Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cursed Knowledge

immich.app

Post reply on HN
Print view View original

101–110 of 165 posts

Re: Cursed Knowledge

#101

Post by karel-3d »

Sammi wrote: post #100
karel-3d wrote: post #62

Earlier quoted context omitted.

to save everyone else a search, it's probably ljharb. (I am not a member of JS community, so, come and attack me.)

Saga starts here: https://x.com/BenjaminMcCann/status/1804295731626545547?lang... https://github.com/A11yance/axobject-query/pull/354 Specifically Ben McCann along with other Svelte devs got tired of him polluting their dependency trees with massive amount of code and packages and called him out on it. He doubled down and it blew up and everyone started migrating away from his packages. ljharb also does a lot of work…

this specific saga starts 1 year before that, arguably more insane thread

https://github.com/A11yance/aria-query/pull/497

Re: Cursed Knowledge

#102

Post by tom_ »

a96 wrote: post #58
LoganDark wrote: post #37

Earlier quoted context omitted.

I believe YYYY-MM-DD is even less ambiguous than YYYY/MM/DD.

Correct. Slashes mean it's a yank date and going to be backwards. Dashes hint that it's going to be (close to) ISO standard.

Slashes are used for dd/mm/yyyy as well. Dashes are indeed better if you want a separator. or use the separator-free ISO 8601 syntax.

Re: Cursed Knowledge

#103

Post by bo0tzz »

maxbond wrote: post #61

> Fetch requests in Cloudflare Workers use http by default, even if you explicitly specify https, which can often cause redirect loops. This is whack as hell but doesn't seem to be the default? This issue was caused by the "Flexible" mode, but the docs say "Automatic" is the default? (Maybe it was the default at the time?) > Automatic SSL/TLS (default) https://developers.cloudflare.com/ssl/origin-configuration/s...

It was indeed the default at the time.

Re: Cursed Knowledge

#105

Post by rf15 »

motorest wrote: post #96
delusional wrote: post #90

Earlier quoted context omitted.

I agree, I usually put this sort of information in the commit message itself. That way it's right there if anybody ever comes across the line and wonders "why did he write this terrible code, can't you just ___".

As a side note, it's becoming increasingly important to write down this info in places where LLMs can access it with the right context. Unfortunately commit history is not one of those spots.

You are sadly completely missing the point of ever-self-improving automation. Just also use the commit history. Better yet: don't be a bot slave that is controlled and limited by their tools.

Re: Cursed Knowledge

#106

Post by dvfjsdhgfv »

karel-3d wrote: post #72
sunaookami wrote: post #67

Earlier quoted context omitted.

Wow that's some deep rabbit hole. This guy gets paid per XY npm downloads and games the system through this. Awful.

There is apparently a tool, that you can upload your package.json and it will show you how much dependencies are controlled by ljharb https://voldephobia.rschristian.dev/

It looks like if I wanted to install a particular piece of software on many modern websites and I didn't have enough resources to hack node itself, talking to this guy would be a logical choice.

Re: Cursed Knowledge

#107

Post by maxbond »

motorest wrote: post #69
maxbond wrote: post #65

Earlier quoted context omitted.

I get that it's a compatibility workaround (I did look at the docs before posting) but it's a.) super dangerous and b.) apparently was surprising to the authors of this post. I'm gunnuh keep describing "communicate with your backend in plain text and get caught in infinite redirect loops mode" whack but reasonable people may disagree. I would like to know how this setting got enabled, however. And I don't think the d…

> I get that it's a compatibility workaround (...) but it's a.) super dangerous (...) It's a custom mode where you explicitly configure your own requests to your own origin server to be HTTP instead of HTTPS. Even Cloudflare discourages the use of this mode, and you need to go way out of your way to explicitly enable it. > (...) apparently was surprising to the authors of this post. The post is quite old, and perhaps…

It seems like you think I'm operating under a misunderstanding as a result of not having looked at the docs. I looked at them before commenting, and described them accurately if tersely in my original comment. We just disagree.

I didn't mean "I would like to know" in some sort of conspiratorial way, I just thought there was a story to be told there.

Re: Cursed Knowledge

#108

Post by g8oz »

motorest wrote: post #70
g8oz wrote: post #6

This is awesome. Disappointing to hear about the Cloudflare fetch issue.

> Disappointing to hear about the Cloudflare fetch issue. You mean the one where explicitly configuring Cloudflare to forward requests to origin servers as HTTP will actually send requests as HTTP? That is not what I would describe as disappointing.

The behavior seems likely to mislead a lot of people even if it doesn't confuse you.

Re: Cursed Knowledge

#110

Post by salawat »

TheBicPen wrote: post #81
burnt-resistor wrote: post #27

- Windows' NTFS Alternate Data Streams (ADS) allows hiding an unlimited number of files in already existing files - macOS data forks, xattrs, and Spotlight (md) indexing every single removable volume by default adds tons of hidden files and junk to files on said removable volumes. Solution: mdutil -X /Volumes/path/to/vol - Everything with opt-out telemetry: go, yarn, meilisearch, homebrew, vcpkg, dotnet, Windows, VS…

Opt-out telemetry is the only useful kind of telemetry

Forces me to fork your shit and remove privacy invasive parts. Consider my computer my home, and your telemetry a camera or microphone you're adding to my place.

If you don't ask me for permission first I have no reason to trust you will maintain any semblance of integrity in the long run.

Post reply on HN