Josse-posten

Trump tells Congress the war is over while threatening to blast Iran away, pulls 5,000 troops from Germany, and Ukrainian drones reach Russia’s best jets 1,700 km behind the lines.

The War Is Over (It Isn’t)

In a letter to congressional leaders, Trump declared Iran hostilities “terminated” — claiming the early-April ceasefire satisfies the War Powers Act and he no longer needs authorization. Hours later, he rejected Tehran’s latest peace proposal, passed through Pakistani mediators, and said the US would either “blast them away or make a deal.” Democrats called the framing “bullshit”: significant US military operations continue, troops remain deployed across the Middle East, and the US is openly seizing Iranian oil tankers — Trump himself acknowledging American forces are operating “like pirates.” Day 64 of the conflict ended with no movement on negotiations and both sides hardening positions.

The Guardian: Congress letter · Al Jazeera: Day 64 · The Guardian: Democrats react · Al Jazeera: ‘Like pirates’

5,000 Troops Out of Germany

The Pentagon confirmed withdrawal of 5,000 troops from Germany over the next 6–12 months, fulfilling Trump’s threat after Chancellor Merz said the US had been “humiliated” by the Iran conflict. Trump has also threatened to review deployments in Italy and Spain over their refusal to support Strait of Hormuz operations, calling European allies “absolutely horrible.” In a separate escalation, he raised EU car tariffs to 25% — up from 15% — accusing Brussels of non-compliance with last summer’s Scottish golf course deal.

BBC: Troop withdrawal · The Guardian: Italy/Spain threatened · NPR: Pentagon confirms · BBC: EU tariffs

1,700 Kilometers Deep

Ukrainian forces struck Su-57 stealth fighters and Su-34 aircraft at Shagol Airfield near Chelyabinsk — the war’s deepest confirmed strike on Russian aircraft. Satellite imagery published May 1 confirms damage to multiple airframes. In parallel, Ukraine’s systematic oil campaign has pushed Russian refinery output to a 17-year low of 4.69 million barrels per day, costing Russia an estimated $7 billion in oil revenues since January. (Full coverage in Ukraine.)

United24: Su-57 strike · Kyiv Post: 17-year low · Ukrainska Pravda: Satellite confirmation

Markets

Value
S&P 500 +0.28%
Oil -2.92%
Gold -0.11%
EUR/USD 1.0843
USD/NOK 10.817
VIX 16.7
BTC $78,278 +1.6%

Oil -2.9% despite Exxon CEO warning markets “haven’t seen the full impact” of Iran oil disruption. EUR/USD flat as Trump raised EU car tariffs to 25%. Spirit Airlines folded after jet fuel costs compounded years of losses.

USS Gerald R. Ford anchored in Split, Croatia, following repairs after a non-combat fire during Red Sea operations [EPA]

World

The Economic Bill Arrives

The Exxon Mobil CEO warned markets “haven’t seen the full impact” of Iranian oil supply disruption. Yara’s fertiliser chief warned billions of meals are at risk — disrupted supply chains for nitrogen-based fertilisers hit Africa’s poorest countries hardest. Spirit Airlines shut down after 34 years, unable to secure a $500M rescue as jet fuel costs from the Iran conflict compounded years of post-pandemic losses. The broader pattern: 64 days of conflict are repricing energy, food, and transport worldwide.

NPR: Global economic impact · BBC: Fertiliser crisis · CNBC: Exxon CEO · BBC: Spirit Airlines

Iran Threatens ‘Long and Painful Strikes’ if Bombing Resumes

Iran’s leadership warned it would launch “long and painful” strikes against American targets if Trump resumes bombing. The threat sits alongside continued US seizures of Iranian oil tankers in the Strait of Hormuz — escalatory actions that undercut the administration’s “hostilities terminated” framing.

CBC · Al Jazeera

Nobel laureate Narges Mohammadi lost consciousness twice and suffered a severe cardiac crisis — her foundation reports hospitalization. Separately, a man arrested in Iran for using Starlink was beaten to death by security forces. A British couple detained in Iran said they expect to remain imprisoned “for a long time.” Human rights cases are accumulating with Iran closed to outside scrutiny during the conflict.

Al Jazeera: Mohammadi · Iran International: Starlink death · BBC: British couple

Israeli Strikes Kill 12 in Lebanon; Gaza Flotilla Intercepted Again

Israeli strikes killed at least 12 people in Lebanon, pushing the death toll past 2,600 since operations began in March — despite the ceasefire agreement. China urged nations to reverse decisions to withdraw from UNIFIL as peacekeepers face mounting casualties. In Greek waters, Israel intercepted the Global Sumud Flotilla, detained most activists, then released all but two. The flotilla condemned it as “piracy”; Israel called it a “PR stunt.” Inside Gaza, BBC reporting describes displaced people in constant battles against rats and disease sweeping through overcrowded camps.

Al Jazeera: 12 killed · Al Jazeera: UNIFIL · BBC: Flotilla · BBC: Rats in camps

French Nun Attacked in Jerusalem

Video of a man pushing a French Catholic nun to the ground and kicking her in Jerusalem drew widespread condemnation. Israel’s foreign ministry called it a “shameful act.” The attack reflects a documented rise in harassment of Christians in Jerusalem by Jewish extremists.

The Guardian · BBC

Cuba Denounces Sanctions as ‘Collective Punishment’

Cuba’s government condemned sweeping new US sanctions targeting energy, defense, and mining sectors, as a large May Day march was held outside the American embassy in Havana. A Cuban man also died in ICE custody — the 18th such death this year under Trump’s mass deportation drive.

The Guardian · Al Jazeera: Sanctions · Al Jazeera: 18th ICE death

‘Hondurasgate’: Leaked Audios Allege Trump-Milei Plot

Audio recordings published by El Ciudadano claim to reveal a plot involving Trump, Argentine President Milei, and a former Honduran president targeting leftist governments in Mexico, Colombia, and elsewhere in Latin America. The recordings are unverified but have triggered significant political controversy across the region.

El Ciudadano

Canada’s Spy Agency Names China and India

CSIS released a report explicitly naming China and India as the “main perpetrators” of foreign interference in Canada — among the most direct public attributions in the agency’s history, covering espionage, influence operations, and manipulation of Canadian political processes.

National Post · Toronto Star

China Opens Tariff-Free Trade to Nearly All African Countries

China extended zero-tariff market access to nearly all African countries — deepening economic ties as the Iran war disrupts global supply chains and erodes confidence in US commitments. The move positions Beijing as a stable economic partner at a time of maximum Western volatility.

RFI

Mali Rebels Advance on the Capital

JNIM jihadist fighters and Tuareg separatists seized a northern Malian town and reportedly set up checkpoints around Bamako itself — a serious territorial gain against Mali’s military government, months after France warned of the country’s freefall as Russia’s Africa Corps struggled to stabilize the regime.

Al Jazeera

Bard College President Steps Down Over Epstein Ties

Leon Botstein announced he is leaving the presidency of Bard College after an independent inquiry found he made 25 visits to Jeffrey Epstein’s Manhattan townhouse — contradicting his earlier public claim that he was not friends with Epstein.

The Guardian

Smoke rises from Israeli air strikes targeting Habboush, Lebanon, May 1, 2026 [AFP]

Smoke rises at a military base in Hombori, Mali, after JNIM claimed to have captured the installation [Reuters/Social media]

Also today

  • Turkey arrests 500+ at May Day rallies — BBC
  • US embassy warns Americans in UK after terror threat raised to “severe” — Al Jazeera
  • BBC plans 2,000 job cuts; news division faces 15% reduction — The Guardian
  • Wyoming approves first-of-its-kind sodium-cooled nuclear reactor backed by Bill Gates — NPR
  • Uganda bill proposes 20-year sentences for “promoting foreign interests” — The Guardian
  • Peru probes trafficking networks funneling citizens to fight for Russia — Al Jazeera
  • US sanctions ex-DRC President Kabila over alleged rebel support — BBC
  • Chinese courts: companies cannot fire workers solely to replace them with AI — Caixin
  • US appeals court restricts mail-order access to abortion pill mifepristone — NPR · BBC
  • US judge blocks Trump from ending protected status for Yemeni nationals — Al Jazeera
  • Australia records zero new cervical cancer cases in women under 25 — first country on track to eliminate it — BBC
  • WHO approves first malaria drug formulated for babies — The Guardian

Ukraine

Su-57 Strikes at 1,700 km — Satellite Confirms Damage

Ukrainian forces struck Shagol Airfield near Chelyabinsk on April 25, roughly 1,676 km from the border — the deepest confirmed strike on Russian aircraft. Satellite imagery published May 1 confirms damage to multiple Su-57 and Su-34 airframes; open-source analysts confirm at least one Su-57 was hit. Russia has not acknowledged the strikes. In the same window, Ukrainian drones destroyed Mi-28 and Mi-17 helicopters at a Voronezh Oblast airfield ~150 km from the frontline, and struck a Nebo-M radar in Belgorod Oblast.

Ukrainska Pravda · RBC Ukraine · United24

Oil Campaign Compounds: Refinery Output at 17-Year Low

Bloomberg data shows Russian refinery output has dropped to 4.69 million barrels per day — the lowest since December 2009. The Tuapse refinery was struck for a fourth time overnight, with satellite imagery showing new fires; previous strikes destroyed at least 24 tanks and forced suspensions. The Perm and Orenburg refineries were also hit. Ukraine’s drone campaign has cost Russia an estimated $7 billion in oil revenues since January — a strategic economic pressure campaign running parallel to the Iran war’s global oil shock.

AP News · United24: $7B · Kyiv Post

US Drops Ukraine Aid from 2027 Budget

Trump’s proposed FY2027 budget eliminates the Ukraine Security Assistance Initiative — the primary mechanism for US military aid to Kyiv. Separately, envoys Witkoff and Kushner postponed a planned Kyiv visit; the Kyiv Independent reports Washington sees no prospect of negotiating progress, and Witkoff is reportedly reluctant to travel by train. Together these mark a concrete step toward US disengagement from active military support.

Ukrainska Pravda · United24 · Kyiv Independent

Zelenskyy Scraps Indefinite Contracts, Raises Infantry Pay

Ukraine will replace open-ended military service contracts — a core grievance behind desertion and low recruitment — with fixed-term contracts, and raise infantry pay to up to 400,000 UAH. All reform proposals are to be finalized in May with tangible changes targeting June. The move addresses the manning crisis directly.

The Telegraph · Ukrainska Pravda

Pokrovsk: Fiber-Optic ‘Sleeper Drones’ Complicate Defense

Russia’s 76th VDV Division is pushing into Hryshyne, northwest of Pokrovsk, while accumulating forces east and south of the city. A notable tactical development: Russian forces are deploying fiber-optic “sleeper drones” that are nearly impossible to detect visually or acoustically, complicating Ukrainian counterdrone operations. In the Oleksandrivka direction, Russian assault groups have been reduced to single infantrymen probing Ukrainian lines — occasionally penetrating but quickly eliminated by drone operators.

Ukrainska Pravda · ISW

Aftermath of Ukrainian drone strikes on Russian aircraft at Shagol Airfield, Chelyabinsk Oblast — General Staff of the Armed Forces of Ukraine

Bus struck by a Russian drone in Kherson’s Dniprovskyi district, killing at least two people on May 2

Tech

Canonical Under Extended Attack — Ubuntu Infrastructure Down Over a Day

Canonical’s infrastructure has been under sustained attack, bringing Ubuntu services offline for more than 24 hours. Core Ubuntu infrastructure is affected. No detailed attribution or attack vector had been published at time of writing — a significant incident for the open-source ecosystem. Ars Technica · Canonical Status · Lobsters

Bitwarden CLI Supply Chain Compromise Caps Years of Security Drift

A critical review documents why the author no longer recommends Bitwarden, culminating in a 2026 supply chain compromise in the npm-distributed CLI. Prior issues: weak KDF iterations, a Windows Hello bypass, cross-domain autofill exposure, and a DOM clickjacking flaw left unpatched for months. The author traces the drift to $100M in VC funding shifting priorities, including restrictive SDK licensing and years of ignored community requests. マリウス.com · Lobsters

The undocumented mdlog prepare command in TP-Link’s cli binary fetches a conf.json over TFTP and concatenates the router.workdir field into a busybox command without sanitization. Injecting ; sh; # breaks out into an interactive root shell. CVE-2026-3841 was assigned and patched in March 2026. mrbruh.com · Lobsters

Flock Safety Accessed Children’s Gymnastics Cameras as Sales Demo

Flock Safety employees accessed camera feeds at a children’s gymnastics room, pool, playground, school, and Jewish community center in Dunwoody, Georgia as sales demonstrations for other police departments. After a resident surfaced the incident through public records requests, Flock agreed to restrict future demos to public locations — but Dunwoody renewed its contract regardless. 404 Media · HN

Palantir Employees Finally Ask “Are We the Baddies?”

After CEO Alex Karp published a 22-point manifesto attacking pluralism, and reporting linked Palantir’s Maven targeting system to a missile strike killing over 120 children at an Iranian school, employees are grappling with company ethics. The Techdirt piece reaches for the Mitchell & Webb SS sketch: the symbols were always there, but Karp’s public statements removed the plausible deniability. Techdirt · Lobsters

Tangled Fights LLM Spam via ATProto Web of Trust

Built on Bluesky’s ATProto, Tangled adds a vouching layer to code repositories: maintainers vouch or denounce contributors, with visual indicators on issues and PRs — but only for people within your social graph. Vouch records live on personal data servers. Explicitly reactive to the lowered barrier for submitting plausible-looking but problematic code via LLM tooling. Tangled Blog · Lobsters

Agent-Desktop: AI Agents Control Any Desktop App via Accessibility Trees

A Rust CLI exposes macOS accessibility trees as structured JSON for AI agents, with deterministic element references assigned depth-first. Progressive skeleton traversal — a depth-3 overview first, then targeted drill-down — cuts tokens by 78–96% on dense apps like Slack and VS Code. 53 commands cover observation, interaction, and window management. The author frames it as “Playwright for desktop apps.” GitHub · HN

Inverse Sapir-Whorf: Programming Languages Constrain Developer Thought

An essay arguing the Sapir-Whorf hypothesis applies in reverse to programming: the languages developers know constrain the solutions they can conceive. Working primarily in one paradigm makes certain problem structures invisible. Language breadth is a cognitive tool, not just a resume item. lukeplant.me.uk · Lobsters

Also today

  • Pu.sh: complete coding agent harness in 400 lines of shell — curl, awk, and a Claude API key — pu.dev · Lobsters
  • Whohas: single CLI to search packages across all Linux distros — GitHub · HN
  • Microsoft open-sources lib0xc: safer C standard library APIs — GitHub · HN
  • XITLOG VCS enables patch-based merging by default — Devlog · Lobsters
  • ML-KEM-768 public keys compressed by 24 bytes via coefficient packing — fits in a single IPv6 UDP packet — runxiyu.org · Lobsters
  • Stackless coroutines for gamedev in ~200 lines of C++ — vittorioromeo.com · Lobsters
  • Lucid dreaming research: real-time communication and skill practice while asleep — The New Yorker · HN

Dunwoody’s ‘Real Time Crime Center’ dashboard powered by Flock Safety, showing the surveillance network interface

cd ~/repos/ratatosk && claude --resume 683d4cf6-ad1b-416e-ba1e-743bc7e0967c