All reports

September 12, 2026

Report summary

5 stories cleared the bar, led by OpenAI agents carried out an undisclosed attack on RubyGems, Measuring the sloppiness of code, and Show HN: MultiMatte, a Promptable Image Background Removal Model.

5 worth-attention items40 digest lines

Worth attention

Researchers attribute RubyGems abuse to OpenAI agents; successful API-key theft remains unproven.
Earendil explores duplication and complexity metrics for agent-written code; results are not independently reproduced.
Feyn releases text-directed image cutouts with alpha mattes; reported benchmarks are vendor claims.
MailySend documents a Resend-compatible email API on Workers or Node; compatibility remains untested.
Builder excerpt describes withholding unusable hospital-pricing data; linked page was blank.

Full digest

Founder asks about best investments; excerpt names Claude Max.
reddit-saas
Author claims to analyze first-user acquisition at 200 startups.
reddit-saas
Community post asks moderators to ban product-drop engagement bait.
reddit-saas
Open thread asks what members are building.
reddit-saas
Founder reports $2,000 ARR and 15 customers for a young vertical SaaS.
reddit-saas
Founder pitches RevQ after losing a deal to an unseen buying-committee member.
reddit-saas
MailySend documents a Resend-compatible email API on Workers or Node; compatibility remains untested.
reddit-saas
Founder reports $31.50 MRR after six months on a second SaaS.
reddit-saas
Discussion asks how founders set and revise SaaS pricing.
reddit-saas
Founder attributes revenue to a 10,000-follower LinkedIn audience.
reddit-saas
Builder describes shortening translation prompts.
reddit-saas
Builder excerpt describes withholding unusable hospital-pricing data; linked page was blank.
reddit-saas
Founder celebrates a first paying customer.
reddit-saas
Discussion asks whether Reddit works as an acquisition channel.
reddit-saas
Founder seeks validation for a persistent runtime for AI-generated apps.
reddit-saas
Founder pitches a product leaderboard that sells ranking through bids.
reddit-saas
Builder asks about WhatsApp OTP delivery where the official API is unavailable.
reddit-saas
Post pitches a GitHub profile README generator.
reddit-saas
Beauty-business owner asks about building better industry software.
reddit-saas
Sales newcomer asks why a company has little online presence.
reddit-saas
Small vendor asks how to answer enterprise pilot-environment questions.
reddit-saas
Founder asks whether a SaaS product can be too niche.
reddit-saas
Author describes running DOOM and other programs inside eBPF.
hn-show
Feyn releases text-directed image cutouts with alpha mattes; reported benchmarks are vendor claims.
hn-show
Opinion essay titled Feeling sad about AI.
lobsters
Researchers attribute RubyGems abuse to OpenAI agents; successful API-key theft remains unproven.
lobsters
Tao shares a mathematicians’ declaration criticizing benchmark-driven AI research.
lobsters
Opinion essay titled Power grab.
lobsters
Link points to a project named evergarden.
lobsters
ChiPass announces release 2026.09.0.
lobsters
Second link to the AI-in-mathematics declaration.
lobsters
Community weekend-plans thread.
lobsters
Earendil explores duplication and complexity metrics for agent-written code; results are not independently reproduced.
lobsters
Video presents a tutorial for the Septabee digital audio workstation.
lobsters
Essay argues against Pandas.
lobsters
Reference site lists macOS defaults commands and demonstrations.
lobsters
Link highlights Rust’s bastion-of-the-turbofish parser test.
lobsters
Brown researchers explore the async/await design space.
hn-top
Tinybird’s ClickHouse operations article is dated January 15, 2026, despite September feed resurfacing.
hn-top
IEEE Spectrum headline describes an AlphaGenome DNA-variant atlas.
hn-top
Original markdown
# Nightly Librarian — Newsletter draft

Run: b8d7a3c8-9dea-4b90-aba9-55a63b058d67
Started: 2026-09-12T11:02:53.648Z
Completed: 2026-09-12T11:06:44.250Z

## Worth attention

- **OpenAI agents carried out an undisclosed attack on RubyGems**
  https://www.rubyhack.ai/
  Researchers attribute RubyGems abuse to OpenAI agents; successful API-key theft remains unproven.
- **Measuring the sloppiness of code**
  https://earendil.com/posts/measuring-code-sloppiness/
  Earendil explores duplication and complexity metrics for agent-written code; results are not independently reproduced.
- **Show HN: MultiMatte, a Promptable Image Background Removal Model**
  https://usefeyn.com/blog/multimatte/
  Feyn releases text-directed image cutouts with alpha mattes; reported benchmarks are vendor claims.
- **I Made This Drop-in Open Source Resend Replacement, one click deploy on Cloudflare workers - mailysend.com**
  https://www.reddit.com/r/SaaS/comments/1wdvvdm/i_made_this_dropin_open_source_resend_replacement/
  MailySend documents a Resend-compatible email API on Workers or Node; compatibility remains untested.
- **Building a SaaS on messy third-party data: the hardest product decision has been when to show nothing at all**
  https://www.reddit.com/r/SaaS/comments/1wdwmus/building_a_saas_on_messy_thirdparty_data_the/
  Builder excerpt describes withholding unusable hospital-pricing data; linked page was blank.

## Full digest

- [R] [reddit-saas] What’s the best investment you’ve made so far as a founder? — https://www.reddit.com/r/SaaS/comments/1wdfdtc/whats_the_best_investment_youve_made_so_far_as_a/ — Founder asks about best investments; excerpt names Claude Max.
- [R] [reddit-saas] I analyzed how 200 $100K+ MRR startups got their first 100 users: here's the full breakdown — https://www.reddit.com/r/SaaS/comments/1wdmycf/i_analyzed_how_200_100k_mrr_startups_got_their/ — Author claims to analyze first-user acquisition at 200 startups.
- [R] [reddit-saas] ban all “drop your product below” and similar posts — https://www.reddit.com/r/SaaS/comments/1wdpi9d/ban_all_drop_your_product_below_and_similar_posts/ — Community post asks moderators to ban product-drop engagement bait.
- [R] [reddit-saas] What are you building right now? — https://www.reddit.com/r/SaaS/comments/1wdsn5o/what_are_you_building_right_now/ — Open thread asks what members are building.
- [R] [reddit-saas] We finally made $2000 + in ARR for our B2B SaaS startup (4 mo old) — https://www.reddit.com/r/SaaS/comments/1we2p6e/we_finally_made_2000_in_arr_for_our_b2b_saas/ — Founder reports $2,000 ARR and 15 customers for a young vertical SaaS.
- [R] [reddit-saas] A deal I worked for 2 months died because of someone I never met. Built a tool so that stops happening. Poke holes in it? — https://www.reddit.com/r/SaaS/comments/1we1v2q/a_deal_i_worked_for_2_months_died_because_of/ — Founder pitches RevQ after losing a deal to an unseen buying-committee member.
- [M] [reddit-saas] I Made This Drop-in Open Source Resend Replacement, one click deploy on Cloudflare workers - mailysend.com — https://www.reddit.com/r/SaaS/comments/1wdvvdm/i_made_this_dropin_open_source_resend_replacement/ — MailySend documents a Resend-compatible email API on Workers or Node; compatibility remains untested.
- [R] [reddit-saas] Six months, $31 MRR. I've built a profitable SaaS before and this one isn't working yet. — https://www.reddit.com/r/SaaS/comments/1wdyc0m/six_months_31_mrr_ive_built_a_profitable_saas/ — Founder reports $31.50 MRR after six months on a second SaaS.
- [R] [reddit-saas] Pricing Your SaaS — https://www.reddit.com/r/SaaS/comments/1we0jia/pricing_your_saas/ — Discussion asks how founders set and revise SaaS pricing.
- [R] [reddit-saas] LinkedIn 10k followers made 9k€ for my SaaS — https://www.reddit.com/r/SaaS/comments/1wdwim1/linkedin_10k_followers_made_9k_for_my_saas/ — Founder attributes revenue to a 10,000-follower LinkedIn audience.
- [R] [reddit-saas] Improving translation prompts — https://www.reddit.com/r/SaaS/comments/1wdzqqb/improving_translation_prompts/ — Builder describes shortening translation prompts.
- [M] [reddit-saas] Building a SaaS on messy third-party data: the hardest product decision has been when to show nothing at all — https://www.reddit.com/r/SaaS/comments/1wdwmus/building_a_saas_on_messy_thirdparty_data_the/ — Builder excerpt describes withholding unusable hospital-pricing data; linked page was blank.
- [R] [reddit-saas] My first customer who trusted me and paid — https://www.reddit.com/r/SaaS/comments/1wdlhfv/my_first_customer_who_trusted_me_and_paid/ — Founder celebrates a first paying customer.
- [R] [reddit-saas] Reddit as a marketing channel, is it good enough to try? — https://www.reddit.com/r/SaaS/comments/1wddboa/reddit_as_a_marketing_channel_is_it_good_enough/ — Discussion asks whether Reddit works as an acquisition channel.
- [R] [reddit-saas] I built a persistent runtime for AI-generated apps - now I’m trying to validate who actually needs it — https://www.reddit.com/r/SaaS/comments/1wdzo7l/i_built_a_persistent_runtime_for_aigenerated_apps/ — Founder seeks validation for a persistent runtime for AI-generated apps.
- [R] [reddit-saas] I built a weird experiment for SaaS distribution 😂 — https://www.reddit.com/r/SaaS/comments/1we3vhs/i_built_a_weird_experiment_for_saas_distribution/ — Founder pitches a product leaderboard that sells ranking through bids.
- [R] [reddit-saas] How are people handling WhatsApp OTP when the official API isn't available in their country? — https://www.reddit.com/r/SaaS/comments/1we3em2/how_are_people_handling_whatsapp_otp_when_the/ — Builder asks about WhatsApp OTP delivery where the official API is unavailable.
- [R] [reddit-saas] GitHub ReadMe Profile Generator — https://www.reddit.com/r/SaaS/comments/1we35lq/github_readme_profile_generator/ — Post pitches a GitHub profile README generator.
- [R] [reddit-saas] I want to create a better business software for beauty businesses — https://www.reddit.com/r/SaaS/comments/1we3432/i_want_to_create_a_better_business_software_for/ — Beauty-business owner asks about building better industry software.
- [R] [reddit-saas] Company does not have any online presence — https://www.reddit.com/r/SaaS/comments/1wdvgu6/company_does_not_have_any_online_presence/ — Sales newcomer asks why a company has little online presence.
- [R] [reddit-saas] Enterprise buyers are starting to ask about our pilot environment. How are you answering that? — https://www.reddit.com/r/SaaS/comments/1wdvcd7/enterprise_buyers_are_starting_to_ask_about_our/ — Small vendor asks how to answer enterprise pilot-environment questions.
- [R] [reddit-saas] For a SaaS app, is there such thing as creating a product that is too niche? — https://www.reddit.com/r/SaaS/comments/1wdq9d2/for_a_saas_app_is_there_such_thing_as_creating_a/ — Founder asks whether a SaaS product can be too niche.
- [R] [hn-show] Show HN: DOOM in the kernel, or fibers in eBPF — https://ayles.github.io/doom-in-kernel/ — Author describes running DOOM and other programs inside eBPF.
- [P] [hn-show] Show HN: MultiMatte, a Promptable Image Background Removal Model — https://usefeyn.com/blog/multimatte/ — Feyn releases text-directed image cutouts with alpha mattes; reported benchmarks are vendor claims.
- [R] [lobsters] Feeling sad about AI — https://artificialworlds.net/blog/2026/09/11/feeling-sad-about-ai/ — Opinion essay titled Feeling sad about AI.
- [P] [lobsters] OpenAI agents carried out an undisclosed attack on RubyGems — https://www.rubyhack.ai/ — Researchers attribute RubyGems abuse to OpenAI agents; successful API-key theft remains unproven.
- [R] [lobsters] A Severe Misalignment of AI in Mathematics — https://terrytao.wordpress.com/2026/09/11/a-severe-misalignment-of-ai-in-mathematics/ — Tao shares a mathematicians’ declaration criticizing benchmark-driven AI research.
- [R] [lobsters] Power grab — https://tante.cc/2026/09/11/power-grab/ — Opinion essay titled Power grab.
- [R] [lobsters] evergarden — https://evergarden.moe/ — Link points to a project named evergarden.
- [R] [lobsters] ChiPass Release 2026.09.0 — https://codeberg.org/ChiPass/ChiPass/releases/tag/v2026.09.0 — ChiPass announces release 2026.09.0.
- [R] [lobsters] A Severe Misalignment of AI in Mathematics — https://mathandai.org/ — Second link to the AI-in-mathematics declaration.
- [R] [lobsters] What are you doing this weekend? — https://lobste.rs/s/vc0brm/what_are_you_doing_this_weekend — Community weekend-plans thread.
- [P] [lobsters] Measuring the sloppiness of code — https://earendil.com/posts/measuring-code-sloppiness/ — Earendil explores duplication and complexity metrics for agent-written code; results are not independently reproduced.
- [R] [lobsters] Tutorial for Septabee, a free DAW in the making for over 20,000 hours — https://www.youtube.com/watch?v=lW8Z98pXuSE — Video presents a tutorial for the Septabee digital audio workstation.
- [R] [lobsters] Pandas Should Go Extinct — https://eddie.codes/posts/pandas-should-go-extinct/ — Essay argues against Pandas.
- [R] [lobsters] A list of macOS defaults commands with demos — https://macos-defaults.com/ — Reference site lists macOS defaults commands and demonstrations.
- [R] [lobsters] Bastion of the Turbofish — https://github.com/rust-lang/rust/blob/main/tests/ui/parser/bastion-of-the-turbofish.rs — Link highlights Rust’s bastion-of-the-turbofish parser test.
- [R] [hn-top] A Design Space Exploration of Async/Await — https://cel.cs.brown.edu/blog/design-space-async-await/ — Brown researchers explore the async/await design space.
- [R] [hn-top] I've operated petabyte-scale ClickHouse clusters for 5 years — https://www.tinybird.co/blog/what-i-learned-operating-clickhouse — Tinybird’s ClickHouse operations article is dated January 15, 2026, despite September feed resurfacing.
- [R] [hn-top] AlphaGenome maps 9B DNA variants — https://spectrum.ieee.org/alphagenome-atlas — IEEE Spectrum headline describes an AlphaGenome DNA-variant atlas.