Josse-posten

Kyiv buries 37 from an ammunition-depot blast as Ratcliffe’s secret summit proposal surfaces and Moscow answers with an ICBM test; Iceland leans toward Europe by a hair, Zaporizhzhia’s diesel clock runs down, and Claude Code’s Auto Mode falls to a prompt injection.

Drone triggers Myla ammunition blast: 37 dead, most from adjacent elderly care home

Smoke rises from a fire at a large warehouse following a Russian strike in Bucha district, Kyiv Oblast, August 29. Photo: Getty/Kyiv Independent

A Russian Geran-4 drone struck a Ukrainian ammunition depot in Myla village (Bucha district, ~5 km west of Kyiv) on the evening of August 28, triggering hours of chain detonations — shells, mines, and drones — that killed at least 37 people, wounded 42 including four children, and damaged over 130 residential buildings. Most of the dead were residents of an adjacent care facility for the elderly and disabled; the local hromada head was killed in the rescue. Ukrainian prosecutors have opened an investigation into why military munitions were stored so close to civilian areas.

The strike was the culmination of a 28+ hour, 550+ munition barrage against Kyiv — Russia’s third consecutive day of attacks — apparently structured to exhaust Ukrainian air defenses before the heavier follow-on strikes landed. It is one of the year’s deadliest single strikes.

Ratcliffe proposed a Trump–Putin–Zelensky summit in Moscow; Russia answers with an ICBM test and a new Kyiv offensive plan

CIA Director John Ratcliffe, who proposed a trilateral summit during a secret visit to Moscow. Photo: Ukrainska Pravda

CIA Director John Ratcliffe traveled secretly to Moscow and proposed a trilateral summit between Trump, Zelensky, and Putin to Russian intelligence chiefs Naryshkin and Bortnikov — a format Putin had previously rejected; Ukraine was briefed afterward. It is the most direct US diplomatic push yet toward a negotiated end to the war. No Kremlin response has been reported, and it is unclear whether Trump has formally endorsed the idea.

Moscow’s answer, so far, has been kinetic. Ukrainian intelligence warns Russia is planning a fresh offensive targeting Kyiv and Chernihiv, and Moscow test-fired an intercontinental ballistic missile in the days following Ratcliffe’s visit. Poland’s prime minister called the coming six months “decisive”; Finland’s President Stubb struck a calmer note, saying a direct Russian attack on a NATO member would “make no sense.”

The manpower picture cuts the other way. Western officials now estimate Russia is losing 6,000 more troops per month than it can recruit, and Ukrainian brigades on the Lyman front report foreign mercenaries — from Latin America, Africa, and Southeast Asia — have risen to roughly 30% of Russian forces in that direction, even as Russia keeps building up for anticipated offensive operations there. Meanwhile more than 113,000 Russians have crossed into Georgia in recent weeks as new mobilization rumors circulate, mirroring the exodus that followed the 2022 partial mobilization.

Iceland EU referendum: slim ‘Yes’ lead as counting continues

Iceland’s referendum on resuming EU membership talks closed Saturday with early results showing a slim lead for the ‘Yes’ camp — too close to call as counting continued through the night. The prime minister pledged to honor the result. A ‘Yes’ win would open formal accession negotiations for the first time, a potentially historic shift for a country long ambivalent about EU integration.

Zaporizhzhia plant without external power for 10 days; diesel reserves running out

The IAEA reported August 29 that the Russian-occupied Zaporizhzhia Nuclear Power Plant — Europe’s largest — has been without external power for 10 consecutive days and has sufficient diesel generator fuel for only approximately 10 more. It is the 27th such outage since the 2022 invasion. Loss of backup power would eliminate cooling for spent fuel pools and reactor systems; IAEA officials have repeatedly warned that prolonged diesel dependency raises the risk of a catastrophic incident, and there is no resolution in sight.

Prompt injection cracks Claude Code Opus 5 Auto Mode at 60–80% rate

Remote code execution achieved via prompt injection against Claude Code Opus 5 in Auto Mode. Image: Embrace the Red

Anthropic commissioned Trajectory Labs to test 72 indirect prompt injection scenarios ten times each, reporting 0.00% attack success for Opus 5 in Auto Mode — the new default that replaces human approval with a safety classifier. Wunderwuzzi (Embrace the Red) developed a targeted attack chain and achieved 60–80% success with a small sample: a website summary request hijacks the agent and achieves code execution via a webfetch trick and shadow module injection. The finding directly challenges Anthropic’s framing that Auto Mode is a safe substitute for running agents in isolated environments. Evaluation methodology matters: a non-public benchmark with no named scenarios is not the same as adversarial red-teaming.

Indicator Value Change
S&P 500 7,712 -0.25%
Dow 30 53,560 -0.02%
Nasdaq 26,402 -0.52%
Russell 2000 2,972 -1.39%
VIX 14.4 -0.55%
Gold 4,530 -2.88%
BTC $78,228 +0.79%
EUR/USD 1.1583 0.00%
USD/NOK 9.38 0.00%
  • Gold −2.88% — sharpest mover of the week’s close; small caps (Russell −1.39%) also lagged

World

Belgium slams door on using frozen Russian assets for Ukraine; EU rift deepens

Belgium has flatly rejected a push by four EU member states to channel frozen Russian sovereign assets to Ukraine, with Defence Minister Theo Francken declaring “this is non-negotiable, the door is closed.” The standoff exposes a deepening fracture inside the EU over how to sustain Ukraine support heading into what Poland’s prime minister called a decisive six months — days after other states moved to revive the plan.

Germany preparing to formally blame Russia for Leipzig attack; Royal Navy shadows four Russian ships for 72 hours

Germany is set to officially attribute a recent attack in Leipzig to Russian intelligence, according to Politico, as tensions between Berlin and Moscow escalate over hybrid warfare on European soil. The attribution would add Germany to a growing roster of European governments charging Russia with domestic sabotage and intelligence operations.

In the same week, the Royal Navy mounted an intensive three-day surveillance operation, deploying three vessels and a helicopter to shadow four Russian ships as they transited the North Sea and English Channel.

Six months in: Iran’s war has cost the Gulf’s energy infrastructure dearly — and could cost more

Mapping Iranian strikes on Gulf energy infrastructure during the US-Iran war. Graphic: Al Jazeera

A new assessment maps the cumulative toll of the US-Iran conflict on Gulf energy infrastructure: Iranian strikes on oil facilities have driven prices sharply higher, generating billions for US energy firms while leaving their Gulf assets exposed to further attack. Iran’s Supreme Leader Khamenei on Saturday urged the Muslim world to “confront the real enemy,” while Iran’s trade volumes continue to contract under intensifying sanctions despite calls to reduce dollar dependence.

Venezuela’s US oil deal: 25-year term, $19 per barrel back to Caracas — sovereignty disputed

Venezuela’s interim President Edmundo González has disclosed that the US oil arrangement announced Friday will run for 25 years, with $19 from every barrel returned to Caracas. Officials insist Venezuela retains “sovereignty” under the deal. Critics and analysts continue to characterize it as a near-total resource transfer, with enforcement mechanisms and profit-sharing details still opaque.

Canada-US tensions sharpen: Lake Ontario sign, military procurement pivot, Quebec delay

Ontario Premier Doug Ford unveiled a large roadside sign reading “Lake Ontario. Now and Always.” directly rebutting Trump’s push to rename the Great Lakes “Lake America.” Canada simultaneously announced plans to further distance itself from US military procurement, shifting toward European and domestic suppliers. And Quebec’s separatist leader said he will postpone any independence referendum until Trump leaves office, citing the need for stability during an unpredictable US presidency.

Deported: the deportation hawk, and the Afghan who aided US forces

Far-right British commentator Milo Yiannopoulos — one of the most vocal cheerleaders for Trump’s mass deportation agenda — was detained by ICE in New Orleans and deported to the UK after being classified as an “illegal alien” for overstaying his visa. The irony of a prominent deportation hawk being swept up by the system he spent years promoting drew widespread attention.

Less noticed: an Afghan national who received US protection after helping American military forces has been deported to the Central African Republic, one of the world’s most dangerous and conflict-ridden countries. The case is among dozens of similar deportations and has drawn sharp condemnation from veterans groups and advocates for Afghan allies.

Myanmar’s military is regaining lost ground — with air raids, conscripts, and Chinese backing

Soldiers of the Shan State Army march during a military parade at Loi Tai Leng, Shan State, February 2026. Photo: Reuters

Myanmar’s military junta is reversing the rebel territorial gains of 2023–24, using relentless air strikes, a revived conscription program, and Chinese diplomatic and logistical support. Ethnic armed organizations that had seized key towns have been losing ground in recent weeks. The reversal marks a significant shift in a conflict that had appeared to be tilting decisively against the Tatmadaw.

Israeli settlers assault NBC News crew and Palestinian woman in occupied West Bank

Masked Israeli settlers attacked an NBC News team and a Palestinian woman being interviewed in the West Bank on Saturday, injuring reporter Matt Bradley and his crew. The assault occurred while the team was documenting settler harassment of Palestinian families — the latest in a wave of settler violence against both Palestinians and international journalists in the occupied territory. In Gaza, Al-Aqsa Martyrs Hospital has completely exhausted its supply of cancer medicines, leaving oncology patients without any treatment options in the territory.

King Haakon VIII delivers first speech: ‘I will listen to Norwegians’

King Haakon VIII at the royal palace in Oslo on the day of his first speech as monarch, August 29. Photo: Reuters/NTB

Norway’s new king delivered his first address as monarch at the palace, paying emotional tribute to his late father Harald V — who “represented Norway with pride and joy” — and outlining his own approach to the role with a promise to listen and serve.

Also today

Disasters
Nepal floods: nearly 3,000 still missing as anger mounts over the government’s response; Nepal has requested international help with DNA identification as morgues near capacity — The Guardian · Al Jazeera · NPR
Algeria wildfires kill at least 12 in the northeast; toll expected to rise — Al Jazeera
Sudan’s El Obeid displacement crisis deteriorates as civilians keep flooding in — The Guardian
Europe
Shooting at Swiss rave near Aarau kills one, injures five — major manhunt underway — BBC · India Today · r/worldnews
Middle East & Africa
Turkish Navy and Somali forces free pirated cargo ship after 10-day standoff; 14 attackers killed — Al Jazeera · UNN · r/worldnews
Syria reopens to the world: Damascus International Fair launches with fireworks, the first under the post-Assad government — Al Jazeera
Americas
Colombia’s 99 demobilized guerrillas face legal limbo under incoming hardline president De la Espriella — The Guardian
Meta agrees to major Instagram safety overhaul for minors — nighttime and school-hour lockouts — NPR

Ukraine

Ukraine strikes Kirishi refinery (Russia’s 2nd largest, 810 km deep) and Yeysk airbase

Ukraine launched over 60 drones against Leningrad Oblast overnight, striking the Kirishi oil refinery — Russia’s second-largest, over 800 km from Ukrainian territory — with footage confirming fires at the facility. The Yeysk airbase in Krasnodar Krai was also hit, with NASA FIRMS thermal data confirming strikes on both the airfield and the adjacent military town. A large fire also broke out in Bryansk, tentatively near microelectronics manufacturer Kremniy EL, whose components supply Russian missiles and air defense systems. Ukraine simultaneously destroyed a Buk-M3 and a Pantsir-S1 in Bryansk Oblast in an ongoing SEAD/DEAD campaign.

Rostov declares emergency as Ukrainian strikes paralyze Black Sea grain exports; Russia extends diesel ban; Turkey protests

Rostov Oblast declared a state of emergency after Ukrainian drone strikes on Azov-Black Sea port and maritime logistics infrastructure halted shipping operations and overflowed agricultural storage — a serious blow, as those ports handle over 80% of Russia’s international grain exports. Russia separately extended its diesel export ban through September 30 after at least 21 Ukrainian refinery strikes in August knocked out over 30% of refining capacity, with fuel queues now reported in cities like Yekaterinburg. Turkey summoned Ukraine’s ambassador after two Turkish-operated vessels were attacked near Tuapse, introducing a new diplomatic friction with Kyiv.

Also today

  • The Myla depot blast, Ratcliffe’s summit proposal, Russia’s manpower deficit and the Zaporizhzhia diesel countdown are on the front page

Tech

AI crawlers consume more kernel.org CPU than all legitimate traffic combined

CPU cycles consumed by AI crawlers versus legitimate git clone traffic on kernel.org. Graph: Konstantin Ryabitsev

Konstantin Ryabitsev publishes hard numbers: at any given time, 14 CPU cores across 5 geo-distributed kernel.org nodes are busy rendering git commits as HTML purely for AI training scrapers — more than the CPU spent on all legitimate access including actual git clones. The irony is that everything they’re scraping is freely available via git clone. Crawlers are doing it the stupidest possible way, ignoring efficient cloning in favour of hammering the web UI.

“Yap”: AI code comments as a distinct class of slop

Mckayla names a pattern she’s reviewing at scale: AI-generated code comments that are technically fluent, formally plausible, but inaccurate — and unlike buggy code, they survive silently because no compiler checks them. She calls this “yap”: shrill, insistent, unverifiable noise. As LLMs write more code and AI tools review it, the incentives for anyone to catch wrong comments collapse. A sharp, practical diagnosis from someone doing the reviewing.

Bug blindness: most people hit bugs and don’t register them

Dan Luu explores why he notices hundreds to thousands of bugs per week while most people around him seem oblivious. His finding: they’re hitting the same bugs — they just don’t register them as bugs. This creates organizational blind spots where internal reviews rate things as “working well” while a normal user would find them broken. The essay covers how to cure this, why it matters professionally, and what it reveals about software quality culture. Luu has been sitting on this post for roughly a decade.

Does computer science need computers?

Illustration: Kristina Armitage for Quanta Magazine

Quanta’s Ben Brubaker traces how much of computer science — algorithms, complexity, information theory, formal languages — is purely mathematical and requires no hardware. The counterpoint: most of the key questions would never have been posed without actually running programs. Dijkstra is a useful foil; he refused to use computers in his own work and compared it to medical researchers not needing to have the diseases they study. A well-written meditation on where the discipline lives.

Functional state machines in Rust: typestate and newtype patterns

A new ACM paper formalizes the use of Rust’s type system to enforce state machine transitions at compile time — the typestate pattern gives each state its own distinct type, making invalid transitions a type error rather than a runtime bug. Newtype wrappers provide zero-cost encapsulation of state values. The paper appeared on both HN and Lobsters, suggesting meaningful traction in the Rust/PL theory community.

GUIs should be fully keyboard-driven — and GTK4 in 800 lines of Clojure

Ckardaris makes the case for keyboard-first GUI design — not just keyboard shortcuts, but full navigability without a mouse. The argument covers workflow efficiency (keeping hands on keyboard), accessibility, composability with scripting and automation, and the way mouse-dependency fragments focus. Directly relevant to Hyprland and keyboard-driven workflow setups.

On the toolkit side, Yogthos demonstrates using Jolt — a Clojure JVM bridge to GTK4 — to build a native desktop UI in idiomatic Clojure. The wrapping layer is under 800 lines; the result is functional, composable, and avoids the Electron/web stack entirely.

GLM-5.3 Flash on Chinese hardware: impressive signal, large remaining gap

Z.AI confirmed their newest model runs inference on Chinese-manufactured chips, marking a milestone in self-sufficiency. Martin Alderson’s analysis puts the hardware in context: HiSilicon’s 910c series (the leading Chinese AI chip) delivers roughly 60% of an H100’s performance — and the H100 is four years old. The 910c lacks native FP8, runs at ~600W for ~1.6 PFLOP/s INT8, and Z.AI published no throughput or power numbers nor named the chipmaker. Export restrictions have made this a national priority, and progress is real — but Western hardware’s lead remains substantial.

California unanimously exempts open-source software from age-verification law

California legislators unanimously passed a carve-out shielding software distributed under GPL, MIT, BSD, and Apache licenses from state age-verification requirements. The exemption protects Linux and most of the open-source ecosystem from compliance burdens that would have been practically impossible to meet. A rare, genuinely bipartisan win for open-source in tech legislation.

Also today

Surveillance & policy
DHS is using an obscure customs summons (19 U.S.C. § 1509) to demand records from journalists, nonprofits, and unions without a warrant or judicial oversight — The Guardian · HN
Texas’s $1 car insurance fee, sold as a catalytic converter theft measure, was quietly routed into Flock license plate reader cameras — Texas Tribune · HN
Algorithmic rent-pricing litigation expands as states and cities enact bans and disclosure rules targeting RealPage-style systems — Morgan Lewis · HN
AI
Study: AI chatbots mostly debunked foreign propaganda, outperforming search engines — but AI summaries placed above search results did significantly worse than standalone chatbots — NPR
Homelab
FreeCORE 15.0: community carries TrueNAS CORE forward on FreeBSD after iXsystems dropped it; 13.3 systems can upgrade in place — FreeCORE · HN
cd ~/repos/josse-posten && claude --resume 5a5f95d3-780f-492b-a176-035a6f6e9506