Josse-posten

Thursday, 2026-07-16  🛢️🚁🌡️

US strikes reach Tehran and a Hormuz tanker as Iran voids the peace deal; Zelensky purges his most popular minister and Kyiv fills with protesters; markets shrug.

US–Iran War Escalates: Strikes Reach Tehran, Tanker Disabled in Hormuz, Iran Declares Deal ‘Void’

Smoke rises over Chabahar, Iran, following US strikes, July 15. Photo: Reuters

The conflict entered a new phase overnight as American strikes expanded to northern Iran and — for the first time — the capital Tehran. The US fired Hellfire missiles at an unladen Iranian oil tanker attempting to reach Kharg Island, disabling it as part of the reimposed Hormuz port blockade; Iranian officials say a strike also damaged a children’s cancer hospital.

Tehran’s foreign minister declared the earlier memorandum with Washington ‘voided,’ framing this as an ‘existential war,’ and threatened to halt all Middle East energy exports if the US hits bridges and power plants. Iran fired on the Gulf states — sounding air-defence sirens in Bahrain and Kuwait as a prelude — even as the FM was in Qatar to mourn the Father Emir. A hardline former foreign minister separately urged Tehran to kidnap thousands of US soldiers from regional bases.

Commercial vessels are now refusing US military-guided passage through the strait after the attacks on shipping — a breakdown of the managed-transit scheme that could deepen the energy shock. (Trump’s cornered position and the Hormuz shipping crisis are covered in World.)

Guardian: Hormuz tanker · Al Jazeera: deal voided · Al Jazeera: war live · Al Jazeera: Gulf strikes · BBC · Guardian: energy threat · Jerusalem Post

Protesters gather near the Presidential Office in Kyiv, demanding Fedorov be kept on. Photo: Ukrainska Pravda

President Zelensky removed Defence Minister Mykhailo Fedorov — architect of Ukraine’s drone and innovation-warfare program — after only six months, with sources pointing to an irreconcilable conflict with commander-in-chief Syrskyi. The dismissal, made over the objections of foreign partners and Ukrainian civil society, drew an immediate backlash: protests formed outside the Presidential Office in Kyiv and in Lviv, the Air Force’s deputy commander resigned in solidarity, and Fedorov’s key tech advisers (drone volunteer Sternenko and EW expert ‘Flash’ Beskrestnov) walked out with him. On his way out, Fedorov revealed Ukraine had successfully tested an indigenous ballistic missile on July 14. Interior Minister Ihor Klymenko is set to replace him; parliament is voting on Serhii Koretskyi as prime minister.

The reshuffle coincided with Keir Starmer’s farewell Kyiv visit pledging ‘cast-iron’ support and a new EU–Ukraine drone-production deal — to which Russia replied by firing missiles at Kyiv, killing two, and warning that foreign troops in Ukraine would be treated as legitimate targets. (Ukraine’s deep strikes and the Black Sea campaign are in Ukraine.)

FT · Guardian · Kyiv Independent · UP: protests · UP: Syrskyi conflict · UP: deputy commander resigns · BBC: Starmer · Al Jazeera: Kyiv strikes · RBC: missile test

Indicator Value Change
S&P 500 (f) 7,600.50 −0.19%
Dow 30 (f) 52,838 −0.12%
Nasdaq (f) 29,554.25 −0.47%
Russell 2000 (f) 2,980.60 −0.37%
VIX 15.89 +1.40%
Gold 4,035 −0.41%
BTC $64,081.69 −0.99%
EUR/USD 1.1467 −0.02%
USD/NOK 9.6789 +0.27%
  • Futures modestly lower and gold down despite strikes on Tehran and a Hormuz tanker attack — a strikingly muted risk-off reaction so far (see World).

World

Hormuz in Crisis: Ships Refuse US-Guided Transits; Trump in a ‘Blind Alley’

Some commercial vessels are now refusing US military-guided passage through the Strait of Hormuz after attacks on ships, according to Reuters — a significant breakdown in the US-managed transit scheme that could deepen global energy disruption. The Economist’s leader casts Trump as cornered: five months of U-turns, contradictions and false boasts have left the US further from resolution than when the conflict began, with the chaos in Washington’s Iran policy evident to all sides.

Reuters · Economist: blind alley · Guardian

Trump Imposes 25% Tariffs on Brazil; Brasília Condemns the Move

The administration announced 25% tariffs on a range of Brazilian products after a trade-practices investigation, drawing swift condemnation from Brasília. Rubio said Lula’s policies are ‘bad for Americans and bad for Brazilians.’ Brazil is among the US’s largest Latin American trading partners; the move risks straining hemispheric relations and adds to a growing list of trade confrontations running alongside the Iran war.

Guardian · NYT

Venezuela: Government and Opposition Open Formal Talks on Elections

Venezuela’s interim government said it will begin formal talks with the opposition to ‘strengthen democracy’ and the electoral system, with US backing. Nobel laureate María Corina Machado will not lead the negotiations, contrary to expectations. The talks follow months of public anger at the Maduro government and fresh unrest over the earthquake response.

BBC · Guardian

Over 500 Rohingya Feared Dead in Two Myanmar Shipwrecks

The UN’s IOM reports more than 500 people are feared dead after two large shipwrecks off Myanmar since late June, the vessels believed to have carried mostly Rohingya Muslims fleeing military persecution. The disaster would rank among the deadliest episodes in the Rohingya crisis in years; an IOM investigation is ongoing.

The Guardian

Canada Wildfires: Toronto Records World’s Worst Air Quality

A Toronto ferry passenger points toward a skyline shrouded in orange haze from Ontario wildfires. Photo: Carlos Osorio/Reuters

Over 100 active wildfires in northern Ontario turned Toronto’s skies orange and pushed the city to the top of global air-quality worst lists, surpassing Kinshasa and New Delhi. Environment Canada issued health warnings as smoke drifted into the northeastern US; a CN Rail crew escaped after their locomotive was surrounded by flames, and CN suspended operations in the affected area. Meanwhile Utah’s ‘Babylon’ fire — the largest active US blaze — has communities on evacuation alert.

Guardian · Al Jazeera · NPR: Utah

Argentina Reach World Cup Final; Falklands Banner Triggers Diplomatic Row

Argentina’s Giovani Lo Celso holds a ‘Las Malvinas son Argentinas’ banner after the semifinal against England. Photo: Rebecca Blackwell/AP

Argentina beat England 2–1, scoring twice in the final ten minutes to extend England’s 60-year wait for a trophy. Players Lisandro Martínez and Giovani Lo Celso then displayed a banner reading ‘Las Malvinas son Argentinas’ — referencing Argentina’s claim to the Falklands — in breach of FIFA’s Stadium Code of Conduct, triggering calls for disciplinary proceedings and a sharp moment between Buenos Aires and London.

Al Jazeera · Guardian · BBC

Also today

Rights & law
France’s parliament passed a landmark assisted-dying law for terminally ill adults after years of divisive debate, joining the Netherlands, Belgium and Spain — BBC · Reuters
Hong Kong police raided independent bookshops and arrested five for selling ‘seditious’ books, continuing the post-2020 squeeze on the city’s publishing freedom — BBC · NPR
Todd Blanche, Trump’s AG nominee, apologised to the Senate for DOJ ‘mistakes’ handling the Epstein files, as the department refused New Mexico’s request for records tied to its Zorro Ranch abuse investigation — BBC · Al Jazeera
Geopolitics
A new Pew survey finds more people worldwide now favour China and Xi over the US and Trump — a soft-power reversal driven by sharply falling US favorability — BBC · NPR
China sent its fourth-ranked official, Wang Huning, to Pyongyang for talks with senior North Korean leadership — a notably high-level visit — Al Jazeera
Hachette and Elsevier are leading a US suit against Google, alleging Gemini was trained on copyrighted books without authorisation — Al Jazeera

Ukraine

Drones Strike the Engels Strategic Bomber Base; Novosibirsk Gets First-Ever Alert

Fire at the Engels military airbase after the Ukrainian drone strike. Photo: Exilenova+

Dozens of Ukrainian drones penetrated Russian air defences overnight July 15–16 and struck the Engels airbase in Saratov Oblast — home to the Tu-95 and Tu-160 strategic bombers used for cruise-missile strikes on Ukraine — with smoke visible into the morning. In a separate indicator of expanding reach, Novosibirsk, over 3,500 km from Ukraine, issued its first-ever drone alert the same night. Ukraine reportedly launched roughly 400 drones in the operation, also hitting assets in Engels city.

UP · United24: Novosibirsk · Reddit: Engels · Reddit: ~400 drones

Black Sea Campaign Halts Ukraine’s Grain Exports as Russia Retaliates on Odesa

A tanker struck by Ukrainian naval drones in the Black Sea. Photo: Security Service of Ukraine

Ukraine’s shadow-fleet campaign has now hit 136 Russian vessels — SBU Mamai naval drones struck the tankers Louise 1 and Banda overnight, with Russian aviation failing to intercept them with machine guns and bombs. ISW assesses Russia’s escalating strikes on Odesa port infrastructure since July 10 as a direct response: attacks damaged or destroyed three foreign-flagged merchant ships and obliterated 25,000 tons of sunflower oil at Kernel’s Chornomorsk terminal. Shipowners are invoking force majeure, grain traders have suspended purchases, and Ukraine’s deep-water grain exports have effectively stopped. Russian strikes elsewhere killed 14 civilians, and UN data cited by Vatican News shows child casualties surging.

ISW, Jul 15 · UP: tanker hits · UP: Odesa · CNN: Azov shutdown · BBC: 14 killed · Vatican News: child casualties

Crimea Under Near-Daily Blackouts After Strike on Balaklava Power Plant

Scorch marks on the Balaklava Thermal Power Plant in occupied Sevastopol after the strike. Source: SSO

Ukraine struck the Balaklava Thermal Power Plant in occupied Sevastopol — nearly half of Crimea’s electricity — on July 13–14, with damage to cooling and pumping systems expected to take two to five months to repair; Kerch then suffered a complete blackout after further strikes. Russian outlet Agentstvo reports power outages have hit major Crimean cities on at least 6–8 of the past 10 days, with water supply failing in Simferopol, Alushta and Yevpatoriya for days; residents are collecting drinking water as charitable aid.

United24 · Kyiv Post: Kerch · Reddit

Poland and the Baltics Warn of a Russian False-Flag Attack on NATO

Lithuania says it has intelligence of planned Russian ‘targeted kinetic operations’ against NATO infrastructure and is hardening its facilities. Poland’s foreign minister warns Russia may use drones framed as Ukrainian-launched to strike a NATO country and manufacture a pretext for escalation — confirming a prior US warning to Warsaw. Estonia separately reported an unannounced Russian live-fire exercise on Lake Peipus on July 9, the first on a lake rather than near the land border. ISW continues to read this as a Russian ‘Phase Zero’ campaign setting conditions for future provocations.

Reuters · ISW, Jul 15

Also today

  • Bulgaria has withdrawn from the international coalition supporting Ukraine — a notable crack in Western unity — while Russia seeks emergency gasoline imports from India after Ukrainian refinery strikes throttled domestic supply — VOV World · Reuters: India gasoline

Investigations

Vance Alleges an Israeli Influence Campaign to Extend the Iran War; Parscale Named

VP JD Vance warned publicly of a ‘very discreet, extremely well-funded campaign’ by Israeli actors working to extend the Iran war ‘not towards any objective, but just indefinitely’ — an unusually frank accusation from within the administration. Separately, Time reports that Brad Parscale, Trump’s former campaign manager, is actively running an Israeli influence operation targeting American opinion on the war. The revelations suggest Israeli interests are a live variable in White House war deliberations.

Jewish Insider · Time

Germany Warns Washington Against Funding MAGA Causes in European Elections

Chancellor Friedrich Merz warned the Trump administration not to interfere in German elections after the State Department announced a scheme to fund MAGA-aligned causes in Europe around ‘national sovereignty, migration, censorship and lawfare.’ It is an unusually direct confrontation between a core NATO ally and Washington — and raises the question of whether the US is now running influence operations in allied democracies, a tactic it has previously attributed only to adversaries.

The Guardian

Morocco Intelligence Whistleblower Details a Systematic Pegasus Campaign

A former member of Morocco’s domestic intelligence service gave the Guardian an unprecedented inside account of how the kingdom deployed Pegasus systematically from 2017 against domestic and foreign targets — journalists, opposition figures, and officials in other countries. It is the most detailed insider account yet of how an NSO Group client embedded the tool into routine intelligence work, adding Morocco to the list of governments exposed for using the spyware far beyond its marketed law-enforcement purpose.

The Guardian

Also today

  • A Maltese court heard testimony naming former economy minister Chris Cardona and ex-chief of staff Keith Schembri in the 2017 conspiracy to murder journalist Daphne Caruana Galizia — the first direct implication of senior politicians beyond the convicted hitmen — The Guardian
  • A Reuters investigation found companies controlled by a US Army Special Forces veteran flew a fleet of aging Boeings on supply routes to logistics hubs used by Sudan’s RSF, the paramilitary behind mass atrocities in Darfur — Reuters

Norway — Street Level

PST: Høyreekstrem trussel større enn 22. juli — Breivik inspirerer en ny generasjon

Foto: NTB, fra PSTs uttalelse på 15-årsdagen for 22. juli.

På 15-årsdagen for Utøya-massakren kommer PST med en dyster vurdering: den høyreekstreme trusselen er større i dag enn i 2011, og Breiviks angrep fungerer i økende grad som bevegelsens grunnleggingsmyte. I de fleste av PSTs pågående saker om høyreekstremisme går Breivik igjen som direkte inspirasjon — ofte med eksplisitt støtte til selve drapene. PST er særlig bekymret for en bølge av mindreårige som radikaliseres: siden 2025 har det vært en «markant økning» i unge gjerningspersoner i Vesten. De som radikaliseres i dag var for små til å huske 22. juli; avstand i tid tapper volden for virkelighet og gjør den lettere å glorifisere. PST peker også på en endret profil — mange er ikke dype ideologer, men har sammensatte sårbarheter, og fascinasjon for massevold betyr ofte like mye som ideologi. Det transnasjonale nettmiljøet — forum som blander voldsdyrkelse med memes, gaming og humor — er den viktigste rekrutteringsarenaen. VG melder at hver tredje radikalisert ungdom har en diagnose.

PST · VG · Reddit

Én av fem nyutdannede med master i realfag står uten jobb

Foto: Universitetsavisa

En kandidatundersøkelse fra NIFU kombinert med Randstad-analyse viser at 21 % av nyutdannede med master i realfag i Norge er uten jobb et halvt år etter fullført grad — mot 9,5 % arbeidsledighet blant alle nye masterkandidater. Antallet utlyste juniorstillinger har falt 29 % på ett år, mens median antall søkere per stilling har doblet seg fra 16 til 30. Arbeidsgivere krever erfaring selv til inngangsstillinger og vil ikke investere i opplæring. «Norsk næringsliv spiser sitt eget såkorn», sier Randstads markedsdirektør. Funnene skaper stor debatt på r/norge, der nyutdannede deler erfaringer fra et jobbmarked langt hardere enn universitetene antydet.

Universitetsavisa · Reddit

Fra FpU-topp til Kreml-influenser — roadtrip-stunt krasjer i Russlands drivstoffkrise

Rudi Ripnes, tidligere FpU-leder i Bodø, nå pro-russisk TikTok-influenser. Foto: fra Nettavisen

Rudi Ripnes (25), tidligere leder av FpU i Bodø og norsk soldat med patriotisk fanfare, er i dag en av Russlands mest sette vestlige propagandister på TikTok — 150 000 følgere og hundrevis av millioner visninger under aliaset «This Norway Guy». Han hyller regimet, håner vestlige sanksjoner og selger «tradisjonelle verdier» fra Moskva. Siste stunt — en PR-tur i en 1975 Cadillac Eldorado fra Oslo til Moskva — kollapset i Murmansk da russisk drivstoffrasjonering (utløst av ukrainske droneangrep som har slått ut rundt en tredel av Russlands raffinerikapasitet) gjorde bensinslukeren ubrukelig. Han forlot bilen og tok toget til St. Petersburg. Ironien: hans egen russiske kone ble arrestert og bøtelagt med 20 000 rubler i 2022 for angivelig å ha deltatt i en antikrigsdemonstrasjon — likevel forteller Ripnes publikummet sitt at russere snakker fritt uten frykt. Medieforsker Ilja Sjepelin beskriver innholdet som et speil av statlig propaganda.

Nettavisen · The Barents Observer · Reddit

Matbud filmer kunder med smartbriller — personvernalarm går

Videostill fra NRK: matbudet med kroppsmontert kamera i Oslo.

NRK meldte om et matbud i Oslo som filmet kunder på dørstokken med diskré smartbriller og la opptakene ut på sosiale medier — inspirert av en tilsvarende POV-trend fra et bud i London. Videoene, med ekte kunder og dørnumre, har fått tusenvis av visninger. Wolt sier praksisen bryter både retningslinjer og loven, men budet vil fortsette mer forsiktig. Saken — sammen med en egen sak om en ny app som varsler om Meta-smartbriller i nærheten — har utløst en levende debatt om AI-briller bør forbys, med Reddit-brukere som krever lovgivning.

NRK · Tek.no · Reddit

Også i dag

  • FrP foreslår å frata ikke-norske statsborgere stemmeretten ved lokalvalg — i dag kan alle med tre års botid stemme, om lag 360 000 personer ved forrige valg. Forslaget skaper heftig debatt på r/norge — VG · Reddit
  • Østlandet baker i 30–35 °C, og yr.no melder norske byer varmere enn Dubrovnik, Rhodos og Napoli. Nesbyen var nær å slå Norges varmerekord fra 1970; meteorologene kaller det «absolutt unormalt» — NRK · Reddit

Tech

Microsoft’s Undisableable Windows Device Tracker, Now in FBI Case Files

Header illustration for the Windows GDID tracking story. Source: gHacks

Microsoft has confirmed GDID (Global Device Identifier), a persistent identifier tied to your Microsoft Account that cannot be disabled without breaking Windows activation and the Microsoft Store. It surfaced publicly when federal prosecutors documented the FBI using it to track Scattered Spider suspect Peter Stokes across VPNs and multiple countries — the identifier stayed consistent as IP addresses changed through proxies, linking device activity to social-media accounts and travel records. No consent, no notification, no opt-out, unlike iOS and Android. It lives in the registry under HKCU\SOFTWARE\Microsoft\IdentityCRL\ExtendedProperties, survives updates, and resets only on a clean reinstall — after which signing back in re-links the chain.

gHacks · Lobsters

Ronacher: AI Removes the Friction That Forces Coordination

Armin Ronacher sharpens his earlier argument with a specific mechanism: code slowness was a coordination mechanism — it forced knowledge transfer and maintained shared mental models across teams. AI removes that friction, letting developers request isolated changes (auth, caching, database rebuilds) without communicating or understanding the broader system. The danger is that the collapse is invisible: ‘The tower does not fall, and so we do not notice what was lost.’ Green builds and passing tests mask architectural decomposition already underway.

lucumr.pocoo.org · Lobsters

The Tokio/Rayon Trap: Async/Await’s Hidden Concurrency Tax

A sharp critique of Rust’s async ecosystem: async/await conflates asynchrony (non-blocking I/O) with concurrency (parallel execution), forcing developers to manually partition I/O work (Tokio) from CPU work (Rayon) and message-pass between two runtime models. CPU-heavy code in an async context blocks the executor until the next .await, spiking latency for unrelated requests. The second failure mode: tokio::spawn provides no backpressure, so traffic spikes that slow the database cause unbounded task accumulation and OOM kills. The abstraction promised to hide complexity; instead it relocated it.

pmbanugo.me · HN

How PlanetScale Makes 768 Database Servers Look Like One

PlanetScale’s deep dive centers on an intelligent proxy/router that parses SQL, determines which shards hold the relevant data via JSON topology metadata, routes queries, and aggregates results transparently — with no application awareness of shard boundaries. The proxy sits behind a load balancer handling millions of queries per second, solving three classic single-database bottlenecks: write-ahead-log saturation, capacity limits, and backup time.

PlanetScale · HN

Inventing ELIZA — The Definitive History of the First Chatbot, Now Open Access

MIT Press has made Inventing ELIZA freely available — the full account of how Joseph Weizenbaum built the first chatbot in the 1960s, the design choices he made, and what the human response revealed, including the ‘ELIZA effect’ of people attributing understanding to a program with none. Worth reading alongside current AI discourse on anthropomorphization and the nature of understanding.

MIT Press (OA) · Lobsters

Also today

AI & policy
Schneier argues opposition to individual data-center siting is a distraction — the real threat is a handful of AI companies wielding enough influence to capture whole industries; he prescribes state regulation, compute taxes, and publicly-controlled AI infrastructure — Schneier · Lobsters
The Economist’s leader argues state-backed efforts to build rival frontier models — European champions, state-backed Chinese programmes — are doomed, and calls instead for an international framework less dependent on the US–China duopoly — The Economist
Linus Torvalds backed LLM usage in kernel development, dismissing a maintainer’s environmental and ethical objections: ‘we do open source because it results in better technology, not because of religious reasons’ — sparking debate over whether ‘only technical reasons’ is itself a values position — LKML · Lobsters
Platforms
Mozilla’s Over the Edge 2.0 documents six coercive Microsoft tactics against browser choice — with Copilot now overriding the default browser to open links in Edge; tactics are notably reduced in the EEA, proving they’re deliberate — Mozilla · Lobsters
Google Play will begin allowing third-party app stores next week as Epic withdraws its antitrust settlement — a structural shift in Android distribution — Ars Technica
Dev tools
A technique using SQLite’s r_* tracing hooks and EXPLAIN QUERY PLAN catches full table scans at development or test time, before they reach production — tenderlovemaking.com · Lobsters
A proposal that SQLite adopt Rust-style versioned ‘editions’ to allow backward-incompatible fixes to 50-year-old design mistakes while keeping opt-in compatibility — mort.coffee · HN

Linux & Infrastructure

Terminal-Centric NixOS/Hyprland Config: No Bar, Vim Navigation System-Wide

The barless Hyprland setup — no waybar, Kanagawa Wave theme, terminal-centric layout.

A published NixOS config takes the ‘barless Hyprland’ idea further than most: keyd remaps Caps Lock→Control and Grave→Escape at the input-device level, making Vim navigation work uniformly across Wayland, XWayland, and terminals. The stack is Ghostty + Fish + Starship + tmux + Yazi + Neovim, with Kanagawa Wave applied to every layer from SDDM to Firefox, and Hyprland run via UWSM. The encrypted Vicinae clipboard manager is set to ignore detected passwords.

GitHub: savonovv/nixos-config · r/NixOS · r/hyprland

Tailscale SSH: Root-Access Vulnerability Requires Immediate Upgrade (TS-2026-009)

A high-severity command-injection bug in Tailscale SSH (before 1.98.9) lets usernames with leading dashes (e.g. -i) be parsed as CLI flags by getent, bypassing ACL restrictions and granting unauthorized root sessions. If you run Tailscale SSH with autogroup:nonroot ACLs or share a tailnet with anyone else, upgrade to 1.98.9 immediately. A second fix in the release (TS-2026-008) closes an infinite-loop DoS in Serve/Funnel via malformed HTTP paths.

Tailscale TS-2026-009 · r/selfhosted

FlakeHub Achieves FedRAMP High — Nix Enters Regulated Government Environments

Determinate Systems has obtained FedRAMP High certification for FlakeHub, the strictest unclassified US government authorization level (reserved for law enforcement, emergency services, and financial systems). This makes FlakeHub — private flakes, binary caching, cryptographic provenance — compliant for agencies handling Controlled Unclassified Information. Determinate Nix and Determinate Secure Packages inherit the authorization through FlakeHub’s infrastructure.

Determinate Systems · r/NixOS · Discourse

elfuse: Run Linux ELF Binaries on macOS Apple Silicon — No Docker, No Daemon

elfuse runs aarch64 and x86_64 Linux ELF binaries directly on macOS using Apple’s Hypervisor.framework — one lightweight process-scoped VM per binary, with Linux syscalls translated to macOS behavior in host-side handlers rather than running a real Linux kernel. x86_64 binaries get Rosetta translation inside the same VM; architecture is auto-detected from ELF headers, and guests read and write the macOS filesystem directly with no overlay. Intentionally narrow: single-binary execution, minimal overhead, not a full Linux environment.

GitHub: elfuse · Lobsters

Also today

Nix & NixOS
A PR adding a CLAUDE.md to the nixpkgs root has opened a wider debate on LLMs in the project; the community is converging on a call for an explicit disclosure policy rather than a ban, with the PR’s polls criticised as methodologically flawed — Discourse · PR #534657
A PR (and Full Time Nix episode with Jeremy Fleischman) proposes replacing QEMU VMs in the NixOS test framework with systemd-nspawn containers, dropping the /dev/net/tun requirement and cutting overhead for local runs — Full Time Nix · Discourse
CVE-2026-53359 (‘Januscape’) is an actively-discussed KVM Shadow-MMU VM-escape; the NixOS thread covers interim mitigations — removing trust from co-hosted VMs, adjusting KVM module parameters, and watching the nixpkgs kernel-patch backlog — r/NixOS
Self-hosting
cronstable — a self-contained cron daemon (single binary, no Python/Docker) with a web dashboard, DAG orchestration, mTLS clustering with leader election, and a built-in read-only MCP server for Claude/Cursor/Copilot — GitHub · r/selfhosted
USBridge Remote open-sourced (GPLv3) — a P2P remote desktop over Tailscale with native Wayland, Moonlight streaming up to 2K@240fps, no account on the target, and optional BIOS-level hardware KVM passthrough — GitHub · r/selfhosted
Tinyauth v5.1.0 earned OpenID Connect Basic OP certification, adding Tailscale auth, deny-by-default access, Kubernetes annotation controls, and a PostgreSQL backend — Release notes · r/selfhosted
NASty 0.0.14 (NixOS + bcachefs + Rust NAS OS) adds Active Directory (member and DC), whole-snapshot disaster recovery, nftables deny-by-default, RDMA over RoCE/InfiniBand, and SR-IOV/IOMMU passthrough — with atomic rollbacks intact — Release · r/NixOS
More
A migration writeup from EWW to Quickshell is circulating in the Hyprland community — QML/QtQuick with live reloading, first-class Hyprland/PipeWire integrations, and an LSP — r/hyprland · Quickshell
FreeBSD removed dialog, its last GPL base-system component (replaced by bsddialog); FreeBSD 16.0 will ship with zero GPL code in base — Phoronix · Lobsters
Patchless — a searchable database that analyzes public kernel commits to flag security patches not yet propagated across distributions, confidence-ranked as an early-warning layer — Patchless · Lobsters 
cd ~/repos/josse-posten && claude --resume d82e39cf-7d50-4410-a9b5-8051abaa4283