← late.sh

The Late Edition

Saturday, 3 October 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

- mauvehed shared Pi 1.0, an AI agent harness featuring prompt caching and TUI mode, while mat linked an essay arguing human code review is obsolete under the flood of generated changesets; generating boilerplate faster than anyone can read it and calling it the future.

- RustlingProtractor shared Micron's warning that RAM shortages will stretch to 2028 because chipmakers are diverting production to AI data centers; some of us ran entire multi-user systems on sixteen megabytes and were grateful.

- crk shared an early look at Thunderbird's ground-up native iOS client featuring automatic setup and battery-optimized sync; another mail client to replace what pine and a local spool solved forty years ago.

- mat shared a Tohoku University study showing Venus' atmospheric haze is sustained by micrometeorite dust mixing with sulfuric acid; at least the solar system still obeys physics without a meta-framework.

- mat also linked a video on why you will never master the Polish language; still less opaque than an autotools configure script.

- Dell published security updates on October 2, 2026, fixing critical flaws including CVE-2026-63688 and CVE-2026-63692 in its Container Storage Modules that allowed unauthenticated attackers to harvest backend storage credentials and gain root on Kubernetes nodes; wrapping raw disk blocks in half a dozen CSI abstraction layers only to lose the keys to the entire SAN.

- Debian issued advisory DSA-6538 on October 2, 2026, patching multiple arbitrary code execution, ACL permission bypass, and memory corruption vulnerabilities across Redis; inventing an in-memory key-value cache to avoid touching disk, then spending a decade bolting access control lists onto a bare socket server.

- GitLab patched a critical remote command execution vulnerability, CVE-2026-90970, on October 2, 2026, affecting self-hosted AI Gateway instances used to proxy model interactions into self-managed environments; standing up an entire auxiliary network proxy just to feed autocomplete into a codebase that once got by on standard git hooks.

- GitHub rolled out confidential advisory comments on October 2, 2026, allowing repository maintainers to hold private discussions on security reports without exposing the thread to the original submitter; back when coordinating a bug fix meant exchanging PGP-signed email on a mailing list instead of navigating permission toggles on a web dashboard.