← late.sh

The Late Edition

Friday, 23 October 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

# announcements
@mat · 15:09

# Shelf, chat videos and a bartender who remembers you

## News shelf

- s in the News room or the reader saves a story to your shelf, listed above the feed. Up to 10 stories.

- Saved stories keep their text with no time limit. Unsaved ones still drop it after 30 days.

- The feed is denser: two rows per story, and the selected one expands with its link, summary and art.

## YouTube links in chat

- A YouTube link in chat now shows a thumbnail with "▶ YouTube · Enter to watch".

- Enter on the message, or a click on the thumbnail, plays it in the terminal player, with the same keys and requirements as News videos.

- Chat videos resume where you left off, but only until you log out.

## The bartender remembers, by @mevanlc

- @bartender remembers his recent exchanges with you in public rooms and brings them up later: your usual, a running joke, a no-alcohol preference.

- "@bartender remember …" saves exactly those words. It's never treated as an order.

- "@bartender forget me" wipes everything he knows about you.

- He keeps up to 16 memories per person.

## Pool and snooker, by @odd

- Snooker foul choices: play on, make them replay, or put the balls back after a miss. Also a new scoreboard showing break, lead, points left and snookers needed.

- Shot power comes from how fast you move the mouse. Lines off a cushion follow the real curve.

- Ctrl still gives fine aim. Shift/Alt fast aim is gone.

- Resigning with X now asks you to press y to confirm.

## Smaller things

- New theme: Gruber Darker, by @VisenDev.

- New language tags: Lisp, Scheme and C3, by @VisenDev.

- Tab and Shift+Tab cycle pages from the Artboard disclaimer, by @mevanlc.

- The RSS feed list in Settings no longer gets stuck on an old version after you add or remove a feed, by @mevanlc.

# what we were reading

- fellshard shared Richard Campbell's keynote dissecting the generative AI bubble alongside past hype cycles and dot-com economics; funny how the industry needs an hour-long lecture to figure out what anyone who survived pets.com already knew.

- mat brought in an analysis of the 'php2shell' zero-day remote code execution flaws buried in PHP's core memory management; thirty years into this language and web servers are still unraveling over basic buffer hygiene.

- cws linked the HackiOS project, which uses custom EFI loaders and kernel patches to boot Apple's iOS 16.5 XNU kernel on Android hardware; a monumental technical feat just to run a walled garden on top of another one.

- issai posted details on Cyberpunk 2077's update 2.5, which brings new tie-in quests, dual-wielding, and console mod support; nice of them to finish building the software half a decade after taking people's money.

# outside

- Cloud hosting provider Railway disclosed on October 21, 2026 that an intruder accessed backend systems and decrypted customer environment variables, forcing paused deployments and emergency token rotations across millions of services; trusting a third-party web dashboard to babysit every production secret instead of keeping a simple config file on a server you control.

- A New Mexico state judge ordered Meta on October 21, 2026 to pay $25 billion in civil penalties after a jury found the company deliberately misled consumers over data privacy settings; twenty-five billion dollars in penance for an advertising machine that was always just surveillance capitalism dressed up as social connection.

- Video game publisher Capcom confirmed on October 22, 2026 that an external intrusion into its central CAPCOM ID authentication platform exposed account records and email addresses for 11.7 million users; forcing players through mandatory single-sign-on portals just to watch an entire user database walk out the door.

- Microsoft acknowledged on October 21, 2026 that its latest cumulative updates failed to remedy a persistent defect in Windows 11 and Windows Server that causes Always On VPN connections to hang or throw port allocation errors; four decades into enterprise networking and an operating system kernel still gets confused trying to keep a point-to-point tunnel alive.

The room columns print inside the clubhouse only: ssh late.sh and type /paper.