Trump and Iran sign their war away at Versailles — even as Ukrainian drones set Moscow’s refineries alight and Norway’s Supreme Court hands the Førdefjord back to the fish.

Trump and Iran Sign 14-Point MoU at Versailles

US President Donald Trump at the signing ceremony inside the Palace of Versailles. Photo: Al Jazeera

Following the G7 summit in France, Trump and Iranian President Pezeshkian signed a Memorandum of Understanding extending their ceasefire by 60 days. The agreement includes a pledge that Iran will never develop a nuclear weapon, a framework for reopening the Strait of Hormuz, and a reported $300bn redevelopment package — though Trump flatly denied the latter: “We’re not putting up 10 cents.” It was signed ahead of schedule, with Pakistan confirming it in effect.

The text falls meaningfully short of an absolute nuclear prohibition, and Iran’s chief negotiator warned Hormuz will “not return to prewar conditions” — ships will be charged tolls after 60 days. Trump himself hedged, calling the deal “not final” and threatening to “drop bombs” and “go back to shooting” if Iran misbehaves. Three Iranian oil tankers were already passing the US blockade line as the ink dried.

Al Jazeera · BBC: what’s in the deal · BBC: sticking points · Guardian · CBC: Hormuz · Axios · NRK · E24 · r/worldnews

Ukrainian Drones Set Moscow’s Refineries Ablaze as Russia’s Fuel Crisis Bites

Thick black smoke over Moscow’s Kapotnya district after the refinery was struck for the second time this week. Photo: Ukrainska Pravda

Ukrainian drones penetrated Moscow’s air defenses early on June 18 and struck the Kapotnya Oil Refinery for the second time within a week, sparking a major fire and a smog alert across the city. Russia claims it shot down around 180 of the incoming drones — and 555 across the country overnight — but fires burned visibly and debris hit a shopping mall and a residential high-rise. Moscow banned private aircraft and drones over the capital and seven surrounding regions from June 20. Zelensky framed the strike as a message: “It is time the war ended.”

The campaign is biting. Russia is preparing to import gasoline by sea for the first time in years; the IEA reports crude production fell 10% below OPEC targets in May, and a US sanctions waiver covering Russian petroleum at sea expired June 17 without renewal. (Also covered in Ukraine.)

Guardian · Ukrainska Pravda · RBC Ukraine · UNN/Reuters: gasoline imports · Aftenposten: 555 droner · r/worldnews

Historisk Høyesterett-dom: Staten tapte Førdefjord-saken

Naturvernforbundet feirer Høyesteretts historiske dom om Førdefjorden. Foto: NRK

Høyesterett har enstemmig kjent ugyldig statens tillatelse fra 2015 til at Nordic Mining kan deponere 26,5 millioner tonn gruvemasse i Førdefjorden — slutten på en 18 år lang kamp. Retten slo fast at tillatelsen brøt norsk vannforskrift og EUs vanndirektiv, særlig prinsippet om ikke-forringelse, og at verken skatteinntekter, arbeidsplasser eller kritiske mineraler er nok til å sette miljøkrav til side.

Dommen setter en tydelig presedens som kan få konsekvenser for lignende prosjekter, særlig den planlagte Repparfjorden-driften i Finnmark. Dumpingen stanser likevel ikke umiddelbart — staten må behandle saken på nytt under den strengere standarden.

NRK Vestland · E24 · Dagsavisen · r/norge

Indicator	Value	Change
S&P 500 (f)	7,562.5	+0.93%
Dow 30 (f)	52,259	+0.61%
Nasdaq (f)	30,450.75	+1.51%
Russell 2000 (f)	2,979.7	+1.25%
VIX	17.13	−7.1%
Gold	4,309.5	−1.64%
BTC	$64,484	−0.58%
EUR/USD	1.1507	+0.01%
USD/NOK	9.6026	−0.12%

US futures broadly up, VIX −7.1% — war premium draining out of markets as the Trump–Iran MoU was signed (see World).
Gold −1.64% and BTC softer — a safe-haven unwind consistent with the ceasefire extension and the Strait of Hormuz reopening framework.

World

Republican Revolt Over Iran Deal; Netanyahu Sidelined

Senator Bill Cassidy (R-LA) called the MoU “the worst foreign policy blunder in decades,” saying “Reagan is rolling over in his grave,” and other Republicans voiced deep skepticism. In Israel the reaction was volcanic: Netanyahu was excluded from the negotiations entirely and now faces mounting domestic fury from Israelis cut out of a deal that directly shapes their security. Critics — including Trump’s former UN ambassador — note the agreement is far from the “total surrender” Trump and Netanyahu originally demanded.

Guardian: Republican revolt · Al Jazeera: backlash · PBS: Israelis lash out · Dagsavisen · r/worldnews

Trump at G7: “I’m the Boss,” Warms to Ukraine, Questions USMCA

Trump dominated the G7 with a string of declarations: called himself “the boss” while signalling unexpected support for Ukraine’s war aims; said the US would do better without the USMCA trade deal with Canada and Mexico; announced an India visit as his frosty relationship with Modi thaws; and thanked China’s Xi and Russia’s Putin for being “neutral” during the Iran war. Macron walked him through the Hall of Mirrors at Versailles — a diplomatic charm offensive. A New Yorker investigation meanwhile finds Trump’s Greenland acquisition campaign was never dropped and has badly damaged trust with European allies.

Reuters: “I’m the boss” · Reuters: USMCA · Reuters: thanks Xi and Putin · BBC: India visit · NPR: Greenland · NRK

Israel Strikes Lebanon Despite Trump; Settlers Burn West Bank Mosques

Israel launched fresh airstrikes on Lebanon even as Trump publicly urged a “softer touch” and G7 leaders demanded a ceasefire. On the West Bank, settlers set fire to two mosques overnight. A BBC investigation finds Israeli nationalists increasingly and openly flouting the convention governing shared access to the al-Aqsa compound — raising fears of a broader breakdown of the status quo at Jerusalem’s holiest site. Separately, Palestinian health authorities report Israeli operations have killed more than 1,005 people in Gaza since October’s declared ceasefire.

BBC: Lebanon strikes · Times of Israel: mosque arson · BBC: al-Aqsa status quo · NPR: Gaza toll · r/worldnews

Russia’s Hybrid War on the UK — and Finland’s Cable-Sabotage Charges

Three Russia-linked incidents are straining UK–Russia tensions at once. PM Starmer cited the trial of two Russia-linked arsonists who targeted property connected to him as evidence “bad actors” are seeking to “destabilise democracy.” Officials expect retaliation after the Royal Marines seized shadow-fleet tanker Smyrtos. And a retired British couple reported a Russian warship fired warning shots near them in the English Channel.

In Finland, prosecutors charged the captain and a crew member of a Russia-linked vessel suspected of deliberately cutting undersea cables — alleging the ship had eight further targets before the coast guard intercepted it. Together the cases mark a step toward legal accountability for hybrid-war tactics that have plagued the Baltic and North Sea.

Guardian: arson · Guardian: shadow fleet · BBC: warship · Tom’s Hardware: cable charges · r/worldnews

Nordic Deterrence Hardens: Finland Lifts Nuclear Ban, Japan’s Minister Warns

Finland has removed its longstanding legal prohibition on hosting nuclear weapons, a consequential shift in Nordic security posture driven by the Russian threat and aligning it with NATO nuclear-sharing. Far away but on the same theme, Japan’s defense minister Shinjiro Koizumi told the BBC that rearming is “critical” to prevent war, framing the buildup — from 1% to 2% of GDP — as deterrence rather than aggression amid alarm over China and North Korea.

Politico Europe: Finland · BBC: Japan · r/worldnews

Epstein Network Stays in the Spotlight

Three Epstein threads surfaced in the same cycle. Democratic Rep. Jamie Raskin wrote to Harvard and Bard College seeking a “comprehensive accounting” of their ties to Epstein, alleging the institutions lent him legitimacy he leveraged for access. Congressional staff visited Ghislaine Maxwell’s Texas prison amid claims of preferential treatment. And newly unsealed FBI filings revealed that a group plotting a sniper-and-drone attack on a White House UFC event had cited grievances about the Epstein files — a sign the unresolved accountability keeps generating real-world anger.

Guardian: Harvard and Bard · Guardian: Maxwell visit · BBC: White House plot

Also today

Africa: Ebola worsens in DR Congo as armed men storm a hospital and snatch a six-year-old patient; large funerals banned as a transmission vector — BBC: hospital · BBC: safe grieving; Zimbabwe’s lithium boom draws foreign capital, but local communities see uneven gains — Al Jazeera
Europe: How the Sweden Democrats went from political pariah to indispensable powerbroker — Al Jazeera; European politicians press Albania to halt a coastal development linked to Jared Kushner and Ivanka Trump — National Desk
Asia: Pakistan abolishes its 18% “period tax” on sanitary products after a youth court campaign — Guardian; Taliban bans smartphones for officials — analysts fear a nationwide ban — Guardian; Huawei CFO Meng Wanzhou’s 2021 admissions ruled usable at her US criminal trial — Al Jazeera
Science & society: Cannabis commercialisation — not decriminalisation — drives up use and psychosis, large review finds — Guardian; A simpler, older Stonehenge precursor found three miles from the famous site — BBC; Titan submersible report blames design flaws and OceanGate “groupthink” for the 2023 catastrophe — Guardian

Ukraine

Operation ArtAuchan: 250 Russian Artillery Systems Destroyed in Two Nights

Ukraine’s 93rd Brigade drone unit testing fiber-optic drones, Donetsk Oblast. Photo: United24 Media

Defense Minister Fedorov revealed “Operation ArtAuchan” — a two-night precision campaign using a specially developed shell that ruptures artillery barrels from within, destroying 250 Russian pieces with video confirmation for each. The design prevents repair and return to service, unlike conventional damage. It applies the same concentrated-tempo approach as the earlier “Auchan” armored-vehicle campaign, which Fedorov credited with halting large-scale Russian armored assaults for six months.

United24 Media · r/UkrainianConflict

Russia’s Air-Defense Interceptors Are Depleting Faster Than It Can Replace Them

Ukrainian intelligence officials told CBS News that Russia is burning through S-300/S-400 interceptors at an “unsustainable rate” — partly because it has repurposed S-300s as offensive surface-to-surface weapons — while sanctions block the guidance components needed for replacements. Analysts note Ukraine can now produce deep-strike drones faster than Russia can produce interceptors, a structural asymmetry compounding the impact of the Moscow-range campaign (see front page).

CBS News · r/ukraine

Casualties Hit 1.4 Million; Belarus Drawn Deeper In

NATO has put Russia’s total killed and wounded at up to 1.4 million since the invasion began, as the Netherlands announced a fresh €500m military aid package. Meanwhile, Russian spy drones crossing into Ukraine from Belarusian airspace have risen sharply since the start of 2026, prompting Kyiv to reinforce its northern defenses. Russia is blaming Ukraine for a drone strike that hit a bus carrying Belarusian children inside Russia — an incident with significant escalation potential given Minsk’s ambiguous status.

United24: NATO toll · NL Times: Dutch aid · Guardian: northern defences · Euronews: bus strike

G7 Weapons Licensing Inches Forward — but Trump Thanks Putin

Post-G7, Trump confirmed he will “consider” licensing US weapons production in Europe and Ukraine, including Patriot interceptors, and Germany pledged another $400m for air defense under PURL. But at his press conference Trump publicly thanked Putin for Iran “neutrality,” spent under two minutes on Ukraine, and the anticipated Zelenskyy bilateral never occurred — muddying the summit’s framing of a changed US tone. Zelenskyy has moved on to Brussels and the Ramstein contact group, keeping pressure on allies for firmer commitments.

Kyiv Independent: thanks Putin · Ukrainska Pravda: licensed production · Ukrainska Pravda: Germany $400m · r/ukraine

Norway

Kronprinsesse Mette-Marit lungetransplantert ved Rikshospitalet

Kronprinsesse Mette-Marit har gjennomgått en vellykket lungetransplantasjon ved Rikshospitalet — bare 12 dager etter at hun ble satt på venteliste, oppsiktsvekkende raskt fordi hun ble klassifisert som mest kritisk og en passende donor ble tilgjengelig. Thoraxkirurgisjef Arnt Fiane omtaler operasjonen som «svært vellykket så langt». Hun blir liggende på sykehus i flere uker for medisinjustering og rehabilitering, og kronprins Haakon legger om timeplanen for å være ved hennes side. Overlevelsesstatistikken: 85–90 % etter ett år, 70 % etter fem, 50 % etter ti.

NRK: hva skjer nå · NRK: transplantert · Dagsavisen · BBC · r/norge

Marius Borg Høiby dømt til fire års fengsel for voldtekt

Marius Borg Høiby — kronprinsesse Mette-Marits sønn, men ikke selv kongelig — ble funnet skyldig i voldtekt og dømt til fire års fengsel, samt 640 000 kroner i erstatning. Statsadvokaten beskrev ham som «sint, sjalu; med forakt for loven, samfunnsnormer og kvinner». På r/Norway diskuteres det om erstatningen til slutt dekkes gjennom apanasjen, og om dommen — standard for lovbruddet i Norge — gjenspeiler lik rett uavhengig av privilegium.

BBC · r/Norway: verdict · r/Norway: prosecutor

Datatilsynet åpner tilsyn med Schibsteds «betal eller spores»-mur

Datatilsynet har mottatt over 30 klager og 100 henvendelser, og åpner nå formell undersøkelse av Schibsteds modell der brukere enten må betale ~39 kr/måned eller akseptere atferdsbasert annonsering. Kjernespørsmålet: kan samtykke være fritt gitt hvis det koster penger å nekte? Forbrukervernere mener personvern er en grunnrettighet, ikke et premiumnivå. Schibsted avviser anklagene og sier selskapet «ikke selger personvern». På r/norge sirkulerer en mal for innsigelse etter norsk personvernlov.

Kode24 · Digi.no · r/norge: tilsyn · r/norge: mal

Løsepengeangrep rammer Novo Nordisk og NTL

To alvorlige dataangrep traff norske og nordiske mål i samme uke. Det danske legemiddelselskapet Novo Nordisk er utsatt for et dataangrep der en hackergruppe — beskrevet som «den verst tenkelige» — krever 25 millioner dollar i løsepenger. Og Norsk Tjenestemannslag (NTL) ble tirsdag rammet av løsepengevirus mot de sentrale IT-systemene; angriperne kan ha fått tilgang til sensitive personopplysninger om over 59 000 medlemmer, inkludert personnummer og bankkontonummer. NSM, Kripos og Datatilsynet undersøker.

Digi.no: Novo Nordisk · NRK: NTL

Nscale planlegger gigawatt-datasenter i Hemnes

Det Røkke-dominerte selskapet Nscale vil bygge et datasenter med kapasitet opp mot én gigawatt i Hemnes i Nordland — ett av Europas aller største. Utfordringen er at strømkøen i regionen allerede er full, og prosjektet forutsetter at andre aktører faller fra. Digi.no kaller det en avsløring av «det norske kraftparadokset».

Digi.no: datasenter · Digi.no: kraftparadokset

SpaceX kjøper Cursor-selskapet Anysphere for 570 milliarder kroner

SpaceX har inngått avtale om å kjøpe Anysphere — selskapet bak AI-kodeeditoren Cursor — for 60 milliarder dollar (ca. 570 mrd. kr). Anysphere ble grunnlagt i 2022 og har raskt blitt en ledende AI-kodingtjeneste. Kjøpet ble annonsert to dager etter SpaceX’ børsnotering og ventes å lukkes i Q3 2026. SpaceX eier allerede xAI, som driver AI-tjenesten på X-plattformen.

Digi.no · E24

MDG-leder Arild Hermstad har akutt leukemi

MDG-leder Arild Hermstad (59) er diagnostisert med akutt myelogen leukemi og er allerede under behandling, etter at ukers uvanlig tretthet fikk ham til å søke lege. Nestleder Ingrid Liland trer inn som fungerende leder. Hermstad ber om ro og sier han føler seg i «veldig trygge hender». Diagnosen kommer i en sårbar tid for partiet foran valgsyklusen.

NRK · Dagsavisen · r/norge

Finnmarksbrigaden får 40 år gamle stridsvogner

Norges nyeste brigade, stasjonert på grensa til Russland, skal etter hærens plan utstyres med over 40 år gamle Leopard 2A4 som ellers fases ut i NATO — samtidig som Norge bruker ~20 mrd. kr på 54 splitter nye Leopard 2A8 til andre avdelinger. Hærsjefen erkjenner at det ikke finnes midler til nye stridsvogner i Finnmark «for tiden», tross den historiske 10-årsplanen på 1 854 mrd. kr. På r/norge påpekes motsetningen: rekordhøye forsvarsinvesteringer, men den mest utsatte grensa får det eldste materiellet.

NRK · TU.no · r/norge

Norway — Street Level

Norge slår Irak 4-1 i VM-åpningen — og inntar Gillette Stadium

Norge vant sin første VM-kamp på over et kvart århundre da de slo Irak 4-1 i USA; Erling Braut Haaland scoret to mål, og den seismiske stasjonen i Bergen registrerte tydelige utslag fra jubelen. Norske supportere overtok stadion med en koordinert vikingroing-rop — årer, trommer og synkroniserte bevegelser som skal ha overdøvet Irak-fansen på den «nøytrale» arenaen. Tilbake i Oslo strandet 02-kampens slutt fansen: Ruter hadde verken buss, T-bane eller trikk før 04:55, så valget sto mellom å sove ute eller betale 600+ kr for prisøkte Bolt-turer. Landslaget får samtidig kritikk for svakt forsvarsspill; neste kamp er mot Senegal 26. juni.

NRK: Bergen rister · NRK: forsvarskritikk · r/Norway: fan takeover · r/oslo: Ruter · The Athletic

«Ida ble tatt kvelertak på — men måtte stå ut vakta»

Fontene har gransket den private barnevernsinstitusjonen Stendi Midt, der ansatte Ida Rise ble tatt kvelertak på av en beboer og ringte lederen sin i tårer for å få dra. Svaret: «Klarer du ikke dette, finn deg en annen jobb.» Hun ble natten ut og kjørte samme ungdom til skolen morgenen etter. Granskningen, støttet av tips fra 15 tidligere ansatte, dokumenterer systemsvikt: ingen traumeoppfølging, forfalskede journaler før tilsyn, og sju samtidige oppsigelser i 2021 under samme ledelse.

Fontene / Frifagbevegelse · r/norge

Også i dag

Politikk: USA blokkerer Anthropics toppmodeller for ikke-amerikanere; Frankrike sammenlikner «KI-tollmuren» med Irans kontroll over Hormuz, og Europa debatterer AI-suverenitet — Aftenposten · Digi.no; Regjeringen vil utrede ti års flyttenekt for flyktninger fra første bosettingskommune — NRK · Aftenposten; Storbritannia innfører verdens strengeste 16-årsgrense på sosiale medier; Sverige anbefaler 13-årsgrense for smarttelefon — NRK · Digi.no; Rapport: én av fire elever på videregående er «demokratisk frakoblet» — NRK
Økonomi: Norges Bank holder renten uendret på 4,25 %; svakere krone gjør inflasjonskampen vanskeligere — E24 · NRK; Norwegian kjøper Ving for 8 mrd. kr og blir reiselivsgigant; Stordalen storaksjonær — E24; HUK-oppgjøret i havn — reallønnsøkning for titusener i helse, utdanning og kultur — NRK
Energi: Havvind-vinner Ventyr ber om ett års utsettelse av Sørlige Nordsjø II — kan true 1 500 MW innen 2030 — NRK · TU.no
Helse & samfunn: Sivilombudet: pasienter ulovlig beltelagt i opptil 38 timer ved Nordlandssykehuset — NRK; UiOs humanistiske fakultet kutter 114 årsverk over tre år — Khrono
Kultur: Joachim Triers «Affeksjonsverdi» leder Amanda-nominasjonene med 12 — kan sette rekord — NRK; Alan Walker, Aurora og Kygo forlater Tono og flytter rettighetene utenlands i strid om fordelingsnøkkel — NRK; OverOslo åpnet med strømbrudd; Susanne Sundfør overrasket i western-modus — Dagsavisen; Nike bekrefter drakt-tabbe: raglan-sømmer lager «horn» på skuldrene — NRK
Vær: Meteorologisk institutt: varmere enn normalt i hele landet hele sommeren — «det skal bades» — NRK

Tech & AI

Local-First AI Comes for the Smart Home

A cluster of releases pushes voice and LLM control fully on-device. Domia runs a complete speech-to-speech pipeline locally (wake word → STT → Ollama → TTS) and integrates with Home Assistant over MCP, operating as a P2P mesh where persona, emotion, and memory travel with delegated inference. Selora AI ships an open-source Qwen-based model fine-tuned specifically for Home Assistant device control, with no cloud dependency. The framing fits a wider argument doing the rounds — that local LLMs are a different tool, not a worse cloud model: privacy, latency, offline availability, and fine-tuning, not frontier-quality approximation. And Dirge, a ~30MB Rust harness, makes cheap models like DeepSeek and Qwen production-capable by wrapping them in a steering/repair, long-horizon, and learning state machine — arguing harness quality matters more than model quality.

Domia · Selora · alexellis.io: local AI · Dirge: yogthos.net · HN: local AI · Lobsters: Dirge

Epic Games Open-Sources Lore, a VCS Built for Code + Large Binary Assets

The Lore Library, Server & CLI interface. Image: Epic Games

Epic has released Lore, an MIT-licensed version control system designed for the mixed code/binary reality of game and creative development at scale. Unlike Git, Lore uses a centralized, content-addressed architecture with Merkle trees and immutable revision chains. Key features: on-demand file hydration (download only what you need), chunked binary storage to cut duplication, and cryptographic integrity verification. SDKs ship for C/C++, C#, Rust, Go, Python, and JavaScript, with an open-ecosystem approach stated as an explicit goal.

Lore · Lobsters

SQLite’s Hipp: Pull Requests Are Not Free Puppies

In a lightly edited conference-talk excerpt, SQLite creator Richard Hipp argues that accepting a pull request transfers long-term maintenance burden to the project permanently — every merged PR must be documented, tested, supported, and kept compatible forever. The “it’s just a PR” framing masks the true cost, which falls on maintainers indefinitely. A sharp corrective from someone who has maintained a high-reliability codebase for decades.

YouTube (talk excerpt) · Lobsters

Two Ways Vendors Are Squeezing Users: Tesco Flees VMware, VW Blocks GrapheneOS

Tesco is moving 40,000 VM workloads off VMware over 18 months, citing Broadcom’s “abusive conduct” since the acquisition — forcing perpetual licenses to subscription, cutting support ~70%, and raising prices 500%+ for some customers. It’s the most visible example yet of the enterprise exodus (toward Proxmox, OpenShift Virtualization, Nutanix). On the consumer side, Volkswagen’s app now refuses to run on GrapheneOS by enforcing Play Integrity — breaking remote unlock, charging automation, and Home Assistant integration — with users reportedly canceling vehicle purchases. Critics note GrapheneOS is more secure than stock Android, making this compliance theater.

Ars Technica: Tesco · HN: Tesco · GrapheneOS forum · HN: VW

How Madrid Tripled Its Metro Cheaply: Governance Beats Engineering

Madrid’s metro after the 1995–2007 expansion. Image: Works in Progress

A Works in Progress analysis of Madrid’s 1995–2007 expansion — which tripled the network at below-average cost per km — finds the decisive factors were structural, not technical: regional political authority concentrated accountability and incentivized speed; continuous 24/7 construction compressed timelines; stations deliberately skipped architectural grandeur; and in-house expertise accumulated across consecutive projects. A model case for how governance structure shapes infrastructure cost more than any individual engineering choice.

Works in Progress · Hacker News

Also today

x86 Ecosystem Advisory Group publishes the AI Compute Extensions (ACE) spec — hardware matrix-multiply primitives integrated with AVX registers — x86ecosystem.org · HN
Reproducible WASM builds are surprisingly hard: __DATE__/__TIME__ timestamps, silently-invoked wasm-opt, and address-space-sensitive exception codegen — xeiaso.net · HN
FMAG: a one-instruction (OISC) GPU VM whose guarded fused-multiply-add eliminates warp divergence entirely — GitHub · Lobsters
SteamOS 3.8 goes stable: Wayland session, KDE 6.4.3, fresher Arch base, improved RAUC A/B updates — Steam · HN
Bcachefs 1.38.6 lands significant performance improvements — Phoronix · Lobsters

Linux & Infrastructure

Determinate Systems Introduces Nixpkgs Cooldowns: a 7-Day Supply-Chain Buffer

Determinate Systems is now applying a deliberate 7-day delay before adopting new nixpkgs releases, giving a detection window for supply-chain attacks — the reasoning being that malicious packages are typically caught within hours or days, not weeks. It’s enabled by default for Determinate Nix users; others can opt in by pointing flake inputs at nixpkgs-weekly or nixpkgs-26.05-chilled on FlakeHub. The announcement explicitly calls out the risk that nixpkgs maintainers can merge their own changes without peer review.

Determinate Systems blog · NixOS Discourse · r/NixOS

A Wave of Hyprland Rices and Terminal Tooling

RustNet’s per-process network view with automatic protocol identification. Image: domcyrus/rustnet

The terminal-and-tiling crowd had a busy week. RustNet 1.4.0 maps every TCP/UDP/QUIC connection to its owning process via eBPF/PKTAP, auto-identifies protocols (HTTP, SNI, DNS, SSH, QUIC, MQTT), and uses Landlock for sandboxing. ratatui-hypertile v0.4.0 brings Hyprland-style BSP tiling to ratatui apps (now with mouse support), and tui-worktree browses and diffs Git worktrees with gh/glab PR creation. On the desktop, HyprVim v2.0 ports full Vim modal control of the Hyprland desktop to its Lua plugin layer, while PersonaShell v2, Gruv-Lidia (Gruvbox), and a hand-written vermilion morphing pill bar show off Quickshell. Further afield, hyprgrass brought touch gestures to Hyprland on a OnePlus 6T running postmarketOS.

RustNet · ratatui-hypertile · tui-worktree · HyprVim · PersonaShell · Gruv-Lidia · vermilion bar · hyprgrass

A Crop of New Nix Tooling

Beyond cooldowns, the Nix ecosystem shipped several useful tools. nixx eliminates the ''${VAR} escaping tax by reading inline shell/Python/TS/JS bodies from source files, and bundles shellint static checks and a just-style task runner. configdiff (under 500 lines) compares NixOS, nix-darwin, and home-manager configs at the module level — nix run github:kwbauson/configdiff. Nidx indexes nixpkgs locally for instant queries and doubles as an LSP server for .nix files. And FlakeBOM generates CycloneDX SBOMs from flakes, detecting vendored deps inside fetchNpmDeps/fetchCargoVendor that are otherwise invisible.

nixx · configdiff · Nidx · FlakeBOM

A self-hosted IP-KVM project is exploring pre-OS/BIOS accessibility, rendering the BIOS interface as terminal output for screen readers. It was sparked by a blind software developer who pointed out that BIOS accessibility has been effectively absent since hardware like the PC Weasel became obsolete — screen readers don’t work at Layer 0. An unusual application of KVM-over-IP with real accessibility value.

r/selfhosted

Also today

Caddy: use tls_trust_pool (+ tls_server_name) instead of tls_insecure_skip_verify to keep real TLS verification for self-signed upstreams like UniFi OS — adamhl.dev · r/selfhosted
Running a public Redlib instance behind Cloudflare Tunnel + Traefik + Anubis — notes on anti-bot, HLS proxy caching, and status pages — r/selfhosted
OOTT: a Rust-based homelab network scanner and new-device notification service — r/selfhosted
httpinspect: a top-style TUI for live HTTP traffic via TC syscalls (needs TLS termination upstream) — GitHub
clin-rs v0.8.8: terminal-native knowledge management (.md/.canvas/.draw), a FOSS Obsidian alternative — GitHub
xan: terminal-native CSV processing with built-in true-color charts, scatter plots, and sparklines — GitHub · Lobsters
NixCon 2026 call for proposals closes in ~two weeks — Discourse

cd ~/repos/ratatosk && claude --resume 4f9143e6-7986-4e7b-ae42-a56bd7e01962

Josse-posten

Trump and Iran Sign 14-Point MoU at Versailles

Ukrainian Drones Set Moscow’s Refineries Ablaze as Russia’s Fuel Crisis Bites

Historisk Høyesterett-dom: Staten tapte Førdefjord-saken

World

Republican Revolt Over Iran Deal; Netanyahu Sidelined

Trump at G7: “I’m the Boss,” Warms to Ukraine, Questions USMCA

Israel Strikes Lebanon Despite Trump; Settlers Burn West Bank Mosques

Russia’s Hybrid War on the UK — and Finland’s Cable-Sabotage Charges

Nordic Deterrence Hardens: Finland Lifts Nuclear Ban, Japan’s Minister Warns

Epstein Network Stays in the Spotlight

Ukraine

Operation ArtAuchan: 250 Russian Artillery Systems Destroyed in Two Nights

Russia’s Air-Defense Interceptors Are Depleting Faster Than It Can Replace Them

Casualties Hit 1.4 Million; Belarus Drawn Deeper In

G7 Weapons Licensing Inches Forward — but Trump Thanks Putin

Norway

Kronprinsesse Mette-Marit lungetransplantert ved Rikshospitalet

Marius Borg Høiby dømt til fire års fengsel for voldtekt

Datatilsynet åpner tilsyn med Schibsteds «betal eller spores»-mur

Løsepengeangrep rammer Novo Nordisk og NTL

Nscale planlegger gigawatt-datasenter i Hemnes

SpaceX kjøper Cursor-selskapet Anysphere for 570 milliarder kroner

MDG-leder Arild Hermstad har akutt leukemi

Finnmarksbrigaden får 40 år gamle stridsvogner

Norway — Street Level

Norge slår Irak 4-1 i VM-åpningen — og inntar Gillette Stadium

«Ida ble tatt kvelertak på — men måtte stå ut vakta»

Tech & AI

Local-First AI Comes for the Smart Home

Epic Games Open-Sources Lore, a VCS Built for Code + Large Binary Assets

SQLite’s Hipp: Pull Requests Are Not Free Puppies

Two Ways Vendors Are Squeezing Users: Tesco Flees VMware, VW Blocks GrapheneOS

How Madrid Tripled Its Metro Cheaply: Governance Beats Engineering

Linux & Infrastructure

Determinate Systems Introduces Nixpkgs Cooldowns: a 7-Day Supply-Chain Buffer

A Wave of Hyprland Rices and Terminal Tooling

A Crop of New Nix Tooling

Custom IP-KVM Makes the BIOS Accessible to Blind Users