MCP server pairing LLMs with Z3 (constraint solving) and Tau Prolog (logic programming) for code analysis. Parses code into ASTs via tree-sitter, extracts structural facts as Prolog relations, then delegates questions like dead code detection or call graph traversal to the solvers — replacing dozens of iterative grep calls with single provably-correct tool calls.

Blog post · Lobsters

MegaTrain: training 100B+ LLMs on a single GPU

MegaTrain treats CPU memory as primary storage and the GPU as a transient compute engine, streaming parameters layer-by-layer via pipelined double-buffering. On a single H200 with 1.5TB host memory, it trains up to 120B parameters with ~2x the throughput of DeepSpeed ZeRO-3 — full precision, no quantization tricks.

arXiv · HN

Little Snitch arrives on Linux

The macOS network monitor now has a Linux version. It runs with a 33MB memory footprint and uses eBPF for packet inspection. Two of three components are open source, but the daemon remains proprietary — prompting discussion about alternatives like OpenSnitch and Portmaster.

Product page · HN · Lobsters

Astral’s security posture for uv and ruff

Mandatory pinned GitHub Actions commits, Sigstore cryptographic attestations, dependency cooldown periods to avoid compromised post-release updates, and a deliberate choice not to automate features they can’t do securely. A mature approach to supply chain security for tools rapidly becoming Python infrastructure.

Astral blog · HN

John Deere to pay $99M in right-to-repair settlement

A landmark outcome — the settlement addresses complaints that Deere’s software locks prevented farmers from repairing their own equipment.

The Drive · HN

Also today

  • Tailslayer: reducing tail latency in DRAM by working around refresh pauses — GitHub · Lobsters
  • Full-text search entirely in the browser with IndexedDB — Blog · Lobsters
  • USB for software developers: writing userspace drivers — Blog · HN
  • Porting Mac OS X 10.0 to the Nintendo Wii — Blog · HN
  • Applying “Programming Without Pointers” in Zig — Blog · Lobsters
  • Borrow-checking surprises in Rust — scattered-thoughts.net · Lobsters
  • botctl: process manager treating AI agents as infrastructure — botctl.dev · HN
  • Tailscale + Mullvad coexistence script for split routing — r/selfhosted
  • AI agents flooding the internet — 8,000% traffic increase — Digi.no
  • Proton launches European alternative to Google Workspace and Microsoft 365 — Digi.no

Little Snitch for Linux — the macOS network monitor comes to eBPF.

Mac OS X 10.0 running natively on the Nintendo Wii.

Linux & Infrastructure

Dependabot now supports Nix flakes

GitHub’s Dependabot can now monitor flake.lock files and open PRs when flake inputs have newer upstream commits. Add nix as a package ecosystem in .github/dependabot.yml. Supports GitHub, GitLab, Sourcehut, and plain git inputs. Version updates only — no security update support yet.

GitHub Changelog · r/NixOS

The Great Nix Flake Check: 7,600+ flakes evaluated

A large-scale compatibility study evaluated 7,600+ Nix flakes across CppNix, Lix, and the author’s own implementation. Success rates ranged from ~55–70%. The study uncovered numerous undocumented behaviors — implicit inputs, special attribute handling, context-dependent URL parsing — and advocates for formal specification. Lix proved very compatible despite the lack of documentation.

Blog · NixOS Discourse · r/NixOS

fzf 0.71.0: parallel search and Zellij support

Search now scales linearly with CPU cores, cache memory footprint reduced 86x per entry. The --tmux flag is renamed to --popup and supports Zellij 0.44+ floating panes. New --id-nth tracks item identity across reloads. Shell integration gets multi-select in bash/fish CTRL-R and shift-delete for history removal.

Release notes · r/commandline

ruah: parallel AI coding with git worktree isolation

A CLI giving each AI agent an isolated Git worktree with glob-based file locking to prevent edit collisions. Supports DAG-based workflows defined in Markdown, works with Claude Code, Aider, Codex, Cursor, and Windsurf.

GitHub · r/commandline

SIEM add-on proposed for Home Assistant

A Security Information and Event Management add-on with strong community support — structured security audit log recording login successes/failures, user IDs, IPs, and user agents.

GitHub Discussion · r/homeassistant

Vaxry’s talk at FUTO on Hyprland

The Hyprland creator gave a rare public talk at the Louis Rossmann-backed tech organization.

YouTube · r/hyprland

Also today

  • nix-run skill: letting AI agents run Nix packages on the fly — GitHub · r/NixOS
  • DeltaNAR: delta-based deployment for Nix, aimed at bandwidth-constrained environments — GitHub · r/NixOS
  • Cherry-pick nixpkgs patches without cloning the 5 GB repo — Discourse
  • CTRL-OS April update: 5-year LTS downstream of NixOS — Discourse
  • Examining home-manager config output: approaches and shortcuts — Discourse
  • Git commands to run before reading any code — Blog · HN
  • Displayflow: Rust CLI for DDC/CI multi-monitor control — Project page
  • store v1.1.0: GNU Stow alternative with secrets and platform conditionals — GitHub
  • termtrace: structured terminal session recording as JSON — GitHub
  • termread: Firefox Reader Mode for the terminal — GitHub
  • neomd: email TUI with Markdown reading and Neovim composing — GitHub
  • Quickshell Hyprland dotfiles with NixOS config — GitHub
  • cwal v0.8.4: wallpaper change triggers full system color sync on Hyprland — r/hyprland

Home Assistant

  • Automatic blueprint updater — GitHub
  • mmWave sensors with floorplan + air quality overlay — Sensy One
  • Advanced Notification System: centralized routing — GitHub
  • State of the Open Home 2026 keynote — YouTube
  • HAGHS health score tool gets podcast coverage — How-To Geek
  • Vintage tape deck converted to Spotify/Sonos controller with ESP32 — r/homeassistant

A vintage tape deck being converted into a smart Spotify/Sonos controller with ESP32 and Home Assistant.

Artemis II

Artemis II’s four astronauts are on their return trajectory, likely splashing down Saturday, after breaking Apollo 13’s record for the farthest humans from Earth. The crew said they were bringing back “so many more pictures, so many more stories” from their lunar discoveries.

BBC

cd ~/repos/ratatosk && claude --resume 59793395-51a8-4fb4-ad15-4329cb5dae56