Josse-posten

Americans hand Congress to the Democrats, while Russia uses election night to launch its heaviest strike yet on Ukraine’s power grid. Hormuz stays shut, and Europe’s cold-chain hack spreads from food to blood plasma.

Democrats win full control of Congress in a historic rebuke of Trump

Senator-elect James Talarico at his victory rally in Austin, Texas. Photo: Mike Segar / Reuters

Democrats took both chambers of Congress in Tuesday’s midterms, a rout widely read as a referendum on Trump’s second term. The party now holds subpoena power and committee chairs, and can block Trump’s legislative agenda for the rest of his term. House Speaker Johnson blamed “Marxism”.

The wave reached states that Republicans thought were safe. Adam Hamilton won Kansas, the first Democratic Senate win there since 1932. James Talarico flipped Texas for the first time since 1988. Annie Andrews won South Carolina, and Troy Jackson ended Susan Collins’s nearly 30 years in the Senate. Abdul El-Sayed won Michigan and becomes the first Muslim American senator. Josh Turek flipped Iowa. Several of these seats had been redrawn specifically to keep them Republican.

Abroad, the reading is cautious. Bloomberg reports that Moscow is already planning how to exploit a “weakened Trump”. Experts quoted by The Parliament Magazine say Trump’s position on Ukraine and Europe will not change, because the executive branch drives those decisions. (Governors and other firsts in World.)

Russia’s largest energy strike of the war hits a nuclear plant substation

Ukrainska Pravda’s report on the strike on the substation that serves the Khmelnytskyi Nuclear Power Plant.

On US election night, Russia launched 289 drones, 17 ballistic missiles and 59 cruise missiles across nine oblasts. Ukrenergo called it the most serious attack on energy infrastructure to date. Three drones hit a substation that is critical to the Khmelnytskyi Nuclear Power Plant. Ukraine’s energy minister warned of “nuclear safety risks across Europe” and notified the IAEA. Five oblasts lost power, and all of Zhytomyr went dark.

At least 38 people were killed and more than 160 injured in 24 hours. A hospital complex in Kharkiv was hit, wounding 73 patients and medical staff, and hospitals in Dnipro were struck in a morning missile attack. Russia followed up overnight into Wednesday with 310 more drones. Kyiv’s heating season opened on 2 November.

Hormuz: four tankers mined as Iran calls the US reply “not convincing”

Iran’s Revolutionary Guards say naval mines destroyed four tankers that tried to cross a “prohibited route” in the Strait of Hormuz. Iran’s security council chief called Washington’s response to Tehran’s seven-point reopening plan “not convincing”. Trump confirmed a US strike on an Iranian anti-aircraft facility, which he called “a minor attack” and “not war”. Qatar is passing real-time messages between the two sides. Ursula von der Leyen says the closure has cost the EU an extra €127bn.

On election day, Trump also said he would end the US’s roughly $4bn in annual military aid to Israel by the end of the year, because Israel “doesn’t need” it. Meanwhile, AP reports that Netanyahu is pressing Trump to strike Iran’s nuclear programme now that the midterms are over. Netanyahu lost his Knesset majority and now claims the election was stolen. (More in Investigations.)

The cold-chain hack spreads to ten countries and reaches French blood plasma

The cyberattack that raised supermarket freezer temperatures in seven European countries has spread to at least ten. In France, hackers took over blood plasma storage units and raised the temperature from −30°C to 110°C, which could destroy critical medical supplies. Estonia, Sweden, Portugal, Italy, Ireland and Belgium are also affected, and UK meat industry operations were disrupted. On the same day, seven passenger flights across Europe received coordinated bomb threats. All were false alarms. Investigators are examining whether the threats are part of Russia’s hybrid campaign against European transport.

Indicator Value Change
S&P 500 (f) 7,606 +0.13%
Dow 30 (f) 52,096 +0.39%
Nasdaq (f) 28,347 +0.14%
Russell 2000 (f) 2,845 +0.70%
VIX 19.14 −8.13%
Gold 4,038 +2.49%
BTC $78,306 +2.36%
EUR/USD 1.1247 +0.35%
USD/NOK 9.225 −0.52%
  • US futures edge higher and the VIX falls 8% after the Democratic midterm sweep
  • Gold +2.49% as the Hormuz standoff drags on, with four tankers reported mined (see Investigations)

World

Midterm firsts: Black governors in Georgia and Wisconsin, a woman governor for Ohio

The midterms also changed the statehouses. Keisha Lance Bottoms becomes Georgia’s first Black governor, and David Crowley becomes Wisconsin’s. Amy Acton beat Vivek Ramaswamy to become the first woman elected governor of Ohio and the state’s first Democratic governor since 2006. Gina Hinojosa won the Texas governorship for the Democrats. On the Republican side, Trump-backed Byron Donalds becomes Florida’s first Black governor. New York mayor Zohran Mamdani told NPR that the results show the “power of working-class voters”.

South Africa: ANC on course for a historic low below 33%

A voter casts her ballot at Durban City Hall. Photo: Marco Longari / AFP

South Africans voted in local elections, and the ANC is widely projected to fall below a third of the vote. Voters are angry about persistent water outages, power cuts and failing public services. The ANC lost its parliamentary majority in 2024, and a result this low would further weaken its hold on major municipalities.

Europe’s peacekeepers start training in Poland, as Tusk reports “disturbing movement” near Kaliningrad

European forces have started training near Nowa Dęba in south-eastern Poland for a possible post-war mission in Ukraine. Their governments are pushing for a formal role in the US–Russia–Ukraine negotiations. German Chancellor Merz told DW that he sees no sign that Russia actually wants a ceasefire, and that the EU must shape any post-war security arrangements. Separately, Donald Tusk said Poland had detected “disturbing movement” near the Kaliningrad border and is sending additional forces there.

Australian inquiry: AUKUS is the “worst, riskiest and most costly” defence decision ever

A public inquiry led by former minister Peter Garrett and former defence chief Admiral Chris Barrie concludes that the $368bn nuclear submarine deal is the worst defence decision in Australian history. It recommends suspending the deal until a royal commission has examined it. The report cites the cost, the effect on sovereignty and strategic overdependence on the US and UK.

Spain’s transport minister resigns after the second deadly train crash in a year

Óscar Puente resigned after the collision south of Madrid that killed at least 69 people, the worst rail disaster in Europe this century. He also withdrew from the upcoming elections. Puente said that he could not “continue in office” after two major train accidents in twelve months.

Generic lenacapavir approved for HIV prevention

A generic version of lenacapavir has been approved. Lenacapavir is the HIV prevention injection given twice a year that showed near-100% efficacy in trials. Gilead’s original was out of reach for most high-burden countries. The generic removes the main cost barrier and could change HIV prevention in sub-Saharan Africa.

Also today

Americas
Trump presses Venezuela for a formal agreement that lets US troops stay in the country — New York Times · r/worldnews
María Corina Machado returns from exile to mass crowds and calls for elections — CNN · r/geopolitics
Carney says the US has lowered its demands in Canada–US trade talks — Bloomberg · r/worldnews
Brazil, host of COP30, publishes the first global roadmap for phasing out fossil fuels — The Guardian
Europe
UK and EU agree a draft food export deal, the biggest result of the Brexit reset so far — BBC
Trump tells Politico that Europe gave Greenland to the US as the “greatest gift ever” — Politico Europe · r/worldnews
Justice
An Ethiopian-born US contractor pleads guilty to giving classified intelligence to Ethiopia to help target Tigray fighters — BBC
The ICC president challenges US sanctions on the court in a remote address to the UN — AP · r/worldnews

Ukraine

Russia’s war finances fracture: recruitment bonuses cut ninefold

A volunteer near a military recruitment point in a Moscow metro underpass, September 2026.

Within weeks, St Petersburg cut its one-time recruitment bonus from 3.5 million roubles (about $43,000) to 400,000 roubles (about $4,900). Mari El, Mordovia and other regions have made similar cuts. At least a dozen regions have cut death benefits for the families of fallen soldiers by 50–100%, and regional deficits now exceed $1.65bn combined. Bloomberg reports that the Defence Ministry is looking at delaying pay. One proposal would push December salaries for personnel away from the front to January 2027. The Kremlin appears to be cutting non-combat military costs to keep the offensive going.

Abu Dhabi: Medinsky to lead Russia again, and Melania Trump hosts a parallel session

Dmytro Lubinets and Yana Lantratova, the Ukrainian and Russian humanitarian commissioners at the White House meeting.

Russia confirmed that Vladimir Medinsky will lead its delegation at the Abu Dhabi talks on 10–11 November. Medinsky stalled the Geneva talks in February with “historical lectures”. Zelensky says he will not tolerate “historical lectures over the phone” from Putin. Trump says both sides are “ready to make a deal”, but Ukrainian negotiators disagree. On a separate track, Melania Trump hosts a White House ceasefire session on Thursday about the Kherson zone. Ukraine’s Lubinets and Arakhamiia will face Russia’s Dmitriev and Lantratova.

Zelensky: Musk has been in contact with Putin throughout the war

President Volodymyr Zelensky. Photo: Volodymyr Zelensky / Telegram

Zelensky alleges that Elon Musk has been in regular contact with Vladimir Putin since the start of the full-scale invasion in 2022. The claim adds to concerns about Musk as an informal back channel between the Kremlin and the White House. Ukrainian forces depend on Musk’s Starlink for battlefield communications.

Hackers claim 23TB from Rosstat, including Ukraine war casualty data

A hacker group says it has taken 23 terabytes of data from Rosstat, Russia’s Federal State Statistics Service. Rosstat confirmed that coordinated cyberattacks hit its servers. The data reportedly includes casualty figures from the war. If the data is authentic, it could show how far Russia’s official figures differ from its actual losses.

Also today

Investigations

Hormuz: strikes, mediation and China in the gap

Qeshm Island in the Strait of Hormuz. Image: EU / Copernicus Sentinel-2

Several tracks are running at the same time. US officials call the strikes on Iranian positions “defensive”, and Trump plays down the risk of a wider war. Qatar mediates, and an earlier drop in oil prices showed that traders took a de-escalation seriously. Beijing has held a series of high-level meetings with Gulf leaders before an anticipated Xi–Gulf summit. China is presenting itself as a stable alternative to an unpredictable US security umbrella. In War on the Rocks, Ari Heistein looks back at a year of strikes on Houthi leaders and concludes that the Houthis are more dangerous now. They kept their Red Sea gains despite losing key figures, and another ceasefire would only give them time to rearm.

Netanyahu claims a stolen election as Washington cuts military aid

Netanyahu lost his Knesset majority and now claims the result was fraudulent, which has no precedent in Israeli politics. At the same time, he is lobbying Trump to strike Iran’s nuclear programme. Trump’s election-day promise to end the roughly $4bn in annual military aid by the end of 2026 breaks with decades of bipartisan policy. It may be a negotiating move, a real change of policy, or both.

Bellingcat: AI super PACs are running the most opaque political ads yet

Bellingcat’s visualisation of how AI super PAC money is disbursed.

Bellingcat investigated the super PACs funded by AI money that ran ads for both parties in the 2026 midterms. The PACs have no public donor profiles, they use AI-generated or AI-assisted content, and their messages are nearly impossible to trace back to anyone accountable. The investigation is a concrete, reported look at a new infrastructure for influence operations.

The Pentagon–Silicon complex, and the gap in AI oversight

Photo: DVIDS / Petty Officer 1st Class Alexander Kubitza

Two War on the Rocks pieces look at the same structural change. Sharon Weinberger, incoming editor of the Bulletin of the Atomic Scientists, discusses her book Valley of Death. Her argument is that Big Tech has replaced the traditional defence primes as “neo-primes”. The military now depends on technology it does not own, built by companies that have their own geopolitical interests. A second essay describes a “Promethean gap” between what frontier AI can do and humans’ ability to oversee it, with defence as the case with the highest stakes. It calls industry appeals to “pace the frontier” regulatory capture. In the Guardian, Geoffrey Hinton warns that AI could soon cause a power grid failure or a banking system shutdown, and says humans may turn out to have been better off without it.

Foreign Affairs: China’s food insecurity could constrain a Taiwan war

China depends heavily on food imports, and this analysis argues that the dependence limits its options for military action over Taiwan. The weakness gives the US and its partners leverage. It gets less attention than chip export controls, but the authors argue that it may last longer.

Tech

Every interview repo sent to this developer contained an exploit: the pattern behind Binance’s $6.3bn theft

North Korean rocket launchers firing at an exhibition in Wonsan Kalma, 29 October. Photo: KCNA via AFP

Binance confirmed that the theft on 29 October started when a wallet engineer installed a tampered developer tool. The tool came as an assignment for a fake job interview, and a second engineer fell for the same approach months later. One developer has documented identical attacks throughout 2026. The examples include a .vscode/tasks.json that runs when you open the folder in VS Code or Cursor, payloads in environment variables that run on npm run dev, and hex-encoded payloads hidden in fake font files. His rules: read the code in the browser first, check scripts and .vscode/tasks.json before you clone, and run the code only in a disposable VM with no cloud credentials. He has also released StrangerDanger, an experimental Claude Code plugin that separates agents that read (no shell) from agents that act (no access to the web or untrusted text).

Pyongyang responded with a missile launch. Kim Yo Jong denied that North Korea was behind the hack and rejected dialogue with the US.

C++26 fails its DIS ballot, a first in C++ history

On 23 October, the C++26 Draft International Standard failed its vote among ISO national bodies. No C++ standard has failed at this stage before. The objections were about Contracts: several national bodies said the feature is not mature enough, although WG21 had approved it with a strong internal majority. Andreas Fertig calls it “a massive disaster”. ISO rules give WG21 four ways forward, and all of them need new consensus.

Could a modern chess engine beat Kasparov on a Pentium?

A 1996 Pentium Pro running a modified Stockfish.

Nicholas Carlini ported Stockfish to a 1996 Pentium Pro to separate algorithmic progress from hardware progress. On 30-year-old hardware, the modern engine reaches about 3300 Elo, well above Kasparov’s 2800. Of the 1335 Elo gained since 1996, about 720 comes from better software (evaluation, search heuristics, neural network evaluation) and about 615 from hardware. Deep Blue’s custom silicon was not necessary: better algorithms alone would have been enough.

Compilers from category theory: catlang to SQL, and the second Futamura projection

Sandy Maguire’s catlang compiles a complete language, with loops, branches and data structures, into a single SQL SELECT. It maps arrow operations to SQL: composition becomes subqueries, fork becomes CROSS JOIN, join becomes UNION, and cochoice becomes recursive CTEs. The article is from 2025 and has resurfaced. In a companion piece, Veith Heller works through the second Futamura projection with an implementation: if you specialise a specializer, you get a tool that turns any interpreter into a compiler.

kitty 0.50.0: docked windows, session restoration, better Wayland

kitty in quake drop-down mode on Hyprland.

Docked windows (launch --type=window-dock) attach a kitty window to the edge of another window or tab, for sidebars and status bars. Full session restoration saves windows, tabs and scrollback when you log out. On Wayland, kitty now has client-side decorations that match GNOME, plus touchscreen support. The release also adds indexed colour in the graphics protocol, OSC 7501 for programs to report their status, and performance improvements.

Ubuntu 26.04’s Rust sudo silently breaks existing configurations

Ubuntu 26.04 uses sudo-rs by default, but it is not a drop-in replacement. -E, requiretty/!requiretty and regex patterns in /etc/sudoers.d all break. The sudo-rs README states that compatibility is incomplete. Commenters on Lobsters blame Canonical for shipping it in an LTS release without transition tooling or a notice to users. A side thread suggests that licensing was a motive: sudo is GPL, and sudo-rs is MIT.

Young-onset colorectal cancer has distinct biology, and likely responds worse to chemo

Dr Kimmie Ng, director of Dana-Farber’s Young-Onset Colorectal Cancer Center.

Dana-Farber sequenced more than 850,000 cells from 189 tumours. Tumours in patients under 50 contain a much larger share of connective and supporting cells, a composition linked to chemotherapy resistance. They also show more “dark” long non-coding RNAs of unknown function and stronger signalling for invasion. The findings suggest that standard protocols may systematically work less well for young patients.

Also today

  • RCE on Puppet: a crafted report POST is deserialised into Ruby class_eval. It needs an agent certificate, but autosign is common. Affects open-source Puppet ≥6.24.0 and OpenVox — Neodyme · Lobsters
  • Postgres 19 gets an in-core REPACK for online cleanup of table and index bloat, which replaces pg_repack — Snowflake · Lobsters
  • What cryptographic voting actually achieves, and why it still needs paper: homomorphic tallies and Benaloh challenges work, but software failures scale and paper does not — Trail of Bits · Lobsters
  • What running stealmybitcoin.com taught one researcher about phishing — pavursec.com · Lobsters

AI & Automation

Weight-space programming runs on a laptop

A Breakout-playing network. Astra identified the game from the raw weights alone.

After yesterday’s results with frontier models, Simon Willison confirms that Qwen 3.8 27B, which runs on a laptop, can also read and reason about neural network weights. Arcturus Labs’ write-up (“I wasn’t ready for that”) summarises the original findings. GPT-6 Astra identifies Pac-Man and Breakout agents from their weights alone. It raised a Qwen math model from 7.9% to 48.1% accuracy by editing 0.016% of its parameters, and it wrote networks from scratch that beat PPO baselines on some tasks. Nobody knows where the ability comes from: almost no training data maps weights to behaviour.

Opus 5.5 alone beats 41 orchestration setups on hard coding tasks

The experiment tested 7 team designs and 41 configurations in about 1,200 runs on 12 hard coding tasks. Opus 5.5 working alone (81% pass@1, $1.20 per task) beat every multi-agent setup. This includes Opus orchestrating DeepSeek V4.1 Flash, Qwen and GPT-6 Luna as subagents, which scored 61–69% at a higher cost. Review loops helped weaker models a little, but coordination overhead consistently reduced performance when one capable model fits the problem.

Anthropic ships a message threads API: 35% lower TTFT for large-context agents

The beta thread parameter on the Messages API lets an agent send only the new messages and the previous response ID, instead of the full history. The server keeps the thread encrypted in memory for 5 minutes. Token usage does not change, but median time to first token drops by about 35% for requests of 500k–1M tokens.

Postman silently installs Claude Code and Codex plugins

A widely upvoted GitHub issue shows that Postman installed Claude Code and Codex plugins and MCP server configurations without asking users. The plugins add startup hooks that inject Postman’s instructions into AI coding sessions. Commenters call it malware, and many developers have moved to Bruno or Insomnia. Postman promises clearer opt-in procedures, but not a consent requirement for existing users.

Claude Code designs orderable PCBs, gated by ERC, DRC and live part checks

The pipeline: a Python board script goes through KiCad, the auto-router, the ERC/DRC gate, an LCSC part check and fab output.

In claude-hardware-in-the-loop, each board is a Python script. The harness produces fab files only when ERC reports 0 errors and 0 warnings, DRC is clean and every part resolves live against LCSC stock. Firmware compiles twice from the same source: once for the target MCU and once for a digital twin. A document of 40 lessons records the mistakes the gates caught. After one swarm-mode day used 4–5M tokens, the project now defaults to single-session mode.

Also today

  • Anthropic adds system-prompt rules to Claude Code that block game recreation and reverse engineering. Users report that the restriction is specific to Opus 5.5 in Claude Code, and modders are frustrated — Tom’s Hardware · r/ClaudeAI: limits · r/ClaudeAI: reverse engineering
  • Kithland, a 30-hour RPG, was built in four days with 590 Claude Code sessions, 20B tokens (mostly cached context) and about $7,500 at list price. Reactions: impressive scale, derivative result — Kithland · r/ClaudeAI
  • Protegrity-PII, an open-weights 278M model, beats AWS Comprehend and Presidio on the new PII-SCOPE benchmark at $0.0005 per million characters — arXiv · r/MachineLearning
cd ~/repos/josse-posten && claude --resume cee0cd6e-0f1e-49f6-b94b-ab507a1fb767