Josse-posten

Putin admits, for the first time in public, that Ukraine’s drones are starving Russia of fuel — while America’s Supreme Court remakes the regulatory state in a single day and Venezuela’s dead pass 1,700.

Venezuela earthquake toll passes 1,700 as rescue enters fifth day

A rescue worker carries a young girl pulled from the rubble in La Guaira state. Photo: AP / Al Jazeera

Twin earthquakes of magnitude 7.2 and 7.5 devastated La Guaira state and parts of Caracas last week; the confirmed death toll has now passed 1,700, with the UN ordering 10,000 body bags and over 70,000 still unaccounted for. A 4.6 aftershock terrified survivors still camped in the streets. International teams from France, El Salvador and others work with dogs, drones and acoustic detectors — a man was pulled alive after 106 hours, and a mother and her 18-day-old newborn recovered from rubble. The Maduro-allied government faces mounting accusations of negligence. In a grim political twist, more than 100 people deported from the US on an ICE flight hours earlier were being held in a La Guaira hotel that collapsed.

Ukraine strikes Moscow as Putin admits the fuel crisis is real

Smoke over Moscow after the overnight drone attack, 30 June 2026. Photo: Ukrainska Pravda

Ukraine launched a major drone strike on Moscow overnight June 29–30 — authorities claimed 50+ intercepted, two airports briefly suspended operations, residents reported widespread explosions. Ukrainian drones have now knocked out eight of Russia’s ten largest oil refineries, and the cascade is accelerating: trucking firms warned of 10%+ tariff hikes from July 1, and cargo costs on the M-14 Crimea highway have surged 3–6×. In an unusual public acknowledgment, Putin conceded that Ukrainian attacks on fuel infrastructure are “obviously creating problems,” while insisting the situation is not critical — even as new fuel-sale restrictions hit the Moscow region. (More in Ukraine.)

US and Iran “stand down” after exchange of strikes; Doha talks in dispute

A weekend of escalating hostilities — Iranian strikes on Bahrain and Kuwait, and US counter-strikes near the Strait of Hormuz — ended with Washington announcing a mutual “stand down.” Trump then claimed Iran had agreed to peace talks in Doha, but Tehran flatly denied it, with officials stating there are “no negotiations at any level.” The Strait, which carries roughly 20% of global oil, remains the central flashpoint, with Iran and Oman competing over authority for its reopening. US envoys are nonetheless heading to Qatar for what Trump called a “perhaps important” meeting.

Supreme Court takes a sledgehammer to US regulatory independence

On its final major decision day, the Supreme Court struck down longstanding limits protecting independent federal agencies, giving the president broad power to fire agency heads at will — a ruling NPR said took “a sledgehammer” to a structure Congress built over decades, affecting everything from the SEC to the FTC. Yet on the same day it blocked Trump’s attempt to remove Federal Reserve Governor Lisa Cook, carving monetary policy out of the new rule. In two further 6-3 rulings, the court held that geofence warrants violate the Fourth Amendment (extending Carpenter), and handed the administration authority to strip Temporary Protected Status from hundreds of thousands of migrants. (More in World.)

Indicator Value Change
S&P 500 (f) 7,508.75 +0.11%
Dow 30 (f) 52,614 +0.08%
Nasdaq (f) 30,126.5 +0.25%
Russell 2000 (f) 3,034 +0.11%
VIX 17.49 −0.91%
Gold 4,043.2 +0.11%
BTC $59,430 −0.84%
EUR/USD 1.1406 −0.12%
USD/NOK 9.942 +0.14%
  • VIX −0.91%, futures mildly positive — the Supreme Court blocked Trump’s Fed firing attempt, preserving central bank independence and easing the day’s chief macro uncertainty (see World).
  • BTC −0.84% — modest crypto retreat amid geopolitical noise: US–Iran strikes, the Venezuela disaster, and a lapsed USMCA deadline.

World

Supreme Court blocks Trump from firing Fed’s Lisa Cook even as it expands firing power

The split outcome on the court’s final decision day reflected a deliberate effort to carve monetary policy out of the new at-will removal rule it had just created for most regulators. The Cook case was sent back to lower courts rather than resolved definitively, upholding Fed independence for now. The geofence ruling — Justice Kagan writing for a 6-3 majority — establishes that compelling tech companies to hand over location data on everyone near a crime scene is an unreasonable search, a major precedent against mass location surveillance.

Parcel bomb injures Ukrainian oligarch and family in Monaco

A deliberate explosion at a Monaco residential building seriously injured three Ukrainian nationals, including an oligarch and family members. CCTV showed a man dropping a backpack in the lobby before detonating a shrapnel device packed with bolts and pellets, then fleeing across the border into France. Monaco and French authorities launched a joint manhunt. The targeting of Ukrainian nationals raises immediate questions about Russian intelligence operations in Western Europe.

BBC · Guardian · NPR · NRK

Six killed in shooting at youth welfare facility in Stade, Germany

Police and ambulances at the scene in Stade, north of Hamburg. Photo: NRK

A gunman shot dead six staff members — four women and two men — at a mother-and-child welfare facility in Stade, west of Hamburg. Police said the male suspect was involved in a custody dispute over his baby daughter and was arrested at the scene alongside a second person. The attack on a facility serving vulnerable families has shaken Germany.

BBC · Guardian · NRK

Pakistan airstrikes kill dozens of civilians in Afghanistan

Pakistani airstrikes across three eastern Afghan provinces killed at least 36 civilians and wounded 163, according to Afghan officials. Pakistan said the strikes targeted a militant group near its border; the Taliban government condemned them as “a cowardly act of aggression,” and the UN added its condemnation. Cross-border tensions have been escalating for months.

European heatwave spreads east; red warnings across the Balkans

The “heat dome” that broke records in western Europe has shifted east, with red warnings in Hungary, Poland, Romania and the Balkans and authorities urging people to stay indoors. France saw 68,000 homes lose power. Ukraine is bracing for added strain on an electricity grid already battered by Russian strikes.

Guo Wengui sentenced to 30 years for massive fraud

Exiled Chinese billionaire Guo Wengui (Miles Guo) was sentenced to 30 years in US federal prison on nine counts including racketeering and money laundering. Guo had cultivated a large following — including among Western anti-China communities — by branding himself a CCP critic, but prosecutors showed he defrauded more than 1,000 investors out of hundreds of millions, funding a lavish lifestyle rather than the promised ventures.

Also today

Americas
Keiko Fujimori, daughter of the late authoritarian president, wins Peru’s runoff — extending Latin America’s rightward swing despite past corruption convictions — Guardian · Al Jazeera
Africa
South Africa deploys army and police as thousands of migrants flee an unofficial June 30 anti-immigrant deadline Ramaphosa says has no legal standing — BBC · Al Jazeera
DR Congo bans mass gatherings in Kinshasa amid an Ebola outbreak; opposition says the measure targets a planned protest — BBC
Europe
Poland’s spy chief warns the country must operate as if war with Russia is imminent — TVP World
Turkey’s potential return to the F-35 program puts Israel and Greece on alert — Euractiv
Turkish police detain at least 50 at Istanbul Pride as the years-long ban continues — PinkNews
Trade
EU and China open three months of talks over a €360bn deficit — their first joint statement in seven years — while the EU scraps duty-free treatment for cheap parcels, hitting Temu and Shein with a new €3 charge — Guardian: talks · Guardian: parcels
The July 1 USMCA review deadline passes with no agreement between the US, Canada and Mexico — BBC

Ukraine

Putin rejects two ceasefire proposals while fabricating battlefield advances

Putin publicly rejected both of Ukraine’s proposals — a mutual halt on long-range strikes, and a ceasefire outside the four claimed oblasts — dismissing them as bids for “salvation” and reiterating maximalist goals of full Donbas and “Novorossiya.” In a staged interview he made sweeping advance claims that ISW systematically rebuts: 96% of Kostyantynivka (actual 37%), forces 8–9 km from Slovyansk (actual 19 km), and a near-encirclement at Borova for which ISW finds no evidence. He also acknowledged the Alaska Summit produced no written agreements, while pushing to resume talks on pre-summit terms — ignoring Ukraine’s gains since August 2025.

Russian advance rate collapses 77% as Ukraine counterattacks on three fronts

No confirmed Russian advances on June 28–29 across any sector — Ukrainian forces repelled 227 attacks in a single day. Counterattacks have resumed in the Lyman and Oleksandrivka directions and western Zaporizhzhia. The scale of the stall is now quantified: Russia averaged 16.65 km²/day during the August 2025 Alaska Summit, versus 3.79 km²/day in June 2026 — a 77% collapse, driven by Ukraine’s liberations (Kupyansk in late 2025, 400+ km² in the south in 2026) and its long-range strike campaign.

Russia launches 154-drone overnight attack; Dnipro toll rises to 7

A downed Shahed drone. Photo: State Border Guard Service of Ukraine

Russia launched 154 drones overnight — up from 108 — with 138 intercepted but 13 strikes hitting 10 locations across Kharkiv, Dnipropetrovsk, Sumy and Zaporizhzhia, causing power outages. The June 29 Dnipro strike toll rose to 7 with 16 hospitalized; a drone hit a passenger minibus in Zaporizhzhia City (3 killed, 8 injured). Russia is also running a systematic campaign against Ukrainian gas stations in Chernihiv, Kharkiv and Poltava — a direct mirror of Ukraine’s refinery strikes — and is shifting toward ballistic missiles to complicate interception.

Poland threatens EU accession block; Ukraine negotiates SCALP production license

Poland’s Deputy PM warned Kyiv that honoring OUN/UPA figures including Stepan Bandera — following the announced National Pantheon — would cost Ukraine Polish support for EU accession. Warsaw also confirmed it will not transfer MiG-29s after Ukraine declined to share drone-production technology. More positively, Defence Minister Fedorov confirmed active talks with France on licensing domestic production of SCALP cruise missiles — a significant step toward self-sufficient long-range strike capability.

Also today

  • Russian lawmakers float legislation to confiscate money from private bank accounts to help plug an $83bn wartime deficit — United24
  • Russia mandates 17 hours of basic military training for all high schoolers, grades 6–11 — Business Insider
  • Ukraina monterer billige droner på ballonger som stiger over åtte kilometer — utenfor rekkevidden til russisk luftvern — TU.no
  • Estiske myndigheter fotograferte et bevæpnet russisk LNG-tankskip — antatt del av «skyggeflåten» — i Finskebukta — TU.no

Norge

Nordic Mining får fortsette gruveavfallsdumping i Førdefjorden – kriminelt anmeldt

Til tross for at Høyesterett 17. juni slo fast at tillatelsene til Nordic Minings Engebø-prosjekt er ugyldige – etter en 19 år lang rettskamp og i strid med EUs vanndirektiv – tillater klima- og miljøminister Andreas Bjelland Eriksen (Ap) selskapet å fortsette å deponere gruveavfall mens ny søknad behandles. Han kaller det «urimelig» å stanse arbeidet til de 130 ansatte i en kort behandlingsperiode. Naturvernforbundet og Natur og Ungdom har nå anmeldt selskapet og raser: «Dette er fullstendig absurd – regjeringen prøver seg på en omkamp fordi de er misfornøyde med en klar høyesterettsdom,» sier leder Truls Gulowsen. ESA åpnet allerede sak mot Norge i april for samme direktivbrudd.

Skatteforslag: Norges rikeste kan spare over 200 millioner kroner i året

En regjeringsoppnevnt skattekommisjon (ledet av tidligere Ap-stortingsrepresentant Eigil Knutsen) la 24. juni frem forslag om å kutte formuesskatten fra 1–1,1 % til mellom 0,25 og 0,75 %, samtidig som verdsettingsrabatter på aksjer fjernes. NRK regnet på det: Norges ti rikeste – med formuer på 4–30 milliarder – kan spare 14–68 millioner i året. Laksearving Gustav Magnar Witzøe kan spare over 200 millioner kroner årlig. SV-leder Kirsti Bergstø: «Det er 100 millioner for mye.» Rødts representant trakk seg fra kommisjonen i protest før publisering. Forslagene er ennå ikke vedtatt og går nå inn i politisk forhandling.

Nytt narkotikaforslag: 1500 kroner i bot erstatter rulleblad

Etter et tverrpolitisk forlik (Ap, Høyre, SV, Venstre) foreslår justisminister Astri Aas-Hansen at mindre besittelse og bruk av narkotika håndteres med bøter på stedet – 1500 kroner – fremfor straffeforfølgelse. Boten havner ikke på politiattesten, det kreves ingen rustesting, og reformen skiller helsehjelp fra straff. Mindreårige og personer med alvorlig avhengighet håndteres i egne helsespor. FrPs Jon Helgheim advarer om at det vil gjøre de kriminelle gjengenes marked større; Venstre kaller det et skritt mot full avkriminalisering. Høringen er åpen til 1. oktober.

Norge møter Elfenbenskysten i 16-delsfinalen i kveld

Norge møter Elfenbenskysten i Dallas tirsdag kveld. Fredrik Aursnes starter overraskende på benken, mens Patrick Berg får tillit fra start – et valg NRKs eksperter hyller. Elfenbenskystens store trussel er 19-årige Yan Diomandé, som for ett år siden spilte uten fotballsko og nå er en av Europas mest ettertraktede unge spillere etter en strålende sesong i RB Leipzig. Til daglig spiller han sammen med Norges Antonio Nusa – i kveld er de motstandere. På den andre siden av tabellen er Brasil videre på overtid mot Japan og kan møte Norge i kvartfinalen.

Norway’s 2025 Ukraine arms pipeline confirmed: F-16s, 92 armored vehicles, drone warheads

Arms Trade Treaty data confirms Norway transferred additional F-16 Block 10/15 jets plus 92 armored vehicles to Ukraine in 2025: 20 M113 APCs, 33 Iveco LMVs, 18+6 SISU vehicles, 3 NM189 Leopard-1-based engineering vehicles, and 12 NM204/M125A self-propelled mortars. Oslo also funded S-300 purchases and APKWS II rockets for F-16s. Nammo’s N7 anti-armor drone warheads — supplied in six-figure quantities — have been in operational use since at least early 2025, and Norway has kept NASAMS training for Ukrainian crews a priority.

Også i dag

Næringsliv & energi
Datasenterboomen: fire gründere bygde Fossefall fra null til 2,5 milliarder på ett år, mens Nscale planlegger et gigantanlegg på Helgeland — DN · Digi.no
Finske Fortum byr 5,1 milliarder for Elmera, morselskapet til Fjordkraft — E24
Statnett vurderer kø-avgift for nettilknytning for å luke ut spekulative søknader — TU.no
SAS bekrefter milliardordre på Airbus-langdistansefly — «en av de mest betydningsfulle investeringer i vår historie» — DN · Aftenposten
Offshore Norge lockouter rundt 1000 oljearbeidere i brønnservicekonflikten — TU.no
Beredskap & digital infrastruktur
Norges Bank ber alle ha kontanter hjemme i tilfelle strømstans eller angrep på betalingssystemene — NRK
BankID risikerer å miste sin høyeste sikkerhetsklarering — resultat av «passiv politikk» — Dagsavisen
Akutt boligmangel i Forsvaret truer hele opprustningsplanen, advarer NOF — Dagsavisen
Nye lover fra 1. juli: lystgassforbud for mindreårige, lovfestet gratis SFO, turistavgift og ny romlov — Dagsavisen
Politikk & samfunn
SV vil forby Metas smartbriller; regjeringen sier nei, en KI-forsker kaller utviklingen «litt dystopisk» — Aftenposten
Oslo kommune vil løsrive seg fra Microsoft for lavere kostnader og større valgfrihet — Digi.no
Nytt EU-direktiv vil tvinge frem åpne lønnsrammer i stillingsannonser — slutten på «lønn etter avtale» — r/norge
Norsk mann i 20-årene dømt til åtte års fengsel for å ha smuglet 98 håndgranater til Sverige — over 30 er fortsatt sporløst forsvunnet — NRK
Kinas utenriksminister Wang Yi besøker Norge og Norden 2.–8. juli — Aftenposten
Medier & kultur
NRK beklager et Frokost-TV-innslag fra 1988 som feilaktig stemplet ti navngitte barn som gatebarn med bakgrunn i prostitusjon og kriminalitet — NRK
Gjentatt folkelig frustrasjon mot Schibsteds betalingsmurer på r/norge — «Grensa er nådd» — r/norge
r/oslo-tråd hevder kulturhuset Salt «har spilt et spill med folks sikkerhet i ti år» – dokumenterer årevis med branntilsyn og pålegg — r/oslo
Etterretningslegenden og motstandsmannen Trond Johansen bisatt; Jens Stoltenberg holdt minnetale — Dagsavisen
MGPjr gjør comeback i 2027 i samarbeid med Flippklipp — NRK
Viktor Hovland vant Travelers Championship etter omspill; Tons of Rock 2026 ble avsluttet med Limp Bizkit-fest — NRK: Hovland · NRK: Tons of Rock

Tech

“Longinus”: one V8 bug pierces two sandbox boundaries at once (CVE-2026-6307)

The 1 TB V8 sandbox region that the exploit escapes from. Diagram: Nebusec

A WebAssembly type-confusion bug in V8’s deoptimization metadata escapes both the V8 heap sandbox (arbitrary read/write outside the 1 TB region) and achieves full renderer RCE — with no additional vulnerabilities. The root cause: two JS-to-Wasm call-frame states with different return types (i64 vs. externref) are incorrectly merged by the compiler’s common-subexpression-elimination pass, so lazy deoptimization reconstructs return values with the wrong type signature — yielding addrof and fakeobj primitives with 100% reliability. Reported March 29, patched April 7 in Chrome 147. The writeup is a detailed read on the exploit technique.

Linux DRM use-after-free gives any desktop session root (CVE-2026-46215)

A race in DRM_IOCTL_GEM_CHANGE_HANDLE creates two IDR entries while the object’s refcount stays at 1; a concurrent GEM_CLOSE frees the object mid-operation, leaving a dangling handle. Because systemd-logind grants all active desktop sessions access to /dev/dri/renderD*, any logged-in user can trigger it: use-after-free → pipe_buffer reclaim → KASLR leak → DirtyPipe-style /etc/passwd write → root, at ~99% success. Affected kernels 6.18-rc1 through May 2026; fixed in 6.18.32 and 7.0.9.

Anthropics Claude brøt seg inn i to etterretningstjenesters systemer – på timer

I en amerikansk cyberøvelse klarte Anthropics modell Claude å skaffe seg tilgang til nesten alle systemer i to amerikanske etterretningstjenester – ikke på uker, men på timer. Resultatet beskrives som alarmerende i Pentagon og illustrerer hvor raskt offensive KI-kapasiteter utvikles. Parallelt anklager Anthropic et kinesisk selskap for «ulovlig, systematisk og industriell» innhenting av amerikanske KI-kapasiteter – et tegn på at avanserte modeller nå behandles som sikkerhetspolitisk sensitiv teknologi.

htmx author: AI finds the bug, but misses the architecture

Carson Gross documents AI-assisted debugging of a hyperscript parser regression where the as keyword in fetch `url` as JSON was binding too early. The AI correctly identified the root cause and generated useful test cases — but proposed two overly specific hacks rather than the elegant fix already latent in the codebase: pushing as as a “follow” in the parser’s existing context-sensitive mechanism. Gross argues that experienced human-in-the-loop matters not for diagnosis but for knowing how your system is designed to be extended.

AArch64 desktop experiment over: 80 Ampere cores lose to a Ryzen 5 3600

Marcin Juszkiewicz ran Fedora on an 80-core Ampere Altra as a daily desktop for 11 months and is calling it quits. Three compounding failures: a PCIe erratum required weekly custom kernel patches to stop AMD GPU memory corruption; the RX6700XT failed and the RTX 2060 replacement lacks Flatpak support for key apps like FreeCAD; and despite 80 cores, single-threaded desktop workloads ran slower than a 6-core Ryzen 5 3600. The Altra is being repurposed as a RISC-V package build server.

Pipelining GPU token decoding eliminates CPU-induced idle time

Moondream’s Photon engine overlaps the CPU’s per-token bookkeeping with the GPU’s decode computation using ping-pong buffer slots and “zombie” sequences — finished requests that ride one extra GPU step before releasing resources. Result: 6–12% throughput on an RTX 3090 and up to 35% on a B200 at 32-stream batches. The post explains the scheduling model with timeline diagrams and is a concise reference for inference-systems design.

Also today

Local inference
Quesma benchmarks several models and recommends Qwen 3.6 27B as the current best capability/hardware balance for local AI-assisted dev — Quesma · HN
Systems & GPU
A complete end-to-end trace of a CUDA vector-add kernel — nvcc → PTX → SASS, host stub, GPFIFO ring, MMIO doorbell, 128 SMs — that turns out memory-bandwidth-limited at 80% DRAM, 5% issue efficiency — Fergus Finn · HN
WATaBoy translates Game Boy opcodes to WebAssembly at runtime; the JIT’d output beats a hand-written native C interpreter on hot loops — humphri.es · HN
Typst’s incremental-computation design — a dependency-tracking graph where elements only recompute when inputs change (talk) — YouTube · Lobsters
Colin Breck: optimizing a non-bottleneck — however impressive the speedup — yields zero end-to-end improvement — blog · Lobsters
PL & types
Type-checked non-empty strings in Haskell — a newtype + smart constructor that eliminates a class of runtime errors — Bellroy · Lobsters
Evaluation order and nontermination in Datalog query languages — whether fixpoint semantics terminate depends on query structure and strategy — rntz.net · Lobsters
Fil-C implements memory-safe setjmp/longjmp and the full ucontext API — opaque jmp_buf, per-frame jump-target tracking, GC-integrated fiber stacks — fil-c.org · HN
Security & supply chain
A now-patched IPv6 fragmentation overflow in __ip6_append_data() enables container escape and root on RHEL/CentOS Stream 10 — no CVE assigned — GitHub PoC · Lobsters
A self-hoster’s public-facing qBittorrent Web UI was exploited via the “run external program on completion” feature to run a tcrond cryptominer — put torrent UIs behind auth — r/selfhosted
r/norge: AI-generated product photos, copy and reviews now make dropshipping scam sites “indistinguishable” from legitimate stores — r/norge
Industry & silicon
South Korea commits ~$1 trillion to memory-chip expansion and humanoid robots — pairing silicon with robotics as co-equal strategic bets — Ars Technica · HN
Rocket Lab to acquire Iridium for ~$8B, becoming the only vertically integrated launch-plus-constellation rival to SpaceX — press release · HN
AI-chipmaker stocks surge in H1 2026 — some tripling — lifting Asia-Pacific equities — Guardian
IBM bryter sub-1nm-barrieren i silisium; OpenAI viser frem sin første egne KI-brikke «Jalapeño»; Kinas «Lineshine» topper Top500 — Digi.no: IBM · Digi.no: Jalapeño · Digi.no: Top500

Linux & Infrastructure

TacoSprint 2026: first North American Nix sprint advances package relocatability

The first North American Nix developer sprint, on the Pacific coast of Mexico. Photo: jrdsgl.com

About 10 Nix developers gathered in La Saladita, Mexico for a week-long sprint on making Nix packages relocatable — a long-standing pain point since packages hardcode /nix/store/… paths. Outputs: a kernel modification enabling ${ORIGIN}-style shebangs (analogous to RPATH); a custom loader alternative; GuixPkgs for cross-distro packaging; peer-to-peer remote builds; and faster module systems. One participant also landed a kernel patch fixing a docs bug (the shebang recursion limit was documented as 4 when the code allows 5). It closed with a parody paper, “Attention, Nix and Tacos Is All You Need.”

Migrating a 100 TiB TrueNAS NAS to NixOS in under 20 minutes of downtime

Bas Nijholt migrated his last non-NixOS machine — a TrueNAS box with ~100 TiB of ZFS data — to NixOS without touching the data pools. The key safety pattern: disko was scoped exclusively to the boot disk, while existing tank and ssd pools were imported by name post-install with force-import disabled. He validated the approach in a VM with fake pools first, then replaced TrueNAS replication with Sanoid/Syncoid, handled encrypted datasets via a new zfs-unlock tool, and recovered Incus containers with incus admin recover. Total downtime: under 20 minutes.

The Nix store on ZFS: a SQLite conflict, and a 136× dedup ratio

Two threads worth reading together. A Discourse PSA warns that running the Nix store directly on ZFS pits SQLite’s write-ahead log against ZFS’s own — a “database on database” inefficiency; the workaround is XFS-on-ZFS, though a commenter notes ZFS 2.4.0+ already fixed the underlying issue by completing async page writeback immediately. Counterpoint from Reddit: an AI coding box with the Nix store on a ZFS dataset reported 18.1 TB of logical data in ~136 GB actual — a 136× dedup ratio, since Nix’s content-addressed store shares enormous amounts of content across derivations. Dedup works best when ZFS handles the store directly, enabled from the start.

kew terminal music player 4.1: UI rewrite with custom layouts and crossfade

kew showing album art, spectrum visualizer and playlist UI.

kew 4.1 lands with a full UI rewrite using the MVU (Model-View-Update) pattern, following 4.0’s sound-system rewrite. New: custom layouts, auto-resume on startup, crossfade between tracks, and an improved spectrum visualizer. It supports sixel album art, gapless playback, replay gain, lyrics and Discord status, and now runs on Windows in addition to Linux/macOS/FreeBSD.

Also today

Nix & Python
A practical guide to Python on NixOS — why naive pip install fails and the NixOS-native alternatives — painless.software · Discourse
AI agents are already handling full nixpkgs PR workflows; a proposal for .agents/skills/ files evolved into a simpler AGENTS.md pointing AI at existing human docs — Discourse
Hyprland & desktop
hyprdeck turns every Hyprland workspace into a single tab group via the new Lua API (0.55+) — GitHub · r/hyprland
The niri-style ScrollOverview plugin gains a horizontal layout, drag-to-move and keybind submaps — GitHub · r/hyprland
A community binds trick reliably detects both press and release of the Super key — no external daemon — r/hyprland
Graphics & SSH
Thomas Leonard traces Linux rendering from OpenGL/Vulkan through Mesa and Wayland into DRM with bpftrace — finding Mesa loads 12 X11 libs in a pure-Wayland setup — roscidus.com · Lobsters
A prototype native graphical shell for SSH: server apps serve browser UIs over private Unix sockets, exposed via SSH port forwarding, with a service registry for app discovery — probablymarcus.com · HN
Self-hosting
The Human-Centered Computing Foundation proposes .self as a TLD for self-hosted personal infrastructure — HCCF · HN
Android 17 gates all local network access behind a new ACCESS_LOCAL_NETWORK runtime permission — breaking self-hosted companion apps and Home Assistant integrations — Android docs · r/selfhosted
Open Home Foundation’s June newsletter: Matter Server migrates to matter.js (faster startup, Matter 1.5.1), plus criticism of SmartThings’ planned paid API tiers — newsletter · r/homeassistant
cd ~/repos/ratatosk && claude --resume cd973fde-087d-479b-8171-d52f1e575384