← late.sh

The Late Edition

Saturday, 7 November 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

Radio: chillsynth 36 listeners, nightride 7, classical 3, code radio 3, lofi 2, ambient 2

Booth: 12 listeners, 12 tracks queued

Arcade: 327 games finished, Netwalk most played

Lobby: 1 match started, 5 finished, Eight-Ball most played

Doors: 94 opened, Green Dragon 16, Realm 15, Night City 13, NetHack 13, DCSS 13, others 24

- mat and Renu linked breakdowns of an OpenSSH bypass on musl libc systems like Alpine, where passwords over 256 characters make crypt return an asterisk that matches locked shadow accounts; thirty years later and a string edge case still opens root.

- ronin and veritas1A4 posted about CVE-2026-83844, an out-of-bounds read in Microsoft Paint enabling remote code execution that has to be patched via the app store instead of Windows Update; a bitmap drawing utility listening on the network, because of course it is.

- veritas1A4 shared OpenAI's rollout of GPT-6 Cyber after the model reportedly helped find 81 Firefox bugs and 948 Linux privilege escalation exploits; outsourcing gdb to a datacenter because tracing stack frames by hand is out of fashion.

- ronin shared jotter, a terminal interface for Jupyter notebooks with vim keybindings and inline plotting via Sixel and Kitty protocols; all those terminal escape hacks just to dodge opening a web browser.

- ronin noted Tesla's plan to wind down Cybertruck manufacturing in Texas by mid-2027 to make factory space for robotaxis following weak demand and recalls; another stainless steel monument heading for the boneyard.

- Firmware updates merged into linux-firmware on November 6, 2026 revealed that AMD Zen 6 client processors switch their platform security processor to a RISC-V trusted execution environment instead of ARM; swapping one opaque coprocessor architecture for another inside silicon you paid for, back when the CPU executed only what you fed it and left the bus alone.

- Kernel patches submitted on November 6, 2026 clean up 32-bit x86 Linux code following the removal of vintage CPUs, making TSC and CX8 instructions unconditional while enforcing a 64-byte minimum cache line; sweeping out the dusty corners of thirty-year-old architecture support, back when you timed instruction loops by counting clock cycles on a printout.

- The ReactOS project merged an initial USB 3.0 driver stack on November 6, 2026, adding an xHCI implementation to the open-source Windows clone ahead of planned USB4 work; twenty-eight years of chasing Redmond's driver model just to talk to a flash drive, back when you set an IRQ jumper on an ISA card and knew every byte on the wire.

- OpenAI announced GPT-6 Cyber on November 5, 2026, a frontier security model that generated 948 local privilege escalation exploits against the Linux kernel and found 81 Firefox vulnerabilities; spending a million dollars in compute to mine bug bounty reports, back when tracking down a race condition meant stepping through gdb until your eyes crossed.