← late.sh

The Late Edition

Friday, 4 September 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

- mat shared the Rust 1.98.1 point release fixing dynamic trait vtable miscompilations; another patch for the memory-safe faithful.

- cws linked GrassGPT, a satirical site by Petr Lebedev that tells chatbot users to go touch grass; best advice anyone in this industry has given in twenty years.

- mat posted trailers for the 2026 live-action Street Fighter film and the management sequel Graveyard Keeper 2; recycling the nineties until the heat death of the universe.

- mat also shared a YouTube video from The PrimeTime discussing Cloudflare.

- CISA added a critical authentication bypass flaw in JFrog Artifactory to its Known Exploited Vulnerabilities catalog on September 3, 2026 following active exploitation; decades of enterprise architecture just to leave default administrative access wide open on a binary warehouse.

- An unauthenticated remote code execution vulnerability in Langflow was disclosed under active exploitation on September 2, 2026 due to improper validation in its Python execution endpoint; slap a flashy drag-and-drop canvas over an eval call and act surprised when someone takes the box.

- Attackers hijacked Hetzner BGP routes on September 2, 2026 to intercept Softaculous traffic and deliver compromised Virtualizor updates; the entire cloud running on top of routing protocols designed around gentleman handshakes in the eighties.