Josse-posten

Orbán is gone, the blockade is on, and the cracks run in every direction — Budapest toward Brussels, Tehran toward Europe, and straight through the trusted computing base.

The Orbán Era Ends

Péter Magyar swept Hungary’s election in a landslide, ending Viktor Orbán’s 16-year grip. Within hours, he confirmed Hungary will not block the €90 billion EU loan to Ukraine, rejected calls for territory concessions — invoking Hungary’s 1956 uprising — and said he would demand Putin “stop the killing.” Russia immediately added Hungary to its list of unfriendly countries. Belgium, Spain, and Canada piled on with fresh military and financial commitments. For JD Vance, who had invested heavily in Orbán and the Iran talks, it was a back-to-back collapse of MAGA foreign policy bets.

Hormuz Blockade Begins

The US Navy launched its blockade of Iranian ports Monday after weekend negotiations failed over a 20-year uranium enrichment moratorium Iran found unacceptable. Trump threatened to sink approaching vessels. A sanctioned Chinese tanker sailed through anyway — an early test of enforcement limits. NATO allies refused to join. Norsk shipping is directly affected: Wilhelmsen has four ships stuck in the strait, 20–30 Norwegian-flagged vessels operate in the area, and Rederiforbundet called the blockade “uakseptabel.” Brent crossed $100. Iran, meanwhile, is courting European capitals to exploit the transatlantic rift.

When Proofs End and Bugs Begin

A Claude agent fuzzed a formally verified Lean 4 zip library for 19 hours — 105 million executions — and found two real bugs. Neither was in the verified code. One was a heap overflow in the C++ runtime that all Lean proofs assume is correct; the other was in an unverified parser module. A clean demonstration that formal verification works precisely where applied, and says nothing about everything else.

Markets

Indicator Value Change
S&P 500 +1.0%
Oil +2.9%
Gold −0.4%
EUR/USD 1.0843
USD/NOK 10.82
VIX 19.18
BTC $74,538 +5.3%

Oil +2.9% on the Hormuz blockade; energy up >10% on the month. Broad risk-on despite the escalation — markets pricing in de-escalation odds after reports Tehran may still negotiate. Notably calm VIX for the geopolitical backdrop.

Peter Magyar holder seierstale i Budapest etter valget.

World

Lafarge Convicted of Financing Islamic State

A Paris court found French cement giant Lafarge guilty of paying approximately €5.6 million in protection money to IS and other militant groups to keep its Syria plant running — the first time a major Western corporation has been convicted of complicity in crimes against humanity through commercial dealings with a terrorist organization. The former CEO was sentenced to six years. — BBC · Al Jazeera

Carney Wins Majority Government for Canadian Liberals

Mark Carney’s Liberals secured a parliamentary majority, giving him a mandate to govern until 2029 without coalition dependence. Energy independence and trade diversification — partly in response to Trump’s tariff pressure — are central to his platform. — Reuters · Bloomberg

Pope Leo XIV: “I Do Not Fear Trump” — Begins Africa Tour

Pope Leo XIV arrived in Algeria for the first-ever papal visit, opening an 11-day Africa tour. The trip follows Trump calling the Pope “very weak” for his peace appeals on Iran. Leo responded directly: “I do not fear this administration and will continue to speak out against war.” Italian PM Meloni called Trump’s comments “unacceptable.” — NPR · BBC

Lebanon Peace Talks Stall as Hezbollah Refuses to Be Bound

Lebanon’s government is pursuing peace talks with Israel in Washington, but Hezbollah leader Naim Qassem declared the group will not abide by any agreements reached — calling the talks a pretext to pressure Hezbollah into disarming. The Lebanese government enters negotiations with limited leverage over the dominant armed force in the country. — Al Jazeera

Iran Recorded Highest Executions Since 1989

Iran executed at least 1,639 people in 2025, the highest figure since 1989, according to human rights organizations. The surge follows mass anti-government protests, with rights groups warning the toll could climb further. — BBC

Philippines Accuses China of Cyanide Poisoning at Scarborough Shoal

Philippine officials accused Chinese fishermen of dumping cyanide at the disputed shoal to kill fish and deprive Filipino troops of food, warning of coral reef damage. Beijing dismissed the allegation as a “farce.” — Al Jazeera

Spanish PM’s Wife Charged With Corruption

Begoña Gómez, wife of PM Pedro Sánchez, has been charged with corruption after a two-year investigation into using her relationship with the prime minister to advance private business interests. — Bloomberg

Brazil’s Fugitive Ex-Spy Chief Arrested by ICE

Alexandre Ramagem, Bolsonaro’s former intelligence chief, was detained by US immigration authorities after fleeing his 16-year sentence for involvement in the 2022 coup plot. — Al Jazeera

Greece Using Masked Migrants to Push Back Other Migrants

A BBC investigation found Greek authorities have been recruiting migrants — some masked — to forcibly push other migrants back across the border, a practice illegal under international law. The scheme has been running since at least 2020. The operatives are described as mercenaries carrying out pushbacks that EU member states are officially prohibited from conducting.

Also today

  • Chagos Islands sovereignty deal collapses after US withdraws support — The Guardian
  • Judge dismisses Trump’s $10B Epstein defamation suit against WSJ — NPR
  • Child HIV outbreak: undercover footage catches hospital reusing syringes — BBC
  • China dismisses Vice Foreign Minister Sun Weidong in anti-corruption purge — Al Jazeera
  • Colombia authorizes cull of Pablo Escobar’s hippos — The Guardian · El País
  • Molotov cocktail attack on Sam Altman’s home; suspect charged with attempted murder — Al Jazeera · NPR
  • UK inquiry: Southport stabbings could have been prevented — NPR
  • Japan looks to NATO as Trump erodes faith in US security guarantees — SCMP
  • Sudan: three babies born into war every minute — Al Jazeera
  • Super Typhoon Sinlaku bears down on Guam — Al Jazeera
  • Nigeria airstrike kills 100+ in possible civilian area — BBC

Hezbollah-leder Naim Qassem på skjerm — oppfordrer Libanons regjering til å trekke seg fra fredsforhandlinger med Israel.

Ukraine

Koral SAM, 500km Ballistic Missile, and a Fully Robotic Position Capture

A cluster of Ukrainian capability disclosures in 24 hours: the Koral domestic SAM made its clearest public appearance; Ukraine confirmed a secret 500km-range ballistic missile has already been used twice in combat (reaching altitudes of 100km and 204km, suggesting space-launch heritage); and Zelensky announced that for the first time an enemy position was captured entirely by ground robots and drones, with no infantry. Zelensky separately stated Ukraine is now “sufficiently armed” to defend against Russian strikes — an unprecedented claim. — Defence UA · United24 · Ukrainska Pravda

Cherepovets Ammonia Plant Struck; Russia Hits Izmail Port and Chernihiv Energy

Ukraine’s Unmanned Systems Forces struck the Cherepovets Azot plant in Vologda Oblast — one of Russia’s largest, with 900,000 tons annual ammonia capacity. Russia responded with 4 missiles and 129 drones post-ceasefire (115 intercepted), hitting Izmail port and damaging a Panama-flagged vessel, knocking out power to 12,000 Chernihiv residents, and causing civilian casualties in Kharkiv and Zaporizhia oblasts. — Ukrainska Pravda · Ukrainska Pravda (Izmail)

Pokrovsk Remains Hottest Sector; Setbacks in Sumy, Progress Near Lyman

125 combat clashes on April 14, Pokrovsk absorbing the bulk. Ukrainian forces withdrew from several eastern Sumy Oblast villages under heavy pressure — a notable shift in what had been a stable sector. On the positive side, confirmed advances northeast of Lyman, and GUR reports Stepnohirsk being cleared with over 20 Russian armored vehicles destroyed while Ukraine maintains local air superiority. — Kyiv Independent · ISW

Russian Recruitment Falls 20% Year-on-Year

A German Institute analysis of Russian federal budget data finds recruitment at 800–1,000 soldiers per day in Q1 2026, down from 1,000–1,200 in Q1 2025 — insufficient to replace the ~85,000 casualties Ukraine recorded in the same period. Record signing bonuses (averaging 1.47M rubles) have failed to reverse the trend. Death compensation payments to ~25,000 families in Q1 — up from ~20,000 — provide a rare mortality proxy. — Janis Kluge · ISW

Brann ved Cherepovets Azot kjemianlegg etter ukrainsk droneangrep, 13. april 2026.

Ukrainas Koral bakke-til-luft-missil vist offentlig på forsvarsutstilling.

Norge

Nytt regjeringskvartal åpner — 15 år etter 22. juli

Første del av det nye regjeringskvartalet åpnet mandag, nesten 15 år etter terrorangrepet. Statsminister Støre ledet innflyttingen av rundt 2200 ansatte. Prosjektet har kostet anslagsvis 53,5 milliarder kroner — om lag ti ganger opprinnelig budsjett. En 65 år gammel mann ble pågrepet like ved bygget etter å ha fremsatt grove trusler, men politiet konkluderte raskt med at lastebilen hans ikke var farlig. — TU.no · Dagsavisen

DNT slår alarm: Norges natur under press fra massiv utbygging

En ny DNT-rapport viser at arealer tilsvarende hele Norges nåværende bebygde areal er avsatt til fremtidig utbygging — et areal på størrelse med Akershus. DNT kaller den fragmenterte «bit-for-bit»-utbyggingen «heilt høl i hue» og krever full planvask. — TU.no · Aftenposten

Hormuz-blokaden rammer norsk shipping

Wilhelmsen har driftsansvar for fire skip som ligger fast i Hormuzstredet, og anslagsvis 20–30 norskflaggede fartøy opererer i området. Brent-olje hoppet til over 100 dollar fatet. Rederiforbundet kalte blokaden «uakseptabel», og IEA advarer om at oljeprisen ennå ikke gjenspeiler alvorlighetsgraden. (Også dekket i World)NRK · TU.no · DN

Frontfagsoppgjøret: 4,4 % lønnsvekst

Partene landet på en lønnsramme på 4,4 prosent. LO advarer Norges Bank mot å heve renten som svar; NHO-sjef Solberg kontrer med at LO-lederen bør holde seg unna pengepolitikken. DN mener LO «vant på alle fronter». I reiselivet brøt meklingen sammen — opptil 1600 ansatte i hotell og restaurant kan streike fra torsdag. — NRK · DN

Russisk laksefôr hvitvasket gjennom norske merker

Nettavisen avdekker at laks oppdrettet på russisk fôr rutes gjennom en prosesseringsstasjon i Orkanger for å skjule opprinnelsen, og selges som First Price hos Kiwi og Meny. MOWI er blant produsentene som er navngitt. Spørsmål om sanksjonsoverholdelse og matmerking. — Reddit

Barnedrap-erstatning etter 32 år

Trond Petter Gullteig og Kenneth Hagen Brattetaule, utpekt som drapsmenn da de var fem og seks år i 1994, har inngått forlik med staten — én million kroner hver. — Dagsavisen

Oljefondssjef Tangen i reklameblemme for Anthropic

Nicolai Tangen deltok i markedsføring av en AI-modell fra Anthropic. Jusprofessor Bernt kalte det «uforenlig med Tangens rolle som den norske stats viktigste kapitalforvalter.» Fondet ba Anthropic om å fjerne materialet og erkjente at det var en feil. — Digi.no · Reddit

NRK-serien «LIS» slår seerrekord

Dramaserien om unge leger fikk 428.000 seere på første episode — beste debut for en NRK-dramaserie noensinne utenom julekalendere. Serien genererer sterke reaksjoner om legers arbeidsvilkår. — Reddit

Mette-Marit bekreftet e-postkontakt med Epstein

Kronprinsesse Mette-Marit har bekreftet e-postkontakt med Jeffrey Epstein etter et møte i Palm Beach i 2013 som gjorde henne så ukomfortabel at hun ringte kronprins Haakon. Haakon svarte: «Jeg leser ikke epostene til ektefellen min.» Samtidig starter Epstein-kommisjonen formelt arbeid — Thorbjørn Jagland er innlagt på sykehus. — Nettavisen · Reddit · Reddit (Jagland)

Hilde Henriksen Waage får Fritt Ord-prisen

Historiker og Midtøsten-forsker Hilde Henriksen Waage tildeles Fritt Ords Pris 2026 for «fryktløs og uredd maktkritikk» — hennes langvarige arbeid med å kreve åpenhet rundt manglende Oslo-avtale-dokumenter. — Dagsavisen

Skatteetaten kopierer mobiltelefoner uten rettskjennelse

DN avdekker at Skatteetaten i økende grad kopierer ansattes og styremedlemmers mobiltelefoner uten mistanke om straffbare forhold. Skatteadvokat Banoun kaller praksisen «hårreisende» og mener den mangler hjemmel. — DN

Det nye regjeringskvartalet i Oslo — A-blokken og høyblokken.

Også i dag

  • YouTuber Simen Andersen (24) er død — NRK · Reddit
  • Isalill Kolpus slutter i «Nytt på nytt» — NRK
  • Kjernekraft-utredning på Mongstad tross utvalgets avslag — TU.no
  • Russland planla sabotasje av infrastruktur i Nordsjøen — Dagsavisen
  • 14-åring stjal buss og kjørte 18 mil til Sverige — NRK
  • Vold i Osloskolen øker — spesialskoler skiller seg ut — NRK
  • Bane Nor: kun 11 av 56 rushtidsdager nådde punktlighetsmålet — TU.no
  • Equinor selger Scatec-aksjer for 1,6 mrd — E24
  • Helvetesild-vaksine: rekordsalg, demensfrykt driver etterspørselen — NRK
  • Grensehandel av drivstoff bykser i mars — Aftenposten
  • Vårrekord i Tromsø — mildeste april siden 1930 — NRK
  • EU-land advarer om IT-sikkerhetsrisiko i elbiler — Digi.no
  • Hytteskattebombe: ny verdifastsettelse kan mangedoble formuesverdi — E24 · Reddit
  • KI-genererte annonsetekster degraderer Finn.no — Reddit
  • Unge foretrekker ChatGPT fremfor fagfolk for mental helse — Digi.no
  • Statens vegvesen bøtelagt 500.000 etter dødsskred — NRK

Tech

Formally Verified Code Meets the Fuzzer

A Claude agent fuzzed a formally verified Lean 4 zip library (lean-zip) through 105 million executions and found two real bugs: a heap buffer overflow in the C++ runtime’s lean_alloc_sarray, and a DoS via unvalidated size fields in an unverified parser module. Neither bug was in the verified code — one lived in the trusted computing base all proofs assume is correct. A textbook illustration that formal verification succeeds precisely where applied. — HN

MoonBit 0.9: First-Class Formal Verification Integrated With AI

MoonBit 0.9 ships contracts, loop invariants, and SMT-backed proof checking as native language features. The motivation: a security breach from AI-generated code that passed tests but failed on subtle properties. The workflow pairs AI for proposing invariants with a theorem prover for checking them. Unlike Lean or Dafny, verification is woven into the build and IDE tooling natively. — Lobsters

Multi-Agent AI Development Is a Distributed Systems Problem

A sharp analysis applying FLP impossibility and Byzantine Generals to multi-agent LLM development. Multiple agents must reach consensus on a software artifact given an inherently ambiguous prompt — structurally identical to distributed consensus with crash and byzantine failures. Better models don’t escape impossibility results; coordination mechanisms do. — HN

WordPress Plugin Supply Chain Attack via Ethereum C2

A buyer acquired 30+ WordPress plugins (hundreds of thousands of installs) through Flippa, then injected a dormant backdoor into all of them. The malware sat quietly for 8 months before activating — serving spam only to Googlebot, invisible to site owners. Used Ethereum smart contracts for C2 domain resolution, making traditional domain takedowns ineffective. WordPress.org force-pushed a disabling update but still has no mechanism to flag ownership transfers. — HN

GitHub Ships Native Stacked PRs via gh-stack

Official support for stacked pull requests through gh-stack, a CLI extension. Break large changes into chains of dependent, reviewable PRs — a workflow popularized by Graphite and Phabricator, now native in gh. — HN

N-Day-Bench: Can Frontier LLMs Find Known Vulnerabilities?

A monthly benchmark pulling real CVEs from GitHub Security Advisories, checking out the repo at the last pre-patch commit, and giving LLMs a sandboxed shell to find the vulnerability. Unlike synthetic benchmarks, these are real repositories with real bugs. — HN

Configuration Flags Are Where Software Goes to Rot

Every flag is a branch, every branch must be tested, and the combination space explodes. The author advocates for treating configuration flags as a last resort rather than a default design choice. — Lobsters

Everything Should Be Typed: Scalar Types Aren’t Expressive Enough

An essay for pervasive newtype/wrapper types as first-class practice. Using raw strings and ints for domain concepts is a persistent bug source; type systems should make wrapping painless. Directly relevant to TypeScript where string and number carry too little information. — Lobsters

Also today

Linux & Infrastructure

France Building NixOS-Based Government OS to Replace Windows

France is building two NixOS-based operating systems — Securix (hardened) and Bureautix (desktop) — as part of a state initiative to move away from Windows. The names nod to the Asterix series. NixOS’s reproducibility and declarative configuration serve as the foundation for a government-controlled, auditable stack. — Reddit

NixOS + Hyprland + Agenix Dotfiles With Auto-Updating AI Tool Overlay

A comprehensive NixOS flake: Hyprland (UWSM) with Plasma 6 fallback, Agenix for encrypted secrets, Secure Boot via Lanzaboote, nix-ld for pip wheels and npm native modules. Includes an auto-updating overlay managing claude-code, gemini-cli, codex, and opencode. Ayu Dark theme throughout. — Reddit

LazyAgent: TUI Dashboard for Monitoring Claude, Codex, and OpenCode

Go-based terminal UI aggregating activity across running AI coding agents — projects, sessions, active agents/subagents, event logs, and tool call output in five panes. Supports Claude (via hooks), Codex, and OpenCode. SQLite storage, Nix flakes installable. — Reddit

quien: TUI WHOIS Replacement With DNS, Mail, SSL, and Tech-Stack Views

Tabbed TUI for WHOIS/RDAP, DNS, mail config (MX, SPF, DMARC, DKIM, BIMI), SSL/TLS, HTTP headers, tech stack, and Core Web Vitals. JSON output for scripting. Try it: ssh quien.sh. — Reddit

trackd: Undo Any make install via ptrace Filesystem Interception

Wraps any install command using Linux ptrace to intercept filesystem syscalls, backing up files before modification. trackd uninstall fully reverts. Works with make install, pip install, apt, and arbitrary bash installers. ~10–20% overhead. — Reddit

lssh: 10-Year-Old TUI SSH Client With Parallel Execution

Go TUI SSH client with interactive host picker, parallel multi-host execution, local .bashrc forwarding to remote sessions, SOCKS5/HTTP proxying, port forwarding, multi-hop chains, and dedicated file transfer/sync/diff tools. — Reddit

park: Freeze a Dev Server and Release Its TCP Port

park <port> sends SIGSTOP and releases the socket binding, unlike plain Ctrl+Z. park resume <port> brings the process back with the same PID and warm state. Solves the common frustration of killing a dev server just to free a port temporarily.

Tomato: Visual DAG Editor for NixOS Configurations

Visual hierarchical DAG editor outputting configuration.nix or flake.nix with deployment support. Uses GIULIA (AST-based code intelligence) under the hood. An alternative entry point for complex modular configs. — NixOS Discourse

LazyAgent TUI — five panes showing project list, session summaries, active agents, event log, and event detail.

Also today

  • Nixpkgs Notifier: email/webhook alerts on package updates — GitHub · Discourse
  • nixos-rebuild build-vm appreciation post — Reddit
  • NixOS Software site gets major UX overhaul — Discourse
  • Routing NixOS build errors through Claude for readable diagnostics — Reddit
  • Homebox v0.25.0 released — Reddit
  • Youtarr: self-hosted YouTube DVR with SponsorBlock — GitHub
  • Explo + ListenBrainz: music discovery without Spotify — GitHub
  • cava-bg 0.1.7: Wayland audio visualizer with wallpaper-synced colors — GitHub
  • Gowall v0.2.4: recolor wallpapers to match any theme — GitHub
  • Hyprland scrolling layout: full-width toggle script — Reddit
  • Stylix GTK theme ignored by Nemo/Thunar on Hyprland — workaround — Reddit
  • hyprlock unrecoverable with Nvidia 595 drivers — pin to 580 — Reddit
  • PSA: aliasing grep to ripgrep breaks CLI tab completions — Reddit
cd ~/repos/ratatosk && claude --resume 12adb364-2752-4400-8258-a7939ca57adb