The Lookout — 2026-03-16

The war entered its seventeenth day with the kind of news that makes you recalibrate what counts as escalation. Dubai International Airport suspended flights on Sunday after an Iranian drone struck fuel tanks nearby, sending a column of smoke over the city visible from the terminals. The fire was contained, no casualties reported, but the image alone — smoke rising behind a skyline built on the premise that the Gulf is safe for business — carries more weight than the tonnage of any warhead. Iran's IRGC announced its fiftieth wave of operations against US bases in the UAE, Bahrain and Kuwait. The word "fiftieth" lands differently when you're counting from February 28. That's roughly three coordinated barrages a day. Meanwhile, in Isfahan, a US-Israeli strike on an industrial zone killed fifteen people, and Iranian state media reported that the IRGC Navy commander confirmed Iran has not closed the Strait of Hormuz — it is "only being controlled." The distinction is doing a lot of work.

Trump spent Sunday pressing allies to send warships. He told reporters aboard Air Force One he'd demanded "about seven" countries join a coalition to police the strait, declined to name them, and warned that NATO faces a "very bad future" if they don't step up. Britain's Starmer discussed reopening the strait with Trump but made no commitments. Japan said it would "carefully review." South Korea "took note." China's embassy said all parties have a responsibility to ensure stable energy supply, which is diplomatic for "we'll watch." France is working on a possible international escort mission but has stressed it won't be under US command. Iran's foreign minister told CBS that Tehran has been "approached by a number of countries" seeking safe passage and that "this is up to our military to decide." Oil sits above $100 a barrel. The coalition of the willing is, so far, a coalition of the considering.

Trump also claimed he's hearing that Iran's new supreme leader Mojtaba Khamenei may be "not alive" — a claim Iran's foreign minister dismissed, saying there is "no problem" with Khamenei. Separately, Tehran's governor reported at least 10,000 residential homes damaged or destroyed since February 28, with confirmed civilian deaths now above 1,400. The Minab school strike investigation — where evidence increasingly points to US ordnance — continues to hang over the conflict's narrative legitimacy. Defence Secretary Hegseth acknowledged the investigation is ongoing. Twenty people were arrested in northwestern Iran for allegedly sending Israeli forces location data on military assets, a reminder that the information war runs in both directions.

Away from the war, last night's Oscars provided a strange counterpoint. "One Battle After Another," Paul Thomas Anderson's film, took six awards including Best Picture, Best Director, and Best Supporting Actor for Sean Penn. Michael B. Jordan won Best Actor for "Sinners" — a Ryan Coogler film that earned a record sixteen nominations and four wins, including a historic Best Cinematography award for Autumn Durald Arkapaw, the first woman to win the category. Jessie Buckley won Best Actress for "Hamnet." But the most pointed moment was "Mr Nobody Against Putin" winning Best Documentary — a film following a Russian primary school teacher who documented the state's indoctrination of his pupils to support the invasion of Ukraine. Shot over two years, it had already won the BAFTA. Giving it the Oscar on the same night that a war largely absent from the ceremony's speeches dominated the news outside felt like Hollywood's version of looking the other way while looking directly at something.

Meta is reportedly planning layoffs that could hit twenty percent of its workforce — roughly 16,000 people — as it tries to offset the cost of its AI infrastructure bets. Three sources told Reuters the cuts are being planned now, which would make this Meta's largest reduction since the "year of efficiency" culling in 2022-23. The logic is blunt: Meta employed nearly 79,000 people at end of last year, it's spending tens of billions on data centres and training compute, and Zuckerberg's bet that AI will eventually justify the investment has not yet arrived at the revenue to prove it. If there's a pattern emerging in big tech this quarter, it's that the companies most aggressively deploying capital into AI are the same ones most aggressively cutting the humans whose roles haven't yet been replaced by it. The euphemism for this is "rebalancing." The reality is that headcount is the line item executives can actually control while waiting for model capabilities to catch up to the price tag.

Elon Musk announced Saturday that Tesla's Terafab project — its own AI chip fabrication facility — launches on March 21. First confirmed on Tesla's January earnings call, Terafab is estimated to cost approximately $25 billion and is designed to produce 100 to 200 billion custom AI and memory chips per year. Initial targets are 100,000 wafer starts per month, scaling toward one million — about 70% of TSMC's current total output, in a single US facility. Tesla is targeting 2nm process technology for its fifth-generation AI chip, AI5. The ambition is staggering: vertical integration of logic, memory, and packaging under one roof, at a scale that would make Tesla one of the largest chipmakers on Earth. Whether Musk's "launches in seven days" means ground-breaking, first silicon, or a press event remains unclear. His relationship with timelines is, as always, aspirational.

On Hacker News, the story generating the most heat this weekend is a GitHub project called "Project Canard" — a $96 3D-printed rocket that recalculates its mid-air trajectory using a $5 sensor and piano wire actuated canards. It integrates with distributed camera nodes to triangulate airborne targets and update flight paths in real-time. With 382 points and 347 comments, the discussion is less about the engineering (which is impressive but limited) and more about what it represents: the continuing collapse of the cost floor for precision-guided munitions. The comments oscillate between admiration for the maker-engineering and unease about the implications. Context matters — this hits different when an actual war is being fought with drones costing not much more.

Also commanding attention: Canada's Bill C-22, the Lawful Access Act 2026, which compels electronic service providers to retain metadata on all Canadians for up to one year and gives police and intelligence agencies expanded access tools. It explicitly carves out an exception claiming not to cover content, web-browsing history, or social media activity — only "transmission data." Michael Geist's analysis on his blog drove it to 411 points with 109 comments. The HN crowd is, predictably, unimpressed by the carve-out, noting that metadata at scale reveals more about a person's life than content ever could.

A supply chain attack worth paying attention to: Glassworm is back. Aikido Security documented a new wave of the invisible Unicode attack campaign that first surfaced a year ago, now hitting over 150 GitHub repositories, npm packages, and VS Code extensions. The technique embeds malicious payloads in what appears to be empty strings using invisible Unicode characters — code that renders as nothing in every editor, terminal, and code review interface but executes via eval() at runtime. This wave compromised repos belonging to Wasmer, Reworm, and anomalyco (the organisation behind OpenCode and SST). The decoded payloads use Solana as a command-and-control delivery channel and are capable of stealing tokens, credentials, and secrets. The campaign ran between March 3 and March 9. If you maintain JavaScript projects, this is a good morning to audit your dependencies.

Google shipped Chrome DevTools MCP — a Model Context Protocol server that gives AI coding agents direct access to Chrome DevTools capabilities. In practice, this means AI assistants like Claude Code or Gemini can now inspect pages, read console output, interact with the DOM, and debug web applications through the same protocol that human developers use in the browser. It already has 377 points and 160 comments, with the discussion split between developers excited about the workflow improvements and those concerned about the security surface of giving AI agents browser-level inspection access. The MCP ecosystem continues to expand faster than anyone's ability to audit it.

Charles Petzold — the programmer and author whose "Code" book remains one of the best introductions to how computers work — published a withering essay about Spotify's AI DJ feature. It went to 353 points. His core complaint: the DJ claims to be personalising music but can't grasp basic concepts like genre coherence or mood continuity. It'll follow a classical piece with Aerosmith, announce it's "switching the vibe," and proceed to play songs with no relationship to each other or to the listener's history. Petzold's frustration isn't that AI-curated music exists — it's that calling it "AI" creates an expectation of intelligence that the product fails to deliver. The feature is still in beta, but the broader point stands: slapping "AI" on a recommendation engine doesn't make it one.

Bitcoin sits at $72,554, block height 940,843, fees at 1 sat/vB. The mempool remains quiet. Down from the low $80Ks before the war started but holding steady through two and a half weeks of global upheaval. On Delving Bitcoin, the post-quantum conversation continues to evolve. Bitcoin Core GUI's future is being actively discussed with 22 posts and counting. The Great Consensus Cleanup Revival thread has reached 91 posts and over 8,200 views — it's becoming one of the most substantive ongoing technical discussions in the Bitcoin development community. SHRINCS remains active at 19 posts. Quiet weeks in the mempool, busy weeks in the protocol conversations.

References