Josse-posten

Ukrainian drones reach St. Petersburg as Putin opens his forum; Iran turns Kuwait’s airport into a war front; and at Skaugum, the crown prince comes home.

Ukraine strikes St Petersburg during Putin’s economic forum

Ukrainian long-range drones hit oil storage near St Petersburg just days before Putin’s flagship economic forum, bringing the war directly to Russia’s second-largest city. NATO Secretary-General Rutte defended Ukraine’s right to strike military targets anywhere in Russia, saying it required no special decree from Zelenskyy. The strikes are part of a sustained campaign that has knocked offline roughly 40% of Russia’s refining capacity; Neptune missiles — the same type that sank the Moskva — hit the Novoshakhtinsk refinery, and Ukrainian drones also struck weapons plants and naval vessels at the Kronstadt base.

Fuel rationing reaches Moscow as the crisis comes home

Russia’s gasoline crisis has crossed into Moscow, where stations now cap purchases at 60 liters per customer — joining Crimea’s coupon system and rolling restrictions across St Petersburg, Belgorod, Kursk, and occupied Luhansk. Refining capacity has fallen to 2009 crisis levels. Flight delays at St Petersburg’s airport gave Putin’s “Russian Davos” an uncomfortable backdrop, while inside the hall, Kremlin-aligned oligarch Konstantin Malofeev and ideologue Alexander Dugin presented “Russia 2050” scenarios that openly contemplated nuclear use — the “good” outcome involving Russian occupation of Ukrainian cities and EU collapse by 2036, the “bad” one ending in NATO expansion.

Iran strikes Kuwait airport, Israel-Lebanon agree to ceasefire

Iran launched drones and ballistic missiles at Kuwait International Airport, killing one and injuring 63 — the first deadly attack on a Gulf neighbor since military escalation began. Kuwait’s defense ministry intercepted 13 missiles and 17 drones, but damage to Terminal 1 still got through. Tehran framed it as retaliation for US strikes on Iranian oil facilities, and oil prices climbed toward $100. Hours later, the Trump administration announced Israel and Lebanon had agreed to a new ceasefire — contingent on Hezbollah fully halting attacks — an attempt to peel Lebanon off the broader Iran negotiation. (Also covered in World)

Kronprinsen hjem til en alvorlig syk Mette-Marit

Kronprins Haakon avbrøt det offisielle Japan-besøket og fløy hjem etter at kronprinsesse Mette-Marits lungefibrose har forverret seg. Sykdommen, som ble diagnostisert i 2018, er progressiv og uten kur. Medisinske forberedelser til lungetransplantasjon er igangsatt, men det er foreløpig uklart om hun er satt på venteliste. Prinsesse Ingrid Alexandra kom også hjem tidligere fra studiene i Australia, og familien er nå samlet på Skaugum.

Indicator Value Change
S&P 500 (f) 7,551.75 -0.26%
Dow 30 (f) 50,895 +0.18%
Nasdaq (f) 30,497.25 -0.44%
Russell 2000 (f) 2,903.7 +0.29%
VIX 16.33 +1.68%
Gold 4,492.6 +0.58%
BTC $63,762 -5.01%
EUR/USD 1.1607 -0.03%
USD/NOK 9.3113 -0.08%
  • Gold +0.58%, VIX +1.68% — Gulf tensions spike as Iran strikes Kuwait Airport; escalation risk pushes haven demand higher.
  • BTC -5.01% — sharp crypto selloff mirrors a broad risk-off mood amid Middle East escalation and war-powers uncertainty in Washington.

World

US House rebukes Trump on Iran war powers in bipartisan vote

The House passed a war powers resolution 215–208 requiring Trump to seek congressional approval before military action against Iran. Four Republicans joined Democrats in the rare rebuke. The measure faces a likely presidential veto and uncertain Senate prospects, but it is the first time in Trump’s second term that the House has formally constrained his use of force.

US officially reduces NATO role, pushes Europe to spend

Washington formally announced reduced US participation in NATO forces and told European and Canadian allies to substantially boost their air and naval capabilities. The shift — long signaled — lands in the middle of active wars in Ukraine and the Middle East, and follows the planned pullback of US jets, destroyers and submarines from the alliance reported earlier this week.

Germany blames Russia after losing UN Security Council bid

Germany failed to win a non-permanent Security Council seat for the first time, and officials directly blamed Russian interference. MP Johann Wadephul said it was “no secret” that Russia had stirred up sentiment against Berlin over its support for Ukraine. Germany’s strong stance on Israel was also cited as a factor in vote-trading.

Japan runs out of plastic as Iran war hits supply chains

Takeaways, supermarkets and bakeries across Japan are running short of plastic bags, trays and food-service gloves after the Middle East conflict disrupted crude shipments — and with them the naphtha that Japan refines into plastic. A reminder that the price of an air-defense engagement over Kuwait gets paid at the convenience-store counter in Osaka.

Trump nominates his own defense attorney as AG; strips protections from 8,000 federal workers

Trump announced he will formally nominate Todd Blanche — his criminal defense attorney during recent legal proceedings — as Attorney General. The same day, he signed an executive order moving approximately 8,000 high-ranking civil servants into a new “Schedule F” category in which they can be fired for any reason, a major expansion of presidential authority over the federal bureaucracy.

Trump administration dismantles Atlantic current monitoring system

The NSF is decommissioning the Ocean Observatories Initiative’s 900+ instruments in Atlantic and Pacific waters — a network designed for 25 years of operation that has only been running since 2016. OOI provides the most important data stream on the Atlantic Meridional Overturning Circulation, which a growing body of research suggests is approaching a tipping point. That the administration is paying to extract the hardware rather than merely halting funding suggests motivation beyond cost-cutting. Congressional Democrats have pledged opposition, citing fossil-fuel influence.

Also today

Americas
SpaceX plans record $1.77 trillion IPO at $135/share, aiming to raise ~$75 billion — Al Jazeera
Protests grow in Albania over Jared Kushner-backed luxury resort in a protected coastal area — Guardian · NPR
Asia-Pacific
Delhi hotel fire kills 21, including 18 foreign medical tourists — BBC · Al Jazeera
China bans four New Zealand MPs over their Taiwan visit — BBC
North Korea publicly unveils a new uranium enrichment facility and vows “exponential” arsenal expansion — France24
Africa
DRC Bundibugyo Ebola outbreak reaches 321 cases and 48 deaths; ADF rebel attacks kill 30+ around outbreak centers, and three patients fled clinics during the violence — Guardian · Al Jazeera: vaccines
Culture
Wim Wenders withdraws his 1975 film Wrong Move over a topless scene of a 13-year-old Nastassja Kinski; she said he “didn’t protect” her — BBC · Guardian

Ukraine

US House advances Ukraine aid bill despite Republican opposition

The House voted 218–204 to advance the Ukraine Support Act, with six Republicans joining Democrats to overcome leadership resistance. The $8 billion military aid package runs through 2027 and adds new sanctions on Russia plus reconstruction funds. A final vote is set for June 4 — the first major Ukraine aid breakthrough since Trump returned to office and US military assistance fell 99% in his first year back.

Hungary lifts EU accession veto after minority-rights deal

Hungarian PM Péter Magyar announced a comprehensive agreement on rights for the 100,000-strong Hungarian minority in Ukraine’s Transcarpathia region, clearing the path for EU accession negotiations. The first negotiation cluster formally opens June 15 in Luxembourg. Magyar still opposes any accelerated timeline and reserves the right to reimpose the veto — but the two-year deadlock is over.

Russia repeats its failed 2022 Lyman strategy — from a worse position

ISW reads the current Russian advance around Lyman and Slovyansk as a recreation of the unsuccessful 2022 encirclement campaign, but from a less favorable starting position. The 20th and 25th Combined Arms Armies have failed to secure northern approaches through Drobysheve and Novoselivka, and Ukrainian counterattacks have cleared infiltration attempts. The pattern points to a command unable to adapt from operational failure or to set realistic battlefield goals.

ISW

Norge

Stortinget samde om historisk forsvarsløft

Alle ni partier på Stortinget er enige om en kraftig opptrapping av forsvaret: ytterligere 6,15 milliarder kroner frem til 2036 oven på tidligere forpliktelser. Planen prioriterer droner og autonome systemer (2,95 mrd. kr) og elektronisk krigføring, fremskynder luftvern basert på erfaringer fra Ukraina-krigen, og bestiller seks nye ubåter. Over 5 milliarder kroner går til mer trening og øvelse for å øke operativ beredskap. Det sjeldne tverrpolitiske samholdet er en tydelig melding både til NATO-allierte og til Moskva.

NRK · TU

Oljefondet eier andeler i amerikansk konsentrasjonsleir

Statens pensjonsfond utland har aksjer for 671 millioner kroner i Amentum Holdings, hvis datterselskap driver leiren Camp East Montana i Texas. Et søksmål beskriver inhumane forhold: over 70 mennesker stuet sammen på 363 kvadratmeter, vold, ubetalt arbeid, knapt med dagslys. Kontrakten ble tildelt gjennom et hemmelig militært logistikk-rammeverk som omgår vanlig offentlig kontroll. Amnesty Norge krever ansvar, og påpeker at Etikkrådet har fått redusert myndighet etter regelendringen i november.

Innsatte-tegning av trange forhold i Camp East Montana: 70+ mennesker på 363 kvadratmeter. Foto: Anton Ræder/Substack.

PST advarer: Russland kartlegger norsk energiinfrastruktur

PST melder at russisk etterretning aktivt kartlegger norsk energi- og kraftsektor. Trusselnivået fra statlige aktører er “betydelig”, og inkluderer både påvirkningsoperasjoner og mulig sabotasje dersom spenningen øker. PST trekker særlig frem sårbarheter ved kraftproduksjon, gassanlegg som Kårstø, og overføringsnettet. Energiselskaper bes om å styrke sikkerhetsrutiner, kjøre scenariotrening og forberede beredskapsplaner for infrastrukturangrep.

NRK

Norsk Tipping rammet av andre dataangrep på to dager

Det statlige spillselskapet ble onsdag kveld rammet av et nytt tjenestenektangrep (DDoS), som førte til tregheter bare ett døgn etter et tilsvarende angrep tirsdag. Personopplysninger skal ikke være kompromittert, men spilltjenester inkludert KongKasino ble rammet. Angriperne er ukjente, og det er uklart om de to angrepene henger sammen. Telenor bistår med å filtrere ondsinnet trafikk.

Sårbarhet hos Telia og Ice lot angripere stjele telefonnumre

NRK avslørte at Telia og Ice hadde en svakhet som lot angripere utgi seg for å ringe fra hvilket som helst nummer — inkludert statsråder, banker, politi eller skatteetaten. Hullet utnyttet SIP-protokollen for samtaleoppsett: ved å manipulere “from”-feltet kunne anropet vises med både kontaktnavn og bilde fra mottakerens telefon. Begge teleselskapene har nå tettet hullet. Det er Telias femte offentlig kjente sikkerhetshendelse i år, og Nkom varsler utvidet tilsyn — særlig fordi KI nå gjør sosial manipulering tilgjengelig også for ikke-tekniske kriminelle.

Magre 1,2 % kutt i norske klimagassutslipp i 2025

Norges klimagassutslipp falt bare 1,2 % i fjor — langt fra det tempoet som trengs for å nå Paris-målene. Over halvparten av nedgangen kommer fra delvis driftsstans ved to olje- og gassanlegg, ikke fra systematisk avkarbonisering. Regnestykket illustrerer hvor vanskelig det er å forene en petroleumsavhengig økonomi med klimaforpliktelsene, særlig mens landet samtidig utvider fossil produksjon.

NRK

Også i dag

Samferdsel
Togpunktligheten over 90 % i mai — første gang på flere år, tross aldrende vognpark — TU
Folkehelse
27 drukningsdødsfall hittil i år, mer enn det dobbelte av i fjor — 26 av 27 var menn, alle fem i mai var menn over 60 — NRK
Norden
Frederiksen presenterer ny “kløverregjering” i Danmark etter 70 dagers forhandlinger — lover gratis tannlege til alle — NRK

Norge — gateplan

VY-kaos: passasjerer betaler for seter som ikke finnes

VY får hard kritikk for å selge 69-kroners setereservasjoner på tog som kjører med halv kapasitet. To passasjerer kollapset og måtte ha ambulanse på grunn av ekstrem overfylling. Forbrukerrådet sier at å selge et produkt som ikke finnes, bryter med helt grunnleggende forbrukerrettigheter. Månedskortet har økt med 1 600 kroner, samtidig som tilbudet har blitt dårligere. Enkelte pendlere har sagt opp jobben fordi togforbindelsene ikke lenger fungerer. Regjeringen lover nye regiontog i 2027 — som er bittert lite trøst i juni 2026.

Schibsted krever betalt for personvern — Forbrukerrådet klager

Schibsted (VG, Aftenposten, Bergens Tidende m.fl.) krever nå inntil 49 kroner i måneden for å slippe sporing og overvåkningsbasert markedsføring. Forbrukerrådet har klaget inn praksisen til Datatilsynet og kaller det et brudd på grunnleggende personvernrettigheter. Personvernorganisasjonen NOYB peker på at 99,9 % av brukerne typisk samtykker når alternativet er å betale — det er ikke et reelt valg. Til sammenligning: 96 % av brukerne sa nei til sporing da Apple ga dem et ekte valg.

Forbrukerrådets Mette Fossum med Schibsteds “pay or OK”-grensesnitt. Foto: Forbrukerrådet.

Fastleger får nå betalt for å ikke sykmelde

Stor omlegging av sykmeldingspraksisen: tidligere fikk fastlegen 26 kroner for å skrive ut full sykmelding, nå får hen 50 kroner for å unngå full sykmelding gjennom dialog med pasienten. Den nye takststrukturen belønner gradert eller ingen sykmelding høyere. Helseminister Jan Christian Vestre og Legeforeningens president Anne-Karin Rime ønsker å redusere sykefraværet; NHO støtter endringen.

Granskning av Ski-VM avdekker 44 millioner i underskudd og kaos

Den kommunale granskningen av Ski-VM 2025 i Trondheim avdekker systemsvikt: hemmelige bufferkontoer på mellom 10 og 19 millioner kroner som ledelsen ikke klarte å bli enige om størrelsen på, 400–500 ubetalte fakturaer i én leders innboks, sene og dyre innkjøp, og hotellkontrakter for 397 rom som aldri ble brukt. VM-sjef Åge Skinstad får kritikk for å ha unngått konflikter og uteblitt fra økonomimøter. Underbudsjettering på sikkerhet, transport og bevertning bidro til det massive underskuddet — selv om selve to-ukers arrangementet var sportslig vellykket.

Tech & Development

Elixir 1.20 introduces gradual typing without annotations

Elixir v1.20 ships gradual type inference that works without requiring type annotations. The novel approach centers on a dynamic() type with two key properties: compatibility (only reports violations when types are completely disjoint) and narrowing (refines types as code executes). Built on set-theoretic foundations using unions, intersections and negations, the system passes 12 of 13 categories in type-narrowing benchmarks, and identifies “verified bugs” — typing violations guaranteed to fail at runtime — while keeping false positives low in existing codebases.

Microsoft’s mimalloc delivers 4.7x memory allocation performance

Microsoft Research released mimalloc, a memory allocator built on thread-local heaps and multi-level free lists. The design eliminates synchronization for most operations by giving each thread dedicated pages, with three free lists per 64 KiB page to reduce contention. Benchmarks show 4.7x more data allocated than the standard Windows allocator, with a 1.3x committed-to-live-data ratio versus 4x for competitors. The fast path requires only two branches in x64 assembly — optimized for the common case of small (sub-1 KiB) blocks.

Let’s Encrypt adopts Merkle Tree Certificates for the post-quantum future

Let’s Encrypt is moving to Merkle Tree Certificates (MTCs) to address post-quantum cryptography overhead. Traditional post-quantum signatures like ML-DSA-44 balloon to 2,420 bytes per web handshake; MTCs batch multiple certificates under a single signature, dramatically reducing wire cost while embedding certificate transparency as an issuance property. Timeline: staging late 2026, production 2027, broader ecosystem transition 2030–2035. The org emphasizes that post-quantum key exchange is far more urgent than authentication.

JPEG XL: a decade of open-source experiments

Google documented JPEG XL’s evolution from a chain of public experiments between 2011 and 2019. The building blocks: WebP Lossless (entropy image concept), Butteraugli (psychovisual measurement), Guetzli (20–30% better JPEG compression), and Brunsli (lossless JPEG recompression). The final standard merged Google’s PIK proposal with Cloudinary’s FUIF, combining efficient distribution selection with sophisticated context trees. The variable-block-size DCT enables compression down to 0.06 bits per pixel — a quiet win for slow, public research over private platform iteration.

Anthropic details three-layer AI containment architecture

Three defense layers across model, environment and external content. Image: Anthropic.

Anthropic published its containment approach for Claude across products. The environment layer (process sandboxes, VMs, filesystem boundaries) is the primary defense. The model layer uses system prompts and classifiers — catching about 83% of problematic actions, and acknowledged as probabilistic. External content filtering provides tool-permission granularity. The headline observation: “the weakest layer is the one you built yourself” — battle-tested hypervisors held up, while custom proxies became attack vectors. Isolation strength is matched to user expertise, from ephemeral containers for claude.ai to full VMs for non-technical users.

Pwn’d Blaster: weaponizing a Bluetooth speaker into a USB keyboard

A security researcher demonstrated remote firmware exploitation of Creative’s Sound Blaster Katana V2X via unprotected Bluetooth. The speaker exposes its control protocol over Bluetooth without authentication, and firmware validation relies only on SHA-256 checksums — no cryptographic signatures. By modifying the USB HID descriptor and injecting ARM assembly into unused firmware space, the speaker becomes a covert keyboard that executes commands after boot. An attacker within roughly 15 meters can remotely flash malicious firmware without physical access. Creative dismissed the report as non-critical.

“They’re Made Out of Weights”

A creative parody of Terry Bisson’s They’re Made Out of Meat examines what neural networks fundamentally are. The provocation: LLMs operate entirely through mathematical weights and matrix multiplication — there is no separate component for language, reasoning, or knowledge. “The weights are the reasoning”; language generation is a side effect of the math. The piece argues we deliberately avoid these questions because acknowledging machine sentience would create obligations we don’t want — easier to “call it pattern matching and forget the whole thing.”

burntsushi on anti-NMDA receptor encephalitis

Andrew Gallant — creator of ripgrep — documented his diagnosis and treatment of anti-NMDA receptor encephalitis, a rare autoimmune disorder causing brain inflammation. His symptoms progressed from flu-like illness to severe neurological manifestations including delusions and hallucinations, and were initially misdiagnosed as psychiatric illness. Early intervention with IVIG and methylprednisolone left him with good recovery prospects. The condition is often misread as anxiety or schizophrenia; he’s now enrolled in the CIELO trial testing satralizumab. A useful read for anyone with neurological-presenting “psychiatric” symptoms in the family.

Linux Desktop & Self-Hosting

Sone brings bit-perfect Tidal streaming to Linux — now in nixpkgs

Sone library view: bit-perfect FLAC up to 192 kHz. Image: lullabyX/sone.

SONE is a native Linux client that delivers true bit-perfect Tidal streaming up to 192 kHz, bypassing the browser path that normally downsamples to 48 kHz. Built in Rust and Tauri 2, it adds exclusive ALSA access (bypassing PulseAudio/PipeWire), MQA support, synchronized lyrics, custom themes, Discord Rich Presence, and scrobbling. A meaningful quality jump for Linux audiophiles who previously made do with the browser.

Pi coding agent gets a proper NixOS flake with Home Manager support

The Pi terminal-based AI coding agent now has a comprehensive NixOS flake providing system-wide and per-user declarative configuration. Modules for both NixOS and Home Manager support multiple AI providers (OpenAI, Ollama), extension management, and custom keybindings. Notable: automatic config-directory creation, JSON config management, and protection against accidental edits by failing activation if mutable files diverge from declared settings.

Look: a Spotlight-like app launcher for Linux, NixOS-friendly

A new cross-platform app launcher built with Tauri offering macOS Spotlight–style functionality on Linux. Features fuzzy search, multiple color themes (Catppuccin, Tokyo Night, Rose Pine, Gruvbox, Dracula, Kanagawa) and native Linux integration. The developer wrote it as a personal Spotlight replacement and ported it to Linux after friends expressed interest.

Snappy-Switcher v4.0.0: Hyprland-exclusive window switching, 15 themes

Snappy-Switcher in Catppuccin Mocha. Image: OpalAayan/snappy-switcher.

The Hyprland window switcher gains 15 built-in themes (Catppuccin, Tokyo Night, Nord, Dracula, Gruvbox, and friends), improved configuration validation, and better error handling. It’s a small but pleasant piece of polish for daily Hyprland use.

OneSearch v1.0.0: a self-hosted search layer for your homelab

A privacy-focused search engine for homelabs that indexes local directories, NAS shares and external drives in place without moving files. OneSearch handles documents (PDF, Office), ebooks (EPUB, CBZ), RAW photos, media metadata, subtitles and code files. It supports incremental indexing, per-source cron schedules, full-text search with highlighted matches, and metadata search for images and RAW photos — all through a web UI with no cloud dependencies.

Sandboxes: AI app-building infrastructure without Kubernetes

A new MIT-licensed system for hosting AI-built apps without Kubernetes overhead. A single Go binary plus SQLite state and the host’s Docker socket orchestrates isolated containers — each sandbox gets automatic preview URLs, memory limits and idle-wake — so a single server can host dozens of environments. Built-in agents (OpenCode, Claude Code) let users submit prompts and watch apps build. The economic insight is the wake/sleep pattern: stop containers transparently rather than holding persistent VMs.

GitHub · HN

LUPINE: self-hosted GPU-over-IP

A networking layer lets CPU-only machines access GPUs installed on remote servers through GPU-over-IP. Using client-server architecture, LUPINE exposes GPU resources over HTTP/2 with shim libraries intercepting CUDA calls and routing them via RPC. Use cases: Mac users hitting a Linux GPU server, CPU-only edge devices with central GPU pools, and scalable ML ops with PyTorch.

Endurain: a fully self-hosted Strava

With Strava announcing API restrictions and paid developer tiers, the open-source Endurain project offers a complete self-hosted fitness tracking alternative. Privacy-first, no external dependencies, full activity tracking, route mapping and fitness analytics. The timing is well-chosen: API limitations and data-ownership concerns are pushing more athletes toward self-hosted setups.

ESP32 forces standing breaks via FlexiSpot desk

A hardware mod wires an ESP32 directly to a FlexiSpot standing-desk controller and integrates it with Home Assistant to automatically force a height change after a detected sitting period — overriding break reminders you’d otherwise dismiss. Designed by and for remote workers with ADHD or high stress, for whom soft reminders are basically background noise.

Also today

CLI tools
mojify plays videos as ASCII art in the terminal with sound, and exports to MP4 — Homebrew · Reddit
asryx gives Linux native ASR via whisper.cpp — zero deps beyond standard C++ — GitHub · Reddit
blob, a 60 KB terminal note manager in pure C — keyboard-driven, inline selector, markdown support — GitHub · Reddit
gitmsg generates conventional commit messages from git diff --staged using regex — no AI, fully offline — GitHub · Reddit
Home Assistant & infra
Home Assistant 2026.6 — “Pick a card, any card” — major dashboard card refresh — home-assistant.io · Reddit
M5Stack Dial turned into a circular Home Assistant HMI button — GitHub · Reddit
RingGuard: AI video analysis for Ring doorbells, $10/month in compute vs $200 commercial — GitHub · Reddit
CoreOS + Podman helper for migrating Proxmox VMs to immutable, container-focused hosts — Codeberg · Reddit
Comprehensive guide for running Hyprland on Android phones with postmarketOS — GitHub · Reddit
cd ~/repos/ratatosk && claude --resume 46f997e7-9869-4345-b5fc-0aa5aa321c80