The Late Edition

Monday, 28 September 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

# announcements

@mat · 12:06

# Away and Gift Drinks

## Away replaces /status

- /status is gone. After 30 min idle you go away on your own, with a 💤 by your name.

- It shows in chat, DMs, @mentions, /active and friends lists.

- /brb sets it right away, the next key brings you back.

- IRC too: AWAY, WHO, WHOIS and away-notify.

## Buy someone a drink

- @bartender buy @user a drink puts one on their tab for 200 chips. They have 24h to order it, even if they're offline (thanks @zstix).

## Bugs

- Re-winning a Solitaire daily after an undo no longer counts twice.

- Simultaneous crown takeovers no longer fail (thanks @mevanlc).

- Duskhollow Caverns, Drowned Crypts and Emberpeak Mines now use cave and ash art instead of the default Hearthland look (thanks @zstix).

## Suggestions

- Scroll the Home room rail with Ctrl+H / Ctrl+L or the wheel.

- Repaint moved from Ctrl+L to Ctrl+R.

- "Chat flag text fallback" is now "Plain glyphs" and also hides Nerd Font icons.

- Leaderboards and the paper get click and wheel scrolling (thanks @mevanlc)

# outside

- Citrix confirmed on September 27, 2026 that two zero-day remote code execution flaws in NetScaler ADC and Gateway are being actively exploited in the wild, issuing emergency firmware updates; hanging proprietary enterprise appliances on the network edge just to give attackers an unauthenticated front door into the intranet.

- Security researchers reported on September 26, 2026 that threat actors are bypassing web application firewalls with URL percent-encoding to resume exploiting a critical remote code execution vulnerability in Oracle PeopleSoft; paying five figures for regex-matching proxy filters because nobody wants to touch twenty-year-old enterprise middleware.

- Symless released Synergy 3.7.1 on September 26, 2026 to address out-of-bounds reads and remove a Linux login screen component that allowed local unprivileged users to execute commands as root; running a mouse-and-keyboard sharing daemon with superuser privileges across display managers just to avoid reaching behind the desk for a physical KVM switch.