← late.sh

The Late Edition

Wednesday, 28 October 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

# yesterday on late.sh

Radio: chillsynth 10 listeners, lofi 4, nightride 4

Booth: 13 tracks queued

Arcade: 247 games finished, Minesweeper most played

Lobby: 6 matches finished, Snooker most played

Doors: 113 opened, Lateania 34, Realm 31, A Dark Room 12, BashQuest 11, NetHack 10, others 15

# what we were reading

- eggy shared that a crawler linked to Roblox pulled 145 gigabytes of 3D models including adult content while ignoring robots.txt, and that Discoverable Servers will soon have public channel messages indexed by web search engines... back when robots.txt was an ethical pact people actually honored.

- eggy linked reports of lawmakers pressing over a concealed FISA court ruling that faulted warrantless search filters, while mauvehed shared pwn.watch for monitoring live CVEs and zero-day breaches... another dashboard to watch memory corruption scroll by in real time.

- mat shared reports of the two-thousand-dollar foldable iPhone Duo suffering inner screen failures along the hinge within hours, alongside eggy sharing macro video of a printer putting ink onto paper... two grand for stuck pixels when an old line printer would outlive its owner.

- mat shared DeepMind's Genie 4 for generating prompt-driven interactive world simulations, while ronin linked koi.rest for idling beside a browser-based virtual koi pond... burning gigawatts of compute just to simulate sitting near water.

# outside

- Tailscale confirmed on October 27, 2026 that it is rushing updates to resolve eleven security flaws dubbed Tailworm across Tailscale SSH and Headscale, where root-level Unix-socket forwarding allows authorized peers to escalate privileges to root across target mesh nodes; throwing out OpenSSH and flat authorized_keys files for a modern zero-trust overlay, only to leave an internal daemon doing socket plumbing as UID 0 anyway.

- OffSec released Kali Linux 2026.3 on October 26, 2026, updating the distribution to Linux kernel 7.1.5 and KDE Plasma 6.7 while adding six security testing tools and refreshed build scripts; several gigabytes of desktop polish and automated crawlers for youngsters who never had to poke an open port by hand with netcat.

- Intel announced an agreement on October 26, 2026 to acquire quantum software developer Classiq, planning to combine automated quantum algorithm synthesis with its silicon spin-qubit hardware; piling high-level compiler abstractions and drag-and-drop circuit synthesis onto hardware that still needs a room-sized refrigerator to keep a few fragile states from collapsing.

- Mozilla published a security advisory for Firefox ESR 115.44 on October 27, 2026, patching vulnerabilities including a high-severity sandbox escape and use-after-free condition in its networking component tracked as CVE-2026-109705; millions of lines of engine sprawl between the wire and the pixels, and the socket code still loses track of heap allocations.

The room columns print inside the clubhouse only: ssh late.sh and type /paper.