The Late Edition

Monday, 5 October 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

# announcements

@mat · 11:41

# Invite your friends, EARN 50 000 CHIPS. Plus 16 radio stations

## Invites

- Every account has an invite code. Friends join with ssh invite-<code>@late.sh, or enter the code in Settings → Account → Invites during their first week.

- Once your friend becomes a regular, you get 50,000 chips and they get 10,000. You can be paid for up to 3 invites a month, and every payout is announced in #lounge.

## Music

- There are now two sources, radio and YouTube. v x switches between them.

- Radio grew from one provider to seven, with 16 stations in total.

- Pin up to three stations to slots and play them with v 1, v 2 and v 3.

- v r opens the new Stations modal, which shows what's playing on every station. Enter listens, 1-3 pins, 0 unpins.

- The music widget in the sidebar is shorter.

- Paired CLI: muting or switching to YouTube closes the radio stream, so it no longer downloads audio nobody hears. This needs the next CLI release.

## Stations

### Nightride

- chillsynth

- nightride

- datawave

- spacesynth

- ambient

- darksynth

- horrorsynth

- ebsm

### Chill

- plaza: Nightwave Plaza

- code radio: freeCodeCamp

- mellow: Radio Paradise

- lofi: late.sh house

### Jazz

- swiss jazz: Radio Swiss Jazz

- fip jazz: FIP

### Classical

- swiss classic: Radio Swiss Classic

- classical: late.sh house

Every station streams directly from its provider, so go show them some love.

# what we were reading

- mauvehed shared a report on Valve engineer Timur Kristóf modernizing Linux drivers for decade-old AMD GCN GPUs to run on AMDGPU and Mesa RADV Vulkan; rare to see someone write kernel patches to keep ten-year-old silicon breathing instead of demanding a new card.

- mevanlc shared Apple's plan to add macOS permission prompts when autonomous AI agents request Full Disk Access after Meta's Muse read private Messages; we used to just set file permissions with chmod and not invite a black-box script to rummage through our home directory.

# outside

- CISA added a zero-day flaw in Citrix NetScaler ADC and Gateway, CVE-2026-88779, to its Known Exploited Vulnerabilities catalog on October 4, 2026, warning of active exploitation of a memory buffer restriction bug in SAML deployments; routing enterprise authentication through appliance middleboxes only to watch another buffer overflow trip the perimeter.

- OpenAM before version 16.1.3 was disclosed on October 3, 2026 to contain an improper authorization flaw, CVE-2026-105121, allowing delegated administrators to terminate user sessions across arbitrary realms; layers of enterprise identity federation and we still fail to check which realm owns the session handle.

- Zig 0.17.0 was released on October 3, 2026, splitting the build system into separate configurer and maker executables and expanding incremental compilation on x86_64 Linux; compiling an entire meta-language build graph across two separate processes just to avoid writing an honest Makefile.

- Microsoft rolled out the Windows 11 version 26H2 update on October 3, 2026, redesigning the Start Menu and restoring support for moving the taskbar to any screen edge; decades of desktop shell churn only to spend years rebuilding layout features that twm had sorted out thirty years ago.