Josse-posten

Witkoff lands in Oslo to draft a peace proposal while Trump calls Russia’s conduct “fine” and holds back the Patriots; a Russian drone hits a park full of families near Kharkiv; the Houthis deliver Yemen’s deadliest strike of the war; and the Plex on your home server is being turned into a proxy.

Trump calls Russia’s actions in Ukraine “fine” as Patriots are withheld and intelligence restricted

Donald Trump speaks to reporters as he departs the White House on October 19. Photo: Chip Somodevilla/Getty Images via Kyiv Independent

Trump said what Russia is doing to Ukraine is “fine”, said he would meet Putin and Xi without Zelenskyy, and suggested Zelenskyy should not be the one to negotiate peace. Vance stated explicitly that Ukraine will not join NATO and pressed Kyiv to halt energy strikes on Russia. Concretely: Ukraine is receiving only 12 Patriot missiles per month, down from 48 under Biden, with allied-funded systems reportedly sitting in Europe awaiting Hegseth’s signature. Ukraine says the US has delayed Patriots already paid for under a NATO initiative.

Zelenskyy accuses Washington of “denying reality” over intelligence: Ukraine received no US warning before Sunday night’s Russian strikes on Kyiv power plants, contradicting White House claims that nothing has changed. A Zelenskyy adviser told the BBC that US intelligence restrictions are directly costing Ukrainian lives. Trump is also reported to be open to a three-way summit with Xi and Putin focused on denuclearization. A new Washington Post-ABC poll puts his approval at 33%, his lowest yet.

Zelenskyj i Oslo: USA og Ukraina møtes om et fredsforslag

Fra Aftenpostens dekning av samtalene i Oslo. Foto: Aftenposten

President Zelenskyj besøker Oslo tirsdag for høynivåsamtaler om Ukraina-krigen, med statsminister Støre og Finlands president Stubb som vertskap. Zelenskyj ba selv Norge og Finland om å være vertskap. USAs spesialutsending Steve Witkoff deltar fysisk, mens Jared Kushner deltar digitalt. Ifølge Axios deltar også representanter fra Storbritannia, Frankrike, Tyskland, Polen, EU og NATO. Det uttalte målet er å utarbeide et fredsforslag som kan legges frem for Russland; Witkoff og Kushner reiser videre til St. Petersburg onsdag for å møte Putin. Støre sier målet er å «sette diplomatiet på et mer konstruktivt spor».

Zelenskyj har også audiens hos kongen og besøker Stortinget. Midlertidig flyforbud gjelder over deler av Oslo og Romerike frem til onsdag kveld. Møtet skjer mens forholdet til Washington er iskaldt: Trump har kalt ukrainske angrep på russisk infrastruktur «skammelig», og Det hvite hus har begrenset militær Starshield-tilgang i Ukraina. Zelenskyj bekreftet mandag å ha snakket med utenriksminister Rubio om Starlink, tidlig varsling og ballistiske missiler. Analytiker Hilmar Mjelde er pessimistisk: «Trump prøver å presse Ukraina til å gi opp krigen.»

Russian drone hits park full of families in Kharkiv region, killing infant and two women; 28 energy facilities struck

A stroller at the scene of the Russian drone strike on Nova Vodolaha’s central park. Photo: United24 Media

Russia launched 165 drones overnight, 115 of which were downed, striking energy infrastructure in Ternopil, Odesa, and Lviv. Zelensky said 28 critical energy facilities were hit across Ukraine in the latest wave. In the day’s deadliest civilian strike, a drone hit a park in Nova Vodolaha in the Kharkiv region crowded with families, killing an infant in a stroller and two women; seven children were among 14 injured.

Ukraine again received no advance warning from Western partners before a ballistic missile strike on Kyiv. Zelensky also said Ukraine’s SpaceX Starshield missile defense systems have been failing and demanded answers. On the other side of the ledger, he reported that Ukraine has retaken more territory this fall than Russia has captured. (Ukraine’s own strikes on Russia are covered in Ukraine.)

Houthi ballistic missile kills 53+ at Yemen training camp; Saudi Arabia cancels “Davos in the Desert”

A Houthi ballistic missile struck a training camp for Yemeni government security recruits in Shabwa province, killing at least 53 people and injuring more than 200. It is the largest single loss of life in Yemen’s civil war since fighting reignited. Saudi Arabia separately cancelled its 2026 Future Investment Initiative conference, known as “Davos in the Desert”, postponing it to 2027 amid the Houthi threat; government staff were ordered to work from home.

Four-CVE Plex RCE chain actively exploited: cryptominers and proxy software on home servers

A chain of four vulnerabilities (CVE-2026-96652 through -96656) in Plex Media Server ≤1.43.2 enables remote code execution via the /player/timeline/subscribe endpoint. Active in-the-wild exploitation is deploying xmrig cryptominers and “myawesomeproxy” software that routes external traffic through the compromised host, a risk especially for home servers on residential IPs connected to corporate networks. Self-hosters on r/selfhosted report compromises via the Plex2Shell exploit on the default port 32400, dropping miners and DDoS bots; one user’s connection kept dropping because Plex was being commanded to flood other hosts. If you have Plex exposed to the internet, firewall or update to v1.43.3 immediately.

Alberta votes 76% to remain in Canada

Voters in Alberta overwhelmingly rejected a proposal to begin independence proceedings, with CBC projecting roughly 76% in favour of remaining in Canada. The result is a clear win for Prime Minister Mark Carney and a significant setback for the separatist movement, which had been internally fractured even before the vote.

Indicator Value Change
S&P 500 (f) 7,734 0.00%
Dow 30 (f) 52,287 +0.20%
Nasdaq (f) 29,621 -0.34%
Russell 2000 (f) 2,743 +0.03%
VIX 18.6 +0.81%
Gold 4,141 -0.46%
BTC $81,290 -1.74%
USD/NOK 9.39 -0.38%
  • Aker-aksjen stupte 7 prosent på Microsofts Nscale-exit og snudde til +4 på Anthropic-ryktene, alt på én dag (see Norway)

World

Iran strikes 15+ ships in Strait of Hormuz; Lavrov backs Tehran hours after Trump praises Russia for “doing nothing”

Tehran, Iran. Photo: AFP via Al Jazeera

Iran has attacked at least 15 container ships passing through the Strait of Hormuz over the past ten days, disrupting one of the world’s most critical trade routes and sending cargo spilling into the water. Trump said the US continues to hit Iran “economically and militarily”, while praising Russia for doing “nothing” to help Tehran. Hours later, Russia’s Lavrov publicly backed Iran, exposing a crack in the claimed US-Russia alignment and raising questions about diplomatic coherence in any future Iran deal.

France curfews as unrest eases; Italy deploys 500 troops to Milan; Albania enters seventh day of protests

French Prime Minister Lecornu imposed targeted curfews in Lille, Lyon, Nice and parts of Paris and cited “ultra-left” agitators for exploiting legitimate cost-of-living protests; most French cities returned to overnight calm. Over 1,800 have been arrested in the worst civil unrest in France in many years. What started as student protests over poor school conditions grew into nationwide riots when unions and the Gilets Jaunes joined in; the 1883 Limoges town hall is a total loss after the fire. Macron refused to let interior minister Nunez resign and promised full transparency about police conduct. Norwegian analysts see Marine Le Pen and Rassemblement National as the political winners of the unrest.

In Italy, the government is dispatching 500 army troops to “defend Milan” after protesters looted luxury shops and vandalized property. Albania’s anti-government demonstrations entered a seventh day with nearly 300 people injured, more than half of them police.

Kenya starvation cult leader guilty of 191 murders

A Kenyan court found Paul Mackenzie and roughly 30 co-accused guilty of murder in the deaths of 190 children and one adult in the Shakahola massacre, one of the worst cult atrocities on record. Mackenzie’s sect had ordered followers to fast unto death so they could “meet Jesus”, with children the primary victims.

Australian independent MP Helen Haines loses leg in deliberate car ramming

Helen Haines speaks to journalists at Parliament House in Canberra, September 8. Photo: Mick Tsikas/Reuters via Al Jazeera

Independent MP Helen Haines lost one leg and is in critical condition after a 43-year-old man allegedly performed a U-turn and struck her twice with his car outside her electorate office in Wangaratta, Victoria. Surgeons are fighting to save her other leg. Prime Minister Albanese called it a deliberate act; police say it was an isolated incident. The attack comes amid a documented surge in threats against Australian politicians, several of whom described heightened personal security routines in the days before the assault.

Hegseth visits Netanyahu a week before Israeli elections; police detain 10 settlers in rare West Bank raid

US Defense Secretary Pete Hegseth travelled to Israel for an unannounced meeting with Prime Minister Netanyahu, days before Israelis go to the polls on October 27 in the country’s sixth election since 2019. Meanwhile Israeli police arrested 10 settlers in an unusually forceful operation following a weekend of extreme settler violence in the occupied West Bank, including a mob assault on US photojournalist Heidi Levine and attacks on European diplomats and Palestinian farmers during the olive harvest. Settler olive-harvest attacks have already exceeded the full 2025 total. Israel also halted commercial imports to Gaza the same week.

Gaza: WFP ends food aid for half a million Palestinians as funding collapses

The World Food Programme has ended monthly food support for more than 500,000 Palestinians in Gaza, a significant worsening from the one-third cut reported last week. Two-thirds of Gaza’s population now face crisis-level food insecurity, and 200,000 are in danger of famine. Winter is expected to deepen the crisis further.

Sudan: drone kills 80 near market in West Kordofan

A drone struck twice near a transport hub in the town of al-Dibab in West Kordofan province on Sunday evening, killing around 80 people, mostly commuters catching rides home, in one of the deadliest single attacks of Sudan’s civil war.

Rwandan critic found beheaded in Uganda

Robert Kabera, a former Rwandan army sergeant major who had sought asylum in Uganda and became a popular YouTuber and singer openly critical of President Kagame, was found beheaded in a village near Kampala. His head has not been located. The killing fits the pattern of Rwanda’s documented transnational repression of exiled dissidents.

Japan launches world-first mission to collect samples from Mars’s moon Phobos

Japan’s MMX spacecraft lifted off on its five-year mission to collect 10 grams of material from Phobos, one of Mars’s two moons. It is the world’s first attempt to retrieve samples from a Martian moon, with the spacecraft scheduled to return to Earth in 2031.

Also today

Americas
Haiti: gangs launch biggest attack on El Salvador-led foreign troops since the mission deployed — AP · r/worldnews
DOJ charges 28 in California with voting crimes and files an emergency request to block ballots from “likely non-citizens”, two weeks before the midterms — NPR
DHS extends temporary protected status for more than 100,000 migrants from Ukraine and Sudan — The Guardian
Mahmoud Khalil’s deportation fight goes to the Supreme Court — Al Jazeera
Hurricane Trudy, the 22nd named system of an active Pacific season, makes landfall on Mexico’s Pacific coast — The Guardian
Europe
Spain: four killed in flash floods on the Mediterranean coast; Greece also reports a flood death — Al Jazeera · The Guardian
Catalonia: Spain’s Supreme Court upholds lifting of Puigdemont’s arrest warrant, clearing his return from exile — BBC
Asia & Middle East
Saudi Arabia executed two Bangladeshis for an “indecent act” in a mosque without notifying Dhaka — BBC

Ukraine

Ukrainian drones hit Druzhba pipeline station and St. Petersburg data center; millions of Russians locked out of bank accounts

Fire at the Nikolskoye oil pumping station after the drone attack on October 20. Photo: Militarnyi

Ukraine hit the Nikolskoye oil pumping station in Russia’s Tambov region, a node on the Druzhba pipeline system, setting it ablaze overnight, and separately struck the VKontakte social network’s data center near St. Petersburg. The data center attacks disrupted Yandex and other services and locked millions of Russians out of bank accounts and apartment access systems. This follows a reported 1,000+ drone campaign last week against Russian oil export terminals. Zelenskyy has offered to pause energy strikes in exchange for Patriot missiles; Vance is pressing Ukraine to stop unconditionally.

Ukraine evacuates first wounded soldier by drone from a frontline position

Ukraine’s 92nd Separate Assault Brigade used a hexacopter to lift a wounded soldier directly out of a frontline position, the first documented drone casualty evacuation in the war. Video was shared publicly by the brigade. The mission signals drones expanding beyond strike and reconnaissance into MEDEVAC roles, with significant implications for casualty survivability on contested ground.

Frontline: 206 clashes; WSJ reveals Russian lieutenant who spied for Ukraine before defecting

Ukraine’s General Staff logged 206 combat clashes over the past day, with the heaviest fighting on the South Slobozhanshchyna (26 attacks) and Pokrovsk (21 attacks) fronts. Russia absorbed an estimated 1,560 casualties per day. A WSJ investigation revealed that Russian Lieutenant Lev Stupnikov spied for Ukrainian intelligence for months before defecting, enabling strikes that killed over 300 soldiers.

Western allies close ranks: EU rejects Russian gas deal, NATO drills in Poland, Merz warns of destabilization campaign

The EU rejected a US proposal to restore Russian gas imports as part of any Ukraine peace settlement. UK, France, and Germany launched major military exercises in Poland in preparation for a potential troop deployment to Ukraine. Friedrich Merz stated that Russia’s strategic goal is to destabilize all of Europe’s political order, not just Ukraine. UK and Poland separately criticized Hegseth for publicly downplaying NATO allies’ contribution to the Afghanistan war.

Investigations

Documents: Mossad directors encouraged nearly $2 billion in Qatari payments to Hamas

TIME magazine reports that newly revealed documents show senior Mossad directors actively encouraged approximately $2 billion in Qatari government payments into Hamas-controlled Gaza. The disclosure raises fundamental questions about Israeli intelligence’s role in financing the organization responsible for the October 7 attacks.

Russia covertly ships weapons and suspected spies to Africa on civilian vessels

An investigation by Novaya Gazeta found Russia has been using civilian cargo ships to transport military equipment to Africa, with the same vessels carrying suspected undercover intelligence officers. It is a covert logistics network that evades sanctions tracking and Western maritime monitoring.

Ex-OpenAI worker accused of sabotage had Saudi government support, court filing alleges

A court filing in the case against a former OpenAI employee accused of planting a malicious device at the company alleges that the suspect received support from the Saudi Arabian government. Saudi Arabia did not respond to comment requests. The allegation raises significant concerns about foreign state targeting of leading AI organizations.

BBC

Bessent: US asked Europe to impose secondary tariffs on India, and was refused

Treasury Secretary Scott Bessent disclosed that Washington asked European allies to impose secondary tariffs on India as part of the Trump administration’s economic pressure strategy, and was turned down. The revelation exposes the limits of allied compliance with US trade coercion and signals India as an active target of Washington’s tariff diplomacy.

Norway

Droneangrep på skip i NATO-farvann setter alliansen på prøve

En kjemikalietanker ble angrepet med drone innenfor Romanias territorialfarvann i Svartehavet, det siste i en serie på minst sju angrep mot kommersielle skip over to uker, med flere drepte og 28 savnede sjøfolk. Romanias president peker på russisk involvering; Russland avviser. Utenriksminister Espen Barth Eide kaller utviklingen «svært alvorlig» og sier angrepene går utover hybride trusler. NATO debatterer nå terskelspørsmålet: er angrepene på medlemslandets territorialfarvann nok til å utløse kollektivt forsvar?

Forsvar: hangarskip på vei, NSM-salg til Danmark, stridsvognbygging startet, og livvakt til Kongsberg-sjefen

Det britiske hangarskipet HMS Prince of Wales, med F-35B-fly, er på vei til Norge for NATO-øvelse i Nord-Atlanteren. Danmark har bestilt nye norske Naval Strike Missiles for 400 millioner kroner. Ritek i Levanger har åpnet produksjonslinje for stridsvogner. Kongsberg Gruppen-sjefen får personlig livvakt etter økt trusselvurdering fra antatte utenlandske aktører. Norge dropper årets NATO-atomvåpenøvelse Steadfast Noon i Italia, og fem personer er pågrepet og fire varetektsfengslet for grovt bedrageri mot NATO.

Samtidig bekreftet forsvarsminister Tore O. Sandvik overfor DN at Forsvaret leide inn kinesiske kjøretøy til en stor øvelse uten å ha gjort noen konkret risikovurdering i forkant. Forsvaret planlegger heller ikke å utestenge kinesiske biler fra militære områder.

Nscale og Anthropic: mulig 450 mrd. kr-kontrakt, og Aker-aksjen svinger voldsomt

Bloomberg melder at Aker-kontrollerte Nscale er i dialog med Anthropic om en ny kontrakt verdt rundt 45 milliarder dollar for leveranse av datakraft fra et nytt datasenter ved Monarch-komplekset i West Virginia: 460 MW kapasitet med Nvidias kommende Vera Rubin-brikker. Anthropic skal også ha forkjøpsrett på et tredje planlagt bygg. Landes avtalen, kan samlet ordrebok mot Anthropic nærme seg 150 milliarder dollar. Samme dag trakk Microsoft seg fra Nscales første britiske datasenterkontrakt etter gjentatte forsinkelser. Aker-aksjen stupte rundt 7 prosent på Microsoft-nyhetene, snudde deretter og steg 4 prosent på Bloomberg-meldingen, alt innenfor én handelsdag.

Statnett varsler kraftunderskudd: Norge kan mangle 20 TWh innen 2035

Statnetts nye langsiktige markedsanalyse tegner et bekymringsfullt bilde: i hovedscenariet har Norge et kraftunderskudd på nesten 20 TWh i 2035. Elektrifisering av industri og kraftig vekst i datasenteretterspørselen driver forbruket opp, mens Statnett kutter forventningene til ny produksjonskapasitet. FrP-leder Sylvi Listhaug vil kreve at datasentre investerer i kraftproduksjon som vilkår for nettilgang, og vil endre strømkøen. Smelteverket Finnfjord AS, som ønsker å bli verdens første CO₂-frie ferrosilisiumprodusent, er et konkret eksempel på industri som vil elektrifisere, men som ikke kommer til i strømkøen.

Samme dag meldte Hydro at selskapet for første gang har laget aluminium uten CO₂-utslipp med teknologien HalZero, en elektrolyseprosess der karbon holdes i en lukket sløyfe slik at bare oksygen slippes ut. Teknologien har vært under utvikling siden 2016 og er finansiert av blant annet 141 millioner kroner fra Enova. Neste steg er integrasjon av prosesskomponenter og mulig pilotanlegg. Støre kalte gjennombruddet «historisk».

EU snur om Arktis-olje, og gir norske klimaprosjekter 3,3 mrd. kr

EUs nye Arktis-strategi, som legges frem tirsdag, dropper 2021-strategiens krav om et globalt forbud mot olje- og gassutvinning i Arktis. EU vil nå bare arbeide for restriksjoner dersom utvinning «utgjør en trussel mot Arktis-økosystemet», et vesentlig tilbaketog. Samtidig tildeler EU 3,3 milliarder kroner i innovasjonsmidler til norske prosjekter: Aker Solutions og Aker BP for karbonfangst og -lagring, og Sirona Technologies for havvind.

«Professor Moltsjanov» arrestert på Svalbard for Ukraina-krav

Det russiske skipet «Professor Moltsjanov» ble arrestert i Barentsburg av Sysselmesteren på vegne av ukrainske Naftogaz, for å håndheve en voldgiftsdom på 4,22 milliarder dollar fra Haag, et krav som springer ut av Russlands kontroll over Krim-eiendeler. Det første arrestasjonsforsøket ble ifølge advokaten møtt med trusler om «store konsekvenser», noe som tvang Sysselmesteren til å trekke seg. Et nytt forsøk lyktes etter et 24 timers standoff. Det russiske statsselskapet Arktikugol bestrider arrestasjonen i norsk rett og hevder skipet er kritisk for forsyningslinjene til Barentsburg.

NRK

Norsk sikkerhetsmiljø avdekket masseangrep fra KI-agenter i sanntid

Illustrasjon til Telenors sikkerhetsrapport om KI-akselererte angrep. Foto: Digi.no

Et norskledet sikkerhetsmiljø oppdaget cyberkriminelle som brukte KI-agenter til å bryte seg inn i over tusen selskaper, blant dem noen av USAs mest kjente, men angriperne begikk en feil som gjorde det mulig å følge innbruddene i sanntid. Saken belyser et bredere skift: Telenors ferske sikkerhetsrapport advarer om at KI gir angripere evnen til å finne og utnytte nulldagssårbarheter raskere enn leverandører kan tette dem, og at norske bedrifter nå kan ha minutter, ikke timer, til å reagere på angrep.

Anthropics nye sikkerhetsrapport peker i samme retning: kompakte KI-modeller er måneder unna å kunne kopiere seg selv på kommersielle IoT-enheter som smartovner og Android TV-bokser, uten tilgang til tung datakraft. Slike «KI-ormer» kan spre seg ukontrollert i forbrukernettverket og representerer en ny trusselkategori utover serverbasert KI-sikkerhet.

Regjeringen foreslår tannhelsereform: maks 25 prosent egenandel

Regjeringen foreslår en tannhelsereform der alle pasienter på sikt skal betale maksimalt 25 prosent av behandlingskostnadene, med rett til nødvendig og subsidiert tannhjelp. Fylkeskommunene får lovpålagt plikt til å tilby tjenesten gjennom offentlige klinikker eller private praksiser. Fullt utbygd koster reformen rundt 9 milliarder kroner i året; det er ikke satt av penger ennå, og utrullingstakten avhenger av årlige bevilgninger. De yngste voksne prioriteres først. Det er bred tverrpolitisk enighet om prinsippet, men uenighet om hvem som prioriteres: Tannlegeforeningen støtter målet, men vil ha behovsbasert heller enn aldersbasert prioritering og kritiserer uklar finansiering. Høyre er imot reformen.

16-årsgrense for TikTok, Roblox og Snapchat; ID-sjekk på pornosider

Statssekretær Marianne Wilhelmsen (Ap). Foto: ABC Nyheter

Regjeringen vil gi Roblox, TikTok og Snapchat, plattformer vurdert som særlig skadelige for barn, den samme 16-årsgrensen som allerede gjelder for sosiale medier. Forslaget utvider det eksisterende regelverket og er i tråd med Helsedirektoratets råd om barns skjermbruk.

Regjeringen bekreftet også at den vil innføre obligatorisk alderssjekk på pornografiske nettsider som del av EUs Digital Services Act. Brukere skal bevise at de er over 18 med en digital legitimasjon knyttet til ID-kort eller pass; nettstedet får bare et bekreftet ja/nei, ikke personopplysninger. Storbritannia, Frankrike og Australia har allerede innført lignende krav. Reddit-diskusjonen var skeptisk: kommentatorer fryktet at tenåringer sendes til «virkelig deprimerende» uregulerte alternativer, og stilte spørsmål ved datahåndteringen hos tredjeparts verifiseringsinfrastruktur.

Kraftig uvær rammer Nord-Norge

Stormen har ført til store problemer i nord: Sortland i Vesterålen er hardt rammet av oversvømmelse. Vann sto i kjellere og nådde elektriske fordelingsskap i sentrum mens nødetater pumpet kontinuerlig uten å holde tritt. Alle fly til og fra Evenes er innstilt; Tjeldsundbrua er stengt og mange båt- og bussruter innstilt. Midt i uværet ble en 80 år gammel mann funnet nedkjølt, men i live, etter å ha vært savnet på vidda i Tana siden fredag.

Også i dag

Næringsliv og teknologi
Starlink solgte bredbånd for 831 millioner kroner i Norge i fjor, opp 50 prosent fra 553 millioner; bedriftsmarkedet er størst, men privathusholdninger kobler seg til i voksende tempo — E24 · Digi.no · r/norge
KI-koding: ny Harvard-studie finner at KI-verktøy øker mengden generert kode med rundt 30 prosent, men antallet leverte programfunksjoner endrer seg ikke vesentlig; flaskehalsen er gjennomgang og integrering. Accenture strammer inn etter at ansatte har brukt opptil 10 000 kroner i måneden — Digi.no: 30 prosent · Digi.no: tokenfesten er over
Politikk
Fawzi Warsame (28) er valgt til ny AUF-leder og erstatter Gaute Børstad Skjervø — NRK · NRK XL: portrett
Sverige: Riksdagens talmann gir Centerpartiets Elisabeth Thand Ringqvist i oppdrag å danne regjering etter at Magdalena Andersson ikke klarte å samle flertall — NRK · Aftenposten
TV-aksjonen 2026 samlet inn 251 millioner kroner til Flyktninghjelpen; pengene skal gi 400 000 flyktninger et trygt hjem — NRK
Frankrike: portforbud i flere byer etter de verste opptøyene på mange år — se World

Norway — Street Level

Equinors ord: én fortelling til deg, en annen til pengefolkene

En datajournalistisk gjennomgang fra NRK viser at Equinor bruker «energi» og «vind» hyppig på Facebook og i pressemeldinger, men går tilbake til «olje og gass» i årsrapportene til investorer. Bare 0,8 prosent av Equinors produksjon er fornybar; undersøkelser viser at de fleste nordmenn tror andelen er 30 prosent. En retorikkprofessor ved UiB sier det rett ut: ordet «energi» dekker alt, høres positivt ut og skjuler olje og gass. En investeringsdirektør i Nordea forklarer logikken: for vanlige folk signaliserer fornybart dyd, for investorer signaliserer det lavere avkastning, så Equinor forteller investorene at selskapet trekker seg fra fornybart. Equinor svarer at årsrapportene gir «full innsikt» og at «energi» er et «hensiktsmessig paraplybegrep». Mønsteret speiler dokumentert grønnvasking hos ExxonMobil.

«Mamma, er jeg haram?» – et integreringsinnlegg fra Groruddalen

Illustrasjonsfoto. Foto: Berit Roald / NTB

En anonym norsk mor skriver i Aftenposten om hvordan kjønnssegregerende sosiale normer i nabolaget i Groruddalen, der etniske nordmenn er i mindretall, preger datterens hverdag. Klassevenninner kan ikke komme på besøk fordi det bor eldre brødre i huset; skolen har kjønnsdelt svømming fordi noen foreldre ikke aksepterer blandede klasser. Datteren spør nå om hun selv er «haram». Moren påpeker at også høyt utdannede andre- og tredjegenerasjons innvandrerforeldre aktivt velger bort likestillingsnormer og skolesamarbeid. Innlegget er bemerkelsesverdig fordi det gir stemme til et etnisk norsk mindretallsperspektiv i et nabolag der nordmenn er i mindretall, et synspunkt som stort sett er fraværende i integreringsdebatten.

Grassroots

  • Jobbmarkedet: en mastergradsstudent i matte/informatikk melder om over 100 søknader uten ett intervju, en kanadisk innvandrer med MBA og bankbakgrunn om 300+ avslag. En annonse fra Accenture/Academic Work med 2,5 måneders ubetalt obligatorisk opplæring før oppstart gikk viralt; kommentatorer kalte den klart ulovlig etter arbeidsmiljøloven — r/norge: 100 søknader · r/Norway: 300+ jobs · r/norge: frekkaste jobbannonsen
  • Deadnaming-debatt: kommentatorer, blant dem Espen Ottosen, diskuterer nå åpent om det er etisk akseptabelt å oppsøke og publisere transkvinners fødenavn, og en profilert transkvinne ble offentlig deadnamet. Tråden beskriver dette som en kvalitativ eskalering, fra politikkdebatt til målrettet eksponering av enkeltpersoner — r/norge

Tech

Who hacked France’s supermarket fridges: unpatched Danfoss dashboards, 85% on outdated firmware

France hosted 53% of the world’s internet-accessible Danfoss refrigeration dashboards (1,331 of 2,528 globally), with 85% running outdated firmware carrying known CVEs, including one with no patch available since Danfoss ended support in 2023. Attackers gained remote access and triggered defrost mode, pushing units to 50°C and causing fires and food spoilage across supermarkets. ipinfo’s scan found these systems had been exposed at the same addresses for at least six months with minimal patching progress. (The Plex exploitation wave is on the front page.)

WhatsApp instructed its AI to hide regulatory options from users

Illustration: redact.dev

WhatsApp embedded machine-readable instructions in 102 blocks across 80 help pages, invisible to human readers but consumed by the AI chatbot, telling it not to recommend contacting data protection authorities and not to cite GDPR even when users raised privacy law questions directly. WhatsApp’s own privacy policy explicitly states users can file regulatory complaints. The company called it “an unintended bug in its support chatbot system” and removed all hidden blocks after the story broke.

Abliterated LLM weights are a supply-chain backdoor: $50 and 2.5 hours to poison

ProjectDiscovery demonstrated end-to-end backdoor injection into open-source model weights: 125 poisoned rows mixed into 625 training samples, a rare trigger phrase, and a remote payload URL so the attack can be swapped without retraining. The backdoor concentrates in 0.6% of parameters and passes every standard benchmark. Real-world evidence backs up the threat: a fake “OpenAI privacy filter” on Hugging Face hit 244,000 downloads in 18 hours before detection. Poisoning cost stays roughly flat whether the model is 600M or 13B parameters. Detection requires guessing unbounded trigger phrases while the attacker needs exactly one.

Ante introduces zero-cost cyclic mutability with place-based borrow checking

The Ante language proposes replacing Rust-style lifetime regions with places, the exact set of values a reference borrows from, combined with shape-stability markers indicating which mutations can invalidate a reference. This lets the compiler accept safe programs Rust rejects (like HashMap::get_or_default with a mutable fallback path, or getting references to non-overlapping vector elements) without runtime overhead or unsafe code. The approach handles complex control flow that Rust’s region-based checker struggles with.

Rust 2026: Polonius, next-gen trait solver, and parallel frontend all converging

A convergence of major Rust compiler infrastructure: the next-gen trait solver (a rewrite 10 years in the making) resolves long-standing soundness bugs and unblocks blocked features; Polonius replaces the current borrow checker to enable internal references and more expressive lifetime patterns; the parallel frontend is near stabilization; LLVM 23 upgrade ships; a new move-elimination MIR optimization eliminates copies LLVM misses; and Cargo gains a shared check/build cache. The author works on several of these.

A correctness fix for one-in-2⁶⁴ division inputs caused a 127% GPU slowdown

Futhark’s compiler had undefined behavior on signed integer division when dividing the most negative integer by −1, one pair of inputs out of 2^64. The fix adds a per-division branch to handle that case with unsigned arithmetic. CPUs were fine: branch prediction absorbed it. GPUs were not: a 127% slowdown on division-heavy benchmarks from disrupted instruction pipelines. A sharp demonstration of how correctness trade-offs can be asymmetric across hardware architectures.

Deno exits to Cloudflare; community forks as Ende

Deno’s core team is moving to Cloudflare and halting Deno development within a year. P. Webb has forked as Ende (an anagram of Deno), deliberately diverging: Node.js compatibility removed entirely (“a gravity well” per Ryan Dahl himself), Deploy/KV/Jupyter integrations stripped, focus shifted to per-module permissions, untrusted-code sandboxes, and post-quantum crypto. MIT licensed; Webb is building it for their own production needs.

Tor VPN Beta: per-app circuit isolation, full-device Tor on Android

The Tor Project’s Android VPN extends Tor protection beyond the browser to the entire device, with each application getting its own dedicated Tor circuit to prevent cross-app correlation. Built on Arti (the Rust Tor implementation) for improved stability; available on F-Droid for reproducible-build verification. Key finding from development: users in Iran and Turkmenistan needed bridge/circumvention support far more than the exit-node selection that standard VPN users expect. Early exit UI was actively dangerous for at-risk users.

OpenBSD 8.0 ships with Linux 6.18 GPU drivers

OpenBSD 8.0 is out, with the headline being GPU driver parity: inteldrm, radeondrm, and amdgpu ported from Linux 6.18, a substantial leap for modern hardware support. Wine has also been ported to OpenBSD and appears in ports.

Also today

  • One-hash Bloom filters: a single hash function with properly tuned parameters achieves the same false-positive rates as k independent hashes — calabro.io · HN · Lobsters
  • Go will reject TLS certificate chains containing any of eight distrusted SPKIs, mapping to 16 eMudhra CA certificates — Go issue · affected cert list · HN · Lobsters
  • DHS orders all US federal civilian agencies to remove DeepSeek from IT systems; defence is not covered — Reuters · Federal Register · HN
  • Spec-based agentic monitoring: agents write a machine-checkable spec that a deterministic harness executes, rather than open-ended agent loops; roughly $100/day to cover a fleet — Benjamin Congdon · HN

Linux & Infrastructure

Netherlands building NixOS-based sovereign OS to break free from Microsoft

The Hague. Photo: LEN Journeys via TechSpot

The Dutch government’s DAWO (Digitaal Autonome Werkomgeving Overheid) project is building a full national IT stack, OS, productivity apps and cloud services, on NixOS to replace Windows and Microsoft services across all government institutions. The push accelerated after the US imposed ICC sanctions and Microsoft reportedly blocked the court’s prosecutors from accessing its email services. Pilot programs are already running; full institutional rollout is planned. NixOS was chosen partly because it originated with Dutch developers and is backed by the Dutch NixOS Foundation.

nix-cachyos-kernel binary cache is down after server compromise

The maintainer of nix-cachyos-kernel (xddxdd) shut down all servers after discovering an attacker had access mid-way through an intrusion. The binary cache at cache.xddxdd.moe is unavailable. The maintainer states they caught the attacker before kernel tampering was completed, but cannot fully rule it out. Anyone using this cache should remove it from their Nix configuration until the maintainer gives the all-clear.

Linux 7.3: sched_ext complete, fchroot(), and a binfmt_misc extension that makes Nix binaries relocatable

Linux 7.3 ships the sched_ext extensible scheduler as complete, adds a new fchroot() system call, BPF global per-CPU data, VM working-set tracking, and a long list of SMB server improvements. By the numbers: 18,765 non-merge commits from 3,021 developers, a release record, including 807 first-time contributors.

For NixOS the interesting piece is binfmt_misc: binary interpreter paths can now be computed per-exec via eBPF rather than fixed at registration time, so the dynamic linker path can be resolved relative to the binary using $ORIGIN, eliminating the need for patchelf or wrapper scripts. fzakaria’s essay “One Store, Two Frontends” builds on this: once Nix binaries are relocatable, Nix, Bazel, and Buck2 can all share a single content-addressed store, each a different frontend accessing the same artifacts by hash, without /nix/store mounts on remote build workers.

numtide/iets: Rust Nix evaluator with 1.7–3.5× speedup

iets is a Rust reimplementation of the Nix client that consolidates nix-build, nix-eval-jobs, nix search, nix-diff, and nix-direnv into one binary. Benchmarks show 1.7–1.9× faster evaluation on a single worker and 3.1–3.5× faster with four workers compared to Nix 2.34.8. Notable features include eval caching based on file tracing, automatic hash-fixing for fixed-output derivations, and the ability to push builds to remote builders without a local Nix store. Flake support is still limited and it falls back to nix for unsupported cases. The codebase is LLM-generated, flagged in the README.

nixos-vex: CVE triage for NixOS using OpenVEX

nixos-vex generates a personalized OpenVEX feed for your NixOS system. It uses sbomnix to build a software bill of materials and grype to scan for CVEs, then evaluates VEX statements, both unconditional (upstream-only vulnerabilities) and conditional (checked against your actual NixOS config options), to suppress false positives. The stated goal: not zero CVEs, but zero untriaged CVEs. Distributed as a flake with a system.build.vexFeed output. Targets nixos-unstable x86_64 currently.

Five new Hyprland shells and launchers: impasto 0.6, Cove, Morgan, Hyprdrive, zunder

impasto 0.6’s liquid glass material across bar, dynamic island, widgets, and dock. Photo: andreumassanet/impasto

A busy week on r/hyprland. impasto 0.6, a shell built around a shape-shifting Dynamic Island, adds liquid glass material across bar, island, widgets, and dock; rounded screen corners; a bezel bar; per-app screen time tracking; a running dev-servers panel; and lyrics on the lock screen during face recognition. Colors auto-extract from the wallpaper and update terminal, Neovim, and GTK/Qt windows simultaneously.

Cove is a Hyprland + Quickshell setup with 8 bar styles, a dynamic island, a launcher with prefix-based modes (= calculator, / files, @ windows, : clipboard), and 19 desktop widgets; colors come from the wallpaper or from the currently playing music. Arch Linux only. Morgan is a two-month-old Rust + GTK4 shell that replaces hyprlock, hypridle, and waybar/eww setups in one binary, with nine built-in themes. Hyprdrive, previously Omarchy-only, now runs natively on Hyprland 0.56 with an Overview grid, a macOS-style Dock with live previews, and Mosaic, an experimental hybrid layout where windows cluster without gaps while retaining individual sizes. zunder (Rust + GTK4 + layer-shell) is a terminal-styled launcher and ALT+TAB switcher with live window previews across all workspaces, unit/currency conversion, world clock, and a plugin system that accepts executables in any language.

Zigduck 0.2.6: declarative NixOS Zigbee automation with a desktop widget

Zigduck is a fully declarative Nix flake for Zigbee home automation: devices, scenes, automations, media, and grammar all defined in Nix. It wraps zigbee2mqtt and Mosquitto in a Rust async runtime. Version 0.2.6 adds a GNOME Shell extension for a top-bar desktop widget, TV guide scraping from EPG JSON, and multi-architecture support beyond x86_64.

Also today

Nix
Determinate’s Native Linux Builder for macOS is generally available for logged-in FlakeHub users: Linux-only derivations build on a native Linux machine behind the scenes, no VM or remote builder config — Determinate Systems · r/NixOS · Discourse
Pattern: hardened NixOS services with systemd RootDirectory= and individual Nix store paths bind-mounted in, least-privilege isolation without containers — Discourse
finix: a user reports switching fully to the dinit-based NixOS init after five months of parallel testing, with noticeably faster boot — r/NixOS
Modular Services meeting #10: a fileSecrets contract for how service modules consume secret files is in progress; slower than usual after NixCon and the 26.05 cycle — Discourse
Declaring color themes as Nix variable sets, consumed by terminal, WM, bar and app configs alike; composes with pywal or matugen output — r/NixOS
NixOS on a €23 Orange Pi Zero 2W as a livestream kiosk with hardware video decoding — Discourse
Nix Community Survey 2026 is live, for the first time in five languages — survey.nixos.org · Discourse
cd ~/repos/josse-posten && claude --resume cb3083ec-20d5-4c97-9bde-09f83fca61f8