HN Buddy

Daily digest of top Hacker News posts and comments

Subscribe to the HN Buddy Daily Digest

Your email will only be used for the HN Buddy Daily Digest. I will not share it with anyone.

HN Buddy Daily Digest

Monday, November 24, 2025

Hey buddy,

Man, Monday's Hacker News was pretty wild. Lemme quickly hit you with the highlights:

NPM Supply Chain Scare

First off, remember that "Shai-Hulud" thing? Well, it's back. Over 300 NPM packages got infected! People are freaking out about supply chain security again. One guy in the comments, codedokode, mentioned using something called "bwrap" to sandbox stuff, which sounds pretty smart to block network access and mess with host processes. Another user, developerjhp, even built a CLI tool called sha1-hulud-scanner to look for these suspicious patterns. Wild stuff, makes you wanna double-check your dependencies, eh?

New Claude AI Model

Then there's the new Claude Opus 4.5 from Anthropic. Sounds like it's getting even smarter. One commenter, delaminator, is apparently using it daily to write specs and refine ideas, even generating detailed planning docs. He also noted the Android app only has web browser access for code, which is a bit of a bummer. There was also a separate post about Claude's Advanced Tool Use, showing how it can use sub-agents. Seems like these AIs are getting more and more capable of doing complex tasks by themselves.

Pebble Watch is 100% Open Source!

Dude, get this: the Pebble Watch software is now completely open source! How cool is that? After all these years, the whole ecosystem is out there. People in the comments, like rav3ndust, are excited, saying they're planning to pick up a new Pebble and mentioning how the PineTime was the only other real open smartwatch option before this. It's a sweet win for the open-source community, bringing back a classic.

France vs. GrapheneOS Privacy Battle

This one's kinda intense. France is apparently threatening GrapheneOS with arrests and server seizures if they don't put in backdoors. GrapheneOS is that super-secure Android distro, right? Naturally, they're not having any of that and are migrating their server infrastructure out of France. A lot of people in the comments are pretty outraged, talking about how governments are getting too comfortable with easy wiretapping. It's a big deal for digital privacy, reminding us how important it is to have truly secure communication.

SSDs Lose Data When Unpowered?

Okay, this one surprised me. Apparently, unpowered SSDs can slowly lose data over time. Like, if you leave one in a drawer for too long. Who knew? People in the comments were discussing SLC mode vs. QLC and how much endurance or retention you get. userbinator was saying how 4x less capacity but 100x more endurance for the same price would be a great deal for SLC. Makes you think twice about archiving important stuff on an old SSD without powering it up now and then.

DDR5 RAM Prices are Insane!

Remember when RAM was cheap? Well, not anymore! 64GB of DDR5 memory now costs more than a whole PS5, hitting like $600! There's a DRAM shortage, and it's expected to get even worse into 2026. This is wild. It really highlights how consoles are often sold at a loss or near-cost, while PC components are just skyrocketing. One comment, citizenpaul, even joked "What's next? Electricity?" and linked to an article about data centers driving up electricity prices. Yikes.

Japan's Big Chip Plan

Last one: Japan is trying to turn Hokkaido into a global chip hub. They're making a big gamble to get into the semiconductor game, which is super competitive right now. There's a lot of talk about how they'll handle the logistics and attract talent, especially with Japan's population trends. But ZguideZ, an American living in Hokkaido, was super positive about it, saying it's wonderful there, close to Sapporo, with an international airport, and the bullet train coming by 2030. Sounds like an ambitious but potentially cool project.

Anyway, that's the gist of it. Gotta run, talk later!

All Stories from Today

Shai-Hulud Returns: Over 300 NPM Packages Infected (helixguard.ai)

Claude Opus 4.5 (www.anthropic.com)

Pebble Watch software is now 100% open source (ericmigi.com)

France threatens GrapheneOS with arrests / server seizure for refusing backdoors (mamot.fr)

Claude Advanced Tool Use (www.anthropic.com)

Unpowered SSDs slowly lose data (www.xda-developers.com)

PS5 now costs less than 64GB of DDR5 memory. RAM jumps to $600 due to shortage (www.tomshardware.com)

Ask HN: Hearing aid wearers, what's hot? (news.ycombinator.com)

Shai Hulud launches second supply-chain attack (www.aikido.dev)

RuBee (computer.rip)

NSA and IETF, part 3: Dodging the issues at hand (blog.cr.yp.to)

Japan's gamble to turn island of Hokkaido into global chip hub (www.bbc.com)

X Just Accidentally Exposed a Covert Influence Network Targeting Americans (weaponizedspaces.substack.com)

France threatens GrapheneOS with arrests / server seizure for refusing backdoors (mamot.fr)

Show HN: I built an interactive HN Simulator (news.ysimulator.run)

GrapheneOS migrates server infrastructure from France (www.privacyguides.org)

The Cloudflare outage might be a good thing (gist.github.com)

Chrome Jpegxl Issue Reopened (issues.chromium.org)

Cool-retro-term: terminal emulator which mimics look and feel of CRTs (github.com)

TSMC Arizona outage saw fab halt, Apple wafers scrapped (www.culpium.com)

Implications of AI to schools (twitter.com)

Show HN: Stun LLMs with thousands of invisible Unicode characters (gibberifier.com)

What OpenAI did when ChatGPT users lost touch with reality (www.nytimes.com)

We stopped roadmap work for a week and fixed bugs (lalitm.com)

Ego, empathy, and humility at work (matthogg.fyi)

DoGE "cut muscle, not fat"; 26K experts rehired after brutal cuts (arstechnica.com)

Mind-reading devices can now predict preconscious thoughts (www.nature.com)

Fifteen Years (xkcd.com)

Doge 'doesn't exist' with eight months left on its charter (www.reuters.com)

Lambda Calculus – Animated Beta Reduction of Lambda Diagrams (cruzgodar.com)