The Late Edition
Saturday, 19 September 2026
late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS
# Bugs & Lateania
## Bugs
- Emoji or flags in chat no longer leave stray text at the end of the line over SSH.
- CLI: a timeout or dropped link no longer leaves your shell spewing mouse codes.
- Bonsai: two sessions no longer overwrite each other's tree. First water pays 200 chips once.
- Code blocks with text on the opening ``` line render as code, not an empty box.
- Sliding puzzle: board message capitalized the same from every key.
- The pet walks back to its stroll instead of teleporting.
- Lounge: slash commands are off there, use Home. Overlays landing there are drawn.
- Zen: Ctrl+/ lists real rooms only, so it no longer silently changes Home.
- Gallery: mouse clicks on the rail and list were one cell off.
- Clicking the mentions HUD clears the composer and selection first.
- Mentions, News, RSS and Browse can be favorited with f and reordered with [ ].
## Lateania
- Companions are never released. A new one sends the old to a kennel. Call it back at any Stable.
- G always feeds your own pet. At Embergate's Stable it used to feed the stray dog.
- Loyalty grows by at most 4 meals a day (UTC). A max-level healthy pet is fed free.
- Spell kills now pay out. A crown taken with Firebolt paid nothing.
- Full-screen inventory on 100x20 or bigger, loot next to what you wear.
- Shop upgrade tags no longer clip ("▲+77%" showed as "▲+7").
- Quests on another floor or land can be tracked: the arrow aims at the stair.
- [ ] scroll the character sheet on small terminals.
- Map stairs: ⇓ ⇑ ⇕. Rooms with both showed only down.
- NonMarkovian shared OpenAI's framework and public log for documenting deceptive model misbehavior, and mauvehed shared their Astra for Law legal research tool; building software that conceals its own errors just like the rest of us.
- mat shared warnings from crates.io regarding targeted social engineering campaigns using fake job interviews to compromise Rust maintainers; quite a bit of effort just to slip a payload into a dependency tree.
- mat shared the GNOME 51 release with updates to core applications like Files and Calendar alongside SVG cursor support; six months of desktop churn when an old fvwm config never broke.
- mat shared the Nikon Small World in Motion competition winner featuring super-resolution microscopy of airway cilia, while cws shared a video devlog on rethinking health bars.
- Security advisories warned on September 17, 2026 of active mass exploitation against Vite development servers, where an unauthenticated flaw bypasses file-system access restrictions to leak local configurations; running full network daemons just to bundle frontend scripts when a static HTML file loaded instantly off a local disk.
- Disclosures on September 18, 2026 revealed critical privilege escalation flaws across Azure Database for PostgreSQL and Azure Billing that let attackers bypass authorization boundaries; outsourcing relational databases and company accounting to the cloud only to find the multi-tenant walls were made of paper.
- CISA added two actively exploited Linux kernel flaws to its Known Exploited Vulnerabilities catalog on September 18, 2026, covering an out-of-bounds write and a kernel race condition; tens of millions of lines in a monolithic kernel and we are still tripping over bounds checks in ring 0.
- Researchers disclosed twelve vulnerabilities in Siemens SCALANCE industrial devices on September 18, 2026 that let low-privileged users gain root access and falsify telemetry before it reaches SCADA monitors; bolting modern network stacks onto factory field gear just so the assembly line can be subverted over an API.
The room columns print inside the clubhouse only: ssh late.sh and type /paper.