HN Buddy Daily Digest
Monday, November 24, 2025
Man, Monday's Hacker News was pretty wild. Lemme quickly hit you with the highlights:
NPM Supply Chain Scare
First off, remember that "Shai-Hulud" thing? Well, it's back. Over 300 NPM packages got infected! People are freaking out about supply chain security again. One guy in the comments, codedokode, mentioned using something called "bwrap" to sandbox stuff, which sounds pretty smart to block network access and mess with host processes. Another user, developerjhp, even built a CLI tool called sha1-hulud-scanner to look for these suspicious patterns. Wild stuff, makes you wanna double-check your dependencies, eh?
New Claude AI Model
Then there's the new Claude Opus 4.5 from Anthropic. Sounds like it's getting even smarter. One commenter, delaminator, is apparently using it daily to write specs and refine ideas, even generating detailed planning docs. He also noted the Android app only has web browser access for code, which is a bit of a bummer. There was also a separate post about Claude's Advanced Tool Use, showing how it can use sub-agents. Seems like these AIs are getting more and more capable of doing complex tasks by themselves.
Pebble Watch is 100% Open Source!
Dude, get this: the Pebble Watch software is now completely open source! How cool is that? After all these years, the whole ecosystem is out there. People in the comments, like rav3ndust, are excited, saying they're planning to pick up a new Pebble and mentioning how the PineTime was the only other real open smartwatch option before this. It's a sweet win for the open-source community, bringing back a classic.
France vs. GrapheneOS Privacy Battle
This one's kinda intense. France is apparently threatening GrapheneOS with arrests and server seizures if they don't put in backdoors. GrapheneOS is that super-secure Android distro, right? Naturally, they're not having any of that and are migrating their server infrastructure out of France. A lot of people in the comments are pretty outraged, talking about how governments are getting too comfortable with easy wiretapping. It's a big deal for digital privacy, reminding us how important it is to have truly secure communication.
SSDs Lose Data When Unpowered?
Okay, this one surprised me. Apparently, unpowered SSDs can slowly lose data over time. Like, if you leave one in a drawer for too long. Who knew? People in the comments were discussing SLC mode vs. QLC and how much endurance or retention you get. userbinator was saying how 4x less capacity but 100x more endurance for the same price would be a great deal for SLC. Makes you think twice about archiving important stuff on an old SSD without powering it up now and then.
DDR5 RAM Prices are Insane!
Remember when RAM was cheap? Well, not anymore! 64GB of DDR5 memory now costs more than a whole PS5, hitting like $600! There's a DRAM shortage, and it's expected to get even worse into 2026. This is wild. It really highlights how consoles are often sold at a loss or near-cost, while PC components are just skyrocketing. One comment, citizenpaul, even joked "What's next? Electricity?" and linked to an article about data centers driving up electricity prices. Yikes.
Japan's Big Chip Plan
Last one: Japan is trying to turn Hokkaido into a global chip hub. They're making a big gamble to get into the semiconductor game, which is super competitive right now. There's a lot of talk about how they'll handle the logistics and attract talent, especially with Japan's population trends. But ZguideZ, an American living in Hokkaido, was super positive about it, saying it's wonderful there, close to Sapporo, with an international airport, and the bullet train coming by 2030. Sounds like an ambitious but potentially cool project.
Anyway, that's the gist of it. Gotta run, talk later!