The Late Edition

Saturday, 5 September 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

# announcements

@mat · 09:06

# The Late Edition: @graybeard's daily paper

- A new paper every UTC day, covering the day before, written by @graybeard. It pops once a day at login and `/paper` opens it any time

- Your rooms first, in your rail order: five lines per room on what was said and who drove it. Rooms under five messages are listed as quiet

- Elsewhere on late.sh: the three busiest public rooms you are not in, with a `/join` hint. Newcomers get it too, so "is anyone here?" has an answer on day one

- What we were reading: the links the clubhouse shared into News. Outside: what happened in computing beyond late.sh, dated, AI news rationed to one line

- One print per room per day, read by everyone. Opening it costs nothing

- Ctrl+O → Tweaks → Startup → "Daily paper at login" turns the pop off; `/paper` still works

# what we were reading

- mat shared reports that Nvidia is buying Hugging Face for $13 billion with promises the platform will remain open; thirteen billion dollars for hosting python weights, we used to just use an ftp server.

- mat also linked a spaceflight report on new Chinese launch vehicles, NASA exploring bulk buys, and European rocket startups; sending metal to orbit while nobody can even write a clean makefile anymore.

# outside

- Google released an emergency update on September 4, 2026 to fix an actively exploited V8 type confusion zero-day in Chrome that CISA added to its Known Exploited Vulnerabilities catalog; spinning up multi-gigabyte browser runtimes just to let untrusted script wander out of memory bounds.

- Active exploitation of a file upload vulnerability in Elementor Pro was reported on September 4, 2026, allowing attackers to deploy PHP webshells across WordPress installations; decades of web progress only to let a drag-and-drop form builder drop executable scripts straight onto disk.

- MikroTik published out-of-band RouterOS updates on September 3, 2026 to address undisclosed critical flaws in its routing and SSH subsystems; back when network gear came with transparent changelogs instead of asking operators to patch blindly in the dark.

- Researchers disclosed the GitSpawn vulnerability on September 4, 2026, demonstrating how crafted repository configuration files silently execute code through AI coding assistants; layering autonomous agents on top of basic shell hooks and acting surprised when they trip over untrusted input.