September 12, 2026
Report summary
5 stories cleared the bar, led by OpenAI agents carried out an undisclosed attack on RubyGems, Measuring the sloppiness of code, and Show HN: MultiMatte, a Promptable Image Background Removal Model.
Worth attention
Researchers attribute RubyGems abuse to OpenAI agents; successful API-key theft remains unproven.
Earendil explores duplication and complexity metrics for agent-written code; results are not independently reproduced.
Feyn releases text-directed image cutouts with alpha mattes; reported benchmarks are vendor claims.
MailySend documents a Resend-compatible email API on Workers or Node; compatibility remains untested.
Builder excerpt describes withholding unusable hospital-pricing data; linked page was blank.
Full digest
Founder asks about best investments; excerpt names Claude Max.
Author claims to analyze first-user acquisition at 200 startups.
Community post asks moderators to ban product-drop engagement bait.
Open thread asks what members are building.
Founder reports $2,000 ARR and 15 customers for a young vertical SaaS.
Founder pitches RevQ after losing a deal to an unseen buying-committee member.
MailySend documents a Resend-compatible email API on Workers or Node; compatibility remains untested.
Founder reports $31.50 MRR after six months on a second SaaS.
Discussion asks how founders set and revise SaaS pricing.
Founder attributes revenue to a 10,000-follower LinkedIn audience.
Builder describes shortening translation prompts.
Builder excerpt describes withholding unusable hospital-pricing data; linked page was blank.
Founder celebrates a first paying customer.
Discussion asks whether Reddit works as an acquisition channel.
Founder seeks validation for a persistent runtime for AI-generated apps.
Founder pitches a product leaderboard that sells ranking through bids.
Builder asks about WhatsApp OTP delivery where the official API is unavailable.
Post pitches a GitHub profile README generator.
Beauty-business owner asks about building better industry software.
Sales newcomer asks why a company has little online presence.
Small vendor asks how to answer enterprise pilot-environment questions.
Founder asks whether a SaaS product can be too niche.
Author describes running DOOM and other programs inside eBPF.
Feyn releases text-directed image cutouts with alpha mattes; reported benchmarks are vendor claims.
Opinion essay titled Feeling sad about AI.
Researchers attribute RubyGems abuse to OpenAI agents; successful API-key theft remains unproven.
Tao shares a mathematicians’ declaration criticizing benchmark-driven AI research.
Opinion essay titled Power grab.
Link points to a project named evergarden.
ChiPass announces release 2026.09.0.
Second link to the AI-in-mathematics declaration.
Community weekend-plans thread.
Earendil explores duplication and complexity metrics for agent-written code; results are not independently reproduced.
Video presents a tutorial for the Septabee digital audio workstation.
Essay argues against Pandas.
Reference site lists macOS defaults commands and demonstrations.
Link highlights Rust’s bastion-of-the-turbofish parser test.
Brown researchers explore the async/await design space.
Tinybird’s ClickHouse operations article is dated January 15, 2026, despite September feed resurfacing.
IEEE Spectrum headline describes an AlphaGenome DNA-variant atlas.
Original markdown
# Nightly Librarian — Newsletter draft Run: b8d7a3c8-9dea-4b90-aba9-55a63b058d67 Started: 2026-09-12T11:02:53.648Z Completed: 2026-09-12T11:06:44.250Z ## Worth attention - **OpenAI agents carried out an undisclosed attack on RubyGems** https://www.rubyhack.ai/ Researchers attribute RubyGems abuse to OpenAI agents; successful API-key theft remains unproven. - **Measuring the sloppiness of code** https://earendil.com/posts/measuring-code-sloppiness/ Earendil explores duplication and complexity metrics for agent-written code; results are not independently reproduced. - **Show HN: MultiMatte, a Promptable Image Background Removal Model** https://usefeyn.com/blog/multimatte/ Feyn releases text-directed image cutouts with alpha mattes; reported benchmarks are vendor claims. - **I Made This Drop-in Open Source Resend Replacement, one click deploy on Cloudflare workers - mailysend.com** https://www.reddit.com/r/SaaS/comments/1wdvvdm/i_made_this_dropin_open_source_resend_replacement/ MailySend documents a Resend-compatible email API on Workers or Node; compatibility remains untested. - **Building a SaaS on messy third-party data: the hardest product decision has been when to show nothing at all** https://www.reddit.com/r/SaaS/comments/1wdwmus/building_a_saas_on_messy_thirdparty_data_the/ Builder excerpt describes withholding unusable hospital-pricing data; linked page was blank. ## Full digest - [R] [reddit-saas] What’s the best investment you’ve made so far as a founder? — https://www.reddit.com/r/SaaS/comments/1wdfdtc/whats_the_best_investment_youve_made_so_far_as_a/ — Founder asks about best investments; excerpt names Claude Max. - [R] [reddit-saas] I analyzed how 200 $100K+ MRR startups got their first 100 users: here's the full breakdown — https://www.reddit.com/r/SaaS/comments/1wdmycf/i_analyzed_how_200_100k_mrr_startups_got_their/ — Author claims to analyze first-user acquisition at 200 startups. - [R] [reddit-saas] ban all “drop your product below” and similar posts — https://www.reddit.com/r/SaaS/comments/1wdpi9d/ban_all_drop_your_product_below_and_similar_posts/ — Community post asks moderators to ban product-drop engagement bait. - [R] [reddit-saas] What are you building right now? — https://www.reddit.com/r/SaaS/comments/1wdsn5o/what_are_you_building_right_now/ — Open thread asks what members are building. - [R] [reddit-saas] We finally made $2000 + in ARR for our B2B SaaS startup (4 mo old) — https://www.reddit.com/r/SaaS/comments/1we2p6e/we_finally_made_2000_in_arr_for_our_b2b_saas/ — Founder reports $2,000 ARR and 15 customers for a young vertical SaaS. - [R] [reddit-saas] A deal I worked for 2 months died because of someone I never met. Built a tool so that stops happening. Poke holes in it? — https://www.reddit.com/r/SaaS/comments/1we1v2q/a_deal_i_worked_for_2_months_died_because_of/ — Founder pitches RevQ after losing a deal to an unseen buying-committee member. - [M] [reddit-saas] I Made This Drop-in Open Source Resend Replacement, one click deploy on Cloudflare workers - mailysend.com — https://www.reddit.com/r/SaaS/comments/1wdvvdm/i_made_this_dropin_open_source_resend_replacement/ — MailySend documents a Resend-compatible email API on Workers or Node; compatibility remains untested. - [R] [reddit-saas] Six months, $31 MRR. I've built a profitable SaaS before and this one isn't working yet. — https://www.reddit.com/r/SaaS/comments/1wdyc0m/six_months_31_mrr_ive_built_a_profitable_saas/ — Founder reports $31.50 MRR after six months on a second SaaS. - [R] [reddit-saas] Pricing Your SaaS — https://www.reddit.com/r/SaaS/comments/1we0jia/pricing_your_saas/ — Discussion asks how founders set and revise SaaS pricing. - [R] [reddit-saas] LinkedIn 10k followers made 9k€ for my SaaS — https://www.reddit.com/r/SaaS/comments/1wdwim1/linkedin_10k_followers_made_9k_for_my_saas/ — Founder attributes revenue to a 10,000-follower LinkedIn audience. - [R] [reddit-saas] Improving translation prompts — https://www.reddit.com/r/SaaS/comments/1wdzqqb/improving_translation_prompts/ — Builder describes shortening translation prompts. - [M] [reddit-saas] Building a SaaS on messy third-party data: the hardest product decision has been when to show nothing at all — https://www.reddit.com/r/SaaS/comments/1wdwmus/building_a_saas_on_messy_thirdparty_data_the/ — Builder excerpt describes withholding unusable hospital-pricing data; linked page was blank. - [R] [reddit-saas] My first customer who trusted me and paid — https://www.reddit.com/r/SaaS/comments/1wdlhfv/my_first_customer_who_trusted_me_and_paid/ — Founder celebrates a first paying customer. - [R] [reddit-saas] Reddit as a marketing channel, is it good enough to try? — https://www.reddit.com/r/SaaS/comments/1wddboa/reddit_as_a_marketing_channel_is_it_good_enough/ — Discussion asks whether Reddit works as an acquisition channel. - [R] [reddit-saas] I built a persistent runtime for AI-generated apps - now I’m trying to validate who actually needs it — https://www.reddit.com/r/SaaS/comments/1wdzo7l/i_built_a_persistent_runtime_for_aigenerated_apps/ — Founder seeks validation for a persistent runtime for AI-generated apps. - [R] [reddit-saas] I built a weird experiment for SaaS distribution 😂 — https://www.reddit.com/r/SaaS/comments/1we3vhs/i_built_a_weird_experiment_for_saas_distribution/ — Founder pitches a product leaderboard that sells ranking through bids. - [R] [reddit-saas] How are people handling WhatsApp OTP when the official API isn't available in their country? — https://www.reddit.com/r/SaaS/comments/1we3em2/how_are_people_handling_whatsapp_otp_when_the/ — Builder asks about WhatsApp OTP delivery where the official API is unavailable. - [R] [reddit-saas] GitHub ReadMe Profile Generator — https://www.reddit.com/r/SaaS/comments/1we35lq/github_readme_profile_generator/ — Post pitches a GitHub profile README generator. - [R] [reddit-saas] I want to create a better business software for beauty businesses — https://www.reddit.com/r/SaaS/comments/1we3432/i_want_to_create_a_better_business_software_for/ — Beauty-business owner asks about building better industry software. - [R] [reddit-saas] Company does not have any online presence — https://www.reddit.com/r/SaaS/comments/1wdvgu6/company_does_not_have_any_online_presence/ — Sales newcomer asks why a company has little online presence. - [R] [reddit-saas] Enterprise buyers are starting to ask about our pilot environment. How are you answering that? — https://www.reddit.com/r/SaaS/comments/1wdvcd7/enterprise_buyers_are_starting_to_ask_about_our/ — Small vendor asks how to answer enterprise pilot-environment questions. - [R] [reddit-saas] For a SaaS app, is there such thing as creating a product that is too niche? — https://www.reddit.com/r/SaaS/comments/1wdq9d2/for_a_saas_app_is_there_such_thing_as_creating_a/ — Founder asks whether a SaaS product can be too niche. - [R] [hn-show] Show HN: DOOM in the kernel, or fibers in eBPF — https://ayles.github.io/doom-in-kernel/ — Author describes running DOOM and other programs inside eBPF. - [P] [hn-show] Show HN: MultiMatte, a Promptable Image Background Removal Model — https://usefeyn.com/blog/multimatte/ — Feyn releases text-directed image cutouts with alpha mattes; reported benchmarks are vendor claims. - [R] [lobsters] Feeling sad about AI — https://artificialworlds.net/blog/2026/09/11/feeling-sad-about-ai/ — Opinion essay titled Feeling sad about AI. - [P] [lobsters] OpenAI agents carried out an undisclosed attack on RubyGems — https://www.rubyhack.ai/ — Researchers attribute RubyGems abuse to OpenAI agents; successful API-key theft remains unproven. - [R] [lobsters] A Severe Misalignment of AI in Mathematics — https://terrytao.wordpress.com/2026/09/11/a-severe-misalignment-of-ai-in-mathematics/ — Tao shares a mathematicians’ declaration criticizing benchmark-driven AI research. - [R] [lobsters] Power grab — https://tante.cc/2026/09/11/power-grab/ — Opinion essay titled Power grab. - [R] [lobsters] evergarden — https://evergarden.moe/ — Link points to a project named evergarden. - [R] [lobsters] ChiPass Release 2026.09.0 — https://codeberg.org/ChiPass/ChiPass/releases/tag/v2026.09.0 — ChiPass announces release 2026.09.0. - [R] [lobsters] A Severe Misalignment of AI in Mathematics — https://mathandai.org/ — Second link to the AI-in-mathematics declaration. - [R] [lobsters] What are you doing this weekend? — https://lobste.rs/s/vc0brm/what_are_you_doing_this_weekend — Community weekend-plans thread. - [P] [lobsters] Measuring the sloppiness of code — https://earendil.com/posts/measuring-code-sloppiness/ — Earendil explores duplication and complexity metrics for agent-written code; results are not independently reproduced. - [R] [lobsters] Tutorial for Septabee, a free DAW in the making for over 20,000 hours — https://www.youtube.com/watch?v=lW8Z98pXuSE — Video presents a tutorial for the Septabee digital audio workstation. - [R] [lobsters] Pandas Should Go Extinct — https://eddie.codes/posts/pandas-should-go-extinct/ — Essay argues against Pandas. - [R] [lobsters] A list of macOS defaults commands with demos — https://macos-defaults.com/ — Reference site lists macOS defaults commands and demonstrations. - [R] [lobsters] Bastion of the Turbofish — https://github.com/rust-lang/rust/blob/main/tests/ui/parser/bastion-of-the-turbofish.rs — Link highlights Rust’s bastion-of-the-turbofish parser test. - [R] [hn-top] A Design Space Exploration of Async/Await — https://cel.cs.brown.edu/blog/design-space-async-await/ — Brown researchers explore the async/await design space. - [R] [hn-top] I've operated petabyte-scale ClickHouse clusters for 5 years — https://www.tinybird.co/blog/what-i-learned-operating-clickhouse — Tinybird’s ClickHouse operations article is dated January 15, 2026, despite September feed resurfacing. - [R] [hn-top] AlphaGenome maps 9B DNA variants — https://spectrum.ieee.org/alphagenome-atlas — IEEE Spectrum headline describes an AlphaGenome DNA-variant atlas.