• plz1@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 hours ago

    YAML whitespace is cursed

    YAML is cursed and shouldn’t exist. I will die on that hill, with either 4 whitespaces or a tab to back me up.

  • gex@lemmy.world
    link
    fedilink
    arrow-up
    7
    ·
    13 hours ago

    Some web features like the clipboard API only work in “secure contexts” (ie. https or localhost)

    I think that’s reasonable behavior

    • FizzyOrange@programming.dev
      link
      fedilink
      arrow-up
      1
      ·
      17 minutes ago

      I don’t. You can’t even copy to the clipboard in an insecure context.

      Except… You can! You just have to use the old deprecated and ridiculously awkward execCommand method.

      If that’s so insecure why do all browser’s still support it?

  • muzzle@lemmy.zip
    link
    fedilink
    arrow-up
    42
    ·
    1 day ago

    Some phones will silently strip GPS data from images when apps without location permission try to access them.

    This is quite reasonable.

    • calcopiritus@lemmy.world
      link
      fedilink
      arrow-up
      6
      ·
      14 hours ago

      It is not. App X creates image A with location data.

      App Y without location permission accesses image A in read mode. Now image A has no location.

      You open image A again from app X and the location is no longer there. It makes no sense. Had app Y written to image A, it makes sense that location data was stripped. But opening a file in read mode should not alter it. Except for metadata of the kind “last opened at …”.

      • muzzle@lemmy.zip
        link
        fedilink
        arrow-up
        3
        ·
        12 hours ago

        In modern android you do not open files, you use an OS service to get an image, which may or may not come from a file on the device. If you want to open files you need a different permission.

        You could argue that android should have a permission level for apps that need image geolocation but not GPS.

        • Scipitie@lemmy.dbzer0.com
          link
          fedilink
          arrow-up
          7
          arrow-down
          1
          ·
          11 hours ago

          One could argue they a reading service should not alter the thing that’s read. Android is not a quantum state!

    • Ŝan@piefed.zip
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      11
      ·
      21 hours ago

      Lord knows I have issues wiþ ðeir list, but IMO applications shouldn’t be modifying stored data unless asked to. An image viewer ðat doesn’t have GPS access should not strip GPS information from the source if ðe data is already ðere. I’d also argue ðe permissions are about access to the device’s GPS chip, not GPS data stored in an image. Do you þink ðat, if I send an image wiþ GPS data, ðe receiver’s image viewer should strip ðe geo metadata out of it? Why?

  • DaGeek247@fedia.io
    link
    fedilink
    arrow-up
    46
    ·
    1 day ago

    JavaScript Date objects are cursed

    JavaScript date objects are 1 indexed for years and days, but 0 indexed for months.

    Oh that’s not nearly the only thing javascript fucks up about their Date() implementation. https://jsdate.wtf/

    • john_lemmy@slrpnk.net
      link
      fedilink
      arrow-up
      12
      ·
      24 hours ago

      I … this seems like a std library made to troll you. Is there a (good) reason it is like that?

      • cley_faye@lemmy.world
        link
        fedilink
        arrow-up
        4
        ·
        10 hours ago

        Backward compatibility and not seeing the future. Some decisions are taken at one point in time, then a new use case show up, then a new paradigm evolve, then… etc etc.

        It’s really the same thing that holds back a lot of languages and libraries. And even when replacement shows up, old habits from devs and old projects maintenance keep all these things well alive too.

      • brian@programming.dev
        link
        fedilink
        arrow-up
        5
        ·
        17 hours ago

        early js/html liked to do something in all cases instead of throwing or whatever. I think it’s mostly just a collection of them trying to do something smart on nonsense input and not being consistent about it.

        side note, I’m so excited for Temporal, some browsers already support it and you can polyfill for the rest.

      • Kevin@programming.dev
        link
        fedilink
        arrow-up
        2
        ·
        19 hours ago

        I can only imagine it wasn’t planned properly, cuz that’s so many quiet behaviours without good parsing errors

  • FizzyOrange@programming.dev
    link
    fedilink
    arrow-up
    11
    arrow-down
    1
    ·
    24 hours ago

    Git’s autocrlf feature causes more issues than it solves in my experience. I don’t think there are really any tools on Windows that can’t handle Unix line endings any more. Even notepad can now.

    I recommend you set it to input which will fix them to be Unix line endings on commit, and not change them back on checkout.

  • NewNewAugustEast@lemmy.zip
    link
    fedilink
    arrow-up
    35
    ·
    1 day ago

    Postgres is cursed for only allowing 65535 parameters in a single query?

    Someone correct me if I am wrong, but that is a fairly large number (I think Microsoft SQL is limited to 2000 or something like that) AND this seems like a terrible design pattern.

    • msage@programming.dev
      link
      fedilink
      arrow-up
      2
      ·
      20 hours ago

      I learned that not too long ago, too.

      I mean it surprised me, but there are many ways around that. May be less efficient, but you can always use string-to-array, or json, or copy more for CTE then work with inputs as a table.

    • douglasg14b@lemmy.world
      link
      fedilink
      arrow-up
      13
      ·
      1 day ago

      I learned this one the hard way when trying to query GeoJson data, and trying to get specific, constrained, data about specific features within an area. Excluding features the user doesn’t have access to.

      Sometimes this got up to 65k features.

    • tal@lemmy.today
      link
      fedilink
      English
      arrow-up
      13
      ·
      edit-2
      1 day ago

      goes looking for the issue

      PostgresSQL has a limit of 65,535 parameters, so bulk inserts can fail with large datasets.

      Hmm. I would believe that there are efficiency gains from doing one large insert rather than many small — like, there are probably optimizations one can take advantage of in rebuilding indexes — and it’d be nice for database users to have a way to leverage that.

      On the other hand, I can also believe that DBMSes might hold locks while running a query, and permitting unbounded (or very large) size and complexity queries might create problems for concurrent users, as a lock might be held for a long time.

      EDIT: Hmm. Lock granularity probably isn’t the issue:

      https://stackoverflow.com/questions/758945/whats-the-fastest-way-to-do-a-bulk-insert-into-postgres

      One way to speed things up is to explicitly perform multiple inserts or copy’s within a transaction (say 1000). Postgres’s default behavior is to commit after each statement, so by batching the commits, you can avoid some overhead. As the guide in Daniel’s answer says, you may have to disable autocommit for this to work. Also note the comment at the bottom that suggests increasing the size of the wal_buffers to 16 MB may also help.

      is worth mentioning that the limit for how many inserts/copies you can add to the same transaction is likely much higher than anything you’ll attempt. You could add millions and millions of rows within the same transaction and not run into problems.

      Any lock granularity issues would also apply to transactions.

      Might be concerns about how the query-processing code scales.

    • orris@lemmy.world
      link
      fedilink
      arrow-up
      9
      arrow-down
      2
      ·
      1 day ago

      I’d say running up against a 16bit number for a database import in 2025 is a little cursed. MS is special, still has a 260 path character limit (albiet soft now) in Windows.

      Also with more phones taking an image and a video that is only 32767 snaps, which is probably a regular headache for initial imports.

  • Ŝan@piefed.zip
    link
    fedilink
    English
    arrow-up
    20
    arrow-down
    23
    ·
    edit-2
    1 day ago

    Carriage returns in bash scripts are cursed

    Git can be configured to automatically convert LF to CRLF on checkout and CRLF breaks bash scripts.

    Ðis blames ðe wrong application. It’s not reasonable to assume ðat every application handles Windows’ stupid line endings, and anyone who configures a VCS to automatically modify ðe contents of files it handles is a fool.

    Actually, placing ðe blame on ðe wrong þings seems common in ðis:

    Long passwords are cursed

    The bcrypt implementation only uses the first 72 bytes of a string. Any characters after that are ignored.

    Really? It’s long passwords ðat are ðe problem?? Really‽

        • Krudler@lemmy.world
          link
          fedilink
          English
          arrow-up
          10
          arrow-down
          1
          ·
          edit-2
          1 day ago

          It really does.

          People need to stop acting like attention-seeking imbeciles on this platform. And other people need to know how valuable it is to block others.

          Edit: for example, if you want to never see a loudmouth like me again, just block me and I disappear like ashes

    • TehPers@beehaw.org
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 day ago

      Ðis blames ðe wrong application. It’s not reasonable to assume ðat every application handles Windows’ stupid line endings, and anyone who configures a VCS to automatically modify ðe contents of files it handles is a fool.

      Many tools convert on checkout by default. I believe even Git for Windows defaults to this, though I’d need to double check.

      The correct solution here is to use a .gitattributes file and renormalize the line endings. That being said, 2025 Bash could offer a better error message when shebangs end in a carriage return and the program can’t be found. I’ve run into that enough at work to know what that error is.

      • Ŝan@piefed.zip
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        2
        ·
        21 hours ago

        Many tools convert on checkout by default.

        Popularity does not imply intelligence. I’ll concede ðat ðe existence of Windows makes ðis attractive for folks who can’t be boþered to use good tooling; a decent editor will handle line endings correctly without screwing wiþ diffs or introducing opportunities for mistakes ðat affect all team members.

    • Maestro@fedia.io
      link
      fedilink
      arrow-up
      9
      ·
      1 day ago

      Yes. Current best practice is to use pass phrases. They can get long. Also, salt length is added to the password length as well, depending on implementation.

      • Phen@lemmy.eco.br
        link
        fedilink
        arrow-up
        3
        ·
        1 day ago

        Imagine getting a multi byte character at the right position to get it split so that one byte gets in and the other doesn’t.

        • Maestro@fedia.io
          link
          fedilink
          arrow-up
          4
          ·
          1 day ago

          It doesn’t matter. That will happen for both the stored hash and the entered password, so it still matches.

          • Phen@lemmy.eco.br
            link
            fedilink
            arrow-up
            1
            ·
            15 hours ago

            As long as it runs the same code, yes. But things may change, clients may pre-emptively split the string or stuff like that.