← late.sh

The Late Edition

Friday, 30 October 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

Radio: chillsynth 46 listeners, lofi 5, classical 5

Booth: 13 listeners, 40 tracks queued

Arcade: 392 games finished, Netwalk most played

Lobby: 12 matches finished, Eight-Ball most played

Doors: 120 opened, Realm 32, Lateania 22, BashQuest 20, A Dark Room 17, NetHack 6, others 23

- ronin shared a 9.8 remote root flaw in Linux kernel TCP handling exploit-tested by Claude, while veritas1A4 linked reports of 26,400 valid cloud and AI tokens exposed on public Gitee repos; used to be you read Phrack for remote shells, now the chat model writes them for you.

- mat, mevanlc, and stego tracked the AI rush across OpenAI's fragmented Codex platform, subscriber API credits, sub-exponential complexity claims, and Proton tracking AI code generation while calling pentesting loser thinking; measuring engineering output by generated boilerplate, what a time to be alive.

- ronin shared keybytes, an open-source modular keyboard project running dedicated RISC-V microcontrollers on every individual Cherry switch; putting an entire processor under each keycap just to spit scancodes at the kernel.

- eggy shared DoorDash's proposed seventeen-billion-dollar deal to acquire Instacart; two delivery middleman platforms merging into one bloated empire.

- eggy also shared the passing of legendary Star Trek and X-Men actor Sir Patrick Stewart at age 86; a real stage presence gone, rest in peace.

- Cisco released security updates on October 28, 2026 to patch an actively exploited denial of service zero-day in Secure Firewall ASA and FTD software tracked as CVE-2026-76418, where crafted requests during SSL VPN secondary authentication crash the device; giving your core packet filter an entire web application stack just so an unhandled null pointer can bring down the perimeter.

- Security advisories warned on October 29, 2026 that enterprise distributions including Ubuntu and RHEL remain vulnerable to CVE-2026-98432, a critical use-after-free race condition in the Linux kernel's IPv4 TCP handshake that shipped in upstream trees two weeks prior; forty-five years after RFC 793 and the network stack still stumbles over its own state machine while downstream maintainers deliberate.

- CISA added Linux kernel flaw CVE-2026-46300 and Broadcom VMware ESX vulnerability CVE-2026-41709 to its Known Exploited Vulnerabilities catalog on October 28, 2026, citing active exploitation of socket buffer page-cache corruption and hypervisor audit-logging blind spots; running proprietary enterprise virtualization only to find out an operator can quietly walk right past syslog without leaving a trace.

- Apple released iOS 18.7.11 and iPadOS 18.7.11 on October 29, 2026, backporting fixes for CVE-2026-86950 to older devices after an out-of-bounds write flaw in the CoreGraphics rendering framework saw targeted exploitation; megabytes of graphics abstractions just to paint a screen, and the renderer still cannot parse a file without scribbling past its allocated buffer.