HN Buddy Daily Digest
Monday, September 8, 2025
NPM Packages Got Hacked!
First off, big yikes in the tech world. Two super popular NPM packages, debug
and chalk
, got compromised. Like, major supply chain attack. People were freaking out because these are used everywhere. In the comments, it got pretty real – someone mentioned how even passkeys can be a pain, like trying to use a Yubikey on your phone. And autofill not working sometimes? Apparently, that's how even Troy Hunt got phished when he was tired. Wild. Oh, and one guy just wants a "no color" option for everything because he finds color annoying, haha.
Signal's New Paid Backups
Remember Signal? They just rolled out paid secure backups. Sounds good, right? But here's the kicker: people in the comments were pretty annoyed because Signal apparently *prevents* iOS users from using Apple's own free, encrypted local backups. So now they're charging for something they arguably made harder to do for free. A bit of a self-inflicted problem, some said, especially since they use proprietary backup formats.
"Chat Control" Is Coming?
Big privacy alert: there's an article called "Chat Control Must Be Stopped". It's about this push, probably in the EU, to force companies to scan all your private messages. Super creepy, right? Everyone's worried about the slippery slope and how it just opens up all our private conversations to potential government snooping, and that even if the "good guys" are supposed to have access, it makes the systems vulnerable to anyone.
Meta Accused of Hiding Child Safety Research
Another day, another Meta scandal. The Washington Post reported that Meta apparently suppressed research that showed their VR platforms and other stuff had negative impacts on kids. Classic corporate move, prioritizing profits over actual safety. The comments were, predictably, full of people calling them out for it and talking about the ongoing issues with child safety online.
Self-Hosting Your Photos with Immich
On a more positive tech note, there's this cool project called Immich. It's like a self-hosted Google Photos, so you can manage all your pictures and videos without relying on big cloud companies. People were sharing all sorts of advanced backup strategies, like using rclone
with Backblaze B2, or setting up a NAS. Sounds like a good option if you want more control over your digital memories.
Turning an iPhone into a "Dumbphone"
This one was pretty clever: someone figured out how to use Apple's Configurator tool to turn their iPhone into a "dumbphone" – basically stripping out all the distracting apps and features. The comments were full of people sharing their own tricks for fighting phone addiction, like having a spouse set a Screen Time passcode they don't know, or just leaving the phone in the garage as much as possible. Really makes you think about how much time we spend staring at these things.
Tesla's Market Share Dropping
And finally, a bit of business news: Tesla's EV market share in the US is at its lowest since 2017. Turns out, when you don't release a new vehicle for five years (besides the Cybertruck, which is kinda niche) and everyone else finally catches up, people start buying other EVs. Comments were pointing out their aging models and build quality issues. Though, one person had an interesting take, arguing that Tesla actually *wants* their market share to drop because it means more companies are making EVs, which was their original goal.
Alright, that's the gist of it. Talk soon!