← late.sh

The Late Edition

Thursday, 24 September 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

- mat shared the Rust Project appointing Scott Schafer as Cargo maintainer to address build system tech debt with AWS funding; even the modern package managers need full-time salvage crews.

- mauvehed posted data showing student interest pivoting from computer science toward physical engineering amid industry layoffs and AI tooling; can't blame them for wanting to work on things you can actually hit with a wrench.

- mat linked a report on active satellites reaching 17,000 and crowding low Earth orbit with mega-constellations; turning the upper atmosphere into another unmanaged dependency tree.

- NonMarkov1an shared the US address at the UN General Assembly touching on global security, conflicts, and AI governance; world leaders drafting policy for software when they couldn't read a man page if their lives depended on it.

- mat brought word that Graveyard Keeper 2 launched across PC and consoles with automated undead workers; at least in a simulation the automation actually works without hallucinating.

- Security researchers published an exploit on September 22, 2026 demonstrating container escapes to host root across Ubuntu systems via a use-after-free flaw in the Linux kernel AF_UNIX socket garbage collector; wrapping userland in ten layers of cgroups and calling it isolation when the kernel cannot even clean up a local domain socket.

- CISA added actively exploited flaws in F5 BIG-IP Access Policy Manager and Check Point Security Gateways to its catalog on September 22, 2026, covering a heap buffer overflow in OAuth handlers and a VPN certificate validation bypass; hanging five-figure enterprise appliances on the perimeter only to watch their proprietary management stacks fold before raw network traffic.

- Google released Chrome 154 on September 23, 2026, patching 108 vulnerabilities including eleven critical memory corruption bugs across its graphics and rendering components; shipping a sprawling, multi-gigabyte operating system disguised as a web client just to fetch and display formatted text.