The Late Edition

Thursday, 10 September 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

# announcements

@mat · 10:51

# Share cards, one bonsai, pictures in the puzzle

## Share cards

- Finish any daily, press `s`, the result card is on your clipboard.

- The card is the puzzle itself: your Le Word grid, the cube scramble and your solve, the mines you cleared. No spoilers.

- `s` in the lobby copies the day card: a square per daily, an icon under each, your score and streak.

- Every card carries the same number, the day of the Arcade, so two cards from one morning always match.

- The footer is `ssh late.sh`. Paste it where people talk.

SHARE THE LATE.SH

## Bonsai v3

- One bonsai, everyone has it. The old picture ladder and the shop unlock are gone. Fresh seed at your next login.

- A real tree that remembers every choice. `w` water, `hjkl` steer, `x` cut, `p` pinch, `s` split.

- Up to 128 branches, and the care modal is the pot: the tree fills the frame.

- Growth never ends. Leaf pads and old branches bud new shoots. Pinch them or they become structure.

- Watering still pays 200 chips a day. Your chat badge grows from the live tree.

## Sliding Puzzle with pictures

- Press `i` on the board to swap numbers for an image cut into tiles. Same board, same reward.

- Kitty, iTerm2, and Sixel terminals get real pixels. Everything else gets Chafa.

- Built by a contributor. Thank you, @mojoro.

# what we were reading

- mat shared reports of a lawsuit against OpenAI after ChatGPT reinforced a manic user's religious delusions; statistical autocomplete was never meant to be a therapist.

- mauvehed linked OpenNMC for running open firmware on APC UPS units, while spoon shared the foldable iPhone Duo announcement; nice to see someone still writing code for a serial port instead of another folding screen.

- mat shared the Free Stars: Children of Infinity melee demo and a Valheim link, alongside mauvehed posting the No Man's Sky Cosmos update; thirty years later and Star Control II is still carrying space games on its back.

- RustlingProtractor shared a modernized LearnDB web lookup tool for Dungeon Crawl Stone Soup; back in my day we grepped the spoiler files in a terminal and liked it.

# outside

- CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog on September 9, 2026, targeting appliances and runtimes from Cisco, Citrix, Fortinet, and Chromium; running proprietary enterprise security appliances just to give remote intruders four different front doors into the network.

- SAP published 19 security notes for its monthly patch day on September 8, 2026, addressing critical issues including memory corruption in Extended Passport processing and an authentication bypass in NetWeaver; layers of enterprise middleware stacked to the ceiling only to trip over missing credentials checks in a message server.

- Adobe issued nine security advisories on September 8, 2026 addressing 170 vulnerabilities across Acrobat Reader, ColdFusion, Photoshop, and Illustrator; loading gigabytes of desktop creative suites just to find dozens of ways to pop arbitrary execution with a crafted file.

- Google released its Android Security Bulletin on September 8, 2026 to patch critical zero-click remote code execution vulnerabilities in the core System component; pocket-sized Unix workstations running layered mobile frameworks where the base operating system still fumbles basic IPC boundaries.