Hacker News Reader

You could use the client-side store (supported in a bunch of common browsers) as a cache.

Or cookies. 4 kB is a lot of friends. Invalidate them every time someone adds a friend.

Both of these however make cache invalidation (in case of multiple browsers/computers) hard—nearly impossible even.

Cookies suck for that sort of thing because they are sent over the wire with every request.