Macron accuses Trump and Netanyahu of “stupid comments” about France’s unrest

Macron said foreign leaders who face elections, Trump and Netanyahu by name, are exploiting France’s street protests for domestic gain. France rejected Trump’s attempt to blame the unrest on migration. Paris has banned demonstrations in parts of the city on Thursday ahead of another protest weekend, Italy is sending 500 soldiers to Milan, and Carrefour cut its annual earnings forecast because of reduced opening hours and security costs.

US embassy formally accuses Canadian politicians of interfering in the midterms

The US Embassy in Ottawa officially accused Canadian politicians of meddling in the upcoming midterm elections. Prime Minister Mark Carney dismissed the claim and noted that it was the US that started the trade actions against Canada, not the other way round. (Related: Canada’s interest in a Norwegian Arctic cable, in Norway)

Israel’s election: Arab parties could decide who governs

With the 27 October election too close to call, Arab parties may win enough seats to tip the balance against Netanyahu’s coalition. Historically, low turnout and systemic exclusion have limited their influence. This time, organised get-out-the-vote campaigns are targeting that disillusionment. In the West Bank, Israeli forces detained about 80 US, Israeli and British volunteers who were helping Palestinian farmers harvest olives near Bethlehem. Among them was Brad Lander, the Democratic congressional nominee in New York. In Washington, AIPAC said it will stop endorsing candidates and giving directly to campaigns this cycle. Its super PAC will continue independent spending.

Millions struck off India’s voter rolls in “the largest disenfranchisement in history”

NPR reports that millions of Indian citizens have been removed from the electoral rolls. The deletions appear to hit opposition-leaning areas disproportionately.

Besieged Taiz on the verge of an “unmanageable” crisis

Aid workers warn that the Yemeni city of Taiz is running out of water, fuel and fresh food as Houthi advances cut most supply routes. Oxfam calls the situation “unmanageable”. Inside the city, women’s groups that began with food distribution now resupply the defenders with ammunition.

Indonesia’s haze: an estimated 1,700 dead, and foreign aid refused

Indonesia is in its worst wildfire season in a decade, with more than 1,100 hotspots in the peat forests of Kalimantan and an estimated 1,700 deaths, mostly from smoke inhalation. The government has declined foreign assistance. Separately, a new UN report finds that current policies lead to 2.6°C of warming this century, and that getting back on track would require an 18% cut in global emissions within four years.

North Korea prepares to restart propaganda loudspeakers along the entire border

Kim Yo-jong announced that loudspeaker arrays aimed at the South will be operational “within days” along the full length of the border, reviving a psychological-warfare tool that has been silent for years. Seoul urged dialogue.

When Starshield cut out, Ukrainian drones fell from the sky — and Rubio says access is Musk’s call

A New York Times investigation finds that a deliberate Starshield outage made Ukrainian military drones crash mid-flight. This follows yesterday’s reports that Musk personally ordered the slowdown of the military Starlink service. Secretary of State Rubio has since said that Ukraine’s access to Starlink is “a decision for Elon Musk”, which distances the White House from the restrictions. Zelensky, meanwhile, accuses the US of unfairness and is demanding interceptor missiles. Brussels is trying to cover a €70 billion gap in Ukraine’s 2027 budget and is asking Canada and the UK to carry more of it.

Russia’s Black Sea ports lost nearly all their cargo in September and are asking for a bailout

The drone campaign against Russian ports is showing up in the numbers. Novorossiysk, Taman and Tuapse lost 95–100% of their cargo volume and 85% of passenger traffic in September, with combined monthly losses above $2.2 billion. Operators have asked the government for bailouts and sent an estimated 20,000–25,000 workers on unpaid leave.

Drones hit the arsenal near Moscow that repairs Buk and S-300V systems

Ukrainian drones started a fire at JSC 75 Arsenal in Serpukhov, Moscow Oblast. The facility repairs and restores Buk and S-300V air-defence systems, the network Russia depends on to stop deep strikes.

New Mexico sues Epstein’s lawyer and accountant for concealing his sex crimes

New Mexico has filed a civil suit against Epstein’s personal lawyer and his accountant. The state accuses them of knowing about his sex-trafficking network and helping to hide it. Both men deny any knowledge, and their attorney called the suit “categorically false”. The case extends accountability from Epstein’s direct associates to the professional infrastructure around him.

Taiwan charges five men in a China-ordered plot to run over a comedian who mocked Xi

Prosecutors say a China-based person known only as “K” paid the defendants to hit comedian Huang Yi-hao with a car as revenge for his jokes about Xi Jinping and the CCP. Taiwan has documented a growing pattern of Chinese transnational repression against critics, dissidents and satirists on the island.

Germany’s military formally rates the Russian sabotage threat as “significant”

For the first time, the Bundeswehr has officially classified the risk of Russian sabotage against its own troops and facilities as “significant”. It is a sign of how far Russia’s hybrid war now reaches beyond Ukraine’s borders.

«Grotesk»: sterke reaksjoner på Witkoffs Putin-utspill

Historiker Bård Larsen kaller Witkoffs beskrivelse av Putin som «humanitær» grotesk, og sier at Trumps team ser ut til å mene at den liberale verdensordenen allerede er død. Utenrikskomiteens leder Peter Frølich (H) sier at russisk imperialisme ikke forsvinner med Putin, og at Russland må lide nederlag før noe virkelig endrer seg. Ukrainas utenriksminister gikk ut mot «underdanighet og smiger». På r/norge krever en mye diskutert tråd sanksjoner mot Musk, Tesla og SpaceX i Europa, med henvisning til Starlink-forstyrrelsene. (Se også Ukraine)

Frølich smuglet droner til Ukraina – angrer ikke

I den nye boken Om krigen kommer forteller Peter Frølich (H) at han i 2023 smuglet varmesøkende droner inn i Ukraina gjennom organisasjonen Fritt Ukraina. Tollvesenet hadde stoppet en sending på Kiel-fergen med hjemmel i en forskrift fra 1950-tallet, og regjeringen svarte ikke på hastehenvendelser. Morgenen etter ble regelendringen hastebehandlet, og i dag er eksport av kommersielle droner til Ukraina lovlig. Frølich anbefaler ikke å bryte loven som vane, men kaller dette det åpenbart riktige valget.

Anthropic tapte 750 milliarder kroner første halvår – Røkkes Nscale i samtaler om avtale til 45 milliarder dollar

Anthropic tapte rundt 80 milliarder dollar i første halvår 2026, og enkelte investorer presser nå på for en lavere verdsettelse før en mulig børsnotering. Samtidig forhandler Kjell Inge Røkkes Nscale om å levere datasenterkapasitet til Anthropic for 45 milliarder dollar. Avtalen vil i så fall bære Nscales planlagte utbygging på flere gigawatt i Norge og Norden. E24 har kartlagt Norge-planene og finner at de er enorme, men så langt i liten grad realisert.

NVE: første nye vindkraftverk på ni år – mens EU vil la Arktis-oljen ligge

NVE har gitt konsesjon til Moldalsknuten vindkraftverk i Rogaland, utviklet av Eviny og Norsk Vind. Det er det første nye vindkraftverket på land som får ja på ni år. Samme dag la von der Leyen fram EUs oppdaterte Arktis-strategi: Europa skal ikke være et marked for olje, kull eller gass fra ny utvinning i Arktis, heller ikke fra norske farvann. Det utfordrer planene i Barentshavet direkte, selv om det er uklart hvordan dette skal håndheves. I Sandnessjøen feiret bransjen og energiministeren at 100 felt nå produserer samtidig på norsk sokkel, men advarte samtidig om et dramatisk stup i produksjonen. Hydro har på sin side etter ti års forskning produsert aluminium nesten uten direkte utslipp.

Rekordlav måling for Høyre – Frp mer enn dobbelt så store

En ny måling viser Høyre på rekordlav oppslutning, mens Frp nå er mer enn dobbelt så store. Arbeidsledigheten steg samtidig til 4,6 prosent i september, fra 4,5 prosent i august. I Rødt vil sentralstyret halvere den årlige støtten til Rød Ungdom fra 2027, og ungdomspartiet sier at de ikke fikk noe varsel.

Pasient beltelagt i nesten 12 døgn på Ahus – hvert tredje barn i ungdomsfengsel får lengre rulleblad

Sivilombudet kritiserer bruken av belteseng ved Akershus universitetssykehus sterkt, etter en sak der en pasient var beltelagt i nesten 12 døgn i strekk. En NRK-gjennomgang viser at hvert tredje barn som soner i ungdomsfengsel, blir dømt for nye lovbrudd begått i fengselet. I én av sakene ble en 15-åring holdt fast av flere betjenter etter en krangel om mozzarellapinner.

Stavås Skistad bryter tausheten: «Det jeg kalte respekt, var egentlig frykt»

Kristine Stavås Skistad forteller for første gang offentlig om varselet mot mangeårig trener Lage Sofienlund. Hun beskriver et forhold preget av kontroll, økonomisk avhengighet, uønsket fysisk kontakt og det hun omtaler som seksuell trakassering. Hun gikk ut fordi de interne kanalene avfeide varselet og hun ble presset til taushet. Skiforbundets domsutvalg ga treneren kritikk på flere punkter, men henla saken. Sofienlund sier at saken er grundig behandlet i to organer og nå er avsluttet.

Norge gjorde rent bord: alle fem Nordisk råds priser

For første gang gikk alle fem prisene fra Nordisk råd til Norge. Sigbjørn Skåden vant litteraturprisen for en samiskspråklig roman, den første samiske vinneren på 35 år, og kaller boka «et kjærlighetsbrev til bygda mi». Samme uke spilte Stevie Wonder hele Songs in the Key of Life og Bob Dylan holdt konsert i Norge. DNs anmelder kaller det «to konserter, to mirakler».

NBER: milliardærflukten fra Norge var stort sett en myte

Et nytt NBER-arbeidsnotat av Marius A. K. Ring ser på formuesskatteendringene i 2021–2024, som nesten doblet den effektive marginalskatten på næringsformue. Funnene: høyst 100 personer flyttet på grunn av endringene, nesten alle i den øverste 0,1 prosenten, og mest i 2022–2023. Selskapene deres forble aktive uten lavere investeringer. Inntektene fra formuesskatten steg likevel med 71,5 prosent, mot 75 prosent uten utflytting. Notatet finner heller ingen nedgang i tilflytting av gründere og oppfinnere. Tråden på r/norway falt sammen med et innlegg i Dagsavisen som hevder at formuesskatten er den eneste skatten som når kapitalen på milliardærnivå.

TED: IPv6 tunnels as programmable delay lines for pulsing DoS

Researchers writing on the APNIC blog describe TED (Tunnel Extension-header DoS), a five-stage technique. It measures RTTs through misconfigured IPv6 tunnel endpoints using extension headers, then times injections so that packets from many senders arrive within the same 20 ms window. The result is 180× the sender’s average packet rate, while each upstream network sees only modest traffic. A scan from June 2025 to January 2026 found 1.9 million hosts that pass forwarding tests across six tunnel protocols. There is no patch: tunnel endpoints must filter extension headers and validate encapsulation.

The eMudhra CA key leak: browsers revoked it, curl did not

Eight eMudhra intermediate CA private keys were publicly leaked. The key was literally “4”. Browsers have revoked the certificates, but curl, many TLS libraries and custom HTTP clients do not check CRLs or OCSP by default, so they still accept certificates signed with the leaked keys. Update your trust store (nix flake update && nixos-rebuild switch) and audit any non-browser TLS clients. mitmproxy has merged an --emudhra flag that signs intercepted traffic with the compromised key, so you can test whether your clients actually reject it.

musl libc: integer overflows in regcomp allow heap OOB writes from a malicious regex

CVE-2026-107891 affects musl 0.5.0–1.2.6. The pattern itself triggers the bug, not the data being matched, so any application that compiles untrusted regexes on Alpine or another musl-based system is in scope. The impact ranges from DoS to possible RCE. Until 1.2.7 ships, accept regexes only from trusted input.

Postgres recovery_prefetch considered harmful

recovery_prefetch, which is on by default in recent Postgres, turns large sequential WAL reads on standbys into 8 KB random reads. That can multiply IOPS demand up to 16× and exhaust cloud disk limits. A standby that falls behind switches to WAL-restore mode and does not resume streaming until it catches up. With synchronous replication, that blocks every write on the primary. A network blip under modest write load is enough to reproduce it. The author recommends turning the setting off.

DuckDB 2.0.0 LTS “Cinnamon Teal”

DuckDB’s first long-term support release declares the on-disk format and client APIs stable and commits to backporting fixes. It also adds async I/O for much better network throughput and a community extensions repository.

A paper claims integer multiplication in o(n log n)

A newly proposed algorithm claims to multiply integers in strictly sub-n log n time. That would beat the 2019 Harvey–van der Hoeven bound, which was widely believed to be optimal. David Harvey has posted the paper on his UNSW research page. If it holds up, it settles one of the classic questions in complexity theory.

Determinate Nix 3.23.3: privilege escalation fix, baked flakes, fiber-based parallel eval

The critical fix, which landed in 3.23.2: untrusted users could pass --repair to the daemon and replace arbitrary store paths, a local privilege escalation when the daemon runs as root. A macOS sandbox escape and an out-of-bounds access in builtins.genList are also fixed. New features:

• nix flake bake precomputes all output derivations into outputs.json, so later builds do almost no evaluation.
• OpenTelemetry traces for evaluations and builds.
• Parallel evaluation uses fibers instead of blocking threads, which cuts GC lock contention by about 65%.
• Zero-copy file cloning.

A Discourse proposal argues that the daemon should drop allowed-users and trusted-users entirely and leave authentication to the OS, through socket permissions and PAM.

PSA: systemd is becoming kernel-bound

New systemd versions ship eBPF programs (nsresourced, mountfsd, BPF-LSM helpers) built against the kernel’s BTF. BTF CO-RE cannot make these fully portable, so in NixOS systemd moves into config.boot.kernelPackages.systemd, like ZFS or nvidia. The default has not changed yet (PR #569868). To opt in now and get the unprivileged-container features, set systemd.package = config.boot.kernelPackages.systemd;. Packagers should use systemdLibs in buildInputs (about 100 MB smaller closure) and look up systemd-escape at runtime.

NixOS secrets in a private flake instead of sops-nix

age, and so sops-nix and agenix in their common setups, uses X25519, which is not post-quantum safe. Encrypted blobs in a public repo are therefore a harvest-now-decrypt-later target. The write-up moves secrets into a private git repo that is imported as a flake input, so no ciphertext ever reaches the public config. Elsewhere, a school runs 12 Tuxedo laptops as a NixOS fleet: nixos-anywhere for provisioning, disko for disk layout, impermanence for a home directory that is wiped on reboot, and comin for updates on git push.

Dux Shell 2.0: DankMaterialShell rebrands and ships a file manager and widget lock screen

DankMaterialShell is now Dux Shell: same team, and the dms binary stays. Version 2.0 brings:

• A Material 3 Expressive redesign.
• A drag-and-resize lock screen editor.
• The Dux Lyrical Engine for syllable-precise synced lyrics.
• Dux Files, a Go+Quickshell file manager with tabs, split view and SFTP/SMB mounts.
• A dynamic-island-style Dux Dot.
• Dash plugins.
• Better Hyprland and MangoWC support.

hyprtrizone: three independent stacks for ultrawide monitors

This Hyprland layout plugin for 49”+ displays splits the workspace into a centre master and two side stacks that scroll instead of shrinking windows. Window tags control which zone a window spawns in, overflow badges count windows that are scrolled out of view, and two windows can be paired to share a row.

An open-source 3D digital twin that coordinates a home’s energy

home-digital-twin is a Home Assistant-backed 3D model that coordinates four Wi-Fi heat pumps, gas radiators with smart valves, 4.3 kWp of solar and a 5 kWh battery. The goal is to stop the usual pattern of exporting cheap solar at midday and burning gas overnight. Room states update live, and the control logic runs as HA automations.

Tesserae: self-hosted e-ink dashboards with agent-generated layouts

In Tesserae, each e-ink panel is a data pipeline plus a layout template, and agents can generate the layouts. Built-in sources include ADS-B, GTFS transit, tides, CalDAV, Home Assistant sensors and weather.