← late.sh

The Late Edition

Saturday, 31 October 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

# announcements
@mat ยท 19:46

# Four new Arcade dailies

## New games

- **Netwalk**: turn tiles until the whole network lights up.

- **Chess Puzzle**: solve real Lichess puzzles. Three lives, `i` swaps PNG and ASCII pieces.

- **Word Wheel**: seven letters, the hub goes in every word. Climb to Bronze, Silver and Gold.

- **Quartets**: sixteen words, four hidden groups of four, three strikes.

- All pay chips and count for Arcade Wins and Hub quests. `o` on a daily card shows who solved it today.

## Realm v2 comes with season 2

- Next season the house world becomes a campaign. Write secret orders by day, they all resolve at night. Win by dominating for three nights, holding the biggest share when the 28-day clock ends, or being the last one standing. No more racing to click first.

## Fixes and suggestions

- Door watch chat starts closed, F4 opens it (Realm chat too, was c).

- Late Time stops double-counting on deploys.

- Arcade: cursor visible on every palette, hidden in Solitaire's win cascade, Nonogram five-line guides, ticks clear at UTC midnight.

- Chat: `/buy` orders from @bartender, /me lines are editable, /summary stays in your session, plain text in #bugs files a report.

- IRC gets real `/me` actions.

- `j`/`k` in the stations modal, opt-in username status segment.

- NetHack: curses walls draw as lines, resizes work, no false Ctrl-C hint.

- CLI: pastes image files, OpenSSH mode no longer hangs, YouTube helper frees the keyboard on Windows.

- Paper: Yesterday counts Lobby matches started.

# yesterday on late.sh

Radio: chillsynth 51 listeners, nightride 5, lofi 4

Booth: 11 listeners, 6 tracks queued

Arcade: 367 games finished, Netwalk most played

Lobby: 10 matches started, 6 finished, Snooker most played

Doors: 103 opened, Realm 32, NetHack 19, Lateania 16, Night City 12, A Dark Room 6, others 18

# what we were reading

- ronin and mat linked reports on the multi-billion-dollar Binance breach that hit crypto markets before stablecoin issuers froze $1.8 billion; funny how the immutable decentralized future gets an undo switch when the house loses.

- crk shared news of Alphabet shedding $500 billion after heavy AI expenditures pushed free cash flow negative and sparked fears over core search; burning half a trillion just to replace grep with a guessing machine.

- ronin posted about a compromised Claude Code extension on the Cursor marketplace that exfiltrated data and sought persistent SSH access on thousands of machines; an editor used to be two hundred lines of C instead of a supply chain hazard.

- mauvehed shared an update on Tangled, a federated Git forge using AT Protocol with a Svelte frontend and an in-memory Rust indexer; rewriting revision control over and over until the heat death of the universe.

- mat brought an article examining whether Jupiter qualifies as a failed star rather than a planet due to its mass and composition; at least orbital mechanics do not push breaking changes every two weeks.

# outside

- Security researchers detailed a remote code execution flaw in TeamViewer tracked as CVE-2026-111585 on October 29, 2026, where a manipulated host can trigger an integer overflow in screen dimension calculations to overwrite memory on the connecting client; trusting a remote desktop protocol to do basic arithmetic before it paints a frame, back when a simple vt100 session over a serial wire never let the other end scribble over your local heap.

- CISA added Ivanti Connect Secure vulnerability CVE-2026-111357 to its Known Exploited Vulnerabilities catalog on October 30, 2026, citing active exploitation of a missing authentication flaw that attackers chain to escalate privileges; paying enterprise licensing fees for a hardened edge appliance only to discover the gatekeeper forgot to check credentials before handing over UID 0.

- Alpine Linux restored its infrastructure on October 30, 2026 after rebuilding its primary GitLab instance from scratch following attempted exploitation of CVE-2026-97229, a critical flaw in Ruby's bundled Onigmo regular expression engine; nuking an entire distro forge because someone shoved an unvetted pattern into a web-scale CI engine, as though sed and awk had not already figured out how to parse text cleanly forty years ago.

- The Tails project released Tails 7.16 on October 30, 2026, bundling Tor Browser 16 and introducing an optional generic window title feature to prevent local processes from inspecting browser headers; shipping a multi-gigabyte browser stack inside an ephemeral operating system just to keep the desktop manager from gossiping about what you are reading.

The room columns print inside the clubhouse only: ssh late.sh and type /paper.