The Late Edition
Tuesday, 27 October 2026
late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS
# Server updates no longer kick you out
## Update your CLI
- A new `late` CLI is out. Re-run the installer to get it:
- macOS / Linux / Termux: `curl -fsSL https://cli.late.sh/install.sh | bash`
- Windows: `irm https://cli.late.sh/install.ps1 | iex`
- Nix: `nix run --refresh github:mpiorowski/late-sh#late`
- The next two features need it. Plain ssh works the same as before.
## Auto restart on server updates
- When we shipped an update, your session used to sit on the "Server updating!" banner until you reconnected by hand.
- Now, if you're on the late CLI and haven't typed for 5 minutes, it moves you to the new server on its own. You land on the same page and in the same chat room, and the radio keeps playing.
- It waits while you're in a voice room, watching a video, or have an unsent message or link in a composer.
- YouTube goes quiet for a few seconds, then picks up where it was.
- On by default. Turn it off in Settings (Ctrl+O), Tweaks, "Auto restart on update".
- Plain ssh and the CLI's openssh and old modes still show the banner.
## Restart from the quit dialog
- Press q, and CLI users now get `r restart` under it.
- It gives you a fresh session on the same page without leaving, radio still playing.
## The paper: yesterday in numbers
- The Late Edition now opens with YESTERDAY ON LATE.SH: the most-listened radio stations, tracks queued in the booth, arcade and Lobby games finished, and doors opened from the Games hub.
- You'll see it in the paper in the terminal, at late.sh/paper, in the RSS feed, and on the paper card posted to Mastodon and Bluesky.
Radio: chillsynth 5 listeners, lofi 2, datawave 2
Booth: 12 tracks queued
Arcade: 241 games finished, Minesweeper most played
Lobby: 7 matches finished, Eight-Ball most played
Doors: 62 opened, Realm 20, Lateania 16, A Dark Room 11, DCSS 5, Brogue 5, others 5
- crk shared Anthropic filing for an IPO, eggy linked China's 40 percent tech index plunge amid cooling AI demand, and NonMarkov1an noted OpenAI agents hammering Wikimedia infrastructure with automated queries; millions of unmonitored agent loops hitting production because nobody reads an RFC anymore.
- Systems updates came via netoneko on the NT-modeled Moxnox OS, issai on SteamOS 3.9.5, ronin on Kali Linux and the Bioma shell, and RustlingProtractor with DistroWatch 1196; all this desktop and kernel churn when twm and a serial console solved computing decades ago.
- crk reported supermarket chain Tesco migrating edge virtualization from VMware to Proxmox following Broadcom price hikes; funny how fast IT rediscovers plain Debian and KVM the moment a vendor license renews.
- mat shared the Avengers Doomsday teaser and the dark-pattern gauntlet User Inyerface, while RustlingProtractor noted GameMaker will make its next runtime free for commercial use; most of the web already feels like a hostile maze, only wrapped in forty megabytes of client-side hydration.
- eggy shared research into diamond-substrate transistors matching 3nm silicon, while mat linked Baffin Island studies on modern warming halting an ice age onset; promising thermal conductivity, though we will probably just waste it running bloated Electron binaries.
- Hewlett Packard Enterprise issued security updates on October 26, 2026 to patch 72 vulnerabilities across ArubaOS, including eight maximum-severity remote code execution and authentication bypass flaws tracked as CVE-2026-79844 through CVE-2026-79851; seventy-two holes in the appliance routing your office traffic, because enterprise networking gear is still just an unaudited web daemon sitting in front of a kernel.
- Dutch security firm Sansec reported on October 26, 2026 that an ongoing campaign has compromised 953 online stores, primarily Magento installations, by injecting scanner-evading JavaScript loader scripts into cms_block database tables; letting raw database fields pipe executable script directly into a visitor's browser instead of serving clean, static markup like civilized engineers.
- ImageMagick published security advisories on October 25, 2026 for vulnerabilities including a security policy bypass in delegate command parsing tracked as CVE-2026-116140 and an out-of-bounds heap write in its legacy X11 animate feature under CVE-2026-116160; thirty years of shelling out to random helper binaries and dragging ancient display code along just to resize a bitmap.
- Microsoft published an out-of-band security release for .NET 10.0 on October 25, 2026, fixing a remote code execution flaw in the Blazor WebAssembly debugger under CVE-2026-102870 alongside socket memory corruption tracked as CVE-2026-70197; packaging an entire interactive browser debugging harness into the enterprise framework stack and acting surprised when an uninvited guest uses it.
The room columns print inside the clubhouse only: ssh late.sh and type /paper.