NATO opens in Ankara with Kyiv defenceless and Zelensky told to stay silent — while Ukraine’s drones reach 3,000 km into Russia, a Paris court weighs Le Pen’s fate, and Iran sets tankers ablaze in Hormuz.

NATO opens in Ankara — Zelensky silenced, Kyiv defenceless

President Zelensky visits an apartment block in Kyiv’s Darnytskyi district severely damaged by the July 6 Russian missile attack. Photo: BBC

NATO leaders convened in Ankara on Tuesday with Trump pressing for higher spending and European allies scrambling to keep the alliance cohesive. In a pointed snub, Zelensky will reportedly not be allowed to address the summit directly — to avoid provoking Trump — despite Ukraine being its central subject. Secretary-General Rutte is deploying conspicuous flattery to keep Washington engaged; Starmer is rallying Europeans; Poland has confirmed a Patriot transfer even as the US withdraws most forces from Estonia and grows its Polish garrison to 11,000.

He arrives all but empty-handed on air defence. Every one of the 19 killed in the July 5–6 Kyiv strike died from ballistic missiles — none of 29 intercepted — and Ukraine’s Air Force confirms Kyiv has no viable Patriot interceptors left. Zelensky calls it “absurd” that production cannot keep pace with consumption; the deeper story at Ankara is Europe’s dawning recognition that the US industrial base, drained by Ukraine and Iran, may no longer be able to arm its allies at all.

Guardian: difficult summit · Guardian: Starmer · Guardian: US may be unable to arm allies · Al Jazeera · Economist · BBC: Kyiv defenceless · Kyiv Independent

Ukraine’s deepest strike of the war hits Russia’s largest refinery

Ukrainian drones hit the Omsk oil refinery overnight July 5–6 — Russia’s largest, 2,500 km from the border — the deepest strike of the war; Su-57 fighters and an A-50U AWACS deployed to defend Omsk and failed to intercept. The following night 430+ drones struck Moscow and its oblast, alerts sounded in Novosibirsk (3,000 km) for the first time, and fuel shortages have now spread to 50 Russian regions. (Full campaign in Ukraine.)

ISW · Gwara Media · Ukrainska Pravda

Le Pen verdict: France’s 2027 race decided today

Marine Le Pen, as the French appeals court rules on her eligibility. Photo: NRK

A Paris appeals court rules Tuesday on whether Marine Le Pen’s conviction for embezzling EU parliamentary funds — and the five-year ban on holding public office — will be upheld. Le Pen leads the polls for 2027; if the ban stands, her political career is effectively over and National Rally president Jordan Bardella becomes the party’s likely candidate. It is the most consequential legal-political moment in France in years, and will shape the trajectory of the European far right.

BBC · Guardian · Al Jazeera · Aftenposten · NRK

Iran fires on tankers in the Strait of Hormuz

An LNG tanker was struck by a projectile and set ablaze off the Omani coast on Tuesday; Iranian state TV said it “ignored warnings” but stopped short of claiming responsibility. Two US officials told Axios that Iran fired at least two missiles at commercial ships in the strait, a second vessel also struck — both with “significant damage” but no casualties. Explosions rocked Damascus during a Macron visit the same day. Norway’s DNK is again insuring ships through the strait, but with the caveat of renewed blockage.

Al Jazeera · NPR · Axios · Aftenposten · DN: shipping

Indicator	Value	Change
S&P 500 (f)	7,573	−0.24%
Dow 30 (f)	53,429	+0.11%
Nasdaq (f)	29,669	−0.91%
Russell 2000 (f)	3,024	−0.10%
VIX	15.91	+2.19%
Gold	4,136	−0.75%
BTC	$63,003	+0.27%
EUR/USD	1.1428	−0.12%
USD/NOK	9.7852	0.00%

Nasdaq futures −0.91%, VIX +2.19% — risk-off tone as Iran fires on LNG tankers in the Strait of Hormuz (see above)
Gold −0.75% despite simultaneous Hormuz escalation, NATO tension and the Venezuela disaster — haven bids not materialising

World

China: typhoon, storms and a landslide — 15+ dead, 16 still buried in Gansu

Rescue workers evacuate residents by rubber dinghy after floodwaters inundate villages below the breached Liulan Reservoir dam. Photo: Reuters/Al Jazeera

A wave of disasters hit China at once. Typhoon Maysak flooded Guangxi, breached a dam and forced 480,000 to evacuate, killing at least four. Severe storms in Hubei killed eight and injured 275 with winds up to 149 km/h. A landslide in Gansu buried 33 people — 16 still unaccounted for despite rescue efforts ordered by Xi Jinping. Forecasters warn of continued heavy rain across regions home to 200 million people.

BBC · Guardian: storms · Guardian: Maysak · Al Jazeera

Cuba’s third nationwide blackout in six months

Cuba suffered its third island-wide power outage since January on Monday, plunging nearly 10 million into darkness. The cause is acute fuel starvation: only one Russian tanker has passed the US blockade since January, and Washington has cut Venezuelan deliveries. Havana neighbourhoods already receive just 3–4 hours of electricity a day; rural areas face 70+ hour outages. President Díaz-Canel called it a “genocidal energy blockade.”

Al Jazeera · Guardian

Venezuela: dødstallet passerer 3.500 — mann reddet etter åtte dager

Dødstallet etter jordskjelvene i Venezuela har steget forbi 3.500 — opp fra 3.000 i forrige utgave — og over 16.000 er hjemløse. Eksperter advarer om en gryende helsekrise mens tusenvis bor tett i midlertidige mottak, og regjeringen fortsetter å forsvare innsatsen mot økende folkelig sinne. I en av de mer oppsiktsvekkende redningsaksjonene ble Hernán Gil funnet i live under 140 tonn ruiner etter åtte dager og hentet ut etter 100 timer.

Al Jazeera · NRK: hjemløse · NRK: Hernán Gil

Gaza at 1,000 days: 73,000 dead, 90% destroyed

Displaced Palestinians shelter in tents near the rubble in Gaza City, July 6, 2026. Photo: Reuters/Al Jazeera

Gaza marked 1,000 days of war this week — at least 73,098 dead since October 2023, more than 1,072 since the October ceasefire, 90% of the territory destroyed. The count coincided with word from his lawyer that Dr. Hussam Abu Safiya — Gaza’s best-known surgeon, held 18 months without charge — is “almost unrecognisable” from injuries in Israeli detention and faces “tangible danger to his life.” An Israeli strike also killed four in south Lebanon, including a school principal. Separately, an Elbit Systems presentation revealed Israel’s Tzayad command system logged roughly 1,000 targets a day — some 850,000 in total — across the Gaza and Lebanon wars.

Al Jazeera: 1,000 days · Guardian: Abu Safiya · Reuters: Lebanon strike · Guardian: Elbit 850,000 targets

Hamas dissolves its civilian governing body; US-backed technocrats to take over

Hamas announced the dissolution of the civilian authority it has run in Gaza for nearly 20 years, along with the resignation of key officials and its emergency government committee. Authority is being transferred to a US-backed technocratic committee tasked with reconstruction oversight under the Trump administration’s plan — a profound institutional rupture in Gaza’s governance, regardless of what follows.

Al Jazeera

Sudan: the battle for el-Obeid opens a dangerous new front

The Sudanese Armed Forces and the RSF are increasingly contesting el-Obeid, capital of North Kordofan — a logistics hub 360 km southwest of Khartoum controlling supply routes between central Sudan and Darfur. Over 11,000 people, including 5,500 children, have fled in recent weeks. UN officials fear el-Obeid could follow el-Fasher: months of urban warfare devastating civilian infrastructure and blocking aid to some 500,000 people at risk.

Al Jazeera

Canada signs the largest defence deal in its history: 12 German submarines

Canada has selected German consortium TKMS to build 12 cutting-edge submarines — its largest-ever defence procurement, worth several billion dollars, beating South Korea’s HD Hyundai. PM Carney cited “a dangerous and divided world,” and the deal, announced just ahead of Ankara, will significantly deepen Canada’s NATO ties — a major reorientation of its defence posture.

Guardian · CBC · BBC

Also today

Disasters & health: Sri Lanka: 26 dead, including 7 guards, in the worst prison riot in years as rival drug gangs clash — BBC · Guardian; NHS to offer two rapid endometriosis tests — a saliva test and a gut sensor — called a “gamechanger” for years-long diagnostic waits — Guardian; The world’s oceans are warming at a record-breaking pace, with cascading effects on sea level, storms and marine life — NPR
Asia-Pacific: Taiwan revives “anti-communist” ideology training for military graduates for the first time since 2002 — SCMP
Africa: The Gambia’s Supreme Court weighs whether to gut its ban on FGM, as mothers and rights groups warn girls would face renewed pressure — Al Jazeera

Ukraine

The oil campaign reaches Omsk — and Russia’s home front buckles

A garage cooperative burns near a residential area after a Russian missile strike on Kyiv, July 6, 2026. Photo: Kostiantyn Liberov/Libkos/Getty

Ukraine’s deep-strike campaign hit a new mark overnight July 5–6: the Omsk refinery, Russia’s largest at 21 million tonnes/year and over 2,500 km from the border, in the deepest strike of the war. Su-57 fighters and an A-50U AWACS deployed to defend it and failed. The next night sent 430+ drones at Moscow, triggered first-ever alerts in Novosibirsk (3,000 km), and hit the Belgorod airport fuel depot, two shadow-fleet tankers in the Sea of Azov, and two S-400 systems in occupied Kerch. Fuel shortages now touch 50 Russian regions — Omsk residents rushed petrol stations, Crimeans were refused fuel in Krasnodar.

The strain is systemic. Reuters reports Russian banks nearing an “explosive” crisis; retailers report surging horse sales amid the gasoline drought; and Peskov has dropped the “special military operation” framing, conceding it is now “a real war.” June was Russia’s second net-negative territorial month of 2026 (≈ −9 km²), with Ukrainian gains east of Oleksandrivka confirmed even by Russian milbloggers, while the fabricated Kostyantynivka “capture” continues to unravel. Meanwhile a Russian Bear-F dropped sonobuoys near the carrier HMS Prince of Wales in the Norwegian Sea — ISW’s assessed “Phase Zero” NATO-intimidation campaign.

ISW, July 6 · Ukrainian General Staff · Ukrainska Pravda: Moscow barraged · r/UkrainianConflict: 50 regions · Reuters: banking crisis · NV: Peskov “real war” · Politico: HMS Prince of Wales · r/UkrainianConflict: June net-negative

Kyiv defenceless against ballistics — Russia shrinks its strike packages by design

Downtown Kramatorsk, June 19, 2026. Photo: Anatolii Stepanov/Reuters

All 19 killed in the July 5–6 Kyiv strike died from ballistic missiles — zero of 29 intercepted — and Ukraine’s Air Force confirms Kyiv has no viable Patriot interceptors left. ISW’s key finding: Russia is deliberately reducing ballistic missiles per package (from 41 in early June to 28–29 now) precisely because it has calculated Ukraine cannot intercept any, making large packages unnecessary. Patriot deliveries under signed contracts won’t begin until 2027, and global production runs below Russia’s monthly launch volume. On the ground, the Kramatorsk front is described as “critical” as glide-bomb pressure intensifies, though large mechanised assaults remain beyond Russian capability there.

Kyiv Independent · Ukrainska Pravda: toll rises to 19 · NV: Kramatorsk critical · Reuters: Zelensky “absurd”

Also today

Russia ships weapons to Mali by sea as Tuareg and allied rebels — who downed an Africa Corps Mi-24 last week — tighten their grip — Al Jazeera
A European intelligence report warns Russia’s war is pushing the country toward a banking crisis — Reuters

Investigations & Security

EU Parliament maneuvered toward a Chat Control vote before recess

Parliament President Roberta Metsola invoked an unprecedented urgent procedure to revive an expired Chat Control interim regulation, bypassing normal committee review. If Tuesday’s urgency motion passes, a full vote follows Thursday — when attendance is thin and blocking the measure (needing 361 votes) is harder. The regulation would require companies to scan private messages for illegal content; Parliament rejected an extension 311–228 in March. MEP Patrick Breyer calls it “an unfair maneuver” that risks trading permanent child-protection law for mass surveillance.

Patrick Breyer MEP · r/worldnews

BBC names the guards running Russia’s torture prisons in occupied Ukraine

A BBC investigation identified and named specific jailers and officials operating Russian detention centres in occupied Ukraine, drawing on testimony from former prisoners describing systematic abuse. The named exposé is designed to build accountability ahead of possible future war-crimes prosecutions, adding to a growing documented record of Russian detention practices.

BBC

Ukrainsk elitesoldat tiltalt for Nord Stream-sabotasjen

En ukrainsk elitesoldat er formelt tiltalt i forbindelse med sabotasjen av Nord Stream-rørledningene fra Russland til Tyskland. Ifølge tiltalen handlet han på ordre fra ukrainske myndigheter. Saken er blant de mest politisk sensitive i det europeiske sikkerhetslandskapet, og tiltalen setter ytterligere press på Ukrainas posisjon i NATO-sammenheng.

NRK

Also today

Interpol operation makes 1,000+ arrests and identifies 2,070 trafficking victims — mostly women trafficked for sexual exploitation — across multiple countries — BBC
An Austrian court convicts a former senior Syrian intelligence chief of torture and sexual abuse under Assad — another universal-jurisdiction milestone — BBC

Norway

Norge slår Brasil og går til VM-kvartfinale for første gang på 28 år

Verden måper etter Norges 2-1-seier mot Brasil. Foto: NRK

Norges herrelandslag slo Brasil 2-1 i åttedelsfinalen søndag — en historisk bragd. Erling Braut Haaland scoret to mål (og gikk viralt over hele kinesisk sosiale medier), keeper Ørjan Nyland løp 6,7 kilometer og reddet en Neymar-straffe, og Ståle Solbakkens kampplan ble hyllet som genistrek. Feiringen satte jordskjelvmålere i bevegelse og sendte 30 personer til legevakten med fyrverkeriskader; kronprins Haakon ble filmet mens han «rodde» i Oslos gater klokka ett om natta, og Forsvaret la ut en felles feiringsvideo — helt ned til en pilot som ror inne i et F-35. Over 350.000 tippet på kampen, en rekord for Norsk Tipping, som likevel tapte titall millioner på seieren. Til kvartfinalen mot England lørdag åpner Frogner stadion som visningsarena, og Norses VM-fly ble fullbooket «på sekunder».

NRK: verden måper · NRK: Nyland 6,7 km · NRK: Solbakken · E24: Frogner stadion · DN: Norsk Tipping · r/norge: kvartfinale · r/Norway: Army video

FIFA-skandale: Balogun-suspensjonen reversert etter Trump-samtale med Infantino

FIFA snudde om på Folarin Baloguns karantene dagen før USA møtte Belgia — en avgjørelse Solbakken, Lise Klaveness og idrettsjurister alle kalte ulovlig og i strid med regelboken. Både Donald Trump og FIFA-sjef Gianni Infantino bekreftet at de hadde vært i kontakt om saken. Belgia ble rasende og sørget for «rettferdighet på banen» da de slo USA 2-1 — det første vertslandet noensinne som røk ut i åttedelsfinalen på hjemmebane. England slo Mexico i et ellevilt drama og venter Norge lørdag; Cristiano Ronaldo (41) tok trolig farvel med VM da Spania slo Portugal 1-0 på overtid.

NRK: Trump og Infantino · Aftenposten: ulovlig · NRK: England slo Mexico · NRK: Ronaldo

Mette-Marit: første bilder etter lungetransplantasjonen

Kronprinsesse Mette-Marit med Norge-skjerf, første offentlige bilde etter transplantasjonen. Foto: Kongehuset/NRK

Kongehuset delte mandag de første bildene av kronprinsesse Mette-Marit etter en vellykket lungetransplantasjon 17. juni. Bildene viser henne med Norge-skjerf i sofaen på Slottet mens hun fulgte VM-kampen mot Brasil. «I går ble det en historisk kveld», skrev kongehuset på Instagram.

NRK

Samsung 20-doblet resultatet — aksjen faller likevel

Samsung Electronics varslet et driftsresultat nær 20-doblet i siste kvartal — et foreløpig Q2-tall på 58,4 milliarder dollar, verdensrekord for et enkelt selskap i ett kvartal, forbi Saudi Aramcos gamle rekord. Hoppet på 1.902 % er drevet nesten helt av KI-boomen og etterspørselen etter HBM-brikker. Aksjen falt likevel kraftig, tilskrevet vedvarende tvil om selskapet klarer å levere de mest avanserte KI-brikkene, og Sør-Korea innførte 20 minutters handelsstans etter børsraset.

DN: 20-doblet · E24: handelsstans · CNBC

Datasentre spiser mer av kraftoverskuddet enn ventet

Datasentrene i Norge forbruker langt mer strøm enn NVE forutså, ifølge NVE-sjef Kjetil Lund, som kaller dem «jokeren i kraftkabalen». Digi.no har kartlagt at bransjen er «mer omfattende enn hva vi så for oss». Utviklingen skjer parallelt med at KI-boomen og hyperscalere vil etablere seg i Norge, og at behovet for gasskraft melder seg — kobberetterspørselen til datasentre ventes å øke 50 % innen 2040.

Digi: kraftoverskuddet · Digi: kartet · TU: hyperscalers · TU: gasskraft

Forbrukerrådet: forbud mot Meta-smartbriller bør utredes

Forbrukerrådet, ved fagdirektør Finn Myrstad, mener norske myndigheter bør utrede et forbud mot Meta Ray-Ban smartbriller, og at brillebutikker må ta sin del av ansvaret for å informere kundene. Brillene kan ta skjulte bilder og videoer i det offentlige rom uten at omgivelsene er klar over det. Bekymringen er ikke teoretisk: en forelder på en full sommerstrand fortalte på r/norge om en eldre mann med slike briller som nervøst benektet at han filmet — og om hvor vanskelig det er å se når de faktisk tar opp.

Digi: forbud bør utredes · Digi: maktubalanse · r/norge: Meta briller å stranda

Skogbranner herjer Europa — hetebølge på vei til Østlandet

Store skogbranner i Sør-Frankrike tvinger fram evakueringer og omlegging av Tour de France. Foto: NRK

Store skogbranner pågår i flere europeiske land: i Sør-Frankrike nær Marseille er tusenvis evakuert og Tour de France måtte legge om ruten, og ved Costa Brava nord for Barcelona ble turister evakuert. Portugal har bedt EU om hjelp. Frankrike meldte forrige uke om over 2.000 ekstra dødsfall under forrige hetebølge. Hjemme varsler meteorologene en kraftig hetebølge over Sør-Norge — over 30 grader og tropenetter på Østlandet, i tide til kvartfinalen lørdag og Slottsfjellfestivalen.

NRK: Sør-Frankrike · NRK: flere land · NRK: hetebølge Østlandet

Karpe World: tre kvelders hiphop-maktdemonstrasjon på Ekeberg

Karpe World på Ekebergsletta ble avsluttet til kritikerros. Med 35.000 publikummere per kveld og rundt 50 artister på scenen — inkludert Arif, Stig Brenner og Ari Bajgora i tillegg til Karpe selv — beskrives festivalen som «en overskuddsmønstring av norsk hiphop som savner sidestykke». NRK P3 ga toppkarakter og kalte det «historisk».

Dagsavisen: overskuddsmønstring · Dagsavisen: vill og vakker · NRK P3

Også i dag

Økonomi: EU-domstolen ilegger Google en rekordbot på 46 milliarder kroner i konkurransesaken selskapet kalte grunnløs — Digi; Makroøkonomer advarer om at for høy inflasjon kan utløse et norsk rentehopp allerede i august — boligbyggingen er nær «lagt død» — E24: rentehopp · E24: boligbygging; Equinor deler ut havbunnskontrakter verdt 6 milliarder kroner i en ny utbyggingsmodell — Moreld-aksjen opp over 5 % — TU · DN
KI & opphavsrett: Nytt FN-panel: KI-modellenes ytelse forbedres raskere enn vår evne til å måle og styre dem — Digi; Bøker av 27 norske forfattere funnet i KI-treningsdata uten samtykke — jussprofessorer kaller det et klart brudd på opphavsretten — Digi; Microsoft framskynder sin interne frist for overgang til kvantesikker kryptering — Digi
Innenriks & miljø: ESA vurderer å ta Norge til retten over fortsatt deponering av gruveavfall i Førdefjorden, tross høyesterettsdom — Aftenposten · TU; NATO-rapport advarer om «høy risiko» fra torpedoer i ubåtvraket U-864 utenfor Fedje — TU; Ulv tok 28 sauer i Gausdal — bønder truer med å jakte uten fellingstillatelse — NRK; Politiet advarer: kriminelle kjøper lovlige, funksjonsdyktige antikke våpen på Finn.no — «et samfunnssikkerhetsproblem» — NRK
Ulykker: Norsk tenåringsjente drept i påkjørsel i Spania; sjåføren stakk fra stedet — NRK; Rutefly med 214 om bord nødlandet på Torp etter at en iPhone tok fyr i kabinen — alle uskadd — NRK

Norway — Street Level

Grassroots

Oslos Høyre/FrP-byråd nektet å finansiere offentlige VM-visninger — så forsøkte det å ta æren da Mads Hansen og private arrangører fylte Rådhusplassen. r/oslo kalte det skamløst hykleri — r/oslo · Oslo kommune
A viral clip of Magnus Carlsen watching Norway’s World Cup run — commenters had never seen him this animated, not even after a World Championship win — r/Norway
A redditor worked 23h50m as a Foodora courier in the best windows for ~5,400 NOK gross — a rare ground-truth look at the gap between headline rates and real gig-work take-home in a high-cost country — r/norge

Tech

Anthropic finds a “global workspace” in language models

New Anthropic interpretability research identifies a “J-space” in Claude — a small set of internal neural patterns (named for the Jacobian technique used to find them) that play a distinctive cross-cutting role, analogous to the “global workspace” in neuroscience that distinguishes consciously accessible from unconscious processing. Each J-space pattern activates when a concept is “on the model’s mind” — not when it’s being output, but when it’s being held and processed. The suggestion is that the conscious/unconscious distinction observed in biological brains has an emergent functional analog in modern LLMs.

Anthropic · Transformer Circuits paper · HN

Januscape: the first dual-architecture KVM guest-to-host escape (CVE-2026-53359)

A use-after-free in KVM’s shadow MMU — dormant since August 2010 (16 years) — lets a guest VM crash the host and, with more work, escape it, using only guest-side actions. Unlike prior KVM escapes it works on both Intel and AMD: kvm_mmu_get_child_sp() checked gfn but not role.word, allowing reuse of a mismatched shadow page via a PDE-modify + memslot-delete sequence. A DoS PoC is public; a full escape exists but is withheld. On distros where /dev/kvm is world-writable (0666), it chains into root LPE, and multi-tenant clouds exposing nested virtualization are the prime target. Patched in the July 4 stable rollup (7.1.3, 6.18.38, 6.12.95, …) — look for commit 81ccda30b4e8 rather than trusting version numbers; if you can’t patch, disable nested virt with kvm_intel.nested=0 / kvm_amd.nested=0.

Januscape writeup · CyberSec Guru · HN · r/selfhosted

OpenSSH 10.4: security fixes and experimental post-quantum signatures

Released July 6. Security fixes: an SFTP download path traversal (a malicious server could redirect files), an SCP parent-directory escape for remote-to-remote copies, and an SFTP argument truncation silently dropping security options at position 10+. New: an experimental composite post-quantum signature scheme combining ML-DSA-44 and Ed25519 (opt-in via HostKeyAlgorithms / ssh-keygen -t mldsa44-ed25519). A stricter transport protocol now disconnects peers that send non-KEX messages during key re-exchange, plugging a memory-wasting attack.

Release notes · HN · Lobsters

Crawlers are systematically harvesting `.git/config` for CI tokens

An elephant and a penguin survey a pile of electronics in dismay — illustration for the PREEMPT_NONE deep dive. Illustration: thebuild.com

A developer running a honeypot infinite-website generator caught automated crawlers probing /.git/config at scale. The real prize isn’t credentials in the file itself — it’s GitHub Actions and other CI systems that rewrite .git/config with long-lived auth tokens (push/tag/release rights) during clones. The same exposure hits Docker images built with COPY . . and no .dockerignore. After grabbing .git/config, attackers typically follow up with .git/index and HEAD to reconstruct the repo. Related and worth a read: a deep dive on why Linux 7.0 killing PREEMPT_NONE tanked a Postgres benchmark to 0.51x — but only on 96+ vCPU machines without huge pages.

git-config spider · Lobsters: crawler · PREEMPT_NONE is dead · Lobsters: preempt

Sneakerweb: P2P web publishing via physical media, no DNS

The sneakerweb cycle: author HTML, exchange physical media, browse offline. Illustration: sneakerweb.org

Sneakerweb is a protocol for web publishing without DNS, registrars or hosts. Websites live on user devices and are transferred as .snk files via USB drives or SD cards — a true sneakernet for the web — then browsed offline in a normal browser. It’s built on the Willow protocol for forgery prevention, efficient merging and a compact file format, with a CLI available, by the Worm Blossom team (also behind Willow and Bab hash). Being demoed live at dweb camp this week.

sneakerweb.org · Lobsters

Odin hits 1.0 — and a Rust-to-Lean pipeline that lets AI prove crypto code

gingerBill announced Odin 1.0, marking API stability for the systems language pitched as a pragmatic C alternative — low-level and explicit, without Rust or C++ complexity, and already used in production game development. Separately, an experience report documents a formal-verification pipeline that lifts production Rust crypto into Lean 4 (via Charon/Aeneas or Hax), targets formal spec libraries, and lets AI provers (Aristotle, Aleph) close proof obligations — with the Lean kernel checking all output, so AI can’t compromise soundness. Applied in the Ethereum Foundation’s zkEVM project to Plonky3 and RISC Zero, it honestly logs which obligations AI closed versus needed manual work.

Odin 1.0 · Lobsters: Odin · Rust→Lean paper · Lobsters: Rust→Lean

Also today

Radicle 1.9.1 — a sovereign P2P Git forge with native issues and patches signed and stored in Git, replicated peer-to-peer with no central host — radicle.dev · Lobsters
Why jj VCS didn’t fly at Gradle: gradlew.bat needs CRLF via .gitattributes, and jj doesn’t honor Git’s CRLF conversion — the wrapper checks out broken on Windows — Gradle blog · Lobsters
Windows GDID reverse-engineered from public PDBs, debunking viral “128-bit hardware ID” claims in the Scattered Spider indictment — a reinstall yields a new GDID, ruling out serial derivation — writeup · HN

Linux & Infrastructure

Hyprland ricing: a bar-less Quickshell shell, a Lua-config migrator, and a headless bug

Three items for Hyprland users this week. AETHR is a modular Quickshell dotfile set built around having no persistent bar — dock, tray, workspace overview and launcher appear only on hover-proximity or keybind IPC (qs -c Aethr ipc call launcher toggle), with awww animated wallpapers and blur via a single layer_rule. HyperLua is a Python parser that converts old Hyprlang .conf files to Hyprland’s new Lua config (binds, layerrules and gestures still need manual work). And a confirmed upstream bug: disabling all physical monitors freezes the renderer loop for any headless output — recordings go black and never recover — relevant for remote-desktop and virtual-display setups.

AETHR · HyperLua · Hyprland #14616

Home Assistant corner: cast-to-TV, TPMS car fingerprinting, mmWave heatmaps

A batch of self-hosting tools. RelayTV is a local-first casting server — run it on a cheap Linux box at the TV and send URLs via HTTP API, an Android app, or HA automation, with a built-in Jellyfin client (GPL-3.0). TireSignal is an HA add-on that fingerprints vehicles by their TPMS sensor IDs from rtl_433 output — camera-free driveway presence detection with an RTL-SDR dongle (MIT). And the Everything Presence Pro Grid integration is now in HACS directly, with v1.5.0 adding a most-frequented-cell heatmap and a real-time position map card for the mmWave radar. Less cheerful: Volkswagen silently changed its auth backend in early June, breaking the community HA integration owners used for solar-surplus charging and spot-price automations — no official word, and the community is reverse-engineering the new flow.

RelayTV · TireSignal · Everything Presence Pro Grid · Carscoops: VW · r/homeassistant: VW

Also today

Nix: NixCon 2026 extended its CfP by a week, to July 14 at 22:00 UTC — Discourse; nix-darwin governance: a thread weighs moving to the nix-community org to attract reviewers and clear a months-long PR backlog — Discourse; nh 4.4.0 lands remote diffs for --target-host deploys, an overhauled search with offline mode, and nh os info cut from a minute to seconds — Discourse; Stylix runtime theme switching without a rebuild — community approaches explored, no clean solution yet — r/NixOS
Self-hosting: A NixOS tutorial wires up Concourse CI with OpenBao (the Vault fork) as a declarative secret backend — Discourse

cd ~/repos/josse-posten && claude --resume 51377622-a9c8-4967-8b56-de828f5a2e02

NATO opens in Ankara — Zelensky silenced, Kyiv defenceless

Ukraine’s deepest strike of the war hits Russia’s largest refinery

Le Pen verdict: France’s 2027 race decided today

Iran fires on tankers in the Strait of Hormuz

World

China: typhoon, storms and a landslide — 15+ dead, 16 still buried in Gansu

Cuba’s third nationwide blackout in six months

Venezuela: dødstallet passerer 3.500 — mann reddet etter åtte dager

Gaza at 1,000 days: 73,000 dead, 90% destroyed

Hamas dissolves its civilian governing body; US-backed technocrats to take over

Sudan: the battle for el-Obeid opens a dangerous new front

Canada signs the largest defence deal in its history: 12 German submarines

Ukraine

The oil campaign reaches Omsk — and Russia’s home front buckles

Kyiv defenceless against ballistics — Russia shrinks its strike packages by design

Investigations & Security

EU Parliament maneuvered toward a Chat Control vote before recess

BBC names the guards running Russia’s torture prisons in occupied Ukraine

Ukrainsk elitesoldat tiltalt for Nord Stream-sabotasjen

Norway

Norge slår Brasil og går til VM-kvartfinale for første gang på 28 år

FIFA-skandale: Balogun-suspensjonen reversert etter Trump-samtale med Infantino

Mette-Marit: første bilder etter lungetransplantasjonen

Samsung 20-doblet resultatet — aksjen faller likevel

Datasentre spiser mer av kraftoverskuddet enn ventet

Forbrukerrådet: forbud mot Meta-smartbriller bør utredes

Skogbranner herjer Europa — hetebølge på vei til Østlandet

Karpe World: tre kvelders hiphop-maktdemonstrasjon på Ekeberg

Norway — Street Level

Tech

Anthropic finds a “global workspace” in language models

Januscape: the first dual-architecture KVM guest-to-host escape (CVE-2026-53359)

OpenSSH 10.4: security fixes and experimental post-quantum signatures

Crawlers are systematically harvesting .git/config for CI tokens

Sneakerweb: P2P web publishing via physical media, no DNS

Odin hits 1.0 — and a Rust-to-Lean pipeline that lets AI prove crypto code

Linux & Infrastructure

Hyprland ricing: a bar-less Quickshell shell, a Lua-config migrator, and a headless bug

Home Assistant corner: cast-to-TV, TPMS car fingerprinting, mmWave heatmaps

Crawlers are systematically harvesting `.git/config` for CI tokens