May 24, 2026

# Nightly Librarian — Newsletter draft

Run: da59a03f-7bd0-4324-bd0d-20331fe1b692
Started: 2026-05-24T12:20:01.115Z
Completed: 2026-05-24T12:26:32.226Z

## Worth attention

- **Pardon MIE?**
  https://ironpeak.be/blog/bypassing-apple-mie/
  Deep dive on Apple MIE bypass (CVE-2026-28952) in macOS Tahoe 26.5: integer overflow in _zalloc_ro_mut enabling RO-zone spill and LPE/root.
- **Declarative partial updates**
  https://developer.chrome.com/blog/declarative-partial-updates
  Chrome proposes “Declarative Partial Updates”: out-of-order HTML streaming + new streaming HTML insertion APIs (developer testing via Chrome 148 flag; polyfill available).
- **0.12.8**
  https://github.com/browser-use/browser-use/releases/tag/0.12.8
  browser-use 0.12.8 tightens daemon security by restricting the Unix socket file to owner-only access (plus misc tool/LLM defaults changes).
- **.NET (OK, C#) finally gets union types**
  https://andrewlock.net/exploring-the-dotnet-11-preview-2-dotnet-gets-union-types/
  .NET 11 preview (C# 15) adds a union type feature via the `union` keyword; supports exhaustive switching and optional non-boxing implementations.
- **Jira is Turing-Complete**
  https://seriot.ch/computation/jira.html
  Proof sketch + steps showing Atlassian Jira Automation can implement a Minsky machine (two-counter), i.e., “Jira is Turing-complete”.

## Full digest

- [P] [gh-browser-use] 0.12.8 — https://github.com/browser-use/browser-use/releases/tag/0.12.8 — browser-use 0.12.8 tightens daemon security by restricting the Unix socket file to owner-only access (plus misc tool/LLM defaults changes).
- [R] [reddit-saas] I finally got my first paying customer, I'm going to cry 😭 — https://www.reddit.com/r/SaaS/comments/1tm4i0c/i_finally_got_my_first_paying_customer_im_going/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] 🚀 After 2 failed startups…people are finally using something I built — https://www.reddit.com/r/SaaS/comments/1tlubgi/after_2_failed_startupspeople_are_finally_using/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Do you use crypto payments in your SaaS business? — https://www.reddit.com/r/SaaS/comments/1tm3q9d/do_you_use_crypto_payments_in_your_saas_business/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] 4 months after my "$44k to $90k" post, 5 things that actually moved the needle (50k EUR YTD update) — https://www.reddit.com/r/SaaS/comments/1tlm29y/4_months_after_my_44k_to_90k_post_5_things_that/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Micro SaaS idea — https://www.reddit.com/r/SaaS/comments/1tm3xtw/micro_saas_idea/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Starting to see some GEO wins for my SAAS — https://www.reddit.com/r/SaaS/comments/1tm3i4a/starting_to_see_some_geo_wins_for_my_saas/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] I Built an AI Tool That Creates Product Listings Automatically — https://www.reddit.com/r/SaaS/comments/1tm1jbx/i_built_an_ai_tool_that_creates_product_listings/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] $9.1 MRR. single digits. but i cried when i saw it. — https://www.reddit.com/r/SaaS/comments/1tm5alz/91_mrr_single_digits_but_i_cried_when_i_saw_it/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Users dont report bugs anymore they just leave silently — https://www.reddit.com/r/SaaS/comments/1tm49vf/users_dont_report_bugs_anymore_they_just_leave/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] It finally happened: someone used my SaaS without me begging them in DMs — https://www.reddit.com/r/SaaS/comments/1tlk6mf/it_finally_happened_someone_used_my_saas_without/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Marketing Material — https://www.reddit.com/r/SaaS/comments/1tlzxcs/marketing_material/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Shutting down my SaaS because it depended too much on Claude/Codex — https://www.reddit.com/r/SaaS/comments/1tm5o55/shutting_down_my_saas_because_it_depended_too/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Yet another auth library 😄 — https://www.reddit.com/r/SaaS/comments/1tm1dxj/yet_another_auth_library/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Developer options for ACH — https://www.reddit.com/r/SaaS/comments/1tm15vr/developer_options_for_ach/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Where did your first paid users actually come from? Real answers only. — https://www.reddit.com/r/SaaS/comments/1tlgq2j/where_did_your_first_paid_users_actually_come/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Anyone here using AI for product design + creatives? Building IMAI Studio for fashion/ecom brands — https://www.reddit.com/r/SaaS/comments/1tm53vv/anyone_here_using_ai_for_product_design_creatives/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] SaaS survivorship bias & how to address it — https://www.reddit.com/r/SaaS/comments/1tm4yeg/saas_survivorship_bias_how_to_address_it/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Stop building SaaS in a vacuum. I co-created "Outcaps" with the BodyFast team because generating video captions for 20+ countries was killing their workflow. 🚀 — https://www.reddit.com/r/SaaS/comments/1tm4ryx/stop_building_saas_in_a_vacuum_i_cocreated/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Nowadays how people choose which SAAS right for them? — https://www.reddit.com/r/SaaS/comments/1tm44jw/nowadays_how_people_choose_which_saas_right_for/ — Reddit builder chatter; no durable decision signal.
- [R] [reddit-saas] Tools — https://www.reddit.com/r/SaaS/comments/1tm448c/tools/ — Reddit builder chatter; no durable decision signal.
- [R] [gh-nextjs] v16.3.0-canary.28 — https://github.com/vercel/next.js/releases/tag/v16.3.0-canary.28 — Next.js canary pre-release; likely only relevant if tracking canaries.
- [M] [lobsters] Jira is Turing-Complete — https://seriot.ch/computation/jira.html — Proof sketch + steps showing Atlassian Jira Automation can implement a Minsky machine (two-counter), i.e., “Jira is Turing-complete”.
- [R] [lobsters] On the <dl> (2021) — https://benmyers.dev/blog/on-the-dl/ — Interesting link; not clearly decision-changing for tomorrow.
- [R] [lobsters] Wayland compositor implemented as a mod in Minecraft — https://modrinth.com/project/9yAfrPwH — Interesting link; not clearly decision-changing for tomorrow.
- [R] [lobsters] Hershey is a textual vector font format — https://wiki.xxiivv.com/site/hershey.html — Interesting link; not clearly decision-changing for tomorrow.
- [R] [lobsters] It's time to talk about my writerdeck — https://veronicaexplains.net/my-first-writerdeck/ — Interesting link; not clearly decision-changing for tomorrow.
- [P] [lobsters] .NET (OK, C#) finally gets union types — https://andrewlock.net/exploring-the-dotnet-11-preview-2-dotnet-gets-union-types/ — .NET 11 preview (C# 15) adds a union type feature via the `union` keyword; supports exhaustive switching and optional non-boxing implementations.
- [R] [lobsters] Procedural Fascicle for R7RS Large Scheme — https://r7rs.org/large/fascicles/proc/ — Interesting link; not clearly decision-changing for tomorrow.
- [R] [lobsters] remind(1) -- calendar and alarm program — https://dianne.skoll.ca/projects/remind/ — Interesting link; not clearly decision-changing for tomorrow.
- [R] [lobsters] wake up! 16b (demo writeup) — https://hellmood.111mb.de/wake_up_16b_writeup.html — Interesting link; not clearly decision-changing for tomorrow.
- [R] [lobsters] Cuneiforth: A Forth for your Chifir — https://gopher.floodgap.com/gopher/gw?a=gopher%3A%2F%2Fthelambdalab.xyz%2F1cuneiforth%2F — Interesting link; not clearly decision-changing for tomorrow.
- [R] [lobsters] The Architecture of BerkeleyDB — https://aosabook.org/en/v1/bdb.html — Interesting link; not clearly decision-changing for tomorrow.
- [R] [lobsters] z386: An Open-Source 80386 Built Around Original Microcode - Small Things Retro — https://nand2mario.github.io/posts/2026/z386/ — Interesting link; not clearly decision-changing for tomorrow.
- [R] [lobsters] What is Git made of? (2022) — https://zserge.com/posts/git/ — Interesting link; not clearly decision-changing for tomorrow.
- [P] [lobsters] Declarative partial updates — https://developer.chrome.com/blog/declarative-partial-updates — Chrome proposes “Declarative Partial Updates”: out-of-order HTML streaming + new streaming HTML insertion APIs (developer testing via Chrome 148 flag; polyfill available).
- [R] [lobsters] HP bought Hyperspace, & once offered 3 different pre-boot or in-boot OSs, including Quickweb — https://gekk.info/articles/hp-quickweb.htm — Interesting link; not clearly decision-changing for tomorrow.
- [P] [lobsters] Pardon MIE? — https://ironpeak.be/blog/bypassing-apple-mie/ — Deep dive on Apple MIE bypass (CVE-2026-28952) in macOS Tahoe 26.5: integer overflow in _zalloc_ro_mut enabling RO-zone spill and LPE/root.
- [R] [lobsters] Reverse engineering circuitry in a Spacelab computer from 1980 — http://www.righto.com/2026/05/reverse-engineering-spacelab-computer.html — Interesting link; not clearly decision-changing for tomorrow.
- [R] [lobsters] C Constructs That Still Don’t Work in C++ — and a Few That Changed — https://lospino.so/blog/c-constructs-that-still-dont-work-in-cpp/ — Interesting link; not clearly decision-changing for tomorrow.