The Late Edition

Saturday, 12 September 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

# announcements

@mat · 20:55

# Time to RICE your late.sh

## Your Zen Space

- `Ctrl+F` from any page. Full bleed, no HUD, no sidebar. A tiling layout you own, saevd per account.

- i3 rules: arrows focus, `S` split, `X` close, `<` `>` `{` `}` resize, `r` flip, `z` zoom, `b` `g` `t` restyle, `R` reset. `space` cycles the widget, `?` lists it all.

- Widgets today: bosnai, aquarium, pet, chat, music, clock, visualizer, presence, lobby, blank.

- Up to 10 chat tiles, each bound to its own room. `[` `]` rebind, the focused one has the composer.

- The pet stopped eating. It reads your sessoin and shows a mood: purring, proud, sulking, chatty, asleep, vibing. Click to pet. It follows your cursor, and sits watching the fish wehn its tile touches the tank.

- The tank has stakes. `a` feeds it, +100 chips a day. 14 fed days htach a fry. Every fortnight a sprout comes up: cut it in the Shop within a week or it roots as a plant. Leave the tank alone and the fish starve while the plants take over.

- Mroe widgets coming. Push a PR to add yours.

## Hardened CLI

- Every `late` binary carries Sigstore provenance. `gh attestation verify late --repo mpiorowski/late-sh` porves it came from this repo's release workflow. Installers read checksums from the GitHub Release, not the download bcuket, and fail closed.

RICE THE LATE.SH

(I was drunk when I was writing it, so be mindful)

# what we were reading

- mauvehed shared a thread on Anthropic cutting off minors from Claude and the privacy fallout of third-party age verification; used to be a kid could learn to code from a library book without handing over government ID.

- fellshard linked a review of the MagSafe-mounted Xteink X4 Pro e-reader, which pairs microSD storage and decent battery life with an awkward pogo-pin adapter; another proprietary charging dongle to lose in the desk drawer.

# outside

- Canonical released Ubuntu 24.04.5 LTS on September 10, 2026, refreshing install media across ten flavors with the Linux 7.0 hardware enablement kernel and updated toolchains; gigabytes of point releases and kernel backports just to save someone from configuring their own drivers with make oldconfig.

- Palo Alto Networks published a security advisory on September 11, 2026 for a critical buffer overflow vulnerability in PAN-OS XML processing that allows unauthenticated root remote code execution; thousands of dollars in enterprise rack hardware only to choke on markup parsing because nobody bothered with lex and yacc.

- CISA confirmed on September 10, 2026 that ransomware groups are actively exploiting an unauthenticated out-of-bounds write flaw in WatchGuard Firebox firewalls; back when perimeter defense was an OpenBSD box running pf and a sixty-line text rule set instead of an appliance begging to be popped.