Witkoff lands in Oslo to draft a peace proposal while Trump calls
Russia’s conduct “fine” and holds back the Patriots; a Russian drone
hits a park full of families near Kharkiv; the Houthis deliver Yemen’s
deadliest strike of the war; and the Plex on your home server is being
turned into a proxy.
Trump
calls Russia’s actions in Ukraine “fine” as Patriots are withheld and
intelligence restricted
Trump said what Russia is doing to Ukraine is “fine”, said he would
meet Putin and Xi without Zelenskyy, and suggested Zelenskyy should not
be the one to negotiate peace. Vance stated explicitly that Ukraine will
not join NATO and pressed Kyiv to halt energy strikes on Russia.
Concretely: Ukraine is receiving only 12 Patriot missiles per month,
down from 48 under Biden, with allied-funded systems reportedly sitting
in Europe awaiting Hegseth’s signature. Ukraine says the US has delayed
Patriots already paid for under a NATO initiative.
Zelenskyy accuses Washington of “denying reality” over intelligence:
Ukraine received no US warning before Sunday night’s Russian strikes on
Kyiv power plants, contradicting White House claims that nothing has
changed. A Zelenskyy adviser told the BBC that US intelligence
restrictions are directly costing Ukrainian lives. Trump is also
reported to be open to a three-way summit with Xi and Putin focused on
denuclearization. A new Washington Post-ABC poll puts his approval at
33%, his lowest yet.
Zelenskyj
i Oslo: USA og Ukraina møtes om et fredsforslag
President Zelenskyj besøker Oslo tirsdag for høynivåsamtaler om
Ukraina-krigen, med statsminister Støre og Finlands president Stubb som
vertskap. Zelenskyj ba selv Norge og Finland om å være vertskap. USAs
spesialutsending Steve Witkoff deltar fysisk, mens Jared Kushner deltar
digitalt. Ifølge Axios deltar også representanter fra Storbritannia,
Frankrike, Tyskland, Polen, EU og NATO. Det uttalte målet er å utarbeide
et fredsforslag som kan legges frem for Russland; Witkoff og Kushner
reiser videre til St. Petersburg onsdag for å møte Putin. Støre sier
målet er å «sette diplomatiet på et mer konstruktivt spor».
Zelenskyj har også audiens hos kongen og besøker Stortinget.
Midlertidig flyforbud gjelder over deler av Oslo og Romerike frem til
onsdag kveld. Møtet skjer mens forholdet til Washington er iskaldt:
Trump har kalt ukrainske angrep på russisk infrastruktur «skammelig», og
Det hvite hus har begrenset militær Starshield-tilgang i Ukraina.
Zelenskyj bekreftet mandag å ha snakket med utenriksminister Rubio om
Starlink, tidlig varsling og ballistiske missiler. Analytiker Hilmar
Mjelde er pessimistisk: «Trump prøver å presse Ukraina til å gi opp
krigen.»
Russian
drone hits park full of families in Kharkiv region, killing infant and
two women; 28 energy facilities struck
Russia launched 165 drones overnight, 115 of which were downed,
striking energy infrastructure in Ternopil, Odesa, and Lviv. Zelensky
said 28 critical energy facilities were hit across Ukraine in the latest
wave. In the day’s deadliest civilian strike, a drone hit a park in Nova
Vodolaha in the Kharkiv region crowded with families, killing an infant
in a stroller and two women; seven children were among 14 injured.
Ukraine again received no advance warning from Western partners
before a ballistic missile strike on Kyiv. Zelensky also said Ukraine’s
SpaceX Starshield missile defense systems have been failing and demanded
answers. On the other side of the ledger, he reported that Ukraine has
retaken more territory this fall than Russia has captured.
(Ukraine’s own strikes on Russia are covered in Ukraine.)
Houthi
ballistic missile kills 53+ at Yemen training camp; Saudi Arabia cancels
“Davos in the Desert”
A Houthi ballistic missile struck a training camp for Yemeni
government security recruits in Shabwa province, killing at least 53
people and injuring more than 200. It is the largest single loss of life
in Yemen’s civil war since fighting reignited. Saudi Arabia separately
cancelled its 2026 Future Investment Initiative conference, known as
“Davos in the Desert”, postponing it to 2027 amid the Houthi threat;
government staff were ordered to work from home.
Four-CVE
Plex RCE chain actively exploited: cryptominers and proxy software on
home servers
A chain of four vulnerabilities (CVE-2026-96652 through -96656) in
Plex Media Server ≤1.43.2 enables remote code execution via the
/player/timeline/subscribe endpoint. Active in-the-wild
exploitation is deploying xmrig cryptominers and “myawesomeproxy”
software that routes external traffic through the compromised host, a
risk especially for home servers on residential IPs connected to
corporate networks. Self-hosters on r/selfhosted report compromises via
the Plex2Shell exploit on the default port 32400, dropping miners and
DDoS bots; one user’s connection kept dropping because Plex was being
commanded to flood other hosts. If you have Plex exposed to the
internet, firewall or update to v1.43.3 immediately.
Alberta votes 76% to
remain in Canada
Voters in Alberta overwhelmingly rejected a proposal to begin
independence proceedings, with CBC projecting roughly 76% in favour of
remaining in Canada. The result is a clear win for Prime Minister Mark
Carney and a significant setback for the separatist movement, which had
been internally fractured even before the vote.
| Indicator |
Value |
Change |
| S&P 500 (f) |
7,734 |
0.00% |
| Dow 30 (f) |
52,287 |
+0.20% |
| Nasdaq (f) |
29,621 |
-0.34% |
| Russell 2000 (f) |
2,743 |
+0.03% |
| VIX |
18.6 |
+0.81% |
| Gold |
4,141 |
-0.46% |
| BTC |
$81,290 |
-1.74% |
| USD/NOK |
9.39 |
-0.38% |
- Aker-aksjen stupte 7 prosent på Microsofts Nscale-exit og snudde
til +4 på Anthropic-ryktene, alt på én dag (see Norway)
World
Iran
strikes 15+ ships in Strait of Hormuz; Lavrov backs Tehran hours after
Trump praises Russia for “doing nothing”
Iran has attacked at least 15 container ships passing through the
Strait of Hormuz over the past ten days, disrupting one of the world’s
most critical trade routes and sending cargo spilling into the water.
Trump said the US continues to hit Iran “economically and militarily”,
while praising Russia for doing “nothing” to help Tehran. Hours later,
Russia’s Lavrov publicly backed Iran, exposing a crack in the claimed
US-Russia alignment and raising questions about diplomatic coherence in
any future Iran deal.
France
curfews as unrest eases; Italy deploys 500 troops to Milan; Albania
enters seventh day of protests
French Prime Minister Lecornu imposed targeted curfews in Lille,
Lyon, Nice and parts of Paris and cited “ultra-left” agitators for
exploiting legitimate cost-of-living protests; most French cities
returned to overnight calm. Over 1,800 have been arrested in the worst
civil unrest in France in many years. What started as student protests
over poor school conditions grew into nationwide riots when unions and
the Gilets Jaunes joined in; the 1883 Limoges town hall is a total loss
after the fire. Macron refused to let interior minister Nunez resign and
promised full transparency about police conduct. Norwegian analysts see
Marine Le Pen and Rassemblement National as the political winners of the
unrest.
In Italy, the government is dispatching 500 army troops to “defend
Milan” after protesters looted luxury shops and vandalized property.
Albania’s anti-government demonstrations entered a seventh day with
nearly 300 people injured, more than half of them police.
Kenya
starvation cult leader guilty of 191 murders
A Kenyan court found Paul Mackenzie and roughly 30 co-accused guilty
of murder in the deaths of 190 children and one adult in the Shakahola
massacre, one of the worst cult atrocities on record. Mackenzie’s sect
had ordered followers to fast unto death so they could “meet Jesus”,
with children the primary victims.
Australian
independent MP Helen Haines loses leg in deliberate car ramming
Independent MP Helen Haines lost one leg and is in critical condition
after a 43-year-old man allegedly performed a U-turn and struck her
twice with his car outside her electorate office in Wangaratta,
Victoria. Surgeons are fighting to save her other leg. Prime Minister
Albanese called it a deliberate act; police say it was an isolated
incident. The attack comes amid a documented surge in threats against
Australian politicians, several of whom described heightened personal
security routines in the days before the assault.
Hegseth
visits Netanyahu a week before Israeli elections; police detain 10
settlers in rare West Bank raid
US Defense Secretary Pete Hegseth travelled to Israel for an
unannounced meeting with Prime Minister Netanyahu, days before Israelis
go to the polls on October 27 in the country’s sixth election since
2019. Meanwhile Israeli police arrested 10 settlers in an unusually
forceful operation following a weekend of extreme settler violence in
the occupied West Bank, including a mob assault on US photojournalist
Heidi Levine and attacks on European diplomats and Palestinian farmers
during the olive harvest. Settler olive-harvest attacks have already
exceeded the full 2025 total. Israel also halted commercial imports to
Gaza the same week.
Gaza:
WFP ends food aid for half a million Palestinians as funding
collapses
The World Food Programme has ended monthly food support for more than
500,000 Palestinians in Gaza, a significant worsening from the one-third
cut reported last week. Two-thirds of Gaza’s population now face
crisis-level food insecurity, and 200,000 are in danger of famine.
Winter is expected to deepen the crisis further.
Sudan: drone
kills 80 near market in West Kordofan
A drone struck twice near a transport hub in the town of al-Dibab in
West Kordofan province on Sunday evening, killing around 80 people,
mostly commuters catching rides home, in one of the deadliest single
attacks of Sudan’s civil war.
Rwandan critic found
beheaded in Uganda
Robert Kabera, a former Rwandan army sergeant major who had sought
asylum in Uganda and became a popular YouTuber and singer openly
critical of President Kagame, was found beheaded in a village near
Kampala. His head has not been located. The killing fits the pattern of
Rwanda’s documented transnational repression of exiled dissidents.
Japan’s MMX spacecraft lifted off on its five-year mission to collect
10 grams of material from Phobos, one of Mars’s two moons. It is the
world’s first attempt to retrieve samples from a Martian moon, with the
spacecraft scheduled to return to Earth in 2031.
Also today
- Americas
-
Haiti: gangs launch biggest attack on El Salvador-led foreign troops
since the mission deployed — AP
· r/worldnews
-
DOJ charges 28 in California with voting crimes and files an emergency
request to block ballots from “likely non-citizens”, two weeks before
the midterms — NPR
-
DHS extends temporary protected status for more than 100,000 migrants
from Ukraine and Sudan — The
Guardian
-
Mahmoud Khalil’s deportation fight goes to the Supreme Court — Al
Jazeera
-
Hurricane Trudy, the 22nd named system of an active Pacific season,
makes landfall on Mexico’s Pacific coast — The
Guardian
- Europe
-
Spain: four killed in flash floods on the Mediterranean coast; Greece
also reports a flood death — Al
Jazeera · The
Guardian
-
Catalonia: Spain’s Supreme Court upholds lifting of Puigdemont’s arrest
warrant, clearing his return from exile — BBC
- Asia & Middle East
-
Saudi Arabia executed two Bangladeshis for an “indecent act” in a mosque
without notifying Dhaka — BBC
Ukraine
Ukrainian
drones hit Druzhba pipeline station and St. Petersburg data center;
millions of Russians locked out of bank accounts
Ukraine hit the Nikolskoye oil pumping station in Russia’s Tambov
region, a node on the Druzhba pipeline system, setting it ablaze
overnight, and separately struck the VKontakte social network’s data
center near St. Petersburg. The data center attacks disrupted Yandex and
other services and locked millions of Russians out of bank accounts and
apartment access systems. This follows a reported 1,000+ drone campaign
last week against Russian oil export terminals. Zelenskyy has offered to
pause energy strikes in exchange for Patriot missiles; Vance is pressing
Ukraine to stop unconditionally.
Ukraine
evacuates first wounded soldier by drone from a frontline position
Ukraine’s 92nd Separate Assault Brigade used a hexacopter to lift a
wounded soldier directly out of a frontline position, the first
documented drone casualty evacuation in the war. Video was shared
publicly by the brigade. The mission signals drones expanding beyond
strike and reconnaissance into MEDEVAC roles, with significant
implications for casualty survivability on contested ground.
Frontline:
206 clashes; WSJ reveals Russian lieutenant who spied for Ukraine before
defecting
Ukraine’s General Staff logged 206 combat clashes over the past day,
with the heaviest fighting on the South Slobozhanshchyna (26 attacks)
and Pokrovsk (21 attacks) fronts. Russia absorbed an estimated 1,560
casualties per day. A WSJ investigation revealed that Russian Lieutenant
Lev Stupnikov spied for Ukrainian intelligence for months before
defecting, enabling strikes that killed over 300 soldiers.
Western
allies close ranks: EU rejects Russian gas deal, NATO drills in Poland,
Merz warns of destabilization campaign
The EU rejected a US proposal to restore Russian gas imports as part
of any Ukraine peace settlement. UK, France, and Germany launched major
military exercises in Poland in preparation for a potential troop
deployment to Ukraine. Friedrich Merz stated that Russia’s strategic
goal is to destabilize all of Europe’s political order, not just
Ukraine. UK and Poland separately criticized Hegseth for publicly
downplaying NATO allies’ contribution to the Afghanistan war.
Investigations
Documents:
Mossad directors encouraged nearly $2 billion in Qatari payments to
Hamas
TIME magazine reports that newly revealed documents show senior
Mossad directors actively encouraged approximately $2 billion in Qatari
government payments into Hamas-controlled Gaza. The disclosure raises
fundamental questions about Israeli intelligence’s role in financing the
organization responsible for the October 7 attacks.
Russia
covertly ships weapons and suspected spies to Africa on civilian
vessels
An investigation by Novaya Gazeta found Russia has been using
civilian cargo ships to transport military equipment to Africa, with the
same vessels carrying suspected undercover intelligence officers. It is
a covert logistics network that evades sanctions tracking and Western
maritime monitoring.
Ex-OpenAI
worker accused of sabotage had Saudi government support, court filing
alleges
A court filing in the case against a former OpenAI employee accused
of planting a malicious device at the company alleges that the suspect
received support from the Saudi Arabian government. Saudi Arabia did not
respond to comment requests. The allegation raises significant concerns
about foreign state targeting of leading AI organizations.
Bessent:
US asked Europe to impose secondary tariffs on India, and was
refused
Treasury Secretary Scott Bessent disclosed that Washington asked
European allies to impose secondary tariffs on India as part of the
Trump administration’s economic pressure strategy, and was turned down.
The revelation exposes the limits of allied compliance with US trade
coercion and signals India as an active target of Washington’s tariff
diplomacy.
Norway
Droneangrep
på skip i NATO-farvann setter alliansen på prøve
En kjemikalietanker ble angrepet med drone innenfor Romanias
territorialfarvann i Svartehavet, det siste i en serie på minst sju
angrep mot kommersielle skip over to uker, med flere drepte og 28
savnede sjøfolk. Romanias president peker på russisk involvering;
Russland avviser. Utenriksminister Espen Barth Eide kaller utviklingen
«svært alvorlig» og sier angrepene går utover hybride trusler. NATO
debatterer nå terskelspørsmålet: er angrepene på medlemslandets
territorialfarvann nok til å utløse kollektivt forsvar?
Forsvar:
hangarskip på vei, NSM-salg til Danmark, stridsvognbygging startet, og
livvakt til Kongsberg-sjefen
Det britiske hangarskipet HMS Prince of Wales, med F-35B-fly, er på
vei til Norge for NATO-øvelse i Nord-Atlanteren. Danmark har bestilt nye
norske Naval Strike Missiles for 400 millioner kroner. Ritek i Levanger
har åpnet produksjonslinje for stridsvogner. Kongsberg Gruppen-sjefen
får personlig livvakt etter økt trusselvurdering fra antatte utenlandske
aktører. Norge dropper årets NATO-atomvåpenøvelse Steadfast Noon i
Italia, og fem personer er pågrepet og fire varetektsfengslet for grovt
bedrageri mot NATO.
Samtidig bekreftet forsvarsminister Tore O. Sandvik overfor DN at
Forsvaret leide inn kinesiske kjøretøy til en stor øvelse uten å ha
gjort noen konkret risikovurdering i forkant. Forsvaret planlegger
heller ikke å utestenge kinesiske biler fra militære områder.
Nscale
og Anthropic: mulig 450 mrd. kr-kontrakt, og Aker-aksjen svinger
voldsomt
Bloomberg melder at Aker-kontrollerte Nscale er i dialog med
Anthropic om en ny kontrakt verdt rundt 45 milliarder dollar for
leveranse av datakraft fra et nytt datasenter ved Monarch-komplekset i
West Virginia: 460 MW kapasitet med Nvidias kommende Vera Rubin-brikker.
Anthropic skal også ha forkjøpsrett på et tredje planlagt bygg. Landes
avtalen, kan samlet ordrebok mot Anthropic nærme seg 150 milliarder
dollar. Samme dag trakk Microsoft seg fra Nscales første britiske
datasenterkontrakt etter gjentatte forsinkelser. Aker-aksjen stupte
rundt 7 prosent på Microsoft-nyhetene, snudde deretter og steg 4 prosent
på Bloomberg-meldingen, alt innenfor én handelsdag.
Statnett
varsler kraftunderskudd: Norge kan mangle 20 TWh innen 2035
Statnetts nye langsiktige markedsanalyse tegner et bekymringsfullt
bilde: i hovedscenariet har Norge et kraftunderskudd på nesten 20 TWh i
2035. Elektrifisering av industri og kraftig vekst i
datasenteretterspørselen driver forbruket opp, mens Statnett kutter
forventningene til ny produksjonskapasitet. FrP-leder Sylvi Listhaug vil
kreve at datasentre investerer i kraftproduksjon som vilkår for
nettilgang, og vil endre strømkøen. Smelteverket Finnfjord AS, som
ønsker å bli verdens første CO₂-frie ferrosilisiumprodusent, er et
konkret eksempel på industri som vil elektrifisere, men som ikke kommer
til i strømkøen.
Samme dag meldte Hydro at selskapet for første gang har laget
aluminium uten CO₂-utslipp med teknologien HalZero, en
elektrolyseprosess der karbon holdes i en lukket sløyfe slik at bare
oksygen slippes ut. Teknologien har vært under utvikling siden 2016 og
er finansiert av blant annet 141 millioner kroner fra Enova. Neste steg
er integrasjon av prosesskomponenter og mulig pilotanlegg. Støre kalte
gjennombruddet «historisk».
EU
snur om Arktis-olje, og gir norske klimaprosjekter 3,3 mrd. kr
EUs nye Arktis-strategi, som legges frem tirsdag, dropper
2021-strategiens krav om et globalt forbud mot olje- og gassutvinning i
Arktis. EU vil nå bare arbeide for restriksjoner dersom utvinning
«utgjør en trussel mot Arktis-økosystemet», et vesentlig tilbaketog.
Samtidig tildeler EU 3,3 milliarder kroner i innovasjonsmidler til
norske prosjekter: Aker Solutions og Aker BP for karbonfangst og
-lagring, og Sirona Technologies for havvind.
«Professor
Moltsjanov» arrestert på Svalbard for Ukraina-krav
Det russiske skipet «Professor Moltsjanov» ble arrestert i
Barentsburg av Sysselmesteren på vegne av ukrainske Naftogaz, for å
håndheve en voldgiftsdom på 4,22 milliarder dollar fra Haag, et krav som
springer ut av Russlands kontroll over Krim-eiendeler. Det første
arrestasjonsforsøket ble ifølge advokaten møtt med trusler om «store
konsekvenser», noe som tvang Sysselmesteren til å trekke seg. Et nytt
forsøk lyktes etter et 24 timers standoff. Det russiske statsselskapet
Arktikugol bestrider arrestasjonen i norsk rett og hevder skipet er
kritisk for forsyningslinjene til Barentsburg.
Norsk
sikkerhetsmiljø avdekket masseangrep fra KI-agenter i sanntid
Et norskledet sikkerhetsmiljø oppdaget cyberkriminelle som brukte
KI-agenter til å bryte seg inn i over tusen selskaper, blant dem noen av
USAs mest kjente, men angriperne begikk en feil som gjorde det mulig å
følge innbruddene i sanntid. Saken belyser et bredere skift: Telenors
ferske sikkerhetsrapport advarer om at KI gir angripere evnen til å
finne og utnytte nulldagssårbarheter raskere enn leverandører kan tette
dem, og at norske bedrifter nå kan ha minutter, ikke timer, til å
reagere på angrep.
Anthropics nye sikkerhetsrapport peker i samme retning: kompakte
KI-modeller er måneder unna å kunne kopiere seg selv på kommersielle
IoT-enheter som smartovner og Android TV-bokser, uten tilgang til tung
datakraft. Slike «KI-ormer» kan spre seg ukontrollert i
forbrukernettverket og representerer en ny trusselkategori utover
serverbasert KI-sikkerhet.
Regjeringen foreslår en tannhelsereform der alle pasienter på sikt
skal betale maksimalt 25 prosent av behandlingskostnadene, med rett til
nødvendig og subsidiert tannhjelp. Fylkeskommunene får lovpålagt plikt
til å tilby tjenesten gjennom offentlige klinikker eller private
praksiser. Fullt utbygd koster reformen rundt 9 milliarder kroner i
året; det er ikke satt av penger ennå, og utrullingstakten avhenger av
årlige bevilgninger. De yngste voksne prioriteres først. Det er bred
tverrpolitisk enighet om prinsippet, men uenighet om hvem som
prioriteres: Tannlegeforeningen støtter målet, men vil ha behovsbasert
heller enn aldersbasert prioritering og kritiserer uklar finansiering.
Høyre er imot reformen.
16-årsgrense
for TikTok, Roblox og Snapchat; ID-sjekk på pornosider
Regjeringen vil gi Roblox, TikTok og Snapchat, plattformer vurdert
som særlig skadelige for barn, den samme 16-årsgrensen som allerede
gjelder for sosiale medier. Forslaget utvider det eksisterende
regelverket og er i tråd med Helsedirektoratets råd om barns
skjermbruk.
Regjeringen bekreftet også at den vil innføre obligatorisk
alderssjekk på pornografiske nettsider som del av EUs Digital Services
Act. Brukere skal bevise at de er over 18 med en digital legitimasjon
knyttet til ID-kort eller pass; nettstedet får bare et bekreftet ja/nei,
ikke personopplysninger. Storbritannia, Frankrike og Australia har
allerede innført lignende krav. Reddit-diskusjonen var skeptisk:
kommentatorer fryktet at tenåringer sendes til «virkelig deprimerende»
uregulerte alternativer, og stilte spørsmål ved datahåndteringen hos
tredjeparts verifiseringsinfrastruktur.
Kraftig uvær rammer
Nord-Norge
Stormen har ført til store problemer i nord: Sortland i Vesterålen er
hardt rammet av oversvømmelse. Vann sto i kjellere og nådde elektriske
fordelingsskap i sentrum mens nødetater pumpet kontinuerlig uten å holde
tritt. Alle fly til og fra Evenes er innstilt; Tjeldsundbrua er stengt
og mange båt- og bussruter innstilt. Midt i uværet ble en 80 år gammel
mann funnet nedkjølt, men i live, etter å ha vært savnet på vidda i Tana
siden fredag.
Også i dag
- Næringsliv og teknologi
-
Starlink solgte bredbånd for 831 millioner kroner i Norge i fjor, opp 50
prosent fra 553 millioner; bedriftsmarkedet er størst, men
privathusholdninger kobler seg til i voksende tempo — E24
· Digi.no
· r/norge
-
KI-koding: ny Harvard-studie finner at KI-verktøy øker mengden generert
kode med rundt 30 prosent, men antallet leverte programfunksjoner endrer
seg ikke vesentlig; flaskehalsen er gjennomgang og integrering.
Accenture strammer inn etter at ansatte har brukt opptil 10 000 kroner i
måneden — Digi.no:
30 prosent · Digi.no:
tokenfesten er over
- Politikk
-
Fawzi Warsame (28) er valgt til ny AUF-leder og erstatter Gaute Børstad
Skjervø — NRK
· NRK
XL: portrett
-
Sverige: Riksdagens talmann gir Centerpartiets Elisabeth Thand Ringqvist
i oppdrag å danne regjering etter at Magdalena Andersson ikke klarte å
samle flertall — NRK
· Aftenposten
-
TV-aksjonen 2026 samlet inn 251 millioner kroner til Flyktninghjelpen;
pengene skal gi 400 000 flyktninger et trygt hjem — NRK
-
Frankrike: portforbud i flere byer etter de verste opptøyene på mange år
— se World
Norway — Street Level
Equinors
ord: én fortelling til deg, en annen til pengefolkene
En datajournalistisk gjennomgang fra NRK viser at Equinor bruker
«energi» og «vind» hyppig på Facebook og i pressemeldinger, men går
tilbake til «olje og gass» i årsrapportene til investorer. Bare 0,8
prosent av Equinors produksjon er fornybar; undersøkelser viser at de
fleste nordmenn tror andelen er 30 prosent. En retorikkprofessor ved UiB
sier det rett ut: ordet «energi» dekker alt, høres positivt ut og
skjuler olje og gass. En investeringsdirektør i Nordea forklarer
logikken: for vanlige folk signaliserer fornybart dyd, for investorer
signaliserer det lavere avkastning, så Equinor forteller investorene at
selskapet trekker seg fra fornybart. Equinor svarer at årsrapportene gir
«full innsikt» og at «energi» er et «hensiktsmessig paraplybegrep».
Mønsteret speiler dokumentert grønnvasking hos ExxonMobil.
«Mamma,
er jeg haram?» – et integreringsinnlegg fra Groruddalen
En anonym norsk mor skriver i Aftenposten om hvordan
kjønnssegregerende sosiale normer i nabolaget i Groruddalen, der etniske
nordmenn er i mindretall, preger datterens hverdag. Klassevenninner kan
ikke komme på besøk fordi det bor eldre brødre i huset; skolen har
kjønnsdelt svømming fordi noen foreldre ikke aksepterer blandede
klasser. Datteren spør nå om hun selv er «haram». Moren påpeker at også
høyt utdannede andre- og tredjegenerasjons innvandrerforeldre aktivt
velger bort likestillingsnormer og skolesamarbeid. Innlegget er
bemerkelsesverdig fordi det gir stemme til et etnisk norsk
mindretallsperspektiv i et nabolag der nordmenn er i mindretall, et
synspunkt som stort sett er fraværende i integreringsdebatten.
Grassroots
- Jobbmarkedet: en mastergradsstudent i matte/informatikk melder om
over 100 søknader uten ett intervju, en kanadisk innvandrer med MBA og
bankbakgrunn om 300+ avslag. En annonse fra Accenture/Academic Work med
2,5 måneders ubetalt obligatorisk opplæring før oppstart gikk viralt;
kommentatorer kalte den klart ulovlig etter arbeidsmiljøloven — r/norge:
100 søknader · r/Norway:
300+ jobs · r/norge:
frekkaste jobbannonsen
- Deadnaming-debatt: kommentatorer, blant dem Espen Ottosen,
diskuterer nå åpent om det er etisk akseptabelt å oppsøke og publisere
transkvinners fødenavn, og en profilert transkvinne ble offentlig
deadnamet. Tråden beskriver dette som en kvalitativ eskalering, fra
politikkdebatt til målrettet eksponering av enkeltpersoner — r/norge
Tech
Who
hacked France’s supermarket fridges: unpatched Danfoss dashboards, 85%
on outdated firmware
France hosted 53% of the world’s internet-accessible Danfoss
refrigeration dashboards (1,331 of 2,528 globally), with 85% running
outdated firmware carrying known CVEs, including one with no patch
available since Danfoss ended support in 2023. Attackers gained remote
access and triggered defrost mode, pushing units to 50°C and causing
fires and food spoilage across supermarkets. ipinfo’s scan found these
systems had been exposed at the same addresses for at least six months
with minimal patching progress. (The Plex exploitation wave is on
the front page.)
WhatsApp
instructed its AI to hide regulatory options from users
WhatsApp embedded machine-readable instructions in 102 blocks across
80 help pages, invisible to human readers but consumed by the AI
chatbot, telling it not to recommend contacting data protection
authorities and not to cite GDPR even when users raised privacy law
questions directly. WhatsApp’s own privacy policy explicitly states
users can file regulatory complaints. The company called it “an
unintended bug in its support chatbot system” and removed all hidden
blocks after the story broke.
Abliterated
LLM weights are a supply-chain backdoor: $50 and 2.5 hours to
poison
ProjectDiscovery demonstrated end-to-end backdoor injection into
open-source model weights: 125 poisoned rows mixed into 625 training
samples, a rare trigger phrase, and a remote payload URL so the attack
can be swapped without retraining. The backdoor concentrates in 0.6% of
parameters and passes every standard benchmark. Real-world evidence
backs up the threat: a fake “OpenAI privacy filter” on Hugging Face hit
244,000 downloads in 18 hours before detection. Poisoning cost stays
roughly flat whether the model is 600M or 13B parameters. Detection
requires guessing unbounded trigger phrases while the attacker needs
exactly one.
Ante
introduces zero-cost cyclic mutability with place-based borrow
checking
The Ante language proposes replacing Rust-style lifetime regions with
places, the exact set of values a reference borrows from,
combined with shape-stability markers indicating which mutations can
invalidate a reference. This lets the compiler accept safe programs Rust
rejects (like HashMap::get_or_default with a mutable
fallback path, or getting references to non-overlapping vector elements)
without runtime overhead or unsafe code. The approach handles complex
control flow that Rust’s region-based checker struggles with.
Rust
2026: Polonius, next-gen trait solver, and parallel frontend all
converging
A convergence of major Rust compiler infrastructure: the next-gen
trait solver (a rewrite 10 years in the making) resolves long-standing
soundness bugs and unblocks blocked features; Polonius replaces the
current borrow checker to enable internal references and more expressive
lifetime patterns; the parallel frontend is near stabilization; LLVM 23
upgrade ships; a new move-elimination MIR optimization eliminates copies
LLVM misses; and Cargo gains a shared check/build cache. The author
works on several of these.
Futhark’s compiler had undefined behavior on signed integer division
when dividing the most negative integer by −1, one pair of inputs out of
2^64. The fix adds a per-division branch to handle that case with
unsigned arithmetic. CPUs were fine: branch prediction absorbed it. GPUs
were not: a 127% slowdown on division-heavy benchmarks from disrupted
instruction pipelines. A sharp demonstration of how correctness
trade-offs can be asymmetric across hardware architectures.
Deno’s core team is moving to Cloudflare and halting Deno development
within a year. P. Webb has forked as Ende (an anagram of Deno),
deliberately diverging: Node.js compatibility removed entirely (“a
gravity well” per Ryan Dahl himself), Deploy/KV/Jupyter integrations
stripped, focus shifted to per-module permissions, untrusted-code
sandboxes, and post-quantum crypto. MIT licensed; Webb is building it
for their own production needs.
Tor
VPN Beta: per-app circuit isolation, full-device Tor on Android
The Tor Project’s Android VPN extends Tor protection beyond the
browser to the entire device, with each application getting its own
dedicated Tor circuit to prevent cross-app correlation. Built on Arti
(the Rust Tor implementation) for improved stability; available on
F-Droid for reproducible-build verification. Key finding from
development: users in Iran and Turkmenistan needed bridge/circumvention
support far more than the exit-node selection that standard VPN users
expect. Early exit UI was actively dangerous for at-risk users.
OpenBSD 8.0 ships
with Linux 6.18 GPU drivers
OpenBSD 8.0 is out, with the headline being GPU driver parity:
inteldrm, radeondrm, and amdgpu ported from Linux 6.18, a substantial
leap for modern hardware support. Wine has also been ported to OpenBSD
and appears in ports.
Also today
- One-hash Bloom filters: a single hash function with properly tuned
parameters achieves the same false-positive rates as k independent
hashes — calabro.io · HN · Lobsters
- Go will reject TLS certificate chains containing any of eight
distrusted SPKIs, mapping to 16 eMudhra CA certificates — Go issue · affected
cert list · HN · Lobsters
- DHS orders all US federal civilian agencies to remove DeepSeek from
IT systems; defence is not covered — Reuters
· Federal
Register · HN
- Spec-based agentic monitoring: agents write a machine-checkable spec
that a deterministic harness executes, rather than open-ended agent
loops; roughly $100/day to cover a fleet — Benjamin
Congdon · HN
Linux & Infrastructure
Netherlands
building NixOS-based sovereign OS to break free from Microsoft
The Dutch government’s DAWO (Digitaal Autonome Werkomgeving Overheid)
project is building a full national IT stack, OS, productivity apps and
cloud services, on NixOS to replace Windows and Microsoft services
across all government institutions. The push accelerated after the US
imposed ICC sanctions and Microsoft reportedly blocked the court’s
prosecutors from accessing its email services. Pilot programs are
already running; full institutional rollout is planned. NixOS was chosen
partly because it originated with Dutch developers and is backed by the
Dutch NixOS Foundation.
nix-cachyos-kernel
binary cache is down after server compromise
The maintainer of nix-cachyos-kernel (xddxdd) shut down all servers
after discovering an attacker had access mid-way through an intrusion.
The binary cache at cache.xddxdd.moe is unavailable. The maintainer
states they caught the attacker before kernel tampering was completed,
but cannot fully rule it out. Anyone using this cache should remove it
from their Nix configuration until the maintainer gives the
all-clear.
Linux
7.3: sched_ext complete, fchroot(), and a binfmt_misc extension that
makes Nix binaries relocatable
Linux 7.3 ships the sched_ext extensible scheduler as complete, adds
a new fchroot() system call, BPF global per-CPU data, VM working-set
tracking, and a long list of SMB server improvements. By the numbers:
18,765 non-merge commits from 3,021 developers, a release record,
including 807 first-time contributors.
For NixOS the interesting piece is binfmt_misc: binary interpreter
paths can now be computed per-exec via eBPF rather than fixed at
registration time, so the dynamic linker path can be resolved relative
to the binary using $ORIGIN, eliminating the need for
patchelf or wrapper scripts. fzakaria’s essay “One Store, Two Frontends”
builds on this: once Nix binaries are relocatable, Nix, Bazel, and Buck2
can all share a single content-addressed store, each a different
frontend accessing the same artifacts by hash, without
/nix/store mounts on remote build workers.
numtide/iets:
Rust Nix evaluator with 1.7–3.5× speedup
iets is a Rust reimplementation of the Nix client that consolidates
nix-build, nix-eval-jobs, nix search, nix-diff, and nix-direnv into one
binary. Benchmarks show 1.7–1.9× faster evaluation on a single worker
and 3.1–3.5× faster with four workers compared to Nix 2.34.8. Notable
features include eval caching based on file tracing, automatic
hash-fixing for fixed-output derivations, and the ability to push builds
to remote builders without a local Nix store. Flake support is still
limited and it falls back to nix for unsupported cases. The
codebase is LLM-generated, flagged in the README.
nixos-vex: CVE
triage for NixOS using OpenVEX
nixos-vex generates a personalized OpenVEX feed for your NixOS
system. It uses sbomnix to build a software bill of materials and grype
to scan for CVEs, then evaluates VEX statements, both unconditional
(upstream-only vulnerabilities) and conditional (checked against your
actual NixOS config options), to suppress false positives. The stated
goal: not zero CVEs, but zero untriaged CVEs. Distributed as a
flake with a system.build.vexFeed output. Targets
nixos-unstable x86_64 currently.
Five
new Hyprland shells and launchers: impasto 0.6, Cove, Morgan, Hyprdrive,
zunder
A busy week on r/hyprland. impasto 0.6, a shell
built around a shape-shifting Dynamic Island, adds liquid glass material
across bar, island, widgets, and dock; rounded screen corners; a bezel
bar; per-app screen time tracking; a running dev-servers panel; and
lyrics on the lock screen during face recognition. Colors auto-extract
from the wallpaper and update terminal, Neovim, and GTK/Qt windows
simultaneously.
Cove is a Hyprland + Quickshell setup with 8 bar
styles, a dynamic island, a launcher with prefix-based modes (=
calculator, / files, @ windows, : clipboard), and 19 desktop widgets;
colors come from the wallpaper or from the currently playing music. Arch
Linux only. Morgan is a two-month-old Rust + GTK4 shell
that replaces hyprlock, hypridle, and waybar/eww setups in one binary,
with nine built-in themes. Hyprdrive, previously
Omarchy-only, now runs natively on Hyprland 0.56 with an Overview grid,
a macOS-style Dock with live previews, and Mosaic, an experimental
hybrid layout where windows cluster without gaps while retaining
individual sizes. zunder (Rust + GTK4 + layer-shell) is
a terminal-styled launcher and ALT+TAB switcher with live window
previews across all workspaces, unit/currency conversion, world clock,
and a plugin system that accepts executables in any language.
Zigduck is a fully declarative Nix flake for Zigbee home automation:
devices, scenes, automations, media, and grammar all defined in Nix. It
wraps zigbee2mqtt and Mosquitto in a Rust async runtime. Version 0.2.6
adds a GNOME Shell extension for a top-bar desktop widget, TV guide
scraping from EPG JSON, and multi-architecture support beyond
x86_64.
Also today
- Nix
-
Determinate’s Native Linux Builder for macOS is generally available for
logged-in FlakeHub users: Linux-only derivations build on a native Linux
machine behind the scenes, no VM or remote builder config — Determinate
Systems · r/NixOS
· Discourse
-
Pattern: hardened NixOS services with systemd
RootDirectory= and individual Nix store paths bind-mounted
in, least-privilege isolation without containers — Discourse
-
finix: a user reports switching fully to the dinit-based NixOS init
after five months of parallel testing, with noticeably faster boot — r/NixOS
-
Modular Services meeting #10: a
fileSecrets contract for
how service modules consume secret files is in progress; slower than
usual after NixCon and the 26.05 cycle — Discourse
-
Declaring color themes as Nix variable sets, consumed by terminal, WM,
bar and app configs alike; composes with pywal or matugen output — r/NixOS
-
NixOS on a €23 Orange Pi Zero 2W as a livestream kiosk with hardware
video decoding — Discourse
-
Nix Community Survey 2026 is live, for the first time in five languages
— survey.nixos.org · Discourse