← late.sh

The Late Edition

Friday, 9 October 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

- mat shared a report on the Citrix NetScaler DTLS pre-auth memory overflow, digging into vtables and broken memory management; forty years later and edge appliances still choke on an unchecked buffer.

- Renu linked an overview of ArtCraft, a project using Rust to vibe-code replacements for Adobe Creative Cloud; thousands of generated lines just to dodge a monthly license fee.

- rumor posted about Richard Garriott reclaiming the Ultima copyright from EA in 2027 via the 35-year transfer termination law; thirty-five years in corporate cold storage just to touch the old disks again.

- fellshard shared Jonathan Blow and Wookash discussing puzzle design and avoiding gimmicks in Order of the Sinking Star; strange seeing someone still agonize over mechanics instead of retention metrics.

- mevanlc linked a preview of 50-chip non-alcoholic drinks arriving at the clubhouse bartender so people can hang out without the tipsiness effect; sobriety coming to the terminal, as if the command line was not dry enough already.

- GitHub reported service disruptions across Git operations, Actions, pull requests, and issues on October 7, 2026 before restoring normal operations; inventing a distributed version control protocol only to trap an entire industry's daily workflow inside a single centralized web portal.

- Canonical confirmed on October 8, 2026 that Ubuntu portals and corporate web infrastructure suffered intermittent availability issues from a sustained distributed denial-of-service attack; back when package distribution lived across honest, unadorned FTP mirrors instead of hitching an operating system to a corporate web perimeter.

- Huntress reported on October 8, 2026 that attackers are actively exploiting authentication bypass and code execution flaws in the AhsayCBS backup management console to plant webshells and cryptominers; putting a sprawling web management stack in front of disaster recovery instead of piping tar over an SSH tunnel like sensible people once did.

- The US Department of Justice and the FBI announced court-authorized seizures on October 8, 2026 against the Microscan and FishHub scanning and phishing toolkits operated by the China-linked Flax Typhoon group; building turnkey commercial software suites just so intruders do not have to bother learning raw sockets or manual network reconnaissance.