Day 50 of the US-Iran conflict brings oil prices crashing down, Lebanon breathes, Hungary turns a page, and a cat command can own your Mac.

Hormuz Opens — Oil Crashes 10% — But the Blockade Holds

Iran declared the Strait of Hormuz fully open to commercial shipping on the fiftieth day of the US-Iran conflict, sending Brent crude into a roughly 10% intraday plunge. But the celebration is conditional: the US naval blockade of Iranian ports remains firmly in place, and Iran’s parliamentary speaker warned the strait could close again if the squeeze continues. Video from the strait showed some tankers still turning back. Trump called it a “great and brilliant day” while insisting the blockade stays until a full “transaction” with Tehran is complete — even as Iran flatly denied his claims that it agreed to surrender enriched uranium and cut support for Hamas and Hezbollah. A reported US offer of $20 billion in frozen funds for Iran’s uranium has gone nowhere. The UK and France, meanwhile, announced a multinational naval escort mission for the strait; Trump responded by calling NATO “useless.”

BBC World · The Guardian · Al Jazeera · CNBC · Axios

Orbán’s Era Ends — Magyar Takes Hungary

Péter Magyar’s Tisza party won a landslide, ending Viktor Orbán’s sixteen-year hold on Hungary. “A political era has ended,” Orbán conceded. EU officials rushed to Budapest for high-stakes talks before the new government takes office. Ukraine reacted with cautious euphoria, hoping Magyar will reverse Orbán’s pro-Moscow posture and unblock EU accession talks. (Also covered in Ukraine)

BBC World · The Guardian

Lebanon Ceasefire Holds — Tens of Thousands Return Home

A 10-day truce between Israel and Hezbollah came into effect, with displaced Lebanese streaming back to southern towns — one man filmed removing an Israeli flag from Beaufort Castle. Lebanon’s president declared the country “no longer a pawn.” Trump had blindsided Netanyahu with a social media post declaring Israeli strikes “prohibited,” forcing a halt before diplomatic channels even engaged. Direct Israel-Lebanon talks, the first in decades, have begun, though Hezbollah’s weapons remain untouched and a 26-year border dispute is unresolved.

BBC World · Al Jazeera · Axios

Markets

Indicator	Value	Change
S&P 500	—	+1.21%
Gold	—	+1.33%
Oil	—	-7.79%
EUR/USD	1.0843	—
USD/NOK	10.82	—
VIX	17.45	—
BTC	$77,079	+2.84%
ETH/BTC	0.0312	—

Oil -7.8% on Hormuz reopening. Gold holds on safe-haven demand. VIX settling.

Cargo ships in the Gulf near the Strait of Hormuz, day 50 of the US-Iran conflict.

World

US military completes full withdrawal from Syria after 10 years

The US military has fully withdrawn from Syria, ending a decade-long presence that began with the anti-ISIS campaign. The withdrawal coincides with the broader US-Iran conflict reshaping the region. Middle East Eye · r/worldnews

Australian SAS veteran Roberts-Smith charged with five war crime murders

Australia’s most decorated living soldier, former SAS corporal Ben Roberts-Smith, was charged with five counts of war crime murder relating to alleged killings of unarmed Afghan civilians. Court documents show fellow soldiers told prosecutors he ordered them to execute unarmed men — including placing one on his knees before ordering a soldier to shoot. Granted bail under strict conditions. The Guardian · The Guardian (court docs)

UK Mandelson vetting scandal: Starmer kept in dark, Foreign Office chief resigns

Two senior civil servants, including the head of the civil service, kept Starmer in the dark about sensitive security vetting information relating to Peter Mandelson. The top Foreign Office official resigned as the fall-guy. Starmer rejected calls to resign and promised to release “relevant facts” Monday. The Guardian · Al Jazeera

Bulgaria heads to its 8th election in five years

Bulgarian voters are split along generational lines in the country’s eighth election in five years. A pro-Russian former president leads in polls while younger, pro-EU voters rally behind reformist candidates. The Guardian

Deaths in US ICE custody hit record high; deported Salvadorans vanishing into prisons

Twenty-nine people have died in ICE detention since October, surpassing the previous annual record of 28 set in 2004. Separately, deported Salvadorans are routinely disappearing into El Salvador’s prison system — cut off from family and lawyers for years. NPR · NPR

Over 1,000 Kenyan content moderators sacked after Meta smart glasses scandal

Outsourcing firm Sama abruptly sacked more than 1,000 low-paid Kenyan workers after Meta paused its contract following allegations staff had been exposed to private scenes filmed by Meta’s smart glasses. A stark illustration of the precariousness of outsourced AI labour. The Guardian

India’s women’s parliamentary representation bill fails

The Indian government failed to pass a bill reserving one-third of parliamentary seats for women after the opposition accused Modi of using the quota mechanism as cover for redrawing constituencies. The Guardian

FISA surveillance law extended 10 days amid Republican infighting

Congress passed a short-term extension of FISA Section 702 — the warrantless communications collection authority — after Republican disagreements prevented a longer-term renewal. Al Jazeera

Also today

Suspected Irish crime boss Daniel Kinahan arrested in Dubai on Irish warrant — BBC
Three charged with arson on Persian-language media offices in London — BBC
1982 Paris Jewish restaurant massacre suspect extradited by Palestinian authorities — BBC
South African opposition leader Malema sentenced to five years — BBC
Turkish scholar Rumeysa Ozturk returns to Turkey after Trump deportation push — Al Jazeera
Mystery illness kills at least 5 in Burundi; Africa CDC investigating — CIDRAP
Romania leads EU in measles cases as vaccination rates collapse — The Guardian
UN warns of imminent famine in South Sudan — Al Jazeera

Anti-US billboard in Tehran, April 16.

Ukraine

US extends Russian oil sanctions waiver — undercutting economic pressure

The Trump administration extended a 30-day waiver allowing countries to purchase Russian oil, despite earlier assurances the licenses would not be renewed. The move is driven by energy supply concerns tied to the Iran war. Separately, Indian refiners are purchasing Iranian oil and paying in yuan — signalling broad erosion of the sanctions architecture. The reversal partially undercuts the economic pressure campaign just as Ukraine’s long-range strikes are pushing Russian seaborne exports to multi-year lows.

Reuters · Ukrainska Pravda · NYT · Times of India

Belarus buildup: new roads, artillery positions near the border

Zelenskyy warned that Belarus is constructing roads and artillery positions near the Ukrainian border, saying Russia is again trying to draw Lukashenko into the war — and told Lukashenko personally he “won’t be safe” if it continues. Russia’s own state pollster VTsIOM shows Putin’s approval at 66.7%, down from 72.9% six weeks ago, while Levada finds 61% of Russians view the political situation negatively.

Kyiv Independent · Ukrainska Pravda · r/UkrainianConflict

219 drones overnight; Ukraine warns of 400+ per strike ahead

Russia hit Ukraine with 219 drones overnight — 190 downed, but strikes at 17 locations left 380,000 in Chernihiv Oblast without power. Ukrainian intelligence warns Russia is preparing packages of 400+ drones and 20 missiles, seven times per month. Russia is also equipping Geran drones with cameras to hunt Ukrainian mobile air-defense groups in the field.

Ukrainska Pravda · Ukrainska Pravda · r/UkrainianConflict

Ukraine strikes Samara refineries; Russian exports at 2-year low

Ukrainian drones hit the Syzran refinery (~900 km from the border) and the Novokuibyshevsk refinery in Samara Oblast, while Wednesday’s Tuapse fire is still burning. Russian seaborne exports fell 16% in early April to their lowest since summer 2024, with Novorossiysk port down 73%. The Leningrad Oblast governor publicly acknowledged his region has become a “frontline oblast” and announced plans to recruit reservists to defend port and oil infrastructure.

Ukrainska Pravda · r/ukraine · r/ukraine

Vovchansk street fighting; 151 clashes along the front

Ukrainian forces recaptured several streets in Vovchansk as Russia masses troops for a cross-river assault. The broader front saw 151 combat clashes in 24 hours — Pokrovsk and Kostiantynivka the most contested, with Russia using motorcycle-mounted infantry and FPV drones. Ukraine made limited advances near Slovyansk and Dobropillya.

Kyiv Independent · Ukrainska Pravda

A Ukrainian mobile air defense fire group — the units Russia is now targeting with camera-equipped Geran drones.

Fire at the Sevastopol fuel depot near Kozacha Bay following a Ukrainian drone strike.

Tech

Even `cat readme.txt` can own your Mac

A critical iTerm2 vulnerability allows arbitrary code execution simply by reading a text file with cat. Malicious terminal escape sequences impersonate iTerm2’s SSH integration protocol, tricking the terminal into running attacker-controlled commands. Patched March 31 — update immediately if you haven’t. Separately, PanicLock — born after a WaPo reporter was compelled to unlock her MacBook with TouchID, exposing Signal sources — disables biometric unlock when you close the lid.

iTerm2 vuln · HN · PanicLock · HN

Trail of Bits forges Google’s zero-knowledge proof of quantum advantage

Trail of Bits exploited memory safety and logic flaws in Google’s Rust-based ZK proof system to forge a proof claiming superior quantum circuit metrics — without actually having quantum hardware. They used unsafe Rust to bypass Toffoli gate counting and register aliasing for non-quantum operations. Google’s underlying quantum cryptanalysis conclusions remain valid; only the verification mechanism was defeated. Trail of Bits · Lobsters

HTTP desync in Discord’s media proxy enabled global attachment interception

A researcher exploited HTTP request smuggling and connection pool reuse in Discord’s media proxy to capture real-time attachment URLs from any user worldwide — including private DMs. The technique inserted crafted requests into shared backend connections, enabling passive surveillance of the entire platform’s media traffic. Disclosed in October 2022 for a $3,500 bounty. Article · Lobsters

Dennis Ritchie’s lost PhD thesis recovered and digitized

Ritchie’s 1968 Harvard thesis, long believed lost, has been recovered by the Computer History Museum. It predates Unix and C and reveals his early thinking on programming language theory. PDF · Lobsters

Fil-C: memory-safe C via compiler-generated pointer metadata

Fil-C achieves memory safety in C/C++ by shadowing each pointer with a metadata structure tracking allocation bounds. A garbage collector handles deallocation, eliminating use-after-free. This explainer walks through the simplified model without changing the language surface. Article · HN

Lenses in Rust: functional optics meets ownership

An implementation of lenses — functional programming’s answer to nested data access — in Rust, exploring how FP patterns map to Rust’s ownership model. Article · Lobsters

tailscale-rs: embedded Tailscale networking for Rust

Tailscale released an experimental Rust library bringing tsnet-style embedded mesh networking to non-Go applications, with initial bindings for Rust, Python, Elixir, and C. Embed secure Tailscale networking directly without an external daemon. Tailscale · Lobsters

Hyperscalers have outspent the Interstate Highway System, Apollo, and the Manhattan Project

Combined AI infrastructure spending by Microsoft, Google, Amazon, and Meta has already exceeded the inflation-adjusted cost of most celebrated US megaprojects. Twitter · HN

Landmark ancient DNA study: human evolution accelerated far faster than thought

A major ancient-genome study finds West Eurasian evolution accelerated significantly over the past several thousand years — widespread directional selection across many traits simultaneously, challenging assumptions about the pace of recent evolution. Nature · HN