Washington opens two economic fronts at once — an “economic D-Day” on Iran and 50% auto tariffs on Canada — while Europe counts its heat dead and Ukraine marks 35 years of independence under a mass drone strike.

US declares “economic D-Day” on Iran; Tehran vows seismic retaliation

US Treasury Secretary Scott Bessent announces new Iran sanctions at the Treasury Department, Washington D.C., August 24. Photo: Reuters/Evelyn Hockstein

Treasury Secretary Scott Bessent announced sweeping new sanctions targeting Iran’s aviation, tech, and shipping sectors — calling it an “economic D-Day” — and sanctioned 60 additional Iran-linked entities, warning that no country is beyond the reach of American secondary sanctions if it maintains ties with Tehran. Trump reportedly called leaders worldwide personally, urging them to cut their bindings to Iran. Iran vowed to retaliate “in a seismic manner”; its foreign minister dismissed the campaign as “desperate.” Traffic through the Strait of Hormuz fell to a three-month low — only two commercial vessels passed Monday. The real test is whether China, India, and Russia comply. Two US carrier strike groups remain in the region, straining Navy resources. A new poll shows public support for the Iran war falling and Trump’s approval at a record low.

NPR · Guardian: sanctions · Guardian: Iran response · Al Jazeera: markets · Al Jazeera: poll · E24 · Aftenposten: Hormuz · r/worldnews

US–Canada trade war: Trump announces 50% auto tariffs; Carney refuses to negotiate

Trump announced 50% tariffs on Canadian automobiles, trucks, auto parts, and steel — the steepest escalation yet in a severe bilateral rupture. Prime Minister Mark Carney declared Canada “is not a US subsidiary” and refused to return to the table until Washington changes its “attitude,” adding that no deal can weaken Canada’s French-language protections. Ontario Premier Doug Ford threatened to cut off electricity and critical minerals to the US. Canada also announced C$11 billion to build six new icebreakers as an Arctic sovereignty investment. In Oslo, a Dagsavisen commentator contrasted Canada’s confrontational line with a Norwegian government that “grovels” to Trump.

Guardian · BBC · AP · Globe and Mail: Ford · Reuters: icebreakers · NRK · Dagsavisen: Norges logring · r/worldnews

35 000 dead in Europe’s back-to-back heatwaves — and the oceans hit a record

Preliminary data covering roughly half of Europe shows at least 35,000 excess deaths across four consecutive record-breaking heatwaves this summer — a figure that excludes August entirely and is likely far higher. S&P warns the toll is driving up insurers’ claims and could dent sector earnings. France alone has recorded 301 drowning deaths since June 19. The same week, the world’s oceans hit their highest measured surface temperature on record — a milestone scientists call deeply alarming — as a rare tornado injured more than 40 near Carcassonne and wildfires raged from Indonesian Borneo to the outskirts of Reno (more in World).

Guardian: death toll · Guardian: insurance · Guardian: oceans · BBC: France

Indicator	Value	Change
S&P 500 (f)	7,683	+0.17%
Dow 30 (f)	53,514	+0.05%
Nasdaq (f)	29,229	+0.42%
Russell 2000 (f)	3,007	+0.19%
VIX	15.8	−0.38%
Gold	4,684	−0.29%
BTC	$79,913	+3.75%
EUR/USD	1.1659	−0.08%
USD/NOK	9.33	+0.27%

Futures and the VIX show little fear despite the day’s escalations — the 50% Canada auto tariffs and the “economic D-Day” Iran sanctions haven’t dented risk appetite.

World

Trump plans largest mass visa revocation in US history — 200,000 asylum seekers targeted

An officer outside the Delaney Hall detention facility in Newark, New Jersey, as protesters gather. Photo: David ‘Dee’ Delgado/Reuters

The Trump administration announced plans to revoke B1 and B2 (business and tourist) visas issued between 2016 and 2026 to people who have applied for or are currently seeking asylum in the US. If carried out, it would be the largest single mass visa revocation in American history, stripping legal status from people who entered the country legally before later seeking protection. The same day, the administration removed Syria from its state sponsors of terrorism list — embracing new President Ahmed al-Sharaa, the former al-Qaeda-linked militant who overthrew Assad — while in Bogotá, Colombia’s newly inaugurated far-right President Abelardo de la Espriella ordered detentions and deportations of undocumented migrants from day one.

Guardian: visas · Al Jazeera: visas · NPR: visas · BBC: Syria · Al Jazeera: Syria · Guardian: Colombia

Supreme Court clears Trump’s mail voting restrictions ahead of midterms

The US Supreme Court paused a lower-court ruling that had blocked key parts of Trump’s executive order limiting mail-in voting, allowing the restrictions to proceed ahead of the midterm elections — a decision described as a “provisional victory” landing just before the decisive vote. USPS enforcement of related provisions remains nationally blocked. California Governor Gavin Newsom vowed another lawsuit.

Al Jazeera · NPR · NRK · Aftenposten

Netanyahu claims Iran tried to assassinate one of his sons

Israeli PM Benjamin Netanyahu alleged that Iran attempted to kill one of his sons, declining to specify which, when, or how close it came. The claim comes as the US and Israel recently killed Iran’s supreme leader and four of his family members, and as Netanyahu — lagging in polls ahead of Israeli elections — faces domestic pressure. Separately, the UK, Canada, and Australia jointly condemned Israel for refusing an independent criminal investigation into aid worker deaths in Gaza, as UK PM Andy Burnham faced Labour grassroots pressure to recognise Israel’s actions as genocide.

Benjamin Netanyahu casts his ballot in Likud party primary elections. Photo: Ohad Zwigenberg/AP

Al Jazeera: assassination · Reuters · BBC: aid worker probe · Guardian: Labour pressure · r/worldnews

Disasters across the Global South: Nigeria mosque kidnapping, Guinea dump collapse, Tunisia boat sinking

Gunmen stormed a mosque in Dekara village, Niger State, Nigeria, abducting roughly 600 women, children, and elderly worshippers, later posting a video of the captives; no group has claimed responsibility. In Conakry, Guinea, a refuse dump collapsed after heavy overnight rains, killing at least 30 — days after the government pledged to relocate the site. Off Tunisia, at least 12 of 15 migrants drowned when their boat sank, triggering violent protests in Ben Guerdane. And in Guinea-Bissau, an mpox outbreak has reached 46 suspected cases, with children more than half of them.

Fire burns as demonstrators clash with security forces in Ben Guerdane, Tunisia, after the migrant boat sinking. Photo: Reuters/Ahmed Jarray

Guardian: Nigeria · Guardian: Guinea · Al Jazeera: Tunisia · Guardian: mpox

Xi Jinping to visit India for the first time in seven years

Chinese President Xi Jinping is expected to travel to India with a large delegation — the first such visit since 2019 — signalling a significant diplomatic warming after years of tension, including the deadly 2020 Galwan Valley clash. The thaw reflects strategic recalibration by both sides amid the broader geopolitical realignment underway.

Reuters · r/worldnews

Also today

Climate & disasters: Indonesia chokes as wildfires rage under the strongest El Niño on record; haze spreads to Malaysia, Singapore on alert — Guardian · NPR; Wind-driven Hawk fire near Reno forces 23,000 to evacuate; 27% contained — Guardian · BBC; Rare tornado near Carcassonne injures 40+, hardest hit at Pomas — BBC · Al Jazeera
Repression & accountability: Former Pussy Riot member escapes Russia, says FSB forcibly recruited her for three years — Kyiv Independent; Amnesty says India used lethal weapons on protesters labelled “Cockroach” — Al Jazeera; Libya’s rival east–west factions sign initial election pact in Tunis — Al Jazeera

Ukraine

35th Independence Day: coalition pledges, 600 German Patriots, UK to license Storm Shadow

Leaders of the Coalition of the Willing meet in Kyiv on Ukraine’s Independence Day, Aug 24. Photo: Office of the President of Ukraine

European leaders convened in Kyiv on August 24 for a Coalition of the Willing summit, agreeing to accelerate military support, expand air defence, tighten sanctions, and prepare multinational forces, with another meeting requested for September and joint exercises planned in Poland this fall. Germany confirmed delivery of 600 Patriot PAC-2 missiles by 2028; the EU approved a €6.1B defence package. UK PM Andy Burnham confirmed that defence firm MBDA will share classified technical information enabling Ukraine to domestically manufacture SCALP/Storm Shadow long-range missiles, and secured access to Ukraine’s Avengers AI Labs — Britain will use Ukrainian battlefield data to train AI guarding its defence sites, railways, and energy infrastructure. A Kremlin adviser warned on BBC Newsnight that UK drone factories may face attacks from “unknown sources.” Burnham plans to travel to New York next month to lobby Trump directly for Patriots. Norway’s PM Jonas Gahr Støre joined the Nordic-Baltic delegation; Zelensky again denied — directly to his visitors — any Ukrainian role in the Nord Stream sabotage. Norway is expected to continue NOK 85 billion in support over next year’s budget.

Ukrainska Pravda: coalition · TVPworld: 600 Patriots · Eastern Herald: €6.1B · NV: Storm Shadow · United24: domestic production · NPR: classified tech · BBC: Kremlin threat · Guardian: AI deal · NRK: Støre · TU: Nord Stream · TU: 85 mrd

Russia’s overnight mass strike kills civilians; mobilisation preparations reported

Emergency services at the destroyed shopping centre in Slobozhanske near Dnipro. Photo: State Emergency Service of Ukraine

Russia launched 150 drones plus an Iskander-M and Kh-31P overnight Aug 24–25; air defences downed 124. Strikes killed one in Kharkiv and two in Zaporizhzhia, burned a shopping centre near Dnipro, damaged a Kyiv residential building and a Red Cross warehouse in Kherson ($627K in supplies destroyed), and knocked out gas supply in Konotop. Separately, the Wall Street Journal reported Russia is testing military infrastructure for a potential new mobilisation wave as losses mount — 1,230 casualties reported on Aug 25 alone. The frontline stayed broadly static: Russian offensives stalled across Sumy, Kharkiv, Kupyansk, and Donetsk, while Ukraine made small confirmed gains east of Dibrova near Slovyansk and in southeastern Orikhiv.

Ukrainska Pravda: 150 drones · UP: Zaporizhzhia · UP: Dnipro centre · UP: Konotop · NV: mobilisation · ISW: Aug 24 · UP: 1,230 losses

Ukraine’s deep-strike campaign escalates: air defences suppressed, refineries and Ozon warehouses hit

Fire at the Afipsky oil refinery in Krasnodar Krai following a Ukrainian drone strike, Aug 25. Photo: Ukrainska Pravda

Ukraine is running a coordinated SEAD/DEAD campaign alongside its economic strike offensive. Aug 23–24 strikes destroyed or damaged a MiG-29 and a Ka-52 at Millerovo Air Base, multiple air-surveillance radars in Rostov Oblast and Crimea, and a rocket-fuel plant in Kamensk-Shakhtinsky. Three more Ozon logistics centres (totalling 314,000 m²) were hit in Dagestan, Stavropol Krai, and Adygea — part of an intensifying campaign against Russia’s second-largest online retailer that began Aug 22. Overnight Aug 24–25, drones struck the Afipsky oil refinery in Krasnodar Krai, and fires were reported at Amur gas-processing plants in Russia’s far east — among the most geographically distant strikes yet recorded. Moscow’s answer: Putin signed a decree letting the state seize any fuel, energy, industrial, transport, or utilities facility that fails to protect itself against drone strikes, with seizure lasting at his personal discretion. ISW reads it primarily as a revenue grab, with the badly damaged Ozon and Wildberries as natural early targets.

ISW: Aug 24 · UP: Afipsky · Militarnyi: Ozon warehouses · FT: Ozon · BBC: Ozon · Militarnyi: nationalisation decree · r/ukraine: Amur

Also today

Russia sells apartments on Mariupol’s ruins with subsidised 2% state mortgages — a deliberate demographic erasure — United24
First Briton killed fighting for Russia: a fisherman in the Russian army, hit by a Ukrainian drone — Telegraph

Norway

Massivt DDoS-angrep lammet norske offentlige tjenester i 30+ timer

Illustrasjonsbilde av digitale innloggingstjenester. Foto: Aftenposten

Et kraftig tjenestenektangrep traff ID-porten, MinID, Altinn og E-innsyn natt til mandag kl. 03:38 og varte over 30 timer, med en ny forverring mandag kveld. Digdir beskriver angrepet som «to til tre ganger kraftigere enn tidligere angrep» og melder om problemer i ni tjenester; også banker og private nettjenester ble rammet. En NTNU-professor spekulerer i at russiske aktører kan stå bak – skalaen og ressursene taler for en statlig aktør – og Digdir omtaler situasjonen som et forsøk på å svekke befolkningens tillit til det offentlige digitale apparatet. Dette er det tredje store angrepet på ni uker, og på r/norge trekker folk en annen konklusjon enn NSMs «del av normalt internett»: det er i ferd med å bli en ukentlig rutine, og offentlige systemer virker underdimensjonerte for å håndtere det.

Digi.no: forverring · NRK: fortsetter · Aftenposten: banker sliter · Digi.no: kommentar · r/norge

Russland tester fullstendig KI-styrte droner som velger mål uten menneskelig innblanding

En russisk menneskestyrt drone fanget i et sikkerhetsnett over en vei i Druzjkivka i Donetsk (illustrasjonsfoto). Foto: Iryna Rybakova / Ukrainas militære / AP / NTB

En russisk drone som drepte tre ukrainere tidligere i sommer var ifølge Ukraina styrt utelukkende av kunstig intelligens uten menneskelig pilot. Dronen ble programmert med et omtrentlig mål – en bensinstasjon – og KI tok deretter over for å identifisere og angripe spesifikke objekter som propantanker. Nvidia-databrikker ble funnet i vraket, ukryptert, noe som ga ukrainsk etterretning fullt innsyn i treningsdataene. Eksperter beskriver det som et gjennombrudd i autonom krigføring: «Om noen få år lever vi i en Terminator-film», sier lederen for luftvern i Zaporizjzja.

TU.no · Aftenposten · Digi.no: Russlands Starlink

Kong Harald stabil, men tilstanden har forverret seg

Kongehuset melder at det ikke er vesentlige endringer i kong Haralds helsetilstand – han er fortsatt stabil. Kongen (89) har vært innlagt på Rikshospitalet siden 17. august og behandles for blodsykdommen hemolytisk anemi og en blodinfeksjon; slottet har bekreftet at tilstanden er forverret. Dronning Sonja og kronprins Haakon besøkte sykehuset mandag. Tirsdag er det 25 år siden kronprins Haakon og kronprinsesse Mette-Marit giftet seg – sølvbryllupsdagen markeres privat, og selve feiringen er utsatt på grunn av kongens sykdom. På r/norway er tonen preget av genuin uro for at innleggelsen kan være mer alvorlig enn tidligere.

NRK: ingen endringer · NRK: Dronning Sonja · NRK: sølvbryllupsdag · BBC · r/norway

Oljetopper varsler gasskrise og går sammen om jakten på gigafunn

Oljetopper er bekymret etter et kraftig hopp i gassprisene, med europeiske lagre på bekymringsfullt lave nivåer. Shell-sjef Wael Sawan advarer om at «håp aldri er en god strategi», og analytikere spår at en kald vinter kan gi en reell krise; Equinor inngikk samtidig en stor gassavtale med tyske Uniper. Parallelt går Norges tre største sokkelselskaper – Equinor, Aker BP og Vår Energi – sammen om leting etter nye store funn, med sikte på 20–25 brønnkandidater og 4–5 leteboringer per år fra 2028. Bakteppet er en advarsel fra Sokkeldirektoratet om at produksjonen kan falle over 50 prosent innen 2050 uten store nye funn. Energiminister Terje Aasland (Ap) slår samtidig fast at Norge vil fortsette oljeboring i Barentshavet selv om EU vedtar et arktisk moratorium – til sterk kritikk fra SV, MDG og Venstre.

E24: gass-sjokk · DN: Shell-sjefen · NRK: gigafunn · DN: oljegiganter · DN: trosse EU

Handlingsregel-debatt: har oljefondet vokst fra regelen?

Høyre-leder Ine Eriksen Søreide krever at handlingsregelen strammes inn og vil ikke at mer enn fire prosent av oljefondet skal brukes per år. Både E24 og Aftenposten argumenterer for at fondet nå har vokst så raskt i forhold til fastlandsøkonomien at selve prosentregelen ikke lenger fungerer som tiltenkt – dagens tak tillater pengebruk som ville vært ansett som uforsvarlig da regelen ble skrevet. Alternativer som luftes: et lavere tak på 2,5 prosent, kobling til fondets kontantstrøm, eller et tak målt mot BNP. Debatten er høyaktuell foran budsjettsesongen, uten at verken Høyre eller regjeringen har klare alternative forslag.

E24: ny fartsgrense · E24: Høyre vil stramme inn · r/norge

Også i dag

Skole & KI: Student fikk A på masteroppgave skrevet av KI – «katten er ute av sekken», sier Anders Rodem (27) — Aftenposten; Kunnskapsministeren ber skoler forby KI-briller som truer personvernet til medelever — Digi.no; Realfag straffes med inntil 3,7 karakterpoeng på vitnemålet; regjeringen varsler tiltak — Aftenposten; Høyre slakter «Støre-skolen» og vil ha eksamen med penn og papir – Reddit påpeker ironien i partiets egen digitaliseringsarv — NRK · r/norge
Økonomi & arbeid: OBOS kutter rundt 200 ansatte – 10 prosent av staben – innen 2027 — E24; Arbeidsledigheten falt til 4,5 prosent i juli; særlig unge i jobb — Aftenposten; KLP pålagt å endre praksis etter fire års etterforskning – «ensidig og skjult påvirkning» av kommuner — DN; Flygelederstreiken over: seniorledere får trippel lønnsvekst, men ingen pauseendringer – DN kaller streiken «unødvendig og mislykket» — DN; Grafikkortpriser opp 13,3 prosent på én måned – KI-etterspørsel og importtoll-usikkerhet driver oppgangen — Digi.no
Samfunn & forsvar: Norge kjøper 20 Patria 6x6-panservogner og får grønt lys for 21 Black Hawk-helikoptre — TU: panservogner · TU: Black Hawk; Ettårsmarkering for det rasistisk motiverte drapet på Tamima Nibras Juhar; byrådet lover permanent minnesmerke — NRK · Dagsavisen; Høyre-topp Peter Christian Frølich innlagt med alvorlig hjerteinfarkt — Dagsavisen; Mann i 80-åra drept av ku i Hallingdal — NRK; Russlands siste opposisjonsparti, Jabloko, nektet å stille til valg — NRK
Kultur & medier: Nederlandsk allmennkringkaster AVROTROS dropper Eurovision 2027 på grunn av Gaza — NRK · BBC; Den politiske avisen Altinget Norge legges ned – «brutalt» — DN; Regjeringen skrinlegger planer om toetasjes tog på Østlandet — TU.no; Cannes-vinneren «Fjord» av Cristian Mungiu gransker Norge gjennom en rumensk families konflikt med Barnevernet — r/norway; Bodø/Glimt med godt utgangspunkt mot NEC Nijmegen om Mesterliga-plass — NRK
KI & teknologi: Pew-studie: over 35 prosent av nye nettsider er nå KI-generert; bekymringen overstiger begeistringen — Digi.no; KI-generert pasientinformasjon – inkludert syntetiske videofigurer – sprer seg i norske sykehus — r/norge; OpenAI bremser modellskaleringen – mener sikkerheten ikke holder tritt — Digi.no; TikTok inngår 3,7-milliarders forlik etter å ha latt barn under 13 lage kontoer — Digi.no; Gaming-nettstedet Pressfire kaster ut all tredjepartssporing – laster sider på 0,3 sekunder — Pressfire; Regjeringen åpner for at kommuner kan forby Airbnb; annonsene tredoblet 2022–2025 — TV2; Kinesisk humanoidrobot løp 100 meter på 9,39 sekunder – raskere enn Bolts rekord — TU.no

Tech

MS Paint phones home for AI images, baking a tracking GUID into every pixel

How Windows Paint sends AI prompts to Azure moderation, receives a GUID, then invisibly embeds it into the pixel data. Diagram: xusheng.dev

Reverse engineering reveals Windows Paint and Photos send AI image prompts to Microsoft Azure servers for moderation, which return a GUID that gets embedded as an invisible pixel-level watermark. The 18-byte payload (0x4c || 16-byte GUID || checksum) uses content-adaptive SVD-style block-domain encoding via Watermarker.dll, and the GUID is also logged in C2PA Content Credentials metadata — creating a persistent, cross-platform identifier linking your image back to Microsoft’s servers. Image generation silently fails if watermarking fails; minimum watermarkable size is 192×192px.

Reverse engineering writeup · HN

Your executable is a SQLite database

NixOS contributor Farid Zakaria proposes SELF (Structured Executable & Linkable Format) — replacing ELF binaries with SQLite databases where symbol tables are indexed SQL tables and segments are BLOBs. strip becomes DELETE FROM sections; VACUUM;, patchelf becomes an UPDATE, and ldd becomes a SQL query over a needed view. Dynamic linking is handled via glibc’s rtld-audit interface: instead of walking RUNPATH and LD_LIBRARY_PATH, the audit library answers “which library satisfies this symbol?” with a query. His argument: ELF is terse and schema-less by design, making it fragile to modify, whereas SQLite is self-describing, stable, and queryable. A working prototype (elf2self, self-exec) integrates via NixOS binfmt_misc, with ~5ms fixed startup overhead and stripped sizes within 1% of ELF — a natural fit for Nix’s interest in precise dependency graphs.

fzakaria.com · Lobsters · r/NixOS

Firefox ships JPEG XL — with a Rust decoder written from scratch

Mozilla’s intent-to-ship confirms Firefox JPEG XL support via jxl-rs, a Rust decoder commissioned from Google Research specifically to avoid the C++ codebase’s security attack surface. JPEG XL wins over AVIF for lossless compression and progressive rendering (visually usable images at 15% of bytes); AVIF wins for lossy photo quality at typical web bitrates. Full cross-browser support is expected across all major platforms by end of 2026, closing a years-long gap.

Mozilla Hacks · Lobsters

Two ways to unmask and escape an LLM

Two writeups probe the seams of the model-serving stack. Dejan Simic identified the mystery “ox-alpha” model climbing OpenRouter leaderboards as GLM (Z.ai) using gzip-NCD (Normalized Compression Distance) — a parameter-free technique where outputs from the same model compress more efficiently together; GLM-5.3 matched 7 of 14 samples, far ahead of all others, and NCD needs no weights, only samples. Meanwhile Boyd Kane details a class of attacks where jailbroken LLMs exploit parsing bugs in inference engines (vLLM, SGLang) to run code on the GPU host — the concrete case being CVE-2025-9141, where vLLM’s tool-call parser called Python’s eval() on LLM-supplied arguments. Proposed mitigations: air-gap the GPU from token-parsing logic and treat all GPU output as untrusted.

dejan.ai: ox-alpha · HN: ox-alpha · Boyd Kane: inference engines · HN: inference engines

Jailbreaking an Amazon tablet took Chinese AI where American AI refused to go

Eric Pardee spent five months and $266 across four AI models to root a Fire HD 10 after Claude repeatedly declined to help exploit CVE-2022-38181 (a use-after-free in ARM’s Mali GPU driver). Chinese frontier models — Kimi K3, GLM-5.2/5.3 — cooperated, enabling SELinux disablement and removal of ~100 Amazon packages. The self-described “prompt kiddie” frames the outcome as a stark illustration of diverging AI safeguard philosophies between American and Chinese providers.

Eric Pardee’s blog · Lobsters

Bartosz Ciechanowski’s Moon

Buzz Aldrin’s boot print in the lunar regolith — still pristine after 55 years, with no wind or erosion. Photo: Apollo 11 / NASA

Ciechanowski’s latest interactive essay covers the Moon in his characteristic depth — orbital mechanics, why Aldrin’s footprint is still pristine (no wind, no erosion), the opposition surge (the Moon brightens more than expected at full because retro-reflected light returns directly toward the source), tidal locking, and libration. Like his essays on GPS, watches, and internal combustion engines, it’s built on interactive 3D visualisations that earn their complexity. Worth an unhurried read.

ciechanow.ski · HN

Also today

Agents & tooling: Laude Institute releases Headlong — a persistent-agent microharness in under 10,000 lines of Bash, with a continuous thought loop and tiered context compaction — Laude Institute · HN; mdsweep grades agent-generated markdown (active / stale / abandoned) before deleting it — GitHub; NVIDIA CUDA targets RISC-V as the third architecture, demoed on SiFive’s server platform — Chips and Cheese
Formal methods & languages: Andrew Helwer: TLA+ and Alloy are losing to theorem provers — but win as deterministic simulation engines (FoundationDB, TigerBeetle) — ahelwer.ca; Ned Batchelder’s Calcium — a micro language implementation in clean Python for understanding compilers — nedbatchelder.com
Systems essays: Fred Hebert on the hidden cost of system levers: more control means more complexity, failure modes, and surprising interactions — ferd.ca; Terence Eden: emergency alert systems are authoritarian infrastructure waiting to be weaponised — no technical design resolves the paradox — shkspr.mobi; OS News: modern TUIs are worse for accessibility than the GUIs they replaced — ANSI codes and visual-only affordances defeat screen readers — OS News
Self-hosted: Bookshelf — a self-hosted eBook library backed by S3-compatible object storage, no local FS or database — GitHub; Open Archiver v0.6.0 brings 2FA and OAuth mailbox ingestion to the open-source edition — GitHub

Linux & Infrastructure

Domen Kožar announces plan to rewrite Nix

Cachix founder and devenv creator Domen Kožar has announced he will begin a rewrite of Nix, following the revocation of his nixpkgs commit privileges. The revocation stemmed from his self-merging and reverting a PR that disabled telemetry on devenv — an episode he documented in a post titled “nixpkgs has a due process problem.” He says he will keep Nix language semantics unless the NixOS Foundation pursues legal action over the Nix trademark. The announcement is generating significant community discussion about governance and the future shape of the ecosystem — landing the same week the Foundation drafted a contributor grant and purpose-bound funding program, and NixOS maintainers debated whether to explicitly ban LLM-generated PR descriptions.

Discourse: rewrite · Discourse: grant program · Discourse: ban LLM PRs

Three years, 932 NixOS generations: a reliability story — and AWS renews at $20k/month

A Reddit post sharing dotfiles after nearly three years and 932 generations on the same NixOS install captures what makes the system compelling: the author has changed kernels, swapped GPUs, added and removed kernel modules, and tried every major desktop environment — without ever reinstalling. Underwriting that stability at scale, AWS has committed $20,000/month in credits for 2026–27 — nearly a quarter million dollars — to keep cache.nixos.org and releases.nixos.org running, its largest commitment yet in a partnership that began as emergency gap-filling.

r/NixOS: 932 generations · GitHub: liperium/nix-conf · Discourse: AWS year 4

Zellij 0.45: Kitty graphics, nested sessions, mobile web UI

Kitty Graphics Protocol rendering an image inside a Zellij pane. Screenshot: zellij.dev

Zellij 0.45 lands several significant features. Nested sessions are now first-class: inner/outer sessions no longer double up status bars or fight over keybindings. Kitty Graphics Protocol support renders images in panes that survive scrolling, moving, and resizing (WezTerm recommended). Per-client tab sizing means attaching from a small laptop no longer shrinks the display for other clients. A new mobile web UI makes sessions usable from a phone, and the release-notes screen now detects missing keybindings and offers to add them with a single keypress.

Zellij release notes · r/commandline

Also today

Hyprland & Wayland: ironbar-gpu-top — an nvtop-inspired NVIDIA GPU plugin for Ironbar with per-GPU sparklines and VRAM bars — GitHub; HyprFM — a keyboard-driven Qt6/QML file manager for Hyprland with Miller columns, Quick Look, and TOML theming — GitHub; Netmon — a live network-connections overlay for Wayland with LIVE/SAFE/STRICT privacy modes for screensharing — GitHub; hypr-monitor-setup — an interactive bash script for external-monitor configuration in Hyprland — GitHub; wallpiper brings Wallpaper Engine to Wayland/Hyprland natively, from the Millennium Steam-modding team — GitHub; Hyprland dev clarifies the DHH/Omacom sponsorship is purely financial — no authority over roadmap — r/hyprland
Tools & observability: Noodle — a TUI REST client where requests are plain YAML files versioned alongside your code — GitHub; Routeup — stable, trusted HTTPS hostnames for local services via a local resolver and self-signed CA, with optional public tunnels — routeup.dev; nixos-telemetry — a single flake wiring an OpenTelemetry collector plus Prometheus/Loki/Grafana into one telemetry. option tree — Discourse
Nix ecosystem: Flake pattern: isolate dev-only inputs in a nested dev/flake.nix to keep them out of your package’s closure — Blog; Modular services working group #7 confirms an allowNetwork isolation option is in scope — Discourse; GitHub API rate limiting is breaking nixos-rebuild for heavy flake users with locally mirrored inputs — r/NixOS; Nix Vegas 2026 recordings now on YouTube — Discourse

cd ~/repos/josse-posten && claude --resume 4bc018c2-dbdf-4eb1-9793-f5f7d14ffff3